This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft File: W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json) Hash identifier: Cn1aG3EIqx53V3ilwIiF9cHm1MVn2vsdje2nGXU1R1c= Subject key identifier: 76:F6:83:FB:61:51:FD:FC:C9:F2:4E:2A:FB:B0:DF:63:D3:EA:CE:37 Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1 Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1 Certificate serial: 019B0E24D5B4EA5E2F80EC2BF4BC71A2D61E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft Manifest number: 15BB Signing time: Thu 11 Dec 2025 16:00:53 +0000 Manifest this update: Thu 11 Dec 2025 16:00:53 +0000 Manifest next update: Fri 12 Dec 2025 16:00:53 +0000 Files and hashes: 1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=) 2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: ix4UkjoK5Nlunx0EANZu3LbVXxS6NWlFTR5qJ/uqSd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:d5:b4:ea:5e:2f:80:ec:2b:f4:bc:71:a2:d6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1 Validity Not Before: Dec 11 16:00:53 2025 GMT Not After : Dec 12 16:00:53 2025 GMT Subject: CN=76f683fb6151fdfcc9f24e2afbb0df63d3eace37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:c4:27:38:6c:da:45:ac:67:e4:42:2d:8a: 7d:92:cb:51:9c:d3:95:c7:f4:e7:b2:3f:33:e2:b0: 3e:f3:40:c2:a4:98:ee:dd:e5:f5:f0:3c:f4:39:02: 12:e1:15:37:43:0c:80:66:4c:8e:8f:3b:cb:48:75: 40:0e:e5:0c:05:9e:b0:44:bb:83:a1:38:46:85:f1: 9f:1b:a2:c0:f6:7a:53:82:e9:64:0c:4f:16:da:ff: 7b:fd:2d:ee:a1:a8:41:8a:63:cb:6c:20:cd:32:15: 9a:ff:38:76:54:c1:6d:c2:77:5c:41:c8:4f:b6:e1: 71:8c:77:5b:78:57:de:d3:53:36:d0:b7:9a:51:57: 74:87:fb:51:42:36:c5:fa:52:3d:51:83:e3:54:b1: f9:51:1a:04:09:ed:fd:17:49:ce:81:c6:a6:be:be: df:cc:df:84:0a:13:7e:ea:a0:f4:32:6e:74:97:a6: 1b:c6:74:54:3f:89:be:c7:a2:7d:f0:3f:98:6e:26: 9c:1e:87:c2:c8:c3:b3:80:ed:dc:e8:83:12:b7:d2: ec:d6:5a:e1:9d:21:a9:be:53:87:5c:a9:82:0a:c6: f7:d6:33:d0:c2:0a:40:a0:b4:6c:5e:71:e7:b2:1e: ce:74:be:26:cf:49:35:b5:9c:8c:0d:c7:3e:a4:4e: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F6:83:FB:61:51:FD:FC:C9:F2:4E:2A:FB:B0:DF:63:D3:EA:CE:37 X509v3 Authority Key Identifier: keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:15:01:be:3c:e6:5a:c3:d7:05:1c:44:0c:f0:ba:28:eb:38: 50:1c:e8:b8:44:0c:9d:f6:7f:c3:ad:d3:af:53:63:b4:22:d4: a8:d4:0f:35:44:b0:38:63:82:1d:82:3a:98:b9:23:e3:50:da: 80:a4:4d:76:f6:24:ad:e0:18:e9:77:f4:86:80:76:d0:21:31: 98:9a:05:4b:4a:94:cc:d1:c7:50:f4:32:83:7a:63:e5:ae:8a: eb:86:7b:18:f6:b0:00:fe:b7:a9:44:4a:f7:74:3f:91:03:ea: 57:05:c7:22:55:0d:7e:8b:66:52:bb:fa:49:d6:f6:30:20:b2: cf:ae:68:1c:e6:3c:df:ea:82:f4:42:0c:76:7d:c0:42:14:5e: 37:de:03:89:e3:67:00:d7:ab:03:d4:62:a1:d9:52:72:9a:9d: 3b:2f:de:53:ea:c4:f0:a3:25:ac:36:25:41:49:c2:7a:83:57: 25:c5:3b:c1:4d:46:27:59:df:1f:d6:9a:35:8d:8f:18:c2:a1: 8d:a9:a7:9c:e8:90:9e:cb:3c:ff:6b:b3:29:b9:ac:64:75:4f: a1:00:7d:f5:28:26:20:c1:7d:0b:74:6e:02:e2:68:8a:c1:93: e7:d7:6e:08:3f:05:c4:c6:76:9e:df:96:2b:9d:f8:8e:15:aa: e0:94:c7:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJNW06l4vgOwr9LxxotYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOGExNjUyMmVjMzRiMWM1YmM0NzA4MjA2Y2MxOTYzYTE1 YmJkYjEwHhcNMjUxMjExMTYwMDUzWhcNMjUxMjEyMTYwMDUzWjAzMTEwLwYDVQQD Eyg3NmY2ODNmYjYxNTFmZGZjYzlmMjRlMmFmYmIwZGY2M2QzZWFjZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBfEJzhs2kWsZ+RCLYp9kstRnNOV x/Tnsj8z4rA+80DCpJju3eX18Dz0OQIS4RU3QwyAZkyOjzvLSHVADuUMBZ6wRLuD oThGhfGfG6LA9npTgulkDE8W2v97/S3uoahBimPLbCDNMhWa/zh2VMFtwndcQchP tuFxjHdbeFfe01M20LeaUVd0h/tRQjbF+lI9UYPjVLH5URoECe39F0nOgcamvr7f zN+EChN+6qD0Mm50l6YbxnRUP4m+x6J98D+YbiacHofCyMOzgO3c6IMSt9Ls1lrh nSGpvlOHXKmCCsb31jPQwgpAoLRsXnHnsh7OdL4mz0k1tZyMDcc+pE4pBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb2g/thUf38yfJOKvuw32PT6s43MB8GA1UdIwQY MBaAFFuKFlIuw0scW8RwggbMGWOhW72xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQt Y2FjOGVkNzZhODQ0LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQtY2FjOGVkNzZhODQ0 LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBUBvjzm WsPXBRxEDPC6KOs4UBzouEQMnfZ/w63Tr1NjtCLUqNQPNUSwOGOCHYI6mLkj41Da gKRNdvYkreAY6Xf0hoB20CExmJoFS0qUzNHHUPQyg3pj5a6K64Z7GPawAP63qURK 93Q/kQPqVwXHIlUNfotmUrv6Sdb2MCCyz65oHOY83+qC9EIMdn3AQhReN94DieNn ANerA9RiodlScpqdOy/eU+rE8KMlrDYlQUnCeoNXJcU7wU1GJ1nfH9aaNY2PGMKh jamnnOiQnss8/2uzKbmsZHVPoQB99SgmIMF9C3RuAuJoisGT59duCD8FxMZ2nt+W K534jhWq4JTH5Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:16 2025 by rpki-client