This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json) Hash identifier: gbvV/rNiuPhtsww5Y54zSD9mlCGtwQ2/XmzHwTcmYFI= Subject key identifier: 21:C4:AA:91:53:7A:AE:1C:BC:FB:40:22:FD:47:2F:AA:98:14:2B:24 Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71 Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71 Certificate serial: 019B38A23323A1F02A5E795C38F52A27ADE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft Manifest number: 0D28 Signing time: Fri 19 Dec 2025 22:01:52 +0000 Manifest this update: Fri 19 Dec 2025 22:01:52 +0000 Manifest next update: Sat 20 Dec 2025 22:01:52 +0000 Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=) 2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: unm+eVgPiGLXQ+vBt+iM5H2NxbF9IxwUVIMAqpFAhlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:33:23:a1:f0:2a:5e:79:5c:38:f5:2a:27:ad:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71 Validity Not Before: Dec 19 22:01:52 2025 GMT Not After : Dec 20 22:01:52 2025 GMT Subject: CN=21c4aa91537aae1cbcfb4022fd472faa98142b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:c8:c0:5b:66:fb:84:03:1f:d1:49:13:45: 9e:27:88:09:e0:2d:bf:bc:8b:17:54:bd:6b:fb:f1: f7:8e:4e:5a:84:b0:b2:dd:75:d2:32:fb:ac:37:79: 1a:5b:c7:fd:45:a2:59:b6:a9:95:50:5f:6e:61:82: 3f:63:77:5a:5d:d2:35:cd:38:a8:2d:9f:c1:20:c7: 05:5a:c6:8a:8f:48:7f:74:68:b0:2d:63:5a:6e:6b: 5c:c5:b0:87:12:84:93:79:7d:00:68:b7:8f:5b:61: 67:d2:a6:9e:be:f9:2c:5b:b0:4e:f9:ad:01:fb:e9: a5:6a:d1:ed:9d:ba:5a:c7:c7:ce:58:53:02:26:77: 25:67:62:5c:f4:98:08:12:13:fb:f1:95:ef:d7:e0: 4a:9a:e4:df:c5:3f:54:91:5c:dd:a2:ab:0e:12:49: 69:20:fd:5c:cc:d3:ad:6f:d4:a8:81:42:21:9b:2a: b7:40:7a:d8:42:8e:a2:8d:e9:cb:13:0c:be:cd:2e: b6:83:5c:78:cd:b9:1b:74:16:1e:3f:9e:62:72:9d: a9:f9:b7:db:4c:6b:ef:8c:86:f3:a6:83:73:56:10: 6f:94:c0:66:53:c2:b3:45:6c:99:25:82:45:66:2e: a5:e5:6e:4c:0e:ac:e7:b8:8d:26:b2:fd:6e:36:d7: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C4:AA:91:53:7A:AE:1C:BC:FB:40:22:FD:47:2F:AA:98:14:2B:24 X509v3 Authority Key Identifier: keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:36:7d:73:92:4c:9e:ff:ea:31:c9:b8:df:21:e8:97:6b:23: 60:f6:a9:7a:cc:c4:dc:31:50:80:89:7b:da:4f:ce:32:78:3d: 0f:a0:42:b2:59:b3:33:e1:a9:49:5a:e7:39:83:68:8f:2e:ad: e3:a6:85:93:fd:8e:b1:94:5a:a9:ea:fe:1a:4c:96:75:b5:6f: 99:28:0a:dd:88:71:81:6d:4c:d4:69:ec:47:44:0d:6c:71:0d: c5:93:36:1c:85:40:a9:f8:ed:8e:39:52:4a:d1:17:3e:aa:73: de:f9:a3:12:b0:b3:36:43:a4:dd:b1:35:d6:3f:cf:46:9d:43: 72:67:5f:9f:6e:83:30:7e:ed:e4:e1:d3:f8:11:02:84:18:27: 79:8c:cf:e2:87:ca:16:59:b6:30:1a:27:1c:fe:5c:ef:ac:1b: a4:a6:5d:00:fb:be:1b:6b:df:a6:28:42:06:f1:a2:07:12:ff: d7:02:7a:33:24:f1:4b:e0:87:99:91:ff:8c:92:1d:28:9f:d5: 4a:b0:a6:0a:2b:a2:54:d1:00:be:fb:6d:72:75:88:86:7e:e7: e4:4a:22:fa:98:39:b0:af:c8:03:41:d0:70:b6:e3:b9:94:eb: c2:7d:7b:7b:50:a7:f9:b7:54:4d:0c:4e:2e:41:fc:e1:4a:50: a6:39:b1:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ojMjofAqXnlcOPUqJ63hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNGI0NTJkYmZkNGM3MDRiZGE5Y2MyYTRlOTE1ZjQ3MTky YTdmNzEwHhcNMjUxMjE5MjIwMTUyWhcNMjUxMjIwMjIwMTUyWjAzMTEwLwYDVQQD EygyMWM0YWE5MTUzN2FhZTFjYmNmYjQwMjJmZDQ3MmZhYTk4MTQyYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgPIwFtm+4QDH9FJE0WeJ4gJ4C2/ vIsXVL1r+/H3jk5ahLCy3XXSMvusN3kaW8f9RaJZtqmVUF9uYYI/Y3daXdI1zTio LZ/BIMcFWsaKj0h/dGiwLWNabmtcxbCHEoSTeX0AaLePW2Fn0qaevvksW7BO+a0B ++mlatHtnbpax8fOWFMCJnclZ2Jc9JgIEhP78ZXv1+BKmuTfxT9UkVzdoqsOEklp IP1czNOtb9SogUIhmyq3QHrYQo6ijenLEwy+zS62g1x4zbkbdBYeP55icp2p+bfb TGvvjIbzpoNzVhBvlMBmU8KzRWyZJYJFZi6l5W5MDqznuI0msv1uNtdYBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHEqpFTeq4cvPtAIv1HL6qYFCskMB8GA1UdIwQY MBaAFFtLRS2/1McEvanMKk6RX0cZKn9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgt ZTU4ZWRjNDJmMDRjLzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgtZTU4ZWRjNDJmMDRj LzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDZ9c5JM nv/qMcm43yHol2sjYPapeszE3DFQgIl72k/OMng9D6BCslmzM+GpSVrnOYNojy6t 46aFk/2OsZRaqer+GkyWdbVvmSgK3YhxgW1M1GnsR0QNbHENxZM2HIVAqfjtjjlS StEXPqpz3vmjErCzNkOk3bE11j/PRp1Dcmdfn26DMH7t5OHT+BEChBgneYzP4ofK Flm2MBonHP5c76wbpKZdAPu+G2vfpihCBvGiBxL/1wJ6MyTxS+CHmZH/jJIdKJ/V SrCmCiuiVNEAvvttcnWIhn7n5Eoi+pg5sK/IA0HQcLbjuZTrwn17e1Cn+bdUTQxO LkH84UpQpjmx5w== -----END CERTIFICATE-----Generated at Sat Dec 20 03:04:35 2025 by rpki-client