This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json) Hash identifier: v/pDe0M2oMMFv2W22NNnR20lamf9r/nqASpS69JdvaM= Subject key identifier: E5:A9:7C:C2:FF:D5:6D:09:22:F7:BD:37:6E:0B:EB:09:D7:A5:BF:53 Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b Certificate serial: 019B5A51AE90E365F7780D8D3D027FC6E26C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft Manifest number: 0304 Signing time: Fri 26 Dec 2025 11:01:01 +0000 Manifest this update: Fri 26 Dec 2025 11:01:01 +0000 Manifest next update: Sat 27 Dec 2025 11:01:01 +0000 Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=) 2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: MXak/yt0SIMI5m4Og9luNpMhWj3frxpwxeLFRLlT4sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ae:90:e3:65:f7:78:0d:8d:3d:02:7f:c6:e2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b Validity Not Before: Dec 26 11:01:01 2025 GMT Not After : Dec 27 11:01:01 2025 GMT Subject: CN=e5a97cc2ffd56d0922f7bd376e0beb09d7a5bf53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:83:43:3b:f9:6b:3d:22:61:9d:7b:1f:2e: a7:fb:fd:fa:5c:a7:72:cd:04:27:39:8e:2d:b4:4b: 93:4e:42:90:27:f3:8a:5b:32:c4:35:e3:df:12:19: be:47:9c:e8:b0:fa:14:7a:e4:ba:87:4f:6a:18:fe: 39:48:a6:f9:1f:ca:97:dd:f5:d6:93:7a:b4:4d:23: 5e:04:ac:e6:18:ec:7c:5e:8c:81:9d:55:86:e4:37: da:09:99:53:bb:af:cb:37:e0:5a:bd:06:c8:eb:aa: 8c:ee:96:8a:f3:c6:a5:28:27:3f:c2:a6:86:9b:41: 9b:54:da:59:fd:dd:75:95:12:7c:e8:fa:9c:48:cb: c9:f2:ef:cd:1c:a7:23:50:6a:22:96:20:55:78:fd: d1:71:b6:69:6d:f8:c5:62:c8:0f:c1:cc:f7:50:4b: f8:aa:26:85:e2:10:17:9b:2a:7a:05:ee:b3:64:d2: 59:e2:0d:36:d5:57:bf:64:f1:69:17:52:de:f6:5d: 98:33:53:18:d0:6f:f3:83:ac:14:30:f9:13:c8:e3: 8a:52:da:d2:b8:4b:c0:0d:4c:f2:98:8b:55:95:4d: 96:83:a9:97:22:08:b3:03:1b:1f:96:bd:61:06:e7: 88:e0:c9:1b:a0:e6:66:96:94:67:1d:0a:4c:b5:b4: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A9:7C:C2:FF:D5:6D:09:22:F7:BD:37:6E:0B:EB:09:D7:A5:BF:53 X509v3 Authority Key Identifier: keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:88:83:63:16:99:0e:2c:76:de:6c:be:a2:b0:c5:0e:14:da: 7d:bf:d7:1a:ef:5e:c8:8d:26:46:f3:15:9f:36:f4:df:ba:d9: fb:4a:69:e2:92:cd:7e:b0:d3:19:7f:09:ba:21:15:3d:ac:f3: 2e:4e:4f:05:fe:d8:55:6a:cd:23:33:09:24:ea:b1:76:18:d2: 61:40:10:30:5d:fd:31:df:37:1b:1a:a6:66:32:b9:ed:c3:f7: 90:b7:56:e8:38:29:c8:fb:ad:16:32:3b:21:20:cb:db:aa:f2: bb:75:9e:fd:d8:47:d1:99:4d:ab:6c:a6:87:f9:5a:57:86:a4: 23:a6:0c:36:84:a0:ec:1e:1f:2a:c9:1b:ca:ed:a7:56:08:8e: 43:b9:9d:19:70:3d:5a:cc:96:4a:28:ff:7e:57:6a:1e:0b:45: db:70:e0:58:e7:3d:16:a0:32:fe:d0:3e:45:ba:d9:9d:ac:bd: 72:61:34:0d:2e:5b:56:09:06:0b:ac:f8:16:bb:33:49:1a:96: ad:7e:b5:d6:9c:df:f8:8e:d0:ae:60:bb:7b:0c:e5:85:63:97: 51:58:9b:a4:1a:12:ff:62:24:8f:24:94:0c:94:59:ee:af:75: fc:87:04:9a:16:26:95:9d:98:25:d1:1e:77:f6:87:7d:b1:5e: d5:bc:59:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUa6Q42X3eA2NPQJ/xuJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNzk3ZmNkODQzM2IxZjQ4OWY4OTExOTQ4NjJmYzM2YmZi ZWY2NmIwHhcNMjUxMjI2MTEwMTAxWhcNMjUxMjI3MTEwMTAxWjAzMTEwLwYDVQQD EyhlNWE5N2NjMmZmZDU2ZDA5MjJmN2JkMzc2ZTBiZWIwOWQ3YTViZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO6DQzv5az0iYZ17Hy6n+/36XKdy zQQnOY4ttEuTTkKQJ/OKWzLENePfEhm+R5zosPoUeuS6h09qGP45SKb5H8qX3fXW k3q0TSNeBKzmGOx8XoyBnVWG5DfaCZlTu6/LN+BavQbI66qM7paK88alKCc/wqaG m0GbVNpZ/d11lRJ86PqcSMvJ8u/NHKcjUGoiliBVeP3RcbZpbfjFYsgPwcz3UEv4 qiaF4hAXmyp6Be6zZNJZ4g021Ve/ZPFpF1Le9l2YM1MY0G/zg6wUMPkTyOOKUtrS uEvADUzymItVlU2Wg6mXIgizAxsflr1hBueI4MkboOZmlpRnHQpMtbQU7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWpfML/1W0JIve9N24L6wnXpb9TMB8GA1UdIwQY MBaAFFt5f82EM7H0ifiRGUhi/Da/vvZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAt ZTU5NmU1MjRjYWJlLzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAtZTU5NmU1MjRjYWJl LzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIiDYxaZ Dix23my+orDFDhTafb/XGu9eyI0mRvMVnzb037rZ+0pp4pLNfrDTGX8JuiEVPazz Lk5PBf7YVWrNIzMJJOqxdhjSYUAQMF39Md83GxqmZjK57cP3kLdW6DgpyPutFjI7 ISDL26ryu3We/dhH0ZlNq2ymh/laV4akI6YMNoSg7B4fKskbyu2nVgiOQ7mdGXA9 WsyWSij/fldqHgtF23DgWOc9FqAy/tA+RbrZnay9cmE0DS5bVgkGC6z4FrszSRqW rX611pzf+I7QrmC7ewzlhWOXUVibpBoS/2IkjySUDJRZ7q91/IcEmhYmlZ2YJdEe d/aHfbFe1bxZKw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:03 2025 by rpki-client