This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft File: W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json) Hash identifier: 3CdgLwSy8PHFMhpTzfx5iM3h1dDDsmsANyI4NdzW0Ww= Subject key identifier: 49:DD:68:09:61:4E:E7:50:0E:EE:25:AB:94:DA:1C:A4:F3:17:CF:F8 Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb Certificate serial: 019B4A03B569524B5D200E0D01700F3E9FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft Manifest number: 1053 Signing time: Tue 23 Dec 2025 07:01:55 +0000 Manifest this update: Tue 23 Dec 2025 07:01:55 +0000 Manifest next update: Wed 24 Dec 2025 07:01:55 +0000 Files and hashes: 1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=) 2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: iJERCi29sxvp+lOGOpDl3iYOTTEv7U7dRMIYJXWwFTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:b5:69:52:4b:5d:20:0e:0d:01:70:0f:3e:9f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb Validity Not Before: Dec 23 07:01:55 2025 GMT Not After : Dec 24 07:01:55 2025 GMT Subject: CN=49dd6809614ee7500eee25ab94da1ca4f317cff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:56:67:27:cb:1f:47:bd:48:67:84:41:56: 0d:c6:e1:62:c0:5f:a3:1f:52:b8:09:cb:02:e9:35: 2a:0a:66:1c:aa:65:40:23:39:00:8f:0a:ba:98:32: 84:2f:b2:a4:22:55:d7:01:e1:00:62:ab:a5:95:94: 10:b5:d3:89:48:9e:24:d3:10:c3:a0:86:ec:67:b1: cd:59:c0:db:b1:f9:e8:fe:13:0f:7e:88:4a:a6:be: 0a:5c:5d:28:07:e2:11:3d:bc:d3:42:99:27:f8:47: ee:c1:46:c8:f3:5a:4f:e3:9a:70:73:0a:ae:91:90: 93:dd:c8:5a:61:33:8c:a2:e7:ed:54:bd:90:2a:e6: e0:fc:c2:70:92:98:4a:c5:8b:d0:3f:80:7d:67:9e: cf:48:43:d8:69:eb:0d:45:69:ba:a9:3d:6f:06:2a: e6:d1:c2:06:57:8b:bb:ed:ef:4e:e1:c3:0e:08:84: 6c:af:55:77:41:fb:f1:10:22:85:55:14:30:a3:ae: ca:44:7a:6d:6b:26:16:ed:9c:bb:bd:75:09:46:36: 49:94:b9:8d:9f:38:a2:4c:6a:f6:20:17:36:17:f7: c4:d9:97:e9:e4:9c:21:40:8c:bd:b4:88:62:ff:6c: f2:81:25:1d:c4:be:06:ab:a2:0e:8b:05:48:6e:d8: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:68:09:61:4E:E7:50:0E:EE:25:AB:94:DA:1C:A4:F3:17:CF:F8 X509v3 Authority Key Identifier: keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:03:a1:8a:de:fc:73:b9:e8:53:be:94:81:f2:9d:48:57:a0: 49:1e:2d:a6:fc:08:3b:e5:1a:74:8e:2f:9b:3c:82:92:04:ef: b1:78:5e:ba:9b:e4:ff:19:fa:59:9e:fd:dd:37:d3:e3:29:db: c7:92:ba:87:a7:18:c3:b6:72:f2:5e:21:d7:97:00:05:5c:06: 92:49:44:68:47:3e:b9:1a:a5:67:44:58:02:44:d1:2e:1a:38: 22:d4:70:15:5d:81:73:71:05:36:e1:3c:24:13:22:3d:65:cd: be:5b:ae:ad:1b:07:f7:73:e6:61:4d:1d:48:12:89:8e:8b:c5: 8a:35:b9:68:59:66:83:28:87:4f:71:f4:63:1b:da:9a:12:54: bd:3a:1a:d4:82:c5:7a:77:37:0b:c4:49:68:c8:d0:73:37:f7: 8a:eb:32:2d:d1:71:f8:86:47:01:e9:9d:f1:bf:20:aa:be:18: f7:f6:e3:dc:a5:03:14:06:43:02:79:08:36:e1:d5:3b:97:28: fb:39:4a:a2:10:2f:86:bb:42:e1:c7:e1:16:99:9f:20:e5:3b: 98:fa:65:9c:e0:00:e1:77:16:c2:9e:0f:59:5c:8a:3e:01:6f: 8a:14:70:bf:c2:f9:80:94:41:4b:aa:f0:ed:00:90:ae:80:bd: b9:34:3a:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA7VpUktdIA4NAXAPPp/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOTVhOTRhZGFkM2EyODk2YzcyMDc0ZDY2N2MxYjYyMDc1 OTU4Y2IwHhcNMjUxMjIzMDcwMTU1WhcNMjUxMjI0MDcwMTU1WjAzMTEwLwYDVQQD Eyg0OWRkNjgwOTYxNGVlNzUwMGVlZTI1YWI5NGRhMWNhNGYzMTdjZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO5WZyfLH0e9SGeEQVYNxuFiwF+j H1K4CcsC6TUqCmYcqmVAIzkAjwq6mDKEL7KkIlXXAeEAYqullZQQtdOJSJ4k0xDD oIbsZ7HNWcDbsfno/hMPfohKpr4KXF0oB+IRPbzTQpkn+EfuwUbI81pP45pwcwqu kZCT3chaYTOMouftVL2QKubg/MJwkphKxYvQP4B9Z57PSEPYaesNRWm6qT1vBirm 0cIGV4u77e9O4cMOCIRsr1V3QfvxECKFVRQwo67KRHptayYW7Zy7vXUJRjZJlLmN nziiTGr2IBc2F/fE2Zfp5JwhQIy9tIhi/2zygSUdxL4Gq6IOiwVIbtj/awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEndaAlhTudQDu4lq5TaHKTzF8/4MB8GA1UdIwQY MBaAFFuVqUra06KJbHIHTWZ8G2IHWVjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYt N2ZlYWI0OGVlZTYxLzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYtN2ZlYWI0OGVlZTYx LzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegOhit78 c7noU76UgfKdSFegSR4tpvwIO+UadI4vmzyCkgTvsXheupvk/xn6WZ793TfT4ynb x5K6h6cYw7Zy8l4h15cABVwGkklEaEc+uRqlZ0RYAkTRLho4ItRwFV2Bc3EFNuE8 JBMiPWXNvluurRsH93PmYU0dSBKJjovFijW5aFlmgyiHT3H0YxvamhJUvToa1ILF enc3C8RJaMjQczf3iusyLdFx+IZHAemd8b8gqr4Y9/bj3KUDFAZDAnkINuHVO5co +zlKohAvhrtC4cfhFpmfIOU7mPplnOAA4XcWwp4PWVyKPgFvihRwv8L5gJRBS6rw 7QCQroC9uTQ6Ew== -----END CERTIFICATE-----Generated at Tue Dec 23 16:24:31 2025 by rpki-client