This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json) Hash identifier: pYR0sGQtwepqvleiuxTu/GiNw/YJINDxhbnog39zwfQ= Subject key identifier: 2C:5D:42:32:15:41:87:4E:39:D5:CF:C6:58:9B:78:68:6A:FB:E2:93 Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Certificate serial: 019B5A1AA2DF67E3DEB89F011B2239093B3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft Manifest number: 024A Signing time: Fri 26 Dec 2025 10:00:53 +0000 Manifest this update: Fri 26 Dec 2025 10:00:53 +0000 Manifest next update: Sat 27 Dec 2025 10:00:53 +0000 Files and hashes: 1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=) 2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: Xo8BPtdC8NpDUKo0oa9y7+06H+mitjf5w+aG/4JdCAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a2:df:67:e3:de:b8:9f:01:1b:22:39:09:3b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Validity Not Before: Dec 26 10:00:53 2025 GMT Not After : Dec 27 10:00:53 2025 GMT Subject: CN=2c5d42321541874e39d5cfc6589b78686afbe293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:11:ea:fc:15:cc:b0:94:ea:ee:a3:93:30: 38:6a:89:72:f7:36:2a:dd:72:8a:84:c7:b4:80:0a: 3d:b9:fb:3e:71:20:85:12:84:35:a2:ef:dd:43:d4: 39:ad:fa:4a:6f:2c:07:8b:f5:e4:b8:c3:e2:08:f7: 2b:49:71:e5:8c:08:9e:5d:42:e4:6b:2d:c5:67:05: 21:61:5c:a7:c0:cc:53:cf:45:d9:97:78:83:62:78: a4:b9:3d:06:21:63:e9:51:18:67:c5:18:aa:1c:f4: 91:86:3a:16:7f:04:72:26:a8:50:32:e8:c3:7e:89: 36:2d:6b:f2:90:dd:ac:9a:3a:f9:68:8a:a4:c0:82: 55:52:19:b7:55:ab:10:44:73:ac:01:0a:c0:9b:97: 13:e4:5b:4e:5e:16:b6:e0:dd:f7:66:2c:36:a1:7b: c7:0e:a3:84:9f:27:15:85:51:57:77:5c:fa:8e:6f: 0d:51:87:94:1a:ac:86:c4:0f:58:d6:ed:22:e1:2a: f2:31:d9:d2:48:cd:9b:75:f5:0b:19:d8:53:61:86: 6a:dc:5e:c4:82:ba:0c:4f:8a:95:65:02:e6:d7:79: 67:fd:fc:7f:c0:d8:f0:55:d5:96:69:67:be:a4:80: a2:ba:79:eb:33:a5:71:e1:42:1f:43:b3:af:53:f7: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5D:42:32:15:41:87:4E:39:D5:CF:C6:58:9B:78:68:6A:FB:E2:93 X509v3 Authority Key Identifier: keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0c:b4:e1:e7:b0:47:1a:42:5f:b5:27:6e:fa:c9:d5:fc:9c: b9:ab:53:85:45:aa:0e:aa:95:d4:ff:b3:67:79:5e:23:18:18: 4e:cc:3c:33:9e:17:c8:02:67:d4:b3:9e:81:c1:16:a9:7c:cb: ea:c8:9a:d6:aa:6d:62:b3:4d:43:52:08:e0:63:6c:cd:6a:7e: 42:62:f4:23:c4:f4:fe:99:38:ec:72:66:59:13:82:42:f4:a7: 33:dd:0b:86:43:01:93:c6:d7:b0:19:7d:cb:c2:47:a9:88:23: 37:48:d4:e3:0a:9b:71:8a:bb:13:e0:90:b6:e0:c0:62:4d:c2: 24:b6:65:80:fe:87:30:5b:ca:00:03:c2:33:ac:b3:5b:d2:3b: e8:5e:2b:b0:ba:f6:b3:e7:06:db:8a:d4:58:f2:f3:f2:12:29: 3d:82:d0:18:6a:01:53:4e:fc:65:1a:4e:7b:f4:e9:d0:45:49: dc:bc:0d:0d:d0:e4:d2:07:ec:8a:bf:55:26:83:b5:a8:84:ff: a8:aa:29:3a:5c:d8:f6:95:35:52:d9:ca:b2:58:b6:91:82:74: 0c:8e:28:3f:78:9e:56:f0:8f:48:64:6c:0a:85:eb:b6:51:53: be:8b:77:1d:34:7e:11:de:2a:aa:ac:49:04:92:de:64:48:42: f3:00:26:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqLfZ+PeuJ8BGyI5CTs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOGIyNmM1MzJmYmM1MmI1ZGU2NzJhYjM1NzYxZDFjN2Q5 N2ViMjYwHhcNMjUxMjI2MTAwMDUzWhcNMjUxMjI3MTAwMDUzWjAzMTEwLwYDVQQD EygyYzVkNDIzMjE1NDE4NzRlMzlkNWNmYzY1ODliNzg2ODZhZmJlMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvsR6vwVzLCU6u6jkzA4aoly9zYq 3XKKhMe0gAo9ufs+cSCFEoQ1ou/dQ9Q5rfpKbywHi/XkuMPiCPcrSXHljAieXULk ay3FZwUhYVynwMxTz0XZl3iDYnikuT0GIWPpURhnxRiqHPSRhjoWfwRyJqhQMujD fok2LWvykN2smjr5aIqkwIJVUhm3VasQRHOsAQrAm5cT5FtOXha24N33Ziw2oXvH DqOEnycVhVFXd1z6jm8NUYeUGqyGxA9Y1u0i4SryMdnSSM2bdfULGdhTYYZq3F7E groMT4qVZQLm13ln/fx/wNjwVdWWaWe+pICiunnrM6Vx4UIfQ7OvU/eyTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxdQjIVQYdOOdXPxlibeGhq++KTMB8GA1UdIwQY MBaAFFuLJsUy+8UrXeZyqzV2HRx9l+smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMt ZTcyZTliNGI3NjU4LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMtZTcyZTliNGI3NjU4 LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQy04eew RxpCX7UnbvrJ1fycuatThUWqDqqV1P+zZ3leIxgYTsw8M54XyAJn1LOegcEWqXzL 6sia1qptYrNNQ1II4GNszWp+QmL0I8T0/pk47HJmWROCQvSnM90LhkMBk8bXsBl9 y8JHqYgjN0jU4wqbcYq7E+CQtuDAYk3CJLZlgP6HMFvKAAPCM6yzW9I76F4rsLr2 s+cG24rUWPLz8hIpPYLQGGoBU078ZRpOe/Tp0EVJ3LwNDdDk0gfsir9VJoO1qIT/ qKopOlzY9pU1UtnKsli2kYJ0DI4oP3ieVvCPSGRsCoXrtlFTvot3HTR+Ed4qqqxJ BJLeZEhC8wAm/g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:06 2025 by rpki-client