This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json) Hash identifier: BuU8I/9Ak7T0+X5Et6Iorfh9xSvLfhz7yPkfkPcNTi4= Subject key identifier: AC:EB:7F:D9:1A:8D:EC:58:C8:6F:8A:86:FB:69:45:B7:C2:2C:65:47 Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76 Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976 Certificate serial: 019B30E80343185C63C5C77268B90FBB7493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 10:01:10 +0000 Manifest this update: Thu 18 Dec 2025 10:01:10 +0000 Manifest next update: Fri 19 Dec 2025 10:01:10 +0000 Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: p2rgOsX1RXpu6BhCM5S7vlH9Fr8fv08ajqow+c74i7k=) 2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=) 3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:03:43:18:5c:63:c5:c7:72:68:b9:0f:bb:74:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976 Validity Not Before: Dec 18 10:01:10 2025 GMT Not After : Dec 19 10:01:10 2025 GMT Subject: CN=aceb7fd91a8dec58c86f8a86fb6945b7c22c6547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:a8:55:5c:81:53:39:e6:26:eb:38:f9:e5: 77:d3:49:ca:03:b3:01:66:72:51:fd:71:3e:a4:32: a7:5a:78:ed:51:cd:f8:68:91:c6:0b:68:f8:e5:66: 52:7a:7b:ad:65:62:2b:7b:db:aa:1f:42:74:62:cf: 87:b4:8a:f2:f3:19:1d:00:92:b4:cc:41:db:39:db: c9:7d:ef:08:d1:b8:28:d4:a2:ce:3d:aa:3d:75:12: 4c:ac:04:0b:7c:3f:8c:10:24:d7:bd:6a:73:75:05: d1:7f:ee:43:56:0b:84:78:b5:db:84:08:ef:56:d5: 6f:dc:08:83:03:50:6f:55:f2:bb:69:66:9b:5b:e6: d0:bb:dd:bf:7d:91:f9:88:0b:4a:6f:b1:48:4f:e0: de:32:05:28:66:05:78:f3:3a:df:6d:32:d3:83:3a: 09:5f:f8:e4:52:1a:7a:08:dd:14:78:5c:93:73:ba: 33:35:30:ab:b4:ff:3b:ca:64:16:9c:0d:4a:ca:8f: cb:55:a7:0f:99:bd:27:36:e9:32:f9:0b:a3:bf:62: 55:e6:49:66:0c:2b:e4:fd:38:69:00:5b:d8:df:94: 35:70:a1:82:a0:fe:e6:03:e8:60:53:7f:07:a5:45: 04:7b:36:2d:fc:7f:39:5f:da:53:f5:71:17:db:49: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EB:7F:D9:1A:8D:EC:58:C8:6F:8A:86:FB:69:45:B7:C2:2C:65:47 X509v3 Authority Key Identifier: keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ea:13:9e:27:68:e1:ab:12:b2:8c:a1:69:45:bf:89:ac:bd: 02:27:07:c5:9c:33:f4:1b:f2:f1:bb:70:16:39:1f:65:19:97: fb:4b:dd:4b:64:41:7b:95:b4:c7:93:36:8d:e3:ee:e2:82:9a: 53:d1:d5:89:c1:ac:79:9b:9e:5e:e7:51:d8:a5:d0:9c:95:98: 8d:85:59:79:97:42:e3:e5:74:01:0f:69:f7:fd:3e:57:e8:ad: 60:6e:d3:3a:c2:69:fd:2f:0c:49:b3:80:6d:ae:c9:54:09:d0: d3:a2:c2:2a:3e:bb:26:87:4b:17:91:a2:87:3c:f5:07:15:45: 41:15:36:7e:cb:ff:91:67:ec:96:2e:cf:6e:33:ce:42:7d:00: 08:5e:ef:7b:f2:6e:6b:e8:de:52:0e:f2:0e:7e:00:d6:b0:bf: fb:de:e1:57:3c:94:be:95:8b:dd:b9:d7:28:86:ad:62:fc:b3: 8f:24:51:7a:bc:f5:29:88:37:35:ff:df:a3:dd:d3:47:af:8e: 8f:68:33:3e:4e:45:60:2c:7b:63:ed:b1:5f:73:a4:fa:b3:75: 3a:41:4f:1f:22:82:11:fe:34:21:69:73:ee:cf:78:bc:df:84: c3:ba:94:d5:48:f4:a8:a6:34:25:c8:48:d0:02:fe:9b:84:71: e4:e5:ab:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ANDGFxjxcdyaLkPu3STMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmZhNjY5MDk5NzQxMmU3MTY2MTZjODFlNGY3YzA4NzVm ZmQ5NzYwHhcNMjUxMjE4MTAwMTEwWhcNMjUxMjE5MTAwMTEwWjAzMTEwLwYDVQQD EyhhY2ViN2ZkOTFhOGRlYzU4Yzg2ZjhhODZmYjY5NDViN2MyMmM2NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlKoVVyBUznmJus4+eV300nKA7MB ZnJR/XE+pDKnWnjtUc34aJHGC2j45WZSenutZWIre9uqH0J0Ys+HtIry8xkdAJK0 zEHbOdvJfe8I0bgo1KLOPao9dRJMrAQLfD+MECTXvWpzdQXRf+5DVguEeLXbhAjv VtVv3AiDA1BvVfK7aWabW+bQu92/fZH5iAtKb7FIT+DeMgUoZgV48zrfbTLTgzoJ X/jkUhp6CN0UeFyTc7ozNTCrtP87ymQWnA1Kyo/LVacPmb0nNuky+Qujv2JV5klm DCvk/ThpAFvY35Q1cKGCoP7mA+hgU38HpUUEezYt/H85X9pT9XEX20mSwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzrf9kajexYyG+KhvtpRbfCLGVHMB8GA1UdIwQY MBaAFFtvpmkJl0EucWYWyB5PfAh1/9l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTct MTJhZDE0NjY1NWNlLzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTctMTJhZDE0NjY1NWNl LzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuoTnido 4asSsoyhaUW/iay9AicHxZwz9Bvy8btwFjkfZRmX+0vdS2RBe5W0x5M2jePu4oKa U9HVicGseZueXudR2KXQnJWYjYVZeZdC4+V0AQ9p9/0+V+itYG7TOsJp/S8MSbOA ba7JVAnQ06LCKj67JodLF5Gihzz1BxVFQRU2fsv/kWfsli7PbjPOQn0ACF7ve/Ju a+jeUg7yDn4A1rC/+97hVzyUvpWL3bnXKIatYvyzjyRRerz1KYg3Nf/fo93TR6+O j2gzPk5FYCx7Y+2xX3Ok+rN1OkFPHyKCEf40IWlz7s94vN+Ew7qU1Uj0qKY0JchI 0AL+m4Rx5OWrHg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:54:25 2025 by rpki-client