This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft File: W5Mah05ojyfJWsrY29Md9pjyEX0.mft (raw, json) Hash identifier: 0m5HXAvlWfLyseZuKBDtbfVmlTa4/OoWZ/Xb6kUhh/w= Subject key identifier: 3F:4C:F3:4B:33:F0:2F:60:6D:D3:7C:09:D1:79:8F:62:01:08:74:F2 Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D Certificate issuer: /CN=5b931a874e688f27c95acad8dbd31df698f2117d Certificate serial: 019B5A5196980BE5CD46E7B0D8066E3CE14C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft Manifest number: 01A7 Signing time: Fri 26 Dec 2025 11:00:54 +0000 Manifest this update: Fri 26 Dec 2025 11:00:54 +0000 Manifest next update: Sat 27 Dec 2025 11:00:54 +0000 Files and hashes: 1: T_aE1VBzRFBW86cu7jRpCvqMP_0.roa (hash: Br23NBG7MwrWwFTa8s2oq/DVFkGOhwRXNYpcFdJ00mE=) 2: W5Mah05ojyfJWsrY29Md9pjyEX0.crl (hash: o/IXt9YYZh5nPw+1TJ9Fe+nMusP+qns8gV6AtNOLIVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:96:98:0b:e5:cd:46:e7:b0:d8:06:6e:3c:e1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d Validity Not Before: Dec 26 11:00:54 2025 GMT Not After : Dec 27 11:00:54 2025 GMT Subject: CN=3f4cf34b33f02f606dd37c09d1798f62010874f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:49:e1:16:f5:cc:ef:f6:8a:7a:c7:3c:ea: 92:eb:9e:08:11:7a:8d:8e:90:3d:df:00:b6:10:d8: d4:cf:74:b5:17:95:a6:5b:80:a0:97:57:e3:4d:98: e9:3f:56:85:27:7c:25:8d:fb:fd:fb:b6:4f:4a:23: 43:5e:e7:c1:ab:27:2c:08:f2:df:73:7b:bf:a9:0b: 54:d5:b4:7a:31:c2:78:e6:00:77:12:bb:c1:79:ff: ef:31:8a:2a:4d:db:2f:fc:24:3b:bc:29:1e:2c:06: 95:1c:4e:ba:5e:76:cb:4e:8c:a0:53:4e:eb:cd:87: 62:4f:a2:a1:d9:d1:35:b9:8a:d2:8b:4a:db:ea:a6: 9c:f0:16:ce:ef:ca:83:ae:5f:0a:3d:76:d4:64:dd: 4e:71:b9:3d:d2:c7:15:a7:5f:c9:75:75:76:7d:d7: 1a:0f:6c:af:b7:0c:3c:5f:6f:dc:77:ba:f2:d3:e6: c0:34:53:f5:4f:3a:31:05:a1:b0:5a:94:bc:25:26: 99:3c:a8:87:d1:07:a8:ff:13:c1:f6:f4:4b:74:f7: 5f:25:6b:65:22:51:d3:19:00:81:f0:4a:46:ef:a8: 88:7d:48:f6:ed:f3:34:f7:70:3d:1a:09:04:3d:0b: 52:31:70:1c:f7:62:8b:1a:de:77:9f:8d:44:54:41: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4C:F3:4B:33:F0:2F:60:6D:D3:7C:09:D1:79:8F:62:01:08:74:F2 X509v3 Authority Key Identifier: keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a0:fa:b4:e7:71:73:bc:cf:4e:2f:d9:a8:b6:d9:7f:da:95: 8e:7a:a4:b7:a1:67:45:81:ef:6f:30:f4:1f:3d:d6:7c:93:b0: 17:e1:83:d6:91:66:0f:b7:fc:b8:17:76:63:5e:9a:b4:8f:89: 0e:c4:87:a8:80:e8:cf:dc:4d:d1:a0:65:9b:95:63:e1:76:3b: d4:ec:62:b0:a3:1b:77:9b:98:3c:eb:36:8a:37:b0:19:14:3f: af:d1:c3:e3:a6:26:5c:87:0c:00:71:60:50:19:fd:a5:d2:6e: 0e:d4:5a:da:a9:a2:cc:c3:e1:6a:2b:a0:52:42:d7:1e:96:18: 6f:2c:34:51:f4:47:77:56:26:87:88:67:b1:db:2d:37:70:52: cb:ed:b5:dd:79:43:a7:41:67:b8:ef:44:8e:fe:31:d9:4d:77: ac:5a:96:4d:9b:1b:8b:2c:26:ab:42:56:65:26:f2:c7:d0:8c: f1:b0:7a:0e:d4:32:b5:0a:f0:1f:ff:1f:ee:a1:61:25:07:d5: 41:ce:a4:cf:ef:0c:52:4d:b2:7a:d0:9d:e0:9a:87:4c:38:0d: e7:ba:49:3c:b4:61:ec:3e:98:7f:e4:31:ba:73:77:4d:6c:f2: 2d:fc:09:1e:06:65:7c:b8:38:cf:af:30:da:ab:d6:03:54:38: 6a:d7:8c:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZaYC+XNRuew2AZuPOFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOTMxYTg3NGU2ODhmMjdjOTVhY2FkOGRiZDMxZGY2OThm MjExN2QwHhcNMjUxMjI2MTEwMDU0WhcNMjUxMjI3MTEwMDU0WjAzMTEwLwYDVQQD EygzZjRjZjM0YjMzZjAyZjYwNmRkMzdjMDlkMTc5OGY2MjAxMDg3NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHZJ4Rb1zO/2inrHPOqS654IEXqN jpA93wC2ENjUz3S1F5WmW4Cgl1fjTZjpP1aFJ3wljfv9+7ZPSiNDXufBqycsCPLf c3u/qQtU1bR6McJ45gB3ErvBef/vMYoqTdsv/CQ7vCkeLAaVHE66XnbLToygU07r zYdiT6Kh2dE1uYrSi0rb6qac8BbO78qDrl8KPXbUZN1Ocbk90scVp1/JdXV2fdca D2yvtww8X2/cd7ry0+bANFP1TzoxBaGwWpS8JSaZPKiH0Qeo/xPB9vRLdPdfJWtl IlHTGQCB8EpG76iIfUj27fM093A9GgkEPQtSMXAc92KLGt53n41EVEEntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9M80sz8C9gbdN8CdF5j2IBCHTyMB8GA1UdIwQY MBaAFFuTGodOaI8nyVrK2NvTHfaY8hF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lZjBlZTQtYTM5OC00ZWVjLTk1Mjkt OWFlNmE2MWEzNjFkLzEvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lZjBlZTQtYTM5OC00ZWVjLTk1MjktOWFlNmE2MWEzNjFk LzEvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaD6tOdx c7zPTi/ZqLbZf9qVjnqkt6FnRYHvbzD0Hz3WfJOwF+GD1pFmD7f8uBd2Y16atI+J DsSHqIDoz9xN0aBlm5Vj4XY71OxisKMbd5uYPOs2ijewGRQ/r9HD46YmXIcMAHFg UBn9pdJuDtRa2qmizMPhaiugUkLXHpYYbyw0UfRHd1Ymh4hnsdstN3BSy+213XlD p0FnuO9Ejv4x2U13rFqWTZsbiywmq0JWZSbyx9CM8bB6DtQytQrwH/8f7qFhJQfV Qc6kz+8MUk2yetCd4JqHTDgN57pJPLRh7D6Yf+QxunN3TWzyLfwJHgZlfLg4z68w 2qvWA1Q4ateMzQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:01 2025 by rpki-client