This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft File: W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json) Hash identifier: 5bbozKp1+Sjesa5IzoCBrZdq7IWw/2KzWrI/9s+3qWo= Subject key identifier: 50:33:B2:7E:70:6E:32:93:6A:CD:7D:62:54:85:99:BC:CF:61:70:5A Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b Certificate serial: 019B34565A9D94F2DCE9A0FD7054F0E21607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 02:00:33 +0000 Manifest this update: Fri 19 Dec 2025 02:00:33 +0000 Manifest next update: Sat 20 Dec 2025 02:00:33 +0000 Files and hashes: 1: 7z1CEaiQeIhLfGd7pGfu2uxsPac.roa (hash: 7C2NyJj4g6x2FviGxPNRDMPSybLsn4cJWtQ3CeiM6xk=) 2: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: OiwpjUU2nj0KmLJlFIjPa3fjVsfgzsib9aaG+63aF1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:5a:9d:94:f2:dc:e9:a0:fd:70:54:f0:e2:16:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b Validity Not Before: Dec 19 02:00:33 2025 GMT Not After : Dec 20 02:00:33 2025 GMT Subject: CN=5033b27e706e32936acd7d62548599bccf61705a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8a:44:4e:1f:82:1e:c9:73:29:1d:52:88:70: 49:fa:8e:bc:45:4a:f6:5b:a5:dc:42:63:d4:3e:44: 0b:61:17:37:fc:c4:b2:af:d8:2a:a2:10:3c:63:05: b7:78:d9:1f:69:3c:bd:b2:a6:09:36:bb:8c:5b:3c: 73:ec:4a:9f:e5:4c:26:03:5a:21:6e:14:24:02:c8: 76:09:96:a3:c6:4c:5b:65:9d:89:b5:e8:d9:9d:53: 1b:6b:5a:bc:a6:4e:e8:a1:ae:95:14:f1:d0:3a:6c: 45:4d:7e:41:43:3b:66:5d:d6:a1:bf:24:e1:07:9d: 38:de:d6:59:2c:9d:9b:3d:9b:49:3f:2e:5d:5d:60: 5d:51:87:48:86:0c:1e:5f:06:a7:de:d1:44:45:2e: 20:a1:a7:3b:4d:4c:04:cd:92:b5:58:43:7e:e5:bd: 22:6a:a7:36:ff:cb:e6:fe:ea:8a:45:96:86:2b:01: 14:87:a2:bc:c1:9e:d0:4f:3d:ef:2a:8c:d1:81:48: d1:23:51:49:73:f5:10:ea:85:63:3b:52:3e:85:cf: 67:f8:46:79:11:a4:90:b8:28:95:e6:c9:4d:eb:b0: 93:69:ac:3a:6a:9a:22:c2:3a:88:32:bc:e4:9c:0d: 0c:db:d0:f3:f2:91:3d:51:2e:c1:c5:70:e3:b5:4c: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:33:B2:7E:70:6E:32:93:6A:CD:7D:62:54:85:99:BC:CF:61:70:5A X509v3 Authority Key Identifier: keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c6:f3:ae:d8:93:3c:d5:9f:81:72:ab:62:87:b6:4e:eb:7c: 38:19:3f:d4:1a:34:84:0d:5c:6b:e2:f7:9f:db:6a:1f:74:1c: cb:0f:73:a0:9e:2f:00:65:3f:6a:3e:0d:9c:e6:e2:e5:16:75: dc:11:4b:5e:a9:e5:01:c1:73:0e:e5:4d:7d:b7:a1:b0:41:0b: b6:e3:f2:66:16:80:0f:2a:a2:cc:6f:06:c9:0e:81:aa:05:a7: af:2d:17:4c:e2:61:44:f9:72:d6:44:13:ea:a8:96:f4:05:32: ec:53:b0:fe:67:5f:51:f2:ea:cc:98:58:a5:4a:45:19:5c:9c: 6d:ee:67:94:2d:45:60:e2:a0:ae:a6:cd:36:59:ed:2d:eb:60: 7f:f8:6f:09:ff:be:ee:b8:fc:ce:29:d0:26:71:df:5c:56:d2: 5d:d2:dc:6e:12:83:75:4d:44:e1:1c:5d:0e:b5:f9:85:e3:d1: 32:fd:04:f4:68:fe:e0:f9:28:15:d0:6a:e9:94:be:af:25:5a: e6:46:1b:86:5b:ac:aa:4b:05:c7:1a:4f:45:da:87:f3:2a:be: 7c:e5:9d:bf:7c:15:e8:9d:86:5c:4d:8d:b2:7a:6c:13:4e:f5: ff:3e:52:dd:79:a4:d6:74:a2:b7:d2:5c:db:93:59:35:0d:0c: cf:d8:06:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VlqdlPLc6aD9cFTw4hYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTk3OWZiOGU0NzczMDRiYjU5MWQ2YjY4ZWVhNzNkYTk0 YTgxNWIwHhcNMjUxMjE5MDIwMDMzWhcNMjUxMjIwMDIwMDMzWjAzMTEwLwYDVQQD Eyg1MDMzYjI3ZTcwNmUzMjkzNmFjZDdkNjI1NDg1OTliY2NmNjE3MDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44pETh+CHslzKR1SiHBJ+o68RUr2 W6XcQmPUPkQLYRc3/MSyr9gqohA8YwW3eNkfaTy9sqYJNruMWzxz7Eqf5UwmA1oh bhQkAsh2CZajxkxbZZ2JtejZnVMba1q8pk7ooa6VFPHQOmxFTX5BQztmXdahvyTh B5043tZZLJ2bPZtJPy5dXWBdUYdIhgweXwan3tFERS4goac7TUwEzZK1WEN+5b0i aqc2/8vm/uqKRZaGKwEUh6K8wZ7QTz3vKozRgUjRI1FJc/UQ6oVjO1I+hc9n+EZ5 EaSQuCiV5slN67CTaaw6apoiwjqIMrzknA0M29Dz8pE9US7BxXDjtUyIpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAzsn5wbjKTas19YlSFmbzPYXBaMB8GA1UdIwQY MBaAFFvpefuOR3MEu1kda2jupz2pSoFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMt MTYwNWIxYmQyOThlLzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMtMTYwNWIxYmQyOThl LzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMbzrtiT PNWfgXKrYoe2Tut8OBk/1Bo0hA1ca+L3n9tqH3Qcyw9zoJ4vAGU/aj4NnObi5RZ1 3BFLXqnlAcFzDuVNfbehsEELtuPyZhaADyqizG8GyQ6BqgWnry0XTOJhRPly1kQT 6qiW9AUy7FOw/mdfUfLqzJhYpUpFGVycbe5nlC1FYOKgrqbNNlntLetgf/hvCf++ 7rj8zinQJnHfXFbSXdLcbhKDdU1E4RxdDrX5hePRMv0E9Gj+4PkoFdBq6ZS+ryVa 5kYbhlusqksFxxpPRdqH8yq+fOWdv3wV6J2GXE2NsnpsE071/z5S3Xmk1nSit9Jc 25NZNQ0Mz9gGLQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:39 2025 by rpki-client