This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json) Hash identifier: n/2zBQ9jKWDakyRoyJKWviPsVXx/imFCDhZpt4inH1A= Subject key identifier: B4:4F:EB:EE:6E:64:C1:9B:E3:B6:AC:28:FB:00:EA:D6:91:AA:1B:71 Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40 Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40 Certificate serial: 019B323138241F0FC66833271E0DC6751996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 16:00:44 +0000 Manifest this update: Thu 18 Dec 2025 16:00:44 +0000 Manifest next update: Fri 19 Dec 2025 16:00:44 +0000 Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: +2AwX/VoPN/8iCXIxBvk8E6Q49DIoEoUUFB8ptH5AtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:38:24:1f:0f:c6:68:33:27:1e:0d:c6:75:19:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40 Validity Not Before: Dec 18 16:00:44 2025 GMT Not After : Dec 19 16:00:44 2025 GMT Subject: CN=b44febee6e64c19be3b6ac28fb00ead691aa1b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:dc:9e:4a:8e:d1:d3:40:81:72:d2:12:de: 45:99:d1:a3:fc:10:a9:6e:53:ac:e2:3e:61:f8:fe: fe:9e:95:07:a6:4f:f5:be:89:a3:a8:4a:50:82:29: 8a:56:4c:f2:8d:40:74:e3:79:5c:99:16:38:46:c9: 0c:89:ec:a2:e0:b9:0d:d5:9e:b1:c8:db:c2:aa:53: 9c:85:da:c8:fe:fb:67:44:cf:f1:05:5b:a7:ce:bb: 9f:35:5b:e9:84:a9:bc:c9:48:ce:b8:14:af:32:b8: 88:75:e2:eb:d9:4c:43:df:12:06:40:1c:c1:8f:be: 00:a1:46:1f:39:39:3d:f7:88:a8:7f:90:63:6d:d3: c4:87:ef:27:9b:34:7f:50:f6:e5:0b:8a:57:9f:fa: 67:fc:f8:a1:38:c2:7f:ba:15:82:25:3d:7f:1e:d9: 0f:53:86:b3:9c:de:28:80:43:ad:41:15:92:f1:6c: 25:6a:0e:d4:30:94:32:c6:e3:84:e2:58:73:e5:77: ca:8b:06:23:ce:b7:25:52:b8:24:fc:02:84:24:ae: 22:67:26:9b:42:19:77:f8:a6:96:76:63:e2:dd:f7: e5:f8:ca:26:77:aa:d7:16:c6:49:d8:d9:27:3b:1c: de:a1:e8:eb:b3:f7:20:26:48:a0:5d:85:d6:9d:e3: 88:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4F:EB:EE:6E:64:C1:9B:E3:B6:AC:28:FB:00:EA:D6:91:AA:1B:71 X509v3 Authority Key Identifier: keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:a8:73:9e:1e:6a:e1:63:a8:fa:80:92:3c:d6:a1:34:13: 8a:dc:8e:e0:d2:ed:e2:df:e2:06:b6:95:95:96:0e:16:5b:3d: a3:28:b3:a6:72:37:cc:49:2b:68:72:05:ee:0d:cd:63:d0:1e: 25:ce:0c:f6:63:e2:f8:24:b8:de:fd:b1:44:55:76:de:64:b5: 29:b4:43:d3:3a:dc:42:b5:07:0b:a9:c2:ff:96:6c:18:f9:36: 0e:86:d9:27:ff:d0:3c:3c:05:9d:ce:9d:63:55:c5:37:86:2f: f6:0b:dc:7a:4c:18:1e:47:6e:51:8e:f0:f3:cd:78:a8:b8:1e: 78:7c:4b:8c:06:2a:74:31:c1:ff:f8:a7:82:e2:54:10:cc:d9: 13:d2:82:c5:2a:bc:26:4c:0f:66:9e:8d:cd:9c:60:4a:6a:ca: 62:ac:52:d9:3a:07:ff:fb:1b:b4:ce:cb:00:7d:6d:79:b3:8e: 47:db:3c:22:77:bf:c8:57:23:ab:19:bf:c2:09:cc:cd:a1:5b: dc:75:0b:5e:d6:81:0b:0a:10:85:e1:f5:88:45:8a:46:c6:f4: ee:1a:ca:4c:84:02:de:ce:cd:16:c9:2d:f8:c7:21:74:88:88: 5e:ca:19:99:97:49:71:b0:43:89:02:55:29:99:8b:ee:0f:02: 36:fb:d6:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMTgkHw/GaDMnHg3GdRmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzc2OGRiNjBhMWYyMWEzNGVlNWMyYTM0MzU0NTYxN2Jl ZjhiNDAwHhcNMjUxMjE4MTYwMDQ0WhcNMjUxMjE5MTYwMDQ0WjAzMTEwLwYDVQQD EyhiNDRmZWJlZTZlNjRjMTliZTNiNmFjMjhmYjAwZWFkNjkxYWExYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zXcnkqO0dNAgXLSEt5FmdGj/BCp blOs4j5h+P7+npUHpk/1vomjqEpQgimKVkzyjUB043lcmRY4RskMieyi4LkN1Z6x yNvCqlOchdrI/vtnRM/xBVunzrufNVvphKm8yUjOuBSvMriIdeLr2UxD3xIGQBzB j74AoUYfOTk994iof5BjbdPEh+8nmzR/UPblC4pXn/pn/PihOMJ/uhWCJT1/HtkP U4aznN4ogEOtQRWS8Wwlag7UMJQyxuOE4lhz5XfKiwYjzrclUrgk/AKEJK4iZyab Qhl3+KaWdmPi3ffl+Momd6rXFsZJ2NknOxzeoejrs/cgJkigXYXWneOI7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRP6+5uZMGb47asKPsA6taRqhtxMB8GA1UdIwQY MBaAFMM3aNtgofIaNO5cKjQ1RWF774tAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGIt YzI2MTFiNzQyMGYyLzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGItYzI2MTFiNzQyMGYy LzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/6oc54e auFjqPqAkjzWoTQTityO4NLt4t/iBraVlZYOFls9oyizpnI3zEkraHIF7g3NY9Ae Jc4M9mPi+CS43v2xRFV23mS1KbRD0zrcQrUHC6nC/5ZsGPk2DobZJ//QPDwFnc6d Y1XFN4Yv9gvcekwYHkduUY7w8814qLgeeHxLjAYqdDHB//inguJUEMzZE9KCxSq8 JkwPZp6NzZxgSmrKYqxS2ToH//sbtM7LAH1tebOOR9s8Ine/yFcjqxm/wgnMzaFb 3HULXtaBCwoQheH1iEWKRsb07hrKTIQC3s7NFskt+MchdIiIXsoZmZdJcbBDiQJV KZmL7g8CNvvWhA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:59:57 2025 by rpki-client