This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json) Hash identifier: y+/SRnJkIFIekqNiIg8SgBa3mddJaBg2VnEiyRtaHNU= Subject key identifier: 4F:6C:DC:7E:CF:BF:E0:3E:1C:4F:A3:5C:87:3F:B8:23:43:F4:6D:EB Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a Certificate serial: 019B24E383F98311D502D6A89141DFEBA815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft Manifest number: 0E20 Signing time: Tue 16 Dec 2025 02:00:48 +0000 Manifest this update: Tue 16 Dec 2025 02:00:48 +0000 Manifest next update: Wed 17 Dec 2025 02:00:48 +0000 Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: uL5GA+yT9+X4XA7xl6RdcIfEb4q9L+KTzE4kLf0Nyec=) 2: p6zJI7fLaajTwxijhyxSXHf0c_A.roa (hash: xRiSXGx292mwjOrVD1g1q4F+cBXFDzNZJugikcE8Q4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:83:f9:83:11:d5:02:d6:a8:91:41:df:eb:a8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a Validity Not Before: Dec 16 02:00:48 2025 GMT Not After : Dec 17 02:00:48 2025 GMT Subject: CN=4f6cdc7ecfbfe03e1c4fa35c873fb82343f46deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:b6:11:75:d0:3c:8a:d1:4d:e2:34:da:c7: 7f:16:fc:c8:04:31:06:6c:66:bc:76:eb:1e:eb:d1: 45:8b:6d:f1:c8:9b:e4:83:ae:78:ed:c0:0f:e3:c2: 13:84:07:37:13:a0:be:f1:dd:b2:7a:70:53:e2:f0: bb:0c:b6:1b:59:fd:cf:32:5d:d5:53:46:c8:3e:5f: da:d8:ab:0e:aa:77:95:01:b7:f6:c6:f2:b6:29:a4: e1:4d:d6:51:cd:40:74:c8:ac:e7:04:92:5c:02:08: 20:de:04:5d:0d:a0:e8:87:d7:7c:c9:09:67:8a:74: 05:da:7b:4e:1a:7e:79:9b:ce:8c:a9:5a:1b:0e:74: 13:4a:5a:4d:47:b5:92:e7:ee:49:e4:68:6f:6d:37: e3:7b:04:7c:1e:0c:3a:0d:e1:de:13:d5:7c:27:07: 12:c9:c9:68:39:2c:09:0a:36:e4:c6:84:d5:b0:2a: f8:6b:4d:6d:46:43:be:d4:38:35:9c:03:ac:dc:e6: 9d:0a:f2:d9:0c:b0:ba:9d:0f:e9:49:3b:f7:d7:70: 25:8e:96:50:55:66:7c:fc:05:7c:97:1f:0b:f6:ee: db:c9:34:e2:1f:d1:35:61:cb:ea:38:9c:4a:43:88: a8:80:6a:a6:41:76:0b:0c:31:6e:4a:cb:fc:27:d7: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6C:DC:7E:CF:BF:E0:3E:1C:4F:A3:5C:87:3F:B8:23:43:F4:6D:EB X509v3 Authority Key Identifier: keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:42:7a:bd:86:2f:6a:65:b7:b1:09:e5:ed:3e:2a:4d:0f:86: 29:4e:e7:76:63:9e:83:af:46:d3:18:d9:bf:19:eb:a0:bb:ed: a3:d8:3d:21:ab:a2:25:0a:bd:5f:79:a0:fa:10:13:85:d7:77: 9a:69:49:e9:c3:db:28:81:ab:3c:6f:15:a0:45:1f:c7:17:20: a5:d8:42:c7:99:9e:52:02:31:47:de:c4:43:92:c0:9a:30:52: 4e:f2:dc:c0:88:2d:a0:1f:b9:ea:4a:b2:1d:b7:53:ce:03:5d: 62:44:57:6e:70:f7:84:2b:39:22:43:be:40:bc:dd:2a:6c:dd: 76:6b:1d:07:15:c5:5c:e1:1e:ae:76:a7:8a:9d:90:54:44:7d: 5f:e4:a6:07:29:10:cd:ae:bd:3c:a6:c3:77:58:46:dc:12:c5: 3a:e2:66:e8:f5:db:d1:19:9f:32:92:a5:43:fa:0a:b0:3d:5d: 99:5f:a9:9d:3f:e1:3a:5e:a2:5b:55:d5:aa:8f:96:72:33:0b: db:06:61:a3:a1:9f:98:f1:00:93:dd:7b:3a:14:4b:3c:b3:25: 1d:d4:ca:e2:45:23:2d:8c:ef:c4:d0:9d:f9:f1:df:ae:64:5b: 4e:e0:bc:62:c4:1d:b4:7f:b8:86:78:56:6a:7e:a4:21:69:bd: a8:ba:bc:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk44P5gxHVAtaokUHf66gVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzE1MDM2MTBiZjgyZDg2ODdiN2FlZmI4NzlhNjU3ODcw NGYzMmEwHhcNMjUxMjE2MDIwMDQ4WhcNMjUxMjE3MDIwMDQ4WjAzMTEwLwYDVQQD Eyg0ZjZjZGM3ZWNmYmZlMDNlMWM0ZmEzNWM4NzNmYjgyMzQzZjQ2ZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YO2EXXQPIrRTeI02sd/FvzIBDEG bGa8duse69FFi23xyJvkg6547cAP48IThAc3E6C+8d2yenBT4vC7DLYbWf3PMl3V U0bIPl/a2KsOqneVAbf2xvK2KaThTdZRzUB0yKznBJJcAggg3gRdDaDoh9d8yQln inQF2ntOGn55m86MqVobDnQTSlpNR7WS5+5J5GhvbTfjewR8Hgw6DeHeE9V8JwcS ycloOSwJCjbkxoTVsCr4a01tRkO+1Dg1nAOs3OadCvLZDLC6nQ/pSTv313AljpZQ VWZ8/AV8lx8L9u7byTTiH9E1YcvqOJxKQ4iogGqmQXYLDDFuSsv8J9c8OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9s3H7Pv+A+HE+jXIc/uCND9G3rMB8GA1UdIwQY MBaAFFvBUDYQv4LYaHt677h5pleHBPMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2Ut ZTdiMzcyZTRjN2M1LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2UtZTdiMzcyZTRjN2M1 LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkJ6vYYv amW3sQnl7T4qTQ+GKU7ndmOeg69G0xjZvxnroLvto9g9IauiJQq9X3mg+hAThdd3 mmlJ6cPbKIGrPG8VoEUfxxcgpdhCx5meUgIxR97EQ5LAmjBSTvLcwIgtoB+56kqy HbdTzgNdYkRXbnD3hCs5IkO+QLzdKmzddmsdBxXFXOEernanip2QVER9X+SmBykQ za69PKbDd1hG3BLFOuJm6PXb0RmfMpKlQ/oKsD1dmV+pnT/hOl6iW1XVqo+WcjML 2wZho6GfmPEAk917OhRLPLMlHdTK4kUjLYzvxNCd+fHfrmRbTuC8YsQdtH+4hnhW an6kIWm9qLq8cQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:30:52 2025 by rpki-client