This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json) Hash identifier: NgC2G/8MdcjT6etlfkCFnaHOh2XfxVdTLJJTU21u5Z4= Subject key identifier: A5:86:1D:3B:AF:E8:EF:08:C4:5D:3B:48:07:73:BF:1D:13:34:6B:9E Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd Certificate serial: 019B36EA12F4CF0A10920DCB5A1537A27DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft Manifest number: 166F Signing time: Fri 19 Dec 2025 14:01:08 +0000 Manifest this update: Fri 19 Dec 2025 14:01:08 +0000 Manifest next update: Sat 20 Dec 2025 14:01:08 +0000 Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=) 2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: 8D9W1Fa2plrFilhxDQQQNyhrN7LBBoI8+GEtKwVKkLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:12:f4:cf:0a:10:92:0d:cb:5a:15:37:a2:7d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd Validity Not Before: Dec 19 14:01:08 2025 GMT Not After : Dec 20 14:01:08 2025 GMT Subject: CN=a5861d3bafe8ef08c45d3b480773bf1d13346b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:06:c5:e5:e8:fd:d7:65:9b:8a:ac:9d:bc: f1:5e:8f:fb:c6:2f:e9:18:f9:f4:d7:80:76:54:e8: 48:bd:0a:a7:2c:9b:b0:a4:0b:87:c5:84:e7:12:6b: d3:15:ee:3d:31:ba:04:89:71:d7:18:3b:56:20:11: 9a:a4:4d:c5:b5:73:74:31:5d:f2:ad:5d:db:fb:58: e3:a5:d4:9d:e1:0a:c0:96:fc:8b:dc:dd:63:ac:cc: 36:7b:49:84:6a:c7:ac:11:e7:66:b4:96:54:5d:75: 92:77:71:53:7a:63:75:09:ee:45:65:56:9a:fe:61: f9:4b:90:1c:92:df:c1:37:0e:04:53:21:9b:12:8e: 40:2b:16:a6:e0:bf:49:bf:4c:a5:b5:0d:a8:6d:e6: 92:2f:60:a1:45:b8:a5:bc:26:48:1a:0e:b1:7c:29: 4a:db:70:c4:f2:d8:12:1b:60:51:04:3c:7f:36:fb: 3e:ff:a3:72:87:ea:b7:4f:88:0b:78:86:3b:e8:4b: 4e:24:4f:3b:e9:22:8a:07:46:ba:2b:28:d0:4e:64: b0:5a:03:c8:f8:26:1f:b1:8f:3a:17:ec:f4:e9:66: fb:f4:7b:92:79:8b:72:26:80:6f:45:c2:8f:15:a6: f7:7e:c5:d1:d6:e0:c5:56:9f:c3:e1:a4:e1:36:7d: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:86:1D:3B:AF:E8:EF:08:C4:5D:3B:48:07:73:BF:1D:13:34:6B:9E X509v3 Authority Key Identifier: keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e0:06:5e:cb:f1:7c:d6:bf:68:45:fe:10:a4:f6:cf:a1:d2: c3:17:bc:d0:f0:4f:78:fd:d9:1e:a7:02:a3:5e:36:49:1f:06: a3:8a:25:b4:62:d3:df:90:e5:25:2a:a6:a0:39:52:f1:25:0b: 57:3a:c7:19:85:96:e4:b7:65:a3:ff:3a:96:28:e7:27:d8:4a: 39:86:98:2b:8e:25:d2:fb:a5:ea:eb:60:a6:84:ef:9b:19:80: fc:b9:cb:c4:ad:24:4c:d6:6f:78:18:68:d7:23:01:12:18:2c: 48:ff:f4:a1:4b:60:37:95:a4:dc:e5:f6:94:06:a9:04:99:39: 73:74:3e:fd:ea:2d:10:79:2a:37:08:43:ff:6d:6f:da:5c:cf: 5a:e0:a3:86:a8:85:60:c5:80:63:81:4f:e3:45:0a:66:fb:9a: a3:69:98:d4:5f:27:70:51:92:33:76:ec:5c:82:dc:69:58:a5: 10:67:41:b1:40:85:73:c5:2c:1f:17:ad:68:84:5e:7d:0f:bc: c5:d2:53:41:17:8b:60:64:61:e8:a8:96:63:61:a2:dc:83:3f: ca:47:e7:3e:6f:91:1c:28:3c:cb:9a:7d:f0:be:88:0f:e4:f6: 49:9c:e8:4e:40:01:a0:04:dc:7f:c6:03:d7:83:80:bb:82:c6: 7f:57:fe:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26hL0zwoQkg3LWhU3on2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWEwNDZiNDk5NzgwYWVjN2Q2MTgyZDJkNTZhNzVlYjA4 OTY4Y2QwHhcNMjUxMjE5MTQwMTA4WhcNMjUxMjIwMTQwMTA4WjAzMTEwLwYDVQQD EyhhNTg2MWQzYmFmZThlZjA4YzQ1ZDNiNDgwNzczYmYxZDEzMzQ2YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/MGxeXo/ddlm4qsnbzxXo/7xi/p GPn014B2VOhIvQqnLJuwpAuHxYTnEmvTFe49MboEiXHXGDtWIBGapE3FtXN0MV3y rV3b+1jjpdSd4QrAlvyL3N1jrMw2e0mEasesEedmtJZUXXWSd3FTemN1Ce5FZVaa /mH5S5Ackt/BNw4EUyGbEo5AKxam4L9Jv0yltQ2obeaSL2ChRbilvCZIGg6xfClK 23DE8tgSG2BRBDx/Nvs+/6Nyh+q3T4gLeIY76EtOJE876SKKB0a6KyjQTmSwWgPI +CYfsY86F+z06Wb79HuSeYtyJoBvRcKPFab3fsXR1uDFVp/D4aThNn1sdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWGHTuv6O8IxF07SAdzvx0TNGueMB8GA1UdIwQY MBaAFFvqBGtJl4Cux9YYLS1Wp16wiWjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEt Mjk2MDIyMTVhZGQwLzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEtMjk2MDIyMTVhZGQw LzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeAGXsvx fNa/aEX+EKT2z6HSwxe80PBPeP3ZHqcCo142SR8Go4oltGLT35DlJSqmoDlS8SUL VzrHGYWW5Ldlo/86lijnJ9hKOYaYK44l0vul6utgpoTvmxmA/LnLxK0kTNZveBho 1yMBEhgsSP/0oUtgN5Wk3OX2lAapBJk5c3Q+/eotEHkqNwhD/21v2lzPWuCjhqiF YMWAY4FP40UKZvuao2mY1F8ncFGSM3bsXILcaVilEGdBsUCFc8UsHxetaIRefQ+8 xdJTQReLYGRh6KiWY2Gi3IM/ykfnPm+RHCg8y5p98L6ID+T2SZzoTkABoATcf8YD 14OAu4LGf1f+tA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:22 2025 by rpki-client