This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json) Hash identifier: 0ETuZpSnS95CoXDen2YxbkFEv8T8JTjoCgvIab2XszY= Subject key identifier: 8E:33:B8:E9:78:67:70:E5:C4:D0:B3:DA:C4:29:D6:92:8E:A8:57:85 Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35 Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35 Certificate serial: 019B191649062D8A17C051E8AB42F657B17D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft Manifest number: 0538 Signing time: Sat 13 Dec 2025 19:00:49 +0000 Manifest this update: Sat 13 Dec 2025 19:00:49 +0000 Manifest next update: Sun 14 Dec 2025 19:00:49 +0000 Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: lH8BhILIkBO3QOA6n9W9ve1Rq9rgyiUPsAFc7mrb3GY=) 2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=) 3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=) 4: yFZR2dMAN5V-U5yvB8zako3sBAI.roa (hash: Su1HZF/T/54lCtr91bZGjGbSwHR7/PFdtQAeMPFLxmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:49:06:2d:8a:17:c0:51:e8:ab:42:f6:57:b1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35 Validity Not Before: Dec 13 19:00:49 2025 GMT Not After : Dec 14 19:00:49 2025 GMT Subject: CN=8e33b8e9786770e5c4d0b3dac429d6928ea85785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:9c:a9:77:5e:28:17:ff:9b:db:fd:32:b9: 49:4c:44:78:8f:8d:da:ea:ed:01:09:f1:4a:36:9e: 70:bb:e1:2f:69:3a:84:a8:c8:6e:e0:07:21:bc:fa: de:d2:dd:67:c7:ef:39:4e:e5:84:18:9d:cf:1c:ee: b5:82:70:96:78:74:37:df:c9:f7:1f:3d:44:d4:52: 62:51:2c:fc:2d:95:6c:ce:c0:c6:a5:45:88:68:b9: d4:8e:2f:87:38:03:14:70:50:f3:41:dd:62:30:21: 4a:1a:39:a4:b7:ad:39:0c:35:cc:48:b6:40:c2:25: 12:39:4d:2e:0b:9e:29:d7:90:13:0e:e6:ed:bc:38: 27:f6:b3:c0:3b:8b:6a:e7:f8:ac:69:85:8e:56:c2: 43:26:be:1e:8f:2b:e8:aa:1d:c4:97:e5:96:d9:5e: 5b:a8:bc:e7:83:27:7a:96:51:61:ad:bd:f4:1e:bb: bd:ba:86:8e:48:cd:07:d9:d9:32:f4:cc:92:3a:f8: ad:72:92:36:cc:53:ac:e2:76:81:e9:7f:ca:db:3c: 8c:67:25:e4:e5:ec:b5:f3:b6:43:cd:63:bf:1f:18: ea:fa:3e:50:99:a0:20:05:34:be:95:a0:18:f3:7d: c6:06:34:8c:50:87:7f:9e:00:a4:c0:c8:f5:09:03: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:33:B8:E9:78:67:70:E5:C4:D0:B3:DA:C4:29:D6:92:8E:A8:57:85 X509v3 Authority Key Identifier: keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:30:11:f5:56:c8:2f:24:d7:c4:5a:e7:fe:b1:b9:19:a7: ec:88:26:95:fa:e6:5e:c7:b6:a0:e8:b1:90:2a:cb:de:e4:16: e6:03:ce:c3:76:8f:fa:d5:c1:f5:83:10:1a:ba:b5:13:eb:71: 61:b7:b3:5b:7f:16:82:41:a9:93:ff:cc:1c:3a:2c:6e:6c:d9: 6e:3e:b0:82:c1:02:e6:52:02:e2:d2:28:47:f8:2f:d3:57:f9: 5c:15:57:58:aa:4f:93:2c:47:4d:5b:88:0a:12:68:e3:f0:ab: 12:c6:8e:60:9e:18:29:f2:d5:bd:51:5b:68:59:d0:63:a1:61: 04:fd:a1:af:e9:81:5d:6c:20:43:03:64:df:3b:8d:e2:90:15: 4d:ac:53:e0:fe:2a:31:15:a1:8c:60:a6:9b:02:0b:c8:be:26: 6c:2a:41:a0:bc:66:55:a6:de:9f:db:13:91:40:73:f4:ae:9a: 35:e6:b7:9f:b4:5c:dd:9f:06:f1:96:d5:8d:1d:55:7c:92:8c: 96:07:28:40:f5:78:29:4a:b2:f6:a8:7e:02:7d:cc:49:01:92: 44:f6:27:ba:9e:ff:92:c7:84:10:0c:5e:03:8f:14:c2:1d:3a: cd:f1:76:ec:98:e7:3b:c7:b5:c6:27:79:c2:9c:32:10:66:e5: f7:53:1e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFkkGLYoXwFHoq0L2V7F9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTg4MzU5Yjk1YTM5NjRhZTZmOWEwY2RhYWUwN2Y1Nzlm OThjMzUwHhcNMjUxMjEzMTkwMDQ5WhcNMjUxMjE0MTkwMDQ5WjAzMTEwLwYDVQQD Eyg4ZTMzYjhlOTc4Njc3MGU1YzRkMGIzZGFjNDI5ZDY5MjhlYTg1Nzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDucqXdeKBf/m9v9MrlJTER4j43a 6u0BCfFKNp5wu+EvaTqEqMhu4AchvPre0t1nx+85TuWEGJ3PHO61gnCWeHQ338n3 Hz1E1FJiUSz8LZVszsDGpUWIaLnUji+HOAMUcFDzQd1iMCFKGjmkt605DDXMSLZA wiUSOU0uC54p15ATDubtvDgn9rPAO4tq5/isaYWOVsJDJr4ejyvoqh3El+WW2V5b qLzngyd6llFhrb30Hru9uoaOSM0H2dky9MySOvitcpI2zFOs4naB6X/K2zyMZyXk 5ey187ZDzWO/Hxjq+j5QmaAgBTS+laAY833GBjSMUId/ngCkwMj1CQModwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4zuOl4Z3DlxNCz2sQp1pKOqFeFMB8GA1UdIwQY MBaAFJXog1m5Wjlkrm+aDNquB/V5+Yw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTkt NzEyZDVlMTdhNmY2LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTktNzEyZDVlMTdhNmY2 LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPekwEfVW yC8k18Ra5/6xuRmn7IgmlfrmXse2oOixkCrL3uQW5gPOw3aP+tXB9YMQGrq1E+tx YbezW38WgkGpk//MHDosbmzZbj6wgsEC5lIC4tIoR/gv01f5XBVXWKpPkyxHTVuI ChJo4/CrEsaOYJ4YKfLVvVFbaFnQY6FhBP2hr+mBXWwgQwNk3zuN4pAVTaxT4P4q MRWhjGCmmwILyL4mbCpBoLxmVaben9sTkUBz9K6aNea3n7Rc3Z8G8ZbVjR1VfJKM lgcoQPV4KUqy9qh+An3MSQGSRPYnup7/kseEEAxeA48Uwh06zfF27JjnO8e1xid5 wpwyEGbl91MeEw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:27:51 2025 by rpki-client