This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json) Hash identifier: hDJk8g1ix05iR+zFRHg/NLBPKyqZRYrb3z5Kl/RwvME= Subject key identifier: 63:66:D4:56:56:FF:E1:55:3D:38:FB:C6:2F:56:81:7A:5A:12:B6:90 Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Certificate serial: 019B0E262FA38DA06B4BE71C7F224719E746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 16:02:22 +0000 Manifest this update: Thu 11 Dec 2025 16:02:22 +0000 Manifest next update: Fri 12 Dec 2025 16:02:22 +0000 Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=) 2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: KXyVuxaGbnIE8GXeyktmCvEOOe2LtoFIBiXHHxffbf4=) 3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:2f:a3:8d:a0:6b:4b:e7:1c:7f:22:47:19:e7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Validity Not Before: Dec 11 16:02:22 2025 GMT Not After : Dec 12 16:02:22 2025 GMT Subject: CN=6366d45656ffe1553d38fbc62f56817a5a12b690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:ff:1a:d1:fe:3c:1a:e9:38:7f:1e:b5:34: ff:01:e5:ff:66:aa:a6:04:a3:01:d3:03:b4:b4:57: 28:b2:4c:a0:6d:76:bb:44:02:24:3d:f9:c0:cd:9c: 7e:d1:59:36:28:16:57:75:cb:a0:27:42:d3:aa:fb: 84:e7:71:d3:ab:9f:ff:a5:be:b4:b3:c2:64:c1:83: e9:27:2e:19:32:fd:67:90:6a:fd:4f:7f:05:89:61: 98:5d:a6:a0:f0:a1:1e:31:8f:b4:8b:38:d2:d1:52: 16:10:e7:61:1b:15:a2:6c:30:87:06:94:3b:1d:83: 3a:51:16:c1:4b:e8:15:44:27:2d:f0:f1:c8:34:e2: 18:a3:1d:4d:23:02:d6:ba:53:e0:68:8e:b2:3c:2a: d5:aa:ed:20:87:e2:ac:fd:d5:12:31:86:f6:00:e7: c1:1d:e1:47:21:49:32:4d:6f:1b:fc:d8:b2:58:3e: 66:50:91:c7:b7:72:f0:55:6e:ee:96:91:51:7b:37: bb:ac:3b:a5:c2:0b:72:c3:a1:77:9d:97:42:e3:57: 9b:83:a0:05:b0:e1:32:b1:ad:d0:50:61:dd:f5:74: f4:de:45:33:4e:67:f0:ee:b5:56:c3:98:6b:27:43: b9:e0:94:56:b6:cc:0f:c8:3a:4f:7a:00:41:c2:8f: b6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:66:D4:56:56:FF:E1:55:3D:38:FB:C6:2F:56:81:7A:5A:12:B6:90 X509v3 Authority Key Identifier: keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:18:86:4a:b0:cd:b5:4c:e2:3f:ae:c1:e2:82:24:49:02:f4: ed:b8:0d:47:6c:48:25:72:34:bf:4b:8f:a1:d5:4e:49:ca:a0: fe:c3:fd:e5:ea:f6:4e:8f:f5:fa:43:d3:2d:93:10:bf:7d:85: f4:e7:de:33:d1:b7:47:5b:4b:8a:9d:49:c7:9b:6c:0a:fa:85: e3:f7:33:80:cc:6c:df:fe:51:0d:d3:15:5b:03:68:19:b2:bd: 51:4c:4f:c1:8d:55:1c:49:90:d9:e5:79:e1:ff:73:2e:ac:5b: ed:83:47:16:46:5a:33:41:1f:7f:82:c6:23:0f:2a:58:fb:99: c3:01:7d:e7:3f:e8:3c:a7:86:77:c6:51:ed:5c:46:06:0e:36: fa:6b:03:89:e5:22:3b:6f:30:e0:26:b6:2b:c8:47:9a:f1:99: 28:df:08:57:2f:0d:91:16:9c:85:1c:6d:44:75:89:e8:d6:a5: fc:f7:98:b9:31:69:ff:7c:dc:9a:57:58:f4:b1:b9:40:ef:a2: 1b:ad:6c:c8:41:52:20:e5:f6:61:ab:2c:81:55:07:ff:df:5d: a6:cc:73:1f:b0:74:e1:50:5a:98:36:b0:10:96:c1:ab:34:b4: bf:d7:9a:37:84:70:1a:6c:41:9b:ec:f7:03:c2:3b:ee:7e:a7: 11:91:05:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJi+jjaBrS+ccfyJHGedGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk MzIzM2EwHhcNMjUxMjExMTYwMjIyWhcNMjUxMjEyMTYwMjIyWjAzMTEwLwYDVQQD Eyg2MzY2ZDQ1NjU2ZmZlMTU1M2QzOGZiYzYyZjU2ODE3YTVhMTJiNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34H/GtH+PBrpOH8etTT/AeX/Zqqm BKMB0wO0tFcoskygbXa7RAIkPfnAzZx+0Vk2KBZXdcugJ0LTqvuE53HTq5//pb60 s8JkwYPpJy4ZMv1nkGr9T38FiWGYXaag8KEeMY+0izjS0VIWEOdhGxWibDCHBpQ7 HYM6URbBS+gVRCct8PHINOIYox1NIwLWulPgaI6yPCrVqu0gh+Ks/dUSMYb2AOfB HeFHIUkyTW8b/NiyWD5mUJHHt3LwVW7ulpFReze7rDulwgtyw6F3nZdC41ebg6AF sOEysa3QUGHd9XT03kUzTmfw7rVWw5hrJ0O54JRWtswPyDpPegBBwo+2HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNm1FZW/+FVPTj7xi9WgXpaEraQMB8GA1UdIwQY MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0 LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRiGSrDN tUziP67B4oIkSQL07bgNR2xIJXI0v0uPodVOScqg/sP95er2To/1+kPTLZMQv32F 9OfeM9G3R1tLip1Jx5tsCvqF4/czgMxs3/5RDdMVWwNoGbK9UUxPwY1VHEmQ2eV5 4f9zLqxb7YNHFkZaM0Eff4LGIw8qWPuZwwF95z/oPKeGd8ZR7VxGBg42+msDieUi O28w4Ca2K8hHmvGZKN8IVy8NkRachRxtRHWJ6Nal/PeYuTFp/3zcmldY9LG5QO+i G61syEFSIOX2YassgVUH/99dpsxzH7B04VBamDawEJbBqzS0v9eaN4RwGmxBm+z3 A8I77n6nEZEFNg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:01 2025 by rpki-client