This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json) Hash identifier: Vjtm/pECJpK+ZGSuZtYKWCzn0Bh12wtVyhSwcG3gC7A= Subject key identifier: 79:86:87:54:CE:30:AC:6B:3E:63:D7:8C:C1:8C:56:41:9A:A9:58:A6 Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46 Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046 Certificate serial: 019B58D15506D399DE374D41EF503A125285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft Manifest number: 1792 Signing time: Fri 26 Dec 2025 04:01:12 +0000 Manifest this update: Fri 26 Dec 2025 04:01:12 +0000 Manifest next update: Sat 27 Dec 2025 04:01:12 +0000 Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: NKfMuFU0fXF5DA7H9V3jREDY0kRFrJuyNzOVxfvD40o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:55:06:d3:99:de:37:4d:41:ef:50:3a:12:52:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046 Validity Not Before: Dec 26 04:01:12 2025 GMT Not After : Dec 27 04:01:12 2025 GMT Subject: CN=79868754ce30ac6b3e63d78cc18c56419aa958a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:3a:18:05:1b:89:b3:44:23:a0:80:21:75: 5d:aa:79:01:88:a3:b3:7d:25:1c:83:d1:92:12:06: 83:3a:a9:f3:f0:d6:49:47:ca:26:2a:7a:1b:4c:ac: a7:f3:28:eb:a8:fc:a3:ff:4e:8b:03:a9:f0:49:c4: c3:02:23:e4:12:30:16:0d:a0:de:86:4a:47:15:bd: bf:23:1c:aa:b6:27:ff:81:9c:45:60:5e:92:d5:fe: 58:18:84:ab:b0:f3:55:f0:22:6f:2e:d9:ff:4f:36: 7c:dc:35:87:8a:2f:dc:e3:97:ec:98:d0:68:25:b5: 47:38:29:b4:57:75:8f:c4:00:fb:c3:1a:44:52:02: 1a:59:66:57:03:3d:dc:04:b9:db:9d:b8:bb:af:2d: 1e:f6:ee:d0:0d:4b:bd:5f:ce:fb:a5:dc:6f:02:e5: 4e:f1:7e:66:51:7f:07:a5:59:16:f0:c1:9a:99:00: f6:14:33:87:49:75:10:94:d1:bb:a8:71:5e:d6:9c: a3:dc:a9:7d:f0:9f:9f:0a:59:8b:df:59:4e:06:75: b7:78:5f:a2:78:56:20:dd:88:2f:3c:97:03:80:5f: 5f:f0:d2:74:95:32:19:3b:81:71:56:d7:47:0a:f8: 0a:a6:5e:ab:e5:47:6d:d3:cf:6f:2c:fb:b6:c2:f7: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:86:87:54:CE:30:AC:6B:3E:63:D7:8C:C1:8C:56:41:9A:A9:58:A6 X509v3 Authority Key Identifier: keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e7:a4:e6:b2:c6:8b:9c:36:27:af:f5:00:6f:cf:c5:65:c8: 81:67:fe:da:e5:14:d7:b6:5c:87:30:cf:68:22:77:1c:68:b6: 56:ff:3f:34:33:85:f0:04:26:4c:04:8f:e7:17:0d:6d:45:47: 7a:ca:0a:59:75:c4:cb:b2:f6:a0:a8:67:2a:79:87:a7:e9:8b: 00:f2:d5:11:7b:ca:5a:66:4c:7b:04:83:cf:23:b8:25:dc:2c: eb:bb:21:43:c5:d4:d4:10:ab:25:e4:7a:96:32:8b:81:05:1f: f1:97:16:1d:11:87:0a:04:9c:15:8b:24:e7:5f:1e:e4:78:8f: b5:64:99:b6:80:ec:49:f6:a3:48:19:f4:c9:8d:c0:d2:4b:0d: e5:4f:30:62:ea:0a:81:a3:e1:05:8d:6c:19:d3:34:3a:88:bc: c7:b3:76:53:98:20:8a:e1:90:79:ea:c8:d1:24:95:fc:13:b7: a3:b0:48:cc:c8:44:7d:ef:b4:95:6b:32:87:e3:e7:43:0d:11: 6d:6e:54:9a:70:1e:0d:87:cc:3f:ff:8e:a3:5a:ec:b0:e3:3b: b3:e6:ef:9a:fb:f9:a4:35:58:f4:40:c1:a3:71:eb:c2:a5:35: d4:77:24:0e:e0:a7:45:57:bf:0b:96:f8:93:e1:00:bd:01:59: 79:5d:b2:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0VUG05neN01B71A6ElKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzNjYTBkNjNhOGZjY2RjMGU5MmE4OGE2YmFjZWZmMjc1 ZTcwNDYwHhcNMjUxMjI2MDQwMTEyWhcNMjUxMjI3MDQwMTEyWjAzMTEwLwYDVQQD Eyg3OTg2ODc1NGNlMzBhYzZiM2U2M2Q3OGNjMThjNTY0MTlhYTk1OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviU6GAUbibNEI6CAIXVdqnkBiKOz fSUcg9GSEgaDOqnz8NZJR8omKnobTKyn8yjrqPyj/06LA6nwScTDAiPkEjAWDaDe hkpHFb2/Ixyqtif/gZxFYF6S1f5YGISrsPNV8CJvLtn/TzZ83DWHii/c45fsmNBo JbVHOCm0V3WPxAD7wxpEUgIaWWZXAz3cBLnbnbi7ry0e9u7QDUu9X877pdxvAuVO 8X5mUX8HpVkW8MGamQD2FDOHSXUQlNG7qHFe1pyj3Kl98J+fClmL31lOBnW3eF+i eFYg3YgvPJcDgF9f8NJ0lTIZO4FxVtdHCvgKpl6r5Udt089vLPu2wvcAPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmGh1TOMKxrPmPXjMGMVkGaqVimMB8GA1UdIwQY MBaAFFvDyg1jqPzNwOkqiKa6zv8nXnBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDkt M2MxZTA1MThmOWU1LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDktM2MxZTA1MThmOWU1 LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+ek5rLG i5w2J6/1AG/PxWXIgWf+2uUU17ZchzDPaCJ3HGi2Vv8/NDOF8AQmTASP5xcNbUVH esoKWXXEy7L2oKhnKnmHp+mLAPLVEXvKWmZMewSDzyO4Jdws67shQ8XU1BCrJeR6 ljKLgQUf8ZcWHRGHCgScFYsk518e5HiPtWSZtoDsSfajSBn0yY3A0ksN5U8wYuoK gaPhBY1sGdM0Ooi8x7N2U5ggiuGQeerI0SSV/BO3o7BIzMhEfe+0lWsyh+PnQw0R bW5UmnAeDYfMP/+Oo1rssOM7s+bvmvv5pDVY9EDBo3HrwqU11HckDuCnRVe/C5b4 k+EAvQFZeV2yXA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:24 2025 by rpki-client