This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json) Hash identifier: bXt3/Bm62X6dwOYlqWm9fyB+Pi08HUa04y/sMWxSd08= Subject key identifier: 33:0B:55:44:44:97:72:10:C5:64:37:F1:51:A3:F0:DA:E3:80:67:D3 Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172 Certificate serial: 019B210757F137126039EA76366ED0016A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft Manifest number: 058E Signing time: Mon 15 Dec 2025 08:01:27 +0000 Manifest this update: Mon 15 Dec 2025 08:01:27 +0000 Manifest next update: Tue 16 Dec 2025 08:01:27 +0000 Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: IgY0YJUv8c+yctUWKmskOAv5OE15eNFqfftNPRaiS3M=) 2: tvVyRp4L9e3meI8HjNM8zokhY-g.asa (hash: olDJRhTYRvq4nKsZ0gccZ00xYdhkTFh1VWFFg4+4L98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:57:f1:37:12:60:39:ea:76:36:6e:d0:01:6a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172 Validity Not Before: Dec 15 08:01:27 2025 GMT Not After : Dec 16 08:01:27 2025 GMT Subject: CN=330b554444977210c56437f151a3f0dae38067d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:11:16:35:21:aa:f9:96:d6:60:ea:29:af: 7e:18:fa:83:54:bb:2d:3a:68:af:e2:fa:be:a1:81: 98:8d:e8:4f:a3:ba:9e:31:95:66:75:7d:8a:c1:62: 7c:f1:ad:76:1e:64:85:d1:8e:07:aa:59:6d:1c:5d: 95:a0:77:5f:71:d6:f7:e9:13:19:f6:b7:3f:ea:3d: 17:f8:06:dd:c2:15:21:42:a8:96:14:61:09:b1:72: c9:cb:69:10:81:18:7d:40:48:df:56:4b:18:d4:0d: f2:e2:c7:71:4a:fc:9d:ed:04:db:ab:a4:37:15:18: 7c:2b:f2:9e:fd:7e:ad:6a:13:f8:0b:90:eb:a8:46: 52:a9:36:31:d5:6e:95:35:2b:a6:10:54:4f:5d:fc: 1f:cf:03:b6:92:aa:1c:b7:d3:8c:ab:f3:55:82:d0: 72:8d:7e:26:58:32:7c:9f:08:f9:06:5c:7a:67:98: 58:5a:66:bc:df:7e:ba:01:af:6d:a5:58:cb:4c:24: dd:09:d1:8b:96:5d:90:72:cc:c9:12:d2:0b:e3:cd: d7:5b:f6:8f:53:27:d7:5d:1a:78:df:32:64:be:46: c7:a0:af:4f:4d:23:83:52:e8:d6:06:b7:33:14:6d: 6f:b2:53:c8:3d:22:d9:b7:1c:a6:d3:6c:e0:bf:f0: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0B:55:44:44:97:72:10:C5:64:37:F1:51:A3:F0:DA:E3:80:67:D3 X509v3 Authority Key Identifier: keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e8:11:3c:0f:83:94:1f:04:79:e3:a6:ef:bc:e7:92:0b:7c: ed:10:56:c1:ee:3f:2a:83:f4:9c:0e:20:9c:43:2f:33:5b:c0: c8:7d:71:2f:29:bc:60:39:e8:f2:fc:28:15:cb:25:9c:a7:20: 1a:4e:ce:7f:68:e4:31:7c:29:2d:9f:0e:cf:2e:3d:7e:7d:a9: a3:5d:1f:d2:05:37:e9:50:b5:14:64:53:9d:4a:23:db:7f:10: 57:e5:32:4d:3a:16:62:62:c1:f4:62:27:71:04:8a:ca:c5:86: 4b:02:3b:f9:d5:e9:29:f6:1a:85:75:14:b2:7d:aa:27:71:d0: 57:32:94:4e:a0:b2:07:bf:40:74:b3:bb:bb:9d:d7:13:ee:d4: 9b:d3:b2:e6:b4:8c:c4:b6:38:3d:28:40:d0:79:0e:c5:0c:9c: ae:16:87:7e:8e:82:83:4c:3a:a7:b9:9b:6d:9e:4d:50:7a:4d: 3b:06:43:a9:d4:5a:d5:c1:97:10:06:b4:a9:13:83:bb:4b:95: c8:f0:0f:33:3e:35:2b:91:1c:2f:97:18:8e:f8:8a:06:e1:41: 13:35:a4:d3:fe:61:22:78:7d:6a:8d:2f:9d:e3:9e:7c:38:b2: 06:2a:f4:ca:c8:30:2d:16:04:fb:41:c5:61:bc:34:09:ee:9a: 8f:6a:83:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB1fxNxJgOep2Nm7QAWp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm ODQxNzIwHhcNMjUxMjE1MDgwMTI3WhcNMjUxMjE2MDgwMTI3WjAzMTEwLwYDVQQD EygzMzBiNTU0NDQ0OTc3MjEwYzU2NDM3ZjE1MWEzZjBkYWUzODA2N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8IRFjUhqvmW1mDqKa9+GPqDVLst Omiv4vq+oYGYjehPo7qeMZVmdX2KwWJ88a12HmSF0Y4HqlltHF2VoHdfcdb36RMZ 9rc/6j0X+AbdwhUhQqiWFGEJsXLJy2kQgRh9QEjfVksY1A3y4sdxSvyd7QTbq6Q3 FRh8K/Ke/X6tahP4C5DrqEZSqTYx1W6VNSumEFRPXfwfzwO2kqoct9OMq/NVgtBy jX4mWDJ8nwj5Blx6Z5hYWma83366Aa9tpVjLTCTdCdGLll2QcszJEtIL483XW/aP UyfXXRp43zJkvkbHoK9PTSODUujWBrczFG1vslPIPSLZtxym02zgv/C/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMLVUREl3IQxWQ38VGj8NrjgGfTMB8GA1UdIwQY MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3 LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOgRPA+D lB8EeeOm77znkgt87RBWwe4/KoP0nA4gnEMvM1vAyH1xLym8YDno8vwoFcslnKcg Gk7Of2jkMXwpLZ8Ozy49fn2po10f0gU36VC1FGRTnUoj238QV+UyTToWYmLB9GIn cQSKysWGSwI7+dXpKfYahXUUsn2qJ3HQVzKUTqCyB79AdLO7u53XE+7Um9Oy5rSM xLY4PShA0HkOxQycrhaHfo6Cg0w6p7mbbZ5NUHpNOwZDqdRa1cGXEAa0qRODu0uV yPAPMz41K5EcL5cYjviKBuFBEzWk0/5hInh9ao0vneOefDiyBir0ysgwLRYE+0HF Ybw0Ce6aj2qDAw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:40:30 2025 by rpki-client