This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json) Hash identifier: 0RuH5CQdNZbY38UDA9wFCOby1k2w+QZdZNdf2wyqgK8= Subject key identifier: 2D:12:C5:F1:BF:8C:19:64:A1:F2:AB:87:F4:E7:7E:3A:BE:A3:CB:E4 Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Certificate serial: 019B1E73C69A9059972AD41EB2AB3181F333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft Manifest number: 177F Signing time: Sun 14 Dec 2025 20:01:02 +0000 Manifest this update: Sun 14 Dec 2025 20:01:02 +0000 Manifest next update: Mon 15 Dec 2025 20:01:02 +0000 Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: noLeYkb/xLPdskk+/STfT09H35TABdMFfu+tvnjtb+8=) 2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:c6:9a:90:59:97:2a:d4:1e:b2:ab:31:81:f3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Validity Not Before: Dec 14 20:01:02 2025 GMT Not After : Dec 15 20:01:02 2025 GMT Subject: CN=2d12c5f1bf8c1964a1f2ab87f4e77e3abea3cbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:96:ac:e8:53:88:b5:02:0e:f7:3d:db:09: 0c:04:32:f1:0a:d7:c0:91:5c:43:f5:56:df:97:0a: 4f:f6:23:71:49:4e:0a:83:2e:3f:31:e8:a1:8f:5b: b9:ad:4c:92:71:53:ff:94:fb:63:21:63:7b:1f:86: 8e:df:4b:df:99:63:d8:b0:a4:c1:c7:d5:49:7b:82: 9d:16:79:83:53:36:54:ce:e1:50:9d:4a:6f:d2:e7: 0c:6a:42:4c:bb:6a:c8:f4:f5:5d:47:2b:a6:0d:56: 40:52:7e:81:e6:66:99:c0:50:53:7b:c6:ed:16:7a: 05:87:2f:5a:6c:21:72:6b:15:b7:c9:bc:a3:70:87: 4d:58:e3:49:3d:db:dc:06:7b:90:10:2e:63:47:67: ab:11:ea:4b:24:60:ee:5d:f2:2d:42:f8:71:e3:41: 34:e5:14:5a:dc:23:f8:3d:56:9b:88:11:37:76:cc: 90:2e:b1:e3:36:0a:ea:d0:41:ee:19:18:45:5e:d4: 9e:3c:80:0e:0b:69:5b:ed:33:6d:4d:f6:dc:6c:0e: e4:96:b5:84:0d:2c:3d:c0:2b:e4:ae:41:21:92:07: 91:1d:28:a6:3d:0b:59:cb:93:cb:d7:26:a2:d9:43: b9:3d:6c:b0:3c:19:f8:5f:3d:dc:7a:aa:1a:cf:3e: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:12:C5:F1:BF:8C:19:64:A1:F2:AB:87:F4:E7:7E:3A:BE:A3:CB:E4 X509v3 Authority Key Identifier: keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5b:48:99:4a:94:90:cd:10:0c:62:46:97:89:8e:a2:c7:2b: 22:ca:44:af:4a:f4:0a:b3:06:75:44:fd:ca:b8:f4:5b:d7:0c: a4:ea:ac:86:6f:b3:44:24:cc:f2:27:93:a1:bf:df:f3:cf:c1: 78:f5:5e:38:25:f2:b2:4d:6f:6f:f9:b2:7e:b7:a7:5d:68:4c: 09:9f:04:fd:e6:e3:a1:fd:0b:02:f7:69:4a:e9:db:8c:e2:fe: a4:e8:4a:eb:8d:2b:2a:c5:dc:59:20:e7:32:f9:a2:29:26:40: dd:f4:45:c8:09:2f:b8:58:a7:8a:e3:a7:ad:38:22:02:5e:09: 1c:f2:73:e5:84:e1:b9:14:ac:21:dc:3b:ad:93:73:41:98:0d: 16:e2:61:75:f8:9a:1a:c4:98:be:42:91:9d:bd:e9:52:bb:95: eb:79:9a:f5:1e:0f:e9:51:37:85:a2:60:e6:a0:13:62:4b:08: 72:72:e5:af:d8:c7:da:8b:19:9c:64:f9:fe:30:74:6f:ad:50: 79:b8:1f:97:93:e8:8e:5f:ba:78:9b:08:42:33:c1:bf:5d:48: b1:a8:49:9e:29:9a:ca:95:cb:59:67:89:8a:5b:0b:c6:c4:bb: fd:0e:f2:78:a9:e6:d5:cc:e4:a9:22:d7:c0:c9:1f:cb:8f:52: db:a1:b8:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec8aakFmXKtQesqsxgfMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOWE0MGZjM2YzNTBhYmRhNTlkYmZjMDFjYTM3YTQ2ZDhk NzQ3NjQwHhcNMjUxMjE0MjAwMTAyWhcNMjUxMjE1MjAwMTAyWjAzMTEwLwYDVQQD EygyZDEyYzVmMWJmOGMxOTY0YTFmMmFiODdmNGU3N2UzYWJlYTNjYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqyWrOhTiLUCDvc92wkMBDLxCtfA kVxD9VbflwpP9iNxSU4Kgy4/Meihj1u5rUyScVP/lPtjIWN7H4aO30vfmWPYsKTB x9VJe4KdFnmDUzZUzuFQnUpv0ucMakJMu2rI9PVdRyumDVZAUn6B5maZwFBTe8bt FnoFhy9abCFyaxW3ybyjcIdNWONJPdvcBnuQEC5jR2erEepLJGDuXfItQvhx40E0 5RRa3CP4PVabiBE3dsyQLrHjNgrq0EHuGRhFXtSePIAOC2lb7TNtTfbcbA7klrWE DSw9wCvkrkEhkgeRHSimPQtZy5PL1yai2UO5PWywPBn4Xz3ceqoazz47/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0SxfG/jBlkofKrh/Tnfjq+o8vkMB8GA1UdIwQY MBaAFFuaQPw/NQq9pZ2/wByjekbY10dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjkt NzI1Mzc1MjZhZWUyLzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjktNzI1Mzc1MjZhZWUy LzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFtImUqU kM0QDGJGl4mOoscrIspEr0r0CrMGdUT9yrj0W9cMpOqshm+zRCTM8ieTob/f88/B ePVeOCXysk1vb/myfrenXWhMCZ8E/ebjof0LAvdpSunbjOL+pOhK640rKsXcWSDn MvmiKSZA3fRFyAkvuFiniuOnrTgiAl4JHPJz5YThuRSsIdw7rZNzQZgNFuJhdfia GsSYvkKRnb3pUruV63ma9R4P6VE3haJg5qATYksIcnLlr9jH2osZnGT5/jB0b61Q ebgfl5Pojl+6eJsIQjPBv11IsahJnimaypXLWWeJilsLxsS7/Q7yeKnm1czkqSLX wMkfy49S26G4eA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:37:13 2025 by rpki-client