This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft File: w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json) Hash identifier: a1rrZdL5Y0T5DeVg0lSYu7IUoPZ2iy1CeoKlQ/b//O4= Subject key identifier: 60:B5:84:C8:BA:7E:82:DD:45:2C:C9:F6:B9:C6:9A:94:15:58:B3:B3 Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d Certificate serial: 019B348D5A4F925AC48515D86061ADF0C82A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft Manifest number: 0852 Signing time: Fri 19 Dec 2025 03:00:37 +0000 Manifest this update: Fri 19 Dec 2025 03:00:37 +0000 Manifest next update: Sat 20 Dec 2025 03:00:37 +0000 Files and hashes: 1: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: P2q4mfInVX+QQwaAtLVhlYz9VsI+PZ+f2slril4frJ8=) 2: yO9sM3Dqyygq-N46b0jWKjNmuu4.roa (hash: ZYzYqF0JFtlb4C5F4uKW1WdeJkwaMXC9t3i6JUhvzN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:5a:4f:92:5a:c4:85:15:d8:60:61:ad:f0:c8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d Validity Not Before: Dec 19 03:00:37 2025 GMT Not After : Dec 20 03:00:37 2025 GMT Subject: CN=60b584c8ba7e82dd452cc9f6b9c69a941558b3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:dc:06:bd:d5:08:d5:01:64:0e:ea:83:56: 3e:af:0a:a3:bc:68:45:42:bc:c8:f2:26:78:37:56: 78:70:22:6d:4f:71:94:ca:db:2b:94:f6:01:43:b2: 5c:1b:7b:d6:25:f8:30:51:88:8b:29:fc:96:be:4a: 09:80:da:6d:13:c1:3b:ca:6c:6a:b4:35:ea:f0:e1: 87:1e:5c:d3:3a:5e:99:a2:d6:b2:8e:b0:df:80:72: 9c:74:d7:79:d6:f6:1c:26:e5:1e:a0:2c:95:64:87: 3d:f4:47:94:a4:4b:4f:23:bd:48:50:dc:95:ce:c5: 85:c5:58:f3:db:a3:0e:b6:32:5a:42:89:33:7a:1f: 5b:85:17:e1:38:30:7a:f0:3d:70:90:25:5c:e5:6f: eb:a8:b2:16:9b:51:96:c5:d7:14:83:fe:05:a8:47: d1:f5:ad:50:69:f3:75:f0:f3:77:ed:18:e9:97:f9: cf:be:c5:64:7e:6e:27:ac:e4:4d:92:cb:96:5c:f3: 66:99:12:6d:8d:bf:40:cc:21:87:42:d1:8b:e8:77: 95:71:09:b2:98:b6:1d:ea:1d:a8:ed:cd:4c:e4:0f: 87:b0:62:90:61:0a:85:91:f9:23:7b:e4:a8:2c:df: 28:33:ff:16:84:c4:12:70:87:3a:e8:50:42:f1:c2: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:84:C8:BA:7E:82:DD:45:2C:C9:F6:B9:C6:9A:94:15:58:B3:B3 X509v3 Authority Key Identifier: keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bb:10:0b:70:ac:ed:36:3f:ea:2a:67:05:0c:1c:b3:8f:92: b1:65:74:60:78:84:11:c2:ad:36:52:fc:1c:d1:9d:c4:c2:c2: db:e1:e8:93:d1:a0:18:ce:00:ef:86:ff:f4:c5:20:16:aa:8d: 23:f9:ed:67:59:15:37:68:d2:f5:ef:1f:ad:9e:77:88:48:2d: 5f:fb:a7:1b:69:ea:76:57:25:3c:fc:53:f1:20:b2:7b:ac:fe: 00:aa:b8:cb:59:67:63:2d:e6:c2:d8:ee:3a:b4:77:a4:0f:4b: 18:64:68:0b:5c:b3:50:04:2a:c2:c2:94:3d:7a:50:c4:51:f8: 2c:33:c1:cf:3a:11:32:01:aa:ae:91:92:cd:5d:18:a2:0b:0b: e8:ea:ba:18:e5:bf:a2:7b:2a:4b:46:f8:f0:e7:32:78:b3:49: a1:83:b5:ac:d0:d0:c9:d1:62:bf:ac:50:39:ba:8a:38:71:ad: b8:30:56:a0:42:fb:11:81:eb:70:aa:70:8a:6a:ec:9d:bd:72: 86:5a:63:b0:c4:90:13:37:83:c3:d0:5b:c1:1e:3e:78:a1:36: 9f:a7:6b:c0:72:07:d6:41:34:de:74:fd:30:0d:aa:48:22:37: 61:92:43:ac:b9:98:70:31:e9:1f:a7:88:0a:19:b6:1b:cb:a1: e0:dc:ff:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jVpPklrEhRXYYGGt8MgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOWJjMzBhNzQ4OTYwYjIyN2ExYmYyNjIxNjA2N2VkZDA1 YzFhN2QwHhcNMjUxMjE5MDMwMDM3WhcNMjUxMjIwMDMwMDM3WjAzMTEwLwYDVQQD Eyg2MGI1ODRjOGJhN2U4MmRkNDUyY2M5ZjZiOWM2OWE5NDE1NThiM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbXcBr3VCNUBZA7qg1Y+rwqjvGhF QrzI8iZ4N1Z4cCJtT3GUytsrlPYBQ7JcG3vWJfgwUYiLKfyWvkoJgNptE8E7ymxq tDXq8OGHHlzTOl6ZotayjrDfgHKcdNd51vYcJuUeoCyVZIc99EeUpEtPI71IUNyV zsWFxVjz26MOtjJaQokzeh9bhRfhODB68D1wkCVc5W/rqLIWm1GWxdcUg/4FqEfR 9a1QafN18PN37Rjpl/nPvsVkfm4nrORNksuWXPNmmRJtjb9AzCGHQtGL6HeVcQmy mLYd6h2o7c1M5A+HsGKQYQqFkfkje+SoLN8oM/8WhMQScIc66FBC8cJrhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGC1hMi6foLdRSzJ9rnGmpQVWLOzMB8GA1UdIwQY MBaAFMObwwp0iWCyJ6G/JiFgZ+3QXBp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgt OTIwOWY3YjdlZjgxLzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgtOTIwOWY3YjdlZjgx LzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrsQC3Cs 7TY/6ipnBQwcs4+SsWV0YHiEEcKtNlL8HNGdxMLC2+Hok9GgGM4A74b/9MUgFqqN I/ntZ1kVN2jS9e8frZ53iEgtX/unG2nqdlclPPxT8SCye6z+AKq4y1lnYy3mwtju OrR3pA9LGGRoC1yzUAQqwsKUPXpQxFH4LDPBzzoRMgGqrpGSzV0YogsL6Oq6GOW/ onsqS0b48OcyeLNJoYO1rNDQydFiv6xQObqKOHGtuDBWoEL7EYHrcKpwimrsnb1y hlpjsMSQEzeDw9BbwR4+eKE2n6drwHIH1kE03nT9MA2qSCI3YZJDrLmYcDHpH6eI Chm2G8uh4Nz/HQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:01 2025 by rpki-client