This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json) Hash identifier: Y+R4bhWAw4rKp3PTpfZAsHrwjMAbXfAHDctM07zeHhw= Subject key identifier: 65:28:89:AB:FF:EB:80:58:A9:8B:4E:7C:6F:02:3E:58:47:CA:BA:2F Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a Certificate serial: 019B22BDFB8C0BEEDBA687048D30BBF1E648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft Manifest number: 1388 Signing time: Mon 15 Dec 2025 16:00:34 +0000 Manifest this update: Mon 15 Dec 2025 16:00:34 +0000 Manifest next update: Tue 16 Dec 2025 16:00:34 +0000 Files and hashes: 1: 4DaFRyhphaevZU2yeo88GTb2ZWE.roa (hash: OEDhk/DEbdvUjBCo9g+h/wGJyG5A2KruYkh8mbV9XYs=) 2: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: VYdujfC5YHKlNX6jdy1pBVcaTtPufuWSeZ1F7nmzbHU=) 3: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=) 4: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:bd:fb:8c:0b:ee:db:a6:87:04:8d:30:bb:f1:e6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a Validity Not Before: Dec 15 16:00:34 2025 GMT Not After : Dec 16 16:00:34 2025 GMT Subject: CN=652889abffeb8058a98b4e7c6f023e5847caba2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:fa:bb:93:21:21:8c:02:fb:67:09:59:cf: 92:9b:da:60:af:1b:84:21:ab:dd:12:0f:52:20:bf: 49:e7:10:d2:1b:7e:fa:d8:84:9a:ac:d2:e9:3a:e5: 5d:05:a3:68:66:9a:75:58:83:af:aa:fc:f2:17:07: 86:7b:7f:1f:22:a0:48:9b:d0:c3:b5:e3:eb:d6:ef: 9e:29:27:7d:b0:bb:b4:17:54:53:c5:bf:a8:7a:0c: 07:7a:4a:3b:cb:a7:14:aa:96:30:70:37:69:ff:5d: 9c:14:b5:f5:f4:34:69:41:55:dc:36:3d:0d:74:64: 9c:49:86:00:cc:98:19:5e:2b:6f:4e:1f:bd:eb:e0: be:bf:c9:b3:44:69:74:1b:84:55:a3:6e:4e:b2:a6: ef:b3:69:f7:26:5f:4e:e1:10:ec:6c:be:ad:49:90: 2a:bb:e1:9a:5d:2d:79:74:ea:de:3b:24:78:7f:35: 39:21:27:2e:76:d1:1f:33:62:bd:0f:80:6f:46:b2: f3:a4:72:9a:67:63:de:95:c9:e6:d8:68:ea:ff:d0: e7:df:1c:d9:6f:54:81:14:81:9f:53:63:59:e5:92: 5b:b7:84:83:80:4f:30:dc:72:10:82:51:1d:9b:10: d2:c4:f8:03:c9:54:89:e4:fc:05:50:b6:9d:bf:45: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:28:89:AB:FF:EB:80:58:A9:8B:4E:7C:6F:02:3E:58:47:CA:BA:2F X509v3 Authority Key Identifier: keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0b:02:cd:48:f3:70:ae:f6:4f:0a:7a:b2:92:ac:cc:17:94: f2:97:30:56:38:39:8f:2d:3c:f8:3f:63:2c:72:c2:c5:74:21: 58:dc:55:81:13:64:12:31:32:20:26:dc:eb:f5:0b:a6:38:e5: 76:03:6f:d0:61:7a:2c:2e:ba:23:a4:5f:cb:b5:e3:c9:f4:eb: 27:b2:f4:a3:f9:2b:01:55:ad:53:71:ff:bd:b8:45:c6:03:42: 1d:3c:bf:5a:bd:d6:7e:52:7d:18:52:4b:46:1f:c7:df:0b:5e: 4e:57:30:5a:89:ba:d2:e3:cf:73:26:c6:8f:3f:7c:68:1e:20: a0:42:21:d9:1d:98:6f:5e:99:a8:46:3a:37:c4:3d:2f:3b:6e: a5:9e:a9:70:45:e5:22:bd:c2:c2:76:07:b4:5d:d1:39:29:38: 42:eb:0b:06:db:13:f8:fa:de:1a:c6:41:6c:ea:08:5f:28:fa: 33:38:b8:18:ce:4b:7e:ce:74:cd:d4:d4:ac:8c:8d:e9:f7:6d: 4d:4a:94:25:41:2f:90:6f:65:3a:5a:c5:0f:a9:34:39:a3:4b: a1:f0:35:89:8b:a3:aa:4a:de:2a:91:59:bf:95:b5:04:fc:67: 1c:cc:ac:1b:0d:e4:2b:5d:05:af:5b:38:7a:bc:31:81:fb:52: 1c:2a:ce:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivfuMC+7bpocEjTC78eZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYjFjNTcwNTVjMjlkNjY5ZjI4OWE5ZjY4ZjM5MjgyMzk0 MjEzMmEwHhcNMjUxMjE1MTYwMDM0WhcNMjUxMjE2MTYwMDM0WjAzMTEwLwYDVQQD Eyg2NTI4ODlhYmZmZWI4MDU4YTk4YjRlN2M2ZjAyM2U1ODQ3Y2FiYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yf6u5MhIYwC+2cJWc+Sm9pgrxuE IavdEg9SIL9J5xDSG3762ISarNLpOuVdBaNoZpp1WIOvqvzyFweGe38fIqBIm9DD tePr1u+eKSd9sLu0F1RTxb+oegwHeko7y6cUqpYwcDdp/12cFLX19DRpQVXcNj0N dGScSYYAzJgZXitvTh+96+C+v8mzRGl0G4RVo25Osqbvs2n3Jl9O4RDsbL6tSZAq u+GaXS15dOreOyR4fzU5IScudtEfM2K9D4BvRrLzpHKaZ2Pelcnm2Gjq/9Dn3xzZ b1SBFIGfU2NZ5ZJbt4SDgE8w3HIQglEdmxDSxPgDyVSJ5PwFULadv0XKywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUoiav/64BYqYtOfG8CPlhHyrovMB8GA1UdIwQY MBaAFFuxxXBVwp1mnyian2jzkoI5QhMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2Yt NWNlYWUxOWY5NGY5LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2YtNWNlYWUxOWY5NGY5 LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAsCzUjz cK72Twp6spKszBeU8pcwVjg5jy08+D9jLHLCxXQhWNxVgRNkEjEyICbc6/ULpjjl dgNv0GF6LC66I6Rfy7XjyfTrJ7L0o/krAVWtU3H/vbhFxgNCHTy/Wr3WflJ9GFJL Rh/H3wteTlcwWom60uPPcybGjz98aB4goEIh2R2Yb16ZqEY6N8Q9LztupZ6pcEXl Ir3CwnYHtF3ROSk4QusLBtsT+PreGsZBbOoIXyj6Mzi4GM5Lfs50zdTUrIyN6fdt TUqUJUEvkG9lOlrFD6k0OaNLofA1iYujqkreKpFZv5W1BPxnHMysGw3kK10Fr1s4 erwxgftSHCrOlg== -----END CERTIFICATE-----Generated at Mon Dec 15 21:54:32 2025 by rpki-client