This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft File: W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json) Hash identifier: soqFZuKGsiH0p2M9uz3TurbG/zyiMxoseaf10TtWW5g= Subject key identifier: 8D:37:62:C6:C4:76:49:CA:08:C4:D5:A0:78:43:FA:D5:A7:4F:7C:1B Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C Certificate issuer: /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c Certificate serial: 019B3BD8F5163A37E3EE1E0E62A4CD6C53C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft Manifest number: 037F Signing time: Sat 20 Dec 2025 13:00:32 +0000 Manifest this update: Sat 20 Dec 2025 13:00:32 +0000 Manifest next update: Sun 21 Dec 2025 13:00:32 +0000 Files and hashes: 1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: M6KAMBWHtkKpNCJpXsFDc5JFmozNXGqGbLaLYmrjiww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:f5:16:3a:37:e3:ee:1e:0e:62:a4:cd:6c:53:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c Validity Not Before: Dec 20 13:00:32 2025 GMT Not After : Dec 21 13:00:32 2025 GMT Subject: CN=8d3762c6c47649ca08c4d5a07843fad5a74f7c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:06:94:5b:69:8d:84:3b:d6:22:58:72:4e: 5b:0d:80:36:a1:c9:e6:db:50:3b:9f:af:3d:ff:7a: 1e:e9:9b:34:f2:f0:6e:7f:8d:a9:e5:c3:f6:ff:77: 7d:46:e4:22:b6:cc:e4:5e:96:bd:06:f2:43:39:35: 25:bb:b7:67:c3:e2:ba:4c:19:a1:4b:68:c6:18:a8: 50:35:d3:0f:a8:3d:4d:a4:c6:d7:6c:ce:78:f5:76: 63:f6:b7:79:b5:81:79:b9:ca:d5:0e:c0:8e:ff:92: 43:54:40:f1:be:36:5a:1f:59:ff:47:6d:04:c7:07: 65:48:1f:77:ee:6d:e5:10:dd:77:e0:2d:be:82:7c: f2:e9:db:52:ed:02:85:19:33:11:92:d4:45:83:f6: cb:eb:6a:c6:0c:43:06:04:ab:57:96:39:d4:c0:e5: b1:cf:02:a2:b3:1d:06:98:b0:c2:ba:8d:b1:dd:ef: 73:50:72:90:10:b9:43:9d:b6:c8:04:32:59:28:d5: 34:5f:54:44:3e:2f:b3:87:b2:9c:27:9c:83:c9:ec: 12:cb:0d:9c:02:d1:b3:d0:c0:39:04:81:1c:c5:c9: 56:14:fc:e8:ef:52:f4:fc:7e:5d:ea:10:8d:12:77: 38:b4:65:a5:8c:f7:9f:cc:ea:dd:18:ff:e4:a6:cf: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:62:C6:C4:76:49:CA:08:C4:D5:A0:78:43:FA:D5:A7:4F:7C:1B X509v3 Authority Key Identifier: keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6b:6c:b4:e6:00:ec:9b:b0:16:3f:3c:b8:4f:60:18:22:99: c4:d6:cf:3d:69:cb:5b:13:95:1f:a6:56:6d:3e:55:eb:c2:1f: b6:f2:0f:f0:3f:f6:5a:49:1d:11:be:7d:70:73:df:b3:fa:4c: e2:ac:60:17:6d:7d:5a:91:e4:bc:fa:eb:6a:83:f4:b2:94:1b: b3:92:ac:93:eb:80:a2:6d:26:ab:23:bb:13:fb:f9:ea:d7:75: 6d:89:03:19:13:87:55:6f:42:2b:25:a9:d7:78:54:91:c4:29: f0:a6:00:fb:52:82:83:d4:84:c8:2f:64:78:28:62:06:b1:7c: d3:2e:85:bf:e8:24:dc:33:07:bd:d7:68:cc:ac:c5:51:4f:80: 57:c6:ec:9a:c6:06:e5:20:27:ca:7d:c8:5a:f8:1e:21:81:5c: eb:6e:d8:75:6c:05:d0:f9:c4:34:2b:85:89:6a:4e:2b:d8:6d: 7c:3b:e5:e9:e2:f8:f9:d5:55:b4:aa:5c:1e:af:8a:03:26:7a: fa:e6:52:8d:51:84:8f:4e:77:21:ad:85:6a:14:9f:5b:da:ab: 79:07:4b:f7:0c:06:60:9b:9e:f8:a7:28:ef:32:97:15:fb:88: d3:e4:08:3c:e0:f5:52:34:d5:20:5d:d9:a2:9c:82:1e:59:95: 27:38:f4:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72PUWOjfj7h4OYqTNbFPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDc5ZjdmZjFjNTdmZmMxMmM1NGMzZGUxODhiYmEyNzQw NmE4OGMwHhcNMjUxMjIwMTMwMDMyWhcNMjUxMjIxMTMwMDMyWjAzMTEwLwYDVQQD Eyg4ZDM3NjJjNmM0NzY0OWNhMDhjNGQ1YTA3ODQzZmFkNWE3NGY3YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCIGlFtpjYQ71iJYck5bDYA2ocnm 21A7n689/3oe6Zs08vBuf42p5cP2/3d9RuQitszkXpa9BvJDOTUlu7dnw+K6TBmh S2jGGKhQNdMPqD1NpMbXbM549XZj9rd5tYF5ucrVDsCO/5JDVEDxvjZaH1n/R20E xwdlSB937m3lEN134C2+gnzy6dtS7QKFGTMRktRFg/bL62rGDEMGBKtXljnUwOWx zwKisx0GmLDCuo2x3e9zUHKQELlDnbbIBDJZKNU0X1REPi+zh7KcJ5yDyewSyw2c AtGz0MA5BIEcxclWFPzo71L0/H5d6hCNEnc4tGWljPefzOrdGP/kps9IewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI03YsbEdknKCMTVoHhD+tWnT3wbMB8GA1UdIwQY MBaAFFvXn3/xxX/8EsVMPeGIu6J0BqiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzllZmZfSEZmX3dTeFV3OTRZaTdvblFHcUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83MTA4ZjYtMjg1YS00NGVkLTg0ZDMt MjRjNzM4ODRiZDA0LzEvVzllZmZfSEZmX3dTeFV3OTRZaTdvblFHcUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83MTA4ZjYtMjg1YS00NGVkLTg0ZDMtMjRjNzM4ODRiZDA0 LzEvVzllZmZfSEZmX3dTeFV3OTRZaTdvblFHcUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2tstOYA 7JuwFj88uE9gGCKZxNbPPWnLWxOVH6ZWbT5V68IftvIP8D/2WkkdEb59cHPfs/pM 4qxgF219WpHkvPrraoP0spQbs5Ksk+uAom0mqyO7E/v56td1bYkDGROHVW9CKyWp 13hUkcQp8KYA+1KCg9SEyC9keChiBrF80y6Fv+gk3DMHvddozKzFUU+AV8bsmsYG 5SAnyn3IWvgeIYFc627YdWwF0PnENCuFiWpOK9htfDvl6eL4+dVVtKpcHq+KAyZ6 +uZSjVGEj053Ia2FahSfW9qreQdL9wwGYJue+Kco7zKXFfuI0+QIPOD1UjTVIF3Z opyCHlmVJzj0XQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:31 2025 by rpki-client