This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft File: W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json) Hash identifier: 09Qseoq1cjW5EjgDyVJcBpo2TUWbEekRFOuuwZQ9LAU= Subject key identifier: 30:9D:0C:00:5E:48:16:6D:03:D4:70:42:FB:94:03:1F:77:A9:72:03 Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b Certificate serial: 019B1193E417307A89D9D44C7E01A7187B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 08:01:03 +0000 Manifest this update: Fri 12 Dec 2025 08:01:03 +0000 Manifest next update: Sat 13 Dec 2025 08:01:03 +0000 Files and hashes: 1: 7z1CEaiQeIhLfGd7pGfu2uxsPac.roa (hash: 7C2NyJj4g6x2FviGxPNRDMPSybLsn4cJWtQ3CeiM6xk=) 2: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: 0SWhYIlYmJbZov+RsMuy57ScggWBQCnegwKux5IIe1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:e4:17:30:7a:89:d9:d4:4c:7e:01:a7:18:7b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b Validity Not Before: Dec 12 08:01:03 2025 GMT Not After : Dec 13 08:01:03 2025 GMT Subject: CN=309d0c005e48166d03d47042fb94031f77a97203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:a4:38:a2:d4:1b:3a:8c:36:84:ce:12:66: a7:60:04:3c:9b:98:39:1a:98:49:50:95:1d:92:f2: ef:96:7a:7b:a8:c1:84:4a:22:b0:57:e2:67:24:fa: 30:51:51:42:48:09:71:9e:59:6c:d2:91:13:0b:8d: 7b:4b:20:8b:c0:4c:62:bd:df:b8:89:f5:d2:c3:87: 05:cd:3d:9b:42:4f:d7:10:98:90:69:da:4f:7a:6b: c7:28:22:36:92:35:e5:15:88:f5:65:09:bb:ad:67: b3:f3:64:83:19:b8:50:95:77:0b:e1:b6:94:20:a8: 89:f0:52:85:6b:d6:82:b3:75:6a:8b:47:c5:ee:61: e1:35:85:13:58:b8:c2:c2:24:70:ee:15:76:9e:26: f2:36:75:f7:07:3a:e2:3f:b2:80:4f:b5:c3:cb:33: f8:81:a5:fc:34:05:7f:ff:fc:88:a1:fe:d5:13:05: 7b:29:8d:45:c7:2c:60:c7:e8:88:e6:d8:9e:8b:91: cd:0d:08:7e:41:5b:22:c5:27:ad:f7:c5:b7:5f:10: fe:c4:5f:66:0a:53:11:6d:c8:bf:c8:9d:e4:6c:04: d7:64:83:91:fa:2e:ae:bd:34:f2:7b:8b:1d:89:79: 17:9d:8d:6b:b2:16:52:9b:7a:0e:94:55:21:b7:b9: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9D:0C:00:5E:48:16:6D:03:D4:70:42:FB:94:03:1F:77:A9:72:03 X509v3 Authority Key Identifier: keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9d:21:e5:62:bc:ce:76:54:2c:c6:7c:79:0a:6d:f5:e0:10: 26:55:0c:52:8e:80:f5:b3:53:bf:b4:4d:35:9c:0b:de:67:34: 76:4c:4f:09:09:74:e6:06:f3:30:3d:27:f6:fa:9d:4a:32:40: e6:14:a3:b8:91:fa:94:92:16:46:90:5d:be:43:9c:6e:55:31: 78:df:50:3b:dd:1b:73:d1:34:f5:0a:dc:06:41:9a:88:e7:5d: ab:f2:96:cd:ab:26:2f:b5:c3:06:5a:c0:f4:cf:b3:98:c1:0e: 30:6a:e8:38:94:8f:b3:35:22:4d:4a:b9:09:33:c3:03:bf:89: 6e:f8:28:5b:8e:b3:07:ee:92:44:9e:ca:7f:f1:13:50:9e:2e: f3:6c:52:79:86:59:dc:bf:12:6a:a1:47:72:cf:75:2a:db:f4: 3e:d3:cd:24:a5:44:b1:00:f0:e5:0c:58:0b:c0:d2:89:a9:75: 78:f3:25:53:42:61:7b:8b:e5:c4:34:b5:bc:dd:23:2c:85:61: 38:e8:74:06:d9:7c:60:a5:6f:be:3b:53:fd:25:d2:8b:11:bb: a7:d8:2c:e0:2c:b0:f0:c9:6e:55:d5:29:03:46:90:2d:b7:af: 22:3b:15:d4:00:df:19:73:13:d3:0e:75:c7:65:89:a6:d1:36: 58:d1:39:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk+QXMHqJ2dRMfgGnGHuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTk3OWZiOGU0NzczMDRiYjU5MWQ2YjY4ZWVhNzNkYTk0 YTgxNWIwHhcNMjUxMjEyMDgwMTAzWhcNMjUxMjEzMDgwMTAzWjAzMTEwLwYDVQQD EygzMDlkMGMwMDVlNDgxNjZkMDNkNDcwNDJmYjk0MDMxZjc3YTk3MjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEmkOKLUGzqMNoTOEmanYAQ8m5g5 GphJUJUdkvLvlnp7qMGESiKwV+JnJPowUVFCSAlxnlls0pETC417SyCLwExivd+4 ifXSw4cFzT2bQk/XEJiQadpPemvHKCI2kjXlFYj1ZQm7rWez82SDGbhQlXcL4baU IKiJ8FKFa9aCs3Vqi0fF7mHhNYUTWLjCwiRw7hV2nibyNnX3BzriP7KAT7XDyzP4 gaX8NAV///yIof7VEwV7KY1Fxyxgx+iI5tiei5HNDQh+QVsixSet98W3XxD+xF9m ClMRbci/yJ3kbATXZIOR+i6uvTTye4sdiXkXnY1rshZSm3oOlFUht7lwSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCdDABeSBZtA9RwQvuUAx93qXIDMB8GA1UdIwQY MBaAFFvpefuOR3MEu1kda2jupz2pSoFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMt MTYwNWIxYmQyOThlLzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMtMTYwNWIxYmQyOThl LzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPp0h5WK8 znZULMZ8eQpt9eAQJlUMUo6A9bNTv7RNNZwL3mc0dkxPCQl05gbzMD0n9vqdSjJA 5hSjuJH6lJIWRpBdvkOcblUxeN9QO90bc9E09QrcBkGaiOddq/KWzasmL7XDBlrA 9M+zmMEOMGroOJSPszUiTUq5CTPDA7+JbvgoW46zB+6SRJ7Kf/ETUJ4u82xSeYZZ 3L8SaqFHcs91Ktv0PtPNJKVEsQDw5QxYC8DSial1ePMlU0Jhe4vlxDS1vN0jLIVh OOh0Btl8YKVvvjtT/SXSixG7p9gs4Cyw8MluVdUpA0aQLbevIjsV1ADfGXMT0w51 x2WJptE2WNE56Q== -----END CERTIFICATE-----Generated at Fri Dec 12 13:38:11 2025 by rpki-client