This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft File: W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json) Hash identifier: F+ym9MTlVA833+l+xXAaoGv92qMN2r/XgQzCG6Ji524= Subject key identifier: BA:09:60:A2:CE:0D:74:54:E2:68:81:5E:A2:3C:A1:4C:B7:17:01:55 Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Certificate serial: 019B131454E7EB760E6C6DF550B606BC6D4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft Manifest number: 151F Signing time: Fri 12 Dec 2025 15:00:58 +0000 Manifest this update: Fri 12 Dec 2025 15:00:58 +0000 Manifest next update: Sat 13 Dec 2025 15:00:58 +0000 Files and hashes: 1: 279VdnG-Fdszjb2yG7-2IjnNQq8.roa (hash: 39BYbVFVCqd2qENpfGmBlifLRcfQzLv4w9dE1us6VMw=) 2: 4LSDpWlsgJw9Otx93_mKw6B9grg.roa (hash: c67VMb5sCTD5NQ5KlZtleOn3Nkqt4gilHv8oqn6VVoY=) 3: QZsEzF5Uanou3frIfzrz7sXtIzk.roa (hash: 6qhVEn0UXh14a1V5qFmAi7r1Lf/LN44JR4TpHEtpYIQ=) 4: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: xEI8HdfMseUupi/wsO1bwxXI3YptQGsQS/M1ftvl/9w=) 5: _AxdM0TapJRwZRPAoGLBTsCIVsg.roa (hash: XGaXRToDPIvjJqkgJCg3fbR7ABXKEIiZ37d2bopOgi8=) 6: aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa (hash: WYgPsctqzKEHGx9t7skC8EcDRaeZlFuUGl3x2x/2Veg=) 7: ckuQTVeOTWmVeOP4EBOPI4_kTkg.roa (hash: lbXsTVgXldq8a0VyZZLgKrRQ4BJoKPMcORX5A8N1vSY=) 8: zFUuUqldPrww63cIqo-XRanNcj0.roa (hash: HhvvF7xBmpx9/nrDHNfcu7tTXTmL5HjPzqI7CeF2/lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:14:54:e7:eb:76:0e:6c:6d:f5:50:b6:06:bc:6d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Validity Not Before: Dec 12 15:00:58 2025 GMT Not After : Dec 13 15:00:58 2025 GMT Subject: CN=ba0960a2ce0d7454e268815ea23ca14cb7170155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:da:4b:d5:51:02:47:d7:28:9d:da:74:a4: c5:a9:72:94:ca:f7:c5:43:32:4b:d2:83:cc:93:66: e2:42:6a:73:21:63:3a:a3:c0:28:d4:e2:50:f4:72: df:53:3e:60:16:99:58:83:c6:4a:66:07:6d:53:12: 94:64:55:38:43:ac:52:22:10:09:b7:a2:a9:9b:c4: f5:a4:39:67:4d:0d:96:e3:4f:50:9f:35:47:82:95: 41:6f:3d:44:ac:9a:f3:0d:fe:b7:d4:c9:7a:5a:0a: e0:fe:cd:bc:d3:93:1c:ba:f1:92:4c:cc:f6:b8:a8: cf:6a:b2:35:db:89:1b:12:48:e8:91:83:56:38:31: 61:d8:e8:13:06:90:9d:9b:24:d9:c8:da:ca:18:33: a4:aa:d4:c2:f0:a9:f3:d4:25:c4:c3:c3:4e:fd:9a: 0f:78:a7:67:ee:53:52:8d:04:85:2f:91:3f:6b:78: 9e:c8:02:c8:2a:91:57:e0:95:4c:57:4f:3d:78:aa: d6:9c:4c:eb:61:78:c1:d5:0e:1d:ad:ca:4a:18:66: 03:6e:d5:6f:8a:cf:79:cf:85:43:4a:d8:bd:59:9a: 82:fd:37:5e:0f:e6:58:82:c0:53:5b:71:96:f6:d1: 97:40:3e:e4:d7:2b:39:82:c2:c8:07:14:83:2a:66: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:60:A2:CE:0D:74:54:E2:68:81:5E:A2:3C:A1:4C:B7:17:01:55 X509v3 Authority Key Identifier: keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7e:79:72:4e:bc:92:8b:f8:3e:54:38:7f:cf:2c:ed:0a:58: c2:67:d0:02:0d:48:47:fc:5d:5f:99:cb:82:f3:d0:14:db:65: b1:a2:57:fe:57:3a:d1:9e:c9:20:91:0b:cd:c8:1a:ba:95:1e: bd:bd:01:f4:7e:c4:c4:a4:f8:82:04:f7:77:ce:f2:df:6d:c6: be:59:fe:c5:13:9e:e1:d8:24:82:c8:9b:e0:e7:55:c2:32:21: 4a:02:b6:ee:cc:29:a7:fd:e3:d7:f9:6a:3e:65:4b:49:b5:ab: c0:ed:fb:8c:ac:c5:91:33:71:3d:ff:e8:e1:db:ea:79:a3:3d: 27:48:25:dc:ea:26:bd:3d:4d:45:15:d6:19:f3:3e:99:2a:9e: e3:3b:03:f8:25:58:b0:e7:4d:27:ac:12:4f:19:a4:cb:17:d9: 47:6c:82:39:4c:80:3a:bc:2b:3c:45:71:de:80:1b:b7:45:3b: f0:89:79:d8:68:fb:d4:f2:2c:06:f5:cc:fe:d7:2f:69:da:a1: 8a:b0:3c:9c:2e:e8:0c:0e:e9:92:08:b5:2b:a8:0b:a0:db:58: 49:92:d7:ad:b9:42:f6:9b:1a:c2:f2:3d:eb:e1:d2:53:b8:f8: 17:58:47:e9:79:a1:a5:8b:a1:f3:2b:2b:38:f4:36:b2:bb:8d: 9c:55:18:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTFFTn63YObG31ULYGvG1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3 YjlmYzEwHhcNMjUxMjEyMTUwMDU4WhcNMjUxMjEzMTUwMDU4WjAzMTEwLwYDVQQD EyhiYTA5NjBhMmNlMGQ3NDU0ZTI2ODgxNWVhMjNjYTE0Y2I3MTcwMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dTaS9VRAkfXKJ3adKTFqXKUyvfF QzJL0oPMk2biQmpzIWM6o8Ao1OJQ9HLfUz5gFplYg8ZKZgdtUxKUZFU4Q6xSIhAJ t6Kpm8T1pDlnTQ2W409QnzVHgpVBbz1ErJrzDf631Ml6Wgrg/s2805McuvGSTMz2 uKjParI124kbEkjokYNWODFh2OgTBpCdmyTZyNrKGDOkqtTC8Knz1CXEw8NO/ZoP eKdn7lNSjQSFL5E/a3ieyALIKpFX4JVMV089eKrWnEzrYXjB1Q4drcpKGGYDbtVv is95z4VDSti9WZqC/TdeD+ZYgsBTW3GW9tGXQD7k1ys5gsLIBxSDKmbuSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoJYKLODXRU4miBXqI8oUy3FwFVMB8GA1UdIwQY MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt YTUyYTg3OTVkOTU2LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2 LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr355ck68 kov4PlQ4f88s7QpYwmfQAg1IR/xdX5nLgvPQFNtlsaJX/lc60Z7JIJELzcgaupUe vb0B9H7ExKT4ggT3d87y323Gvln+xROe4dgkgsib4OdVwjIhSgK27swpp/3j1/lq PmVLSbWrwO37jKzFkTNxPf/o4dvqeaM9J0gl3OomvT1NRRXWGfM+mSqe4zsD+CVY sOdNJ6wSTxmkyxfZR2yCOUyAOrwrPEVx3oAbt0U78Il52Gj71PIsBvXM/tcvadqh irA8nC7oDA7pkgi1K6gLoNtYSZLXrblC9psawvI96+HSU7j4F1hH6XmhpYuh8ysr OPQ2sruNnFUYDA== -----END CERTIFICATE-----Generated at Fri Dec 12 19:31:24 2025 by rpki-client