This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json) Hash identifier: NX++nE3idjpQsODvXDyAqCX+8lr5nxaC3cnnZwk8vs8= Subject key identifier: 57:13:C3:F0:75:96:45:6D:DF:E0:94:7B:55:2D:BD:2A:F5:31:43:33 Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Certificate serial: 019B1013939C27B36CC6FFD94DD9D9EA3A1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft Manifest number: 0F9F Signing time: Fri 12 Dec 2025 01:01:16 +0000 Manifest this update: Fri 12 Dec 2025 01:01:16 +0000 Manifest next update: Sat 13 Dec 2025 01:01:16 +0000 Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: qfhtBcU0dIJq3GCYVNFmgbnpZ56LorBm1UbvGU21q/c=) 2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:93:9c:27:b3:6c:c6:ff:d9:4d:d9:d9:ea:3a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Validity Not Before: Dec 12 01:01:16 2025 GMT Not After : Dec 13 01:01:16 2025 GMT Subject: CN=5713c3f07596456ddfe0947b552dbd2af5314333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:39:9d:28:3f:9a:1c:0e:dc:6b:7c:0e:7f: 3a:7a:1c:a6:d8:41:07:a1:25:8e:f4:29:b2:ce:9b: 77:0a:83:86:a3:54:cb:c9:bb:3e:58:28:4d:65:63: 0c:dd:9f:16:25:6a:81:d3:ca:2c:6f:db:33:a2:24: c0:1f:1f:b5:ed:07:89:89:b4:93:96:6e:fe:9e:c8: 92:70:68:17:3b:b2:3d:0f:59:70:23:08:7c:c5:96: 56:8a:e4:9c:d8:0a:1e:46:60:9b:56:97:1d:ba:20: 70:e6:62:b4:00:69:81:22:33:86:17:ca:57:0b:3b: 7f:f8:9e:15:c2:4e:bc:ec:ef:14:62:0b:b8:c9:40: 30:9a:2a:2a:fb:3e:a2:fc:5a:3e:66:df:b5:4f:86: c0:22:6f:f9:f1:16:92:7b:52:08:99:ac:61:2c:7e: 57:28:e5:41:f9:0e:69:98:ba:c6:27:bb:6d:2f:2c: cd:db:20:a5:70:b2:e1:a5:13:08:ac:55:20:c3:57: 3c:c3:0f:7f:e1:85:b5:0d:3a:6f:2e:eb:12:eb:08: 74:de:6d:e5:af:9c:64:8e:50:45:38:9a:b2:3c:e7: fe:ca:32:38:e2:7c:49:f1:3d:4f:52:ed:fc:f8:28: 6e:5d:98:95:43:a0:12:f5:3f:1b:ad:46:0e:e5:8e: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:C3:F0:75:96:45:6D:DF:E0:94:7B:55:2D:BD:2A:F5:31:43:33 X509v3 Authority Key Identifier: keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:de:40:19:70:fa:9a:85:40:47:bd:cc:a8:cb:b7:fb:35:04: f6:26:60:96:69:14:01:72:23:aa:7f:7c:3d:c2:a4:8d:6f:09: c6:fd:64:4d:1d:6e:2a:cc:09:1f:ab:30:8b:da:43:e3:14:21: 38:cb:2a:6b:a3:f5:a8:f6:d1:43:ea:c1:8e:fb:5c:35:fc:81: 7a:58:88:ab:01:62:ac:fd:b5:7f:70:73:72:6b:5c:7c:a4:6e: f4:18:35:3e:56:ba:7a:b7:8d:4f:8b:49:74:de:0a:78:87:ea: 27:40:e0:f6:f0:33:f7:c2:63:fb:90:25:14:38:48:92:b6:89: b6:32:56:6a:70:de:ca:f4:37:7e:da:11:38:54:0a:00:a1:0e: 2c:ce:39:77:fc:fd:e6:72:71:e6:df:3d:00:da:13:f1:13:43: 41:4b:dd:4d:77:ac:03:ea:00:5a:9d:4e:e4:bb:c9:5b:a0:04: dd:86:04:f4:b9:43:82:ab:86:0c:1f:a1:be:e8:eb:2b:65:cc: c0:e6:e4:72:2d:e2:53:bd:a4:dd:c5:53:56:34:fa:76:c8:59: e4:64:d7:11:67:c5:f9:a1:5a:b1:a5:b3:6a:d4:ec:2d:a6:d1: ca:de:44:11:76:95:1e:88:32:58:6c:3e:7f:b1:db:7b:7b:16: ca:48:bd:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE5OcJ7Nsxv/ZTdnZ6joaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw YTg3YTQwHhcNMjUxMjEyMDEwMTE2WhcNMjUxMjEzMDEwMTE2WjAzMTEwLwYDVQQD Eyg1NzEzYzNmMDc1OTY0NTZkZGZlMDk0N2I1NTJkYmQyYWY1MzE0MzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh85nSg/mhwO3Gt8Dn86ehym2EEH oSWO9Cmyzpt3CoOGo1TLybs+WChNZWMM3Z8WJWqB08osb9szoiTAHx+17QeJibST lm7+nsiScGgXO7I9D1lwIwh8xZZWiuSc2AoeRmCbVpcduiBw5mK0AGmBIjOGF8pX Czt/+J4Vwk687O8UYgu4yUAwmioq+z6i/Fo+Zt+1T4bAIm/58RaSe1IImaxhLH5X KOVB+Q5pmLrGJ7ttLyzN2yClcLLhpRMIrFUgw1c8ww9/4YW1DTpvLusS6wh03m3l r5xkjlBFOJqyPOf+yjI44nxJ8T1PUu38+ChuXZiVQ6AS9T8brUYO5Y7oLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcTw/B1lkVt3+CUe1UtvSr1MUMzMB8GA1UdIwQY MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANt5AGXD6 moVAR73MqMu3+zUE9iZglmkUAXIjqn98PcKkjW8Jxv1kTR1uKswJH6swi9pD4xQh OMsqa6P1qPbRQ+rBjvtcNfyBeliIqwFirP21f3BzcmtcfKRu9Bg1Pla6ereNT4tJ dN4KeIfqJ0Dg9vAz98Jj+5AlFDhIkraJtjJWanDeyvQ3ftoROFQKAKEOLM45d/z9 5nJx5t89ANoT8RNDQUvdTXesA+oAWp1O5LvJW6AE3YYE9LlDgquGDB+hvujrK2XM wObkci3iU72k3cVTVjT6dshZ5GTXEWfF+aFasaWzatTsLabRyt5EEXaVHogyWGw+ f7Hbe3sWyki9og== -----END CERTIFICATE-----Generated at Fri Dec 12 08:22:45 2025 by rpki-client