This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft File: W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json) Hash identifier: jdBUoi6H4TO2OLc8r1oQUNM8SYwmBGgVamyKB9A3+GA= Subject key identifier: A9:13:6C:BA:3E:7C:AA:D7:59:6A:15:D0:7D:B5:89:DE:4D:BF:1E:72 Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C Certificate issuer: /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c Certificate serial: 019B6278C1C3CD78DA96053B6FEFEF7EE115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft Manifest number: 0393 Signing time: Sun 28 Dec 2025 01:00:39 +0000 Manifest this update: Sun 28 Dec 2025 01:00:39 +0000 Manifest next update: Mon 29 Dec 2025 01:00:39 +0000 Files and hashes: 1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: 9/vBo8MpO+qKG8bbZLKTEPFGtKhVhlXVoo7E4+VTysA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:c1:c3:cd:78:da:96:05:3b:6f:ef:ef:7e:e1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c Validity Not Before: Dec 28 01:00:39 2025 GMT Not After : Dec 29 01:00:39 2025 GMT Subject: CN=a9136cba3e7caad7596a15d07db589de4dbf1e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:20:28:36:3b:92:a2:db:7a:b4:a3:01:7e:05: 37:28:ff:a6:be:b2:76:e3:d4:52:78:c8:f0:84:f4: bb:c8:9c:fa:d5:c0:09:e9:df:6a:01:fd:4f:99:b1: f8:18:6f:06:83:87:0c:b3:b0:b6:94:d3:c2:a6:e1: 95:c6:7b:a6:9e:16:88:67:9e:7d:08:38:63:2b:2d: 8a:b4:0d:fd:8f:3f:cc:8b:03:4d:af:17:8e:c4:58: 7e:fc:cf:d1:36:e2:4b:38:1d:90:1d:e7:34:26:07: 45:dd:85:75:51:6a:a0:5c:e6:23:44:48:06:06:c5: 99:30:74:a5:f8:92:4d:4c:c8:cd:49:e1:00:22:e2: b7:2c:a2:98:24:e5:54:29:f1:53:09:9f:a4:be:05: ed:76:20:8d:f5:60:bf:07:1b:2c:4a:41:a7:52:ff: 36:2b:ba:35:7e:cc:4d:c5:a3:dc:39:35:a1:44:fb: c9:a8:5b:85:4a:63:cd:0a:8b:26:43:06:fb:53:a7: 48:06:62:bc:9d:d6:75:0a:1c:fe:bf:29:77:77:63: 3b:d1:2a:2c:ce:70:3e:59:f8:07:20:20:c6:21:b2: 88:b2:46:2b:af:95:b9:8b:ae:8a:1c:5d:61:e5:92: 01:e0:b1:90:b5:19:17:0b:2f:36:84:39:c8:86:fe: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:13:6C:BA:3E:7C:AA:D7:59:6A:15:D0:7D:B5:89:DE:4D:BF:1E:72 X509v3 Authority Key Identifier: keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:30:52:b5:79:9b:0a:cc:c9:f0:50:b6:4d:f3:a2:5e:a2:c0: c5:bd:90:c7:a6:5c:aa:ca:0f:b3:aa:33:16:d0:1d:ef:9a:8e: 2d:03:e5:0c:9b:12:41:d3:74:00:20:92:ca:33:83:4e:86:17: 3f:10:80:b8:63:eb:72:d6:52:2c:05:18:cd:3d:bc:61:80:2b: bb:03:c7:d0:14:c1:fd:92:f0:70:0f:7e:67:a2:b9:e9:46:1c: 30:ae:42:bf:81:e6:c3:9e:26:4c:7e:5e:1d:83:ab:9e:88:a3: e2:e8:e9:5e:96:a3:4e:69:22:9d:bf:3d:ae:0f:3a:57:23:fb: 66:a1:f7:5b:5b:90:48:76:dd:f0:77:d0:66:a0:53:17:2b:60: e1:fc:a8:cf:fc:7c:9f:6b:b8:3b:b8:b2:2c:54:31:81:37:f5: 66:cb:be:65:a5:4b:a5:38:b2:9c:cf:92:48:c5:a5:59:15:9b: 16:8b:58:dd:36:e8:2a:73:40:2b:33:b1:04:6e:b0:02:87:fb: 53:70:d4:cf:7a:c2:3b:39:9c:34:61:88:6e:83:9b:08:7f:37: 45:8a:60:a8:80:b0:4f:00:86:91:e6:6e:3f:55:91:bd:cd:98: e5:56:50:75:57:79:39:e5:e2:b8:d2:34:1c:0b:e6:f3:39:5c: 6e:d5:a8:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieMHDzXjalgU7b+/vfuEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDc5ZjdmZjFjNTdmZmMxMmM1NGMzZGUxODhiYmEyNzQw NmE4OGMwHhcNMjUxMjI4MDEwMDM5WhcNMjUxMjI5MDEwMDM5WjAzMTEwLwYDVQQD EyhhOTEzNmNiYTNlN2NhYWQ3NTk2YTE1ZDA3ZGI1ODlkZTRkYmYxZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iAoNjuSott6tKMBfgU3KP+mvrJ2 49RSeMjwhPS7yJz61cAJ6d9qAf1PmbH4GG8Gg4cMs7C2lNPCpuGVxnumnhaIZ559 CDhjKy2KtA39jz/MiwNNrxeOxFh+/M/RNuJLOB2QHec0JgdF3YV1UWqgXOYjREgG BsWZMHSl+JJNTMjNSeEAIuK3LKKYJOVUKfFTCZ+kvgXtdiCN9WC/BxssSkGnUv82 K7o1fsxNxaPcOTWhRPvJqFuFSmPNCosmQwb7U6dIBmK8ndZ1Chz+vyl3d2M70Sos znA+WfgHICDGIbKIskYrr5W5i66KHF1h5ZIB4LGQtRkXCy82hDnIhv6j/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkTbLo+fKrXWWoV0H21id5Nvx5yMB8GA1UdIwQY MBaAFFvXn3/xxX/8EsVMPeGIu6J0BqiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzllZmZfSEZmX3dTeFV3OTRZaTdvblFHcUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83MTA4ZjYtMjg1YS00NGVkLTg0ZDMt MjRjNzM4ODRiZDA0LzEvVzllZmZfSEZmX3dTeFV3OTRZaTdvblFHcUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83MTA4ZjYtMjg1YS00NGVkLTg0ZDMtMjRjNzM4ODRiZDA0 LzEvVzllZmZfSEZmX3dTeFV3OTRZaTdvblFHcUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDBStXmb CszJ8FC2TfOiXqLAxb2Qx6ZcqsoPs6ozFtAd75qOLQPlDJsSQdN0ACCSyjODToYX PxCAuGPrctZSLAUYzT28YYAruwPH0BTB/ZLwcA9+Z6K56UYcMK5Cv4Hmw54mTH5e HYOrnoij4ujpXpajTmkinb89rg86VyP7ZqH3W1uQSHbd8HfQZqBTFytg4fyoz/x8 n2u4O7iyLFQxgTf1Zsu+ZaVLpTiynM+SSMWlWRWbFotY3TboKnNAKzOxBG6wAof7 U3DUz3rCOzmcNGGIboObCH83RYpgqICwTwCGkeZuP1WRvc2Y5VZQdVd5OeXiuNI0 HAvm8zlcbtWoHQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:25:08 2025 by rpki-client