This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json) Hash identifier: 7uyyLJ1k5wXHUJF9d250vs2PJ8XmAAi/WtVDvrDGY34= Subject key identifier: C4:0C:1D:35:D3:E8:80:0E:7E:1E:E6:53:11:E4:35:A4:4B:96:6A:40 Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52 Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52 Certificate serial: 019B661F0C19EECBA3CF19C7605497C386FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft Manifest number: 17A7 Signing time: Sun 28 Dec 2025 18:01:09 +0000 Manifest this update: Sun 28 Dec 2025 18:01:09 +0000 Manifest next update: Mon 29 Dec 2025 18:01:09 +0000 Files and hashes: 1: RErNlaOpDzrD6wSfbbH1rz1M530.roa (hash: wgBHw0Ti6lWp1Z64AKciY1+PcChXXuuN8WEU42REeQ4=) 2: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: l6N9lNFaNdFg/1xFY7qk0PbPV/5gQY5NTxHsDXoBUt4=) 3: iuYZctM9ho40y9O9NGu8oiwydyQ.roa (hash: iVbT4XgjGA1oWctdpXO1acTvsUwxsInkD3aqlUFGvoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1f:0c:19:ee:cb:a3:cf:19:c7:60:54:97:c3:86:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52 Validity Not Before: Dec 28 18:01:09 2025 GMT Not After : Dec 29 18:01:09 2025 GMT Subject: CN=c40c1d35d3e8800e7e1ee65311e435a44b966a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:8d:c1:8c:91:cd:55:58:67:f4:e4:c9:3d: 31:27:5f:2c:af:1c:1b:49:44:85:04:1d:49:89:8c: 6f:3d:fd:82:b2:17:d2:07:e1:21:b6:b7:92:01:ef: fc:78:16:db:8d:a6:d8:80:c3:96:5a:20:4b:58:46: 8a:f3:78:ca:20:46:fc:a5:cb:f6:2a:44:2a:25:8a: 8c:e3:ed:41:51:f8:07:e3:8a:5b:20:a9:34:97:eb: 16:fa:21:5b:cf:9d:4d:8a:c0:10:b7:bd:8e:6c:47: 91:e6:e3:f9:8c:81:d9:2c:cb:7c:15:d0:e1:36:f1: 0c:44:62:8a:2f:f6:ad:d5:af:69:f3:97:89:3f:b7: 67:ce:77:67:04:2d:80:e5:16:70:26:03:cb:99:40: 91:29:1c:a7:99:f5:bc:aa:ab:0f:9b:ec:29:19:56: ef:ae:69:bd:50:78:15:8d:74:51:4f:7d:c6:54:d8: 11:a3:5a:6d:c4:b4:d0:8f:d4:f8:e7:78:10:4f:0f: ec:8e:f0:3a:d9:1a:18:40:11:b6:d1:51:03:e9:21: bf:7b:3c:ee:d7:06:81:0d:9f:3b:ca:0c:8e:71:26: 89:ae:52:ac:2f:0c:78:04:eb:e5:c0:4d:4d:fc:67: 94:95:6b:1e:4c:2b:c0:c4:29:85:03:46:89:4c:92: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0C:1D:35:D3:E8:80:0E:7E:1E:E6:53:11:E4:35:A4:4B:96:6A:40 X509v3 Authority Key Identifier: keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6c:0a:38:7f:b8:df:1b:e0:31:0a:85:84:80:e7:e4:eb:5d: 60:1f:e0:c0:8d:c3:00:47:ad:0f:2f:15:f3:c7:a3:60:3c:47: 1b:5d:66:d5:27:f4:ad:46:23:eb:cd:d3:fb:6b:39:09:8e:92: 99:b6:a2:18:6d:d2:a9:07:0c:4f:c1:3d:a9:29:74:d9:8a:8b: e2:07:45:29:a1:71:20:1a:51:e3:0c:df:2c:d0:74:7f:d1:95: 85:e1:9e:af:13:4d:e7:f7:c8:ab:79:59:76:f8:7e:f9:5e:c3: 2a:7d:82:7b:33:49:91:4a:f2:e4:58:a6:9a:00:ad:92:2c:17: 64:ae:b1:8e:fa:ea:f2:89:ba:c3:46:a9:99:86:45:76:c8:ff: a7:c2:4a:6c:e6:b0:0e:f0:4c:79:60:f7:fe:93:c3:d2:1b:02: 9a:ab:d0:84:68:54:6a:e1:80:36:e3:98:90:5b:b6:3c:22:cc: 42:0e:b4:19:a7:dd:ce:16:e3:26:4c:35:2f:4c:34:4f:07:4a: 49:36:45:70:2e:92:69:19:a9:7b:28:b2:6a:35:68:32:d3:6d: 79:9e:3a:a6:6d:ae:14:79:d8:b7:c9:39:b2:b2:fd:67:bf:25: cc:43:cd:08:52:64:86:88:25:c0:3e:a0:9c:c6:f8:dc:82:26: 20:88:f3:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHwwZ7sujzxnHYFSXw4b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWE4MWFhOWIyMTk3ZDkxMjdiNDQyNTI1MTAwZmZhYTM2 ZTBkNTIwHhcNMjUxMjI4MTgwMTA5WhcNMjUxMjI5MTgwMTA5WjAzMTEwLwYDVQQD EyhjNDBjMWQzNWQzZTg4MDBlN2UxZWU2NTMxMWU0MzVhNDRiOTY2YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpiNwYyRzVVYZ/TkyT0xJ18srxwb SUSFBB1JiYxvPf2CshfSB+EhtreSAe/8eBbbjabYgMOWWiBLWEaK83jKIEb8pcv2 KkQqJYqM4+1BUfgH44pbIKk0l+sW+iFbz51NisAQt72ObEeR5uP5jIHZLMt8FdDh NvEMRGKKL/at1a9p85eJP7dnzndnBC2A5RZwJgPLmUCRKRynmfW8qqsPm+wpGVbv rmm9UHgVjXRRT33GVNgRo1ptxLTQj9T453gQTw/sjvA62RoYQBG20VED6SG/ezzu 1waBDZ87ygyOcSaJrlKsLwx4BOvlwE1N/GeUlWseTCvAxCmFA0aJTJJpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQMHTXT6IAOfh7mUxHkNaRLlmpAMB8GA1UdIwQY MBaAFFvqgaqbIZfZEntEJSUQD/qjbg1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQt ZmMwZGQ5MjUyYzlhLzEvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yMjQxNTUtM2NhNC00ZmY3LWE5NjQtZmMwZGQ5MjUyYzlh LzEvVy1xQnFwc2hsOWtTZTBRbEpSQVAtcU51RFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGwKOH+4 3xvgMQqFhIDn5OtdYB/gwI3DAEetDy8V88ejYDxHG11m1Sf0rUYj683T+2s5CY6S mbaiGG3SqQcMT8E9qSl02YqL4gdFKaFxIBpR4wzfLNB0f9GVheGerxNN5/fIq3lZ dvh++V7DKn2CezNJkUry5FimmgCtkiwXZK6xjvrq8om6w0apmYZFdsj/p8JKbOaw DvBMeWD3/pPD0hsCmqvQhGhUauGANuOYkFu2PCLMQg60GafdzhbjJkw1L0w0TwdK STZFcC6SaRmpeyiyajVoMtNteZ46pm2uFHnYt8k5srL9Z78lzEPNCFJkhoglwD6g nMb43IImIIjzGA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:27:28 2025 by rpki-client