This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json) Hash identifier: y4uZ1WnFUp0t9ze4NvtST6RvAzEeIZ1qj1/msprHBz0= Subject key identifier: 08:8C:81:C1:D5:C2:55:2E:1C:27:22:80:12:99:1C:A3:3D:F5:68:B1 Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Certificate serial: 019B559A2FB4F46FE23E133E6BFCF801C256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 13:02:06 +0000 Manifest this update: Thu 25 Dec 2025 13:02:06 +0000 Manifest next update: Fri 26 Dec 2025 13:02:06 +0000 Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=) 2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: HZNbNFwekUT2FbYw1NO0BHS5q+yJE832Al/So9uGLUg=) 3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:2f:b4:f4:6f:e2:3e:13:3e:6b:fc:f8:01:c2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Validity Not Before: Dec 25 13:02:06 2025 GMT Not After : Dec 26 13:02:06 2025 GMT Subject: CN=088c81c1d5c2552e1c27228012991ca33df568b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:fa:5c:24:23:c8:d0:28:a4:fa:73:d0:2e: ff:61:6f:00:11:4f:df:6f:10:d6:92:9c:6a:8d:0c: 6b:a1:e2:bb:26:47:ca:e3:df:ce:b7:86:3c:17:3e: 65:3a:ca:63:82:6d:29:b8:a0:bd:d3:29:be:74:7f: a7:99:e0:81:47:6f:91:b0:81:6a:b6:58:ca:62:db: c9:cd:1e:49:f3:3d:6e:5c:27:0e:4f:ba:b3:c5:46: ca:19:83:54:94:97:eb:f7:7e:e6:8f:b8:06:44:76: 25:e5:f9:25:ac:0f:ee:f7:d8:6c:ca:df:e7:df:72: 2e:10:98:d7:b2:04:66:72:a7:d8:fe:f6:aa:2c:5c: 7a:16:64:83:19:d5:d5:00:ee:50:8d:81:4f:2e:fb: 9d:5e:36:f9:fa:6b:08:e3:b9:9f:d1:f8:85:0c:8c: ce:71:e1:c3:fb:10:f1:03:09:e2:4f:58:6a:09:7a: b6:aa:4c:49:3d:a9:65:04:ba:88:ed:aa:7f:e8:65: ee:48:42:32:1c:f2:42:38:ff:ec:d5:15:5e:64:72: 7d:4a:bd:37:94:b9:b6:b4:e8:3a:c0:cf:03:94:52: 84:54:1a:3c:55:83:db:47:47:26:1d:ad:72:04:a5: f5:84:eb:fc:1a:cc:52:16:e4:7a:53:36:f5:5f:08: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8C:81:C1:D5:C2:55:2E:1C:27:22:80:12:99:1C:A3:3D:F5:68:B1 X509v3 Authority Key Identifier: keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:85:58:25:7e:71:4a:9e:cb:30:97:4e:f0:4e:d7:9d:66:88: 2c:03:4e:a7:a2:d2:73:fa:57:57:6e:cf:0c:b4:3f:c0:d5:c9: 2f:ba:d9:b6:37:4b:b7:0c:34:f7:71:0f:f7:0b:ea:5f:22:c3: cb:9f:0c:b2:45:ef:b1:5d:3a:59:f9:37:eb:7a:81:fa:21:a4: 98:bb:48:53:b5:85:d0:3c:d2:8a:91:12:e6:33:37:60:26:e2: d0:b9:5c:aa:10:11:10:e0:7d:fa:9a:2e:2d:ab:8e:bf:43:86: 6e:d7:8b:08:d2:be:ae:53:a4:c9:67:6f:2f:53:a4:f0:cc:ec: 11:8e:08:52:0d:57:23:d6:34:d6:3d:25:5d:e4:cf:6c:d1:69: 0f:0b:25:a5:c9:b6:e7:b4:c1:61:d6:6c:ac:72:aa:1e:92:08: 4a:be:82:7d:3d:f0:c4:da:5b:9b:4e:7f:48:af:2c:d7:46:64: 9e:16:c1:e4:35:12:69:46:b0:a8:6e:1a:96:22:68:2e:79:3f: 27:32:7e:3d:cb:93:59:93:e7:1c:2e:56:bc:44:88:56:9f:23: 64:f5:d7:5d:07:85:ca:0a:ff:7e:49:c7:f6:85:04:d5:d1:bd: 45:9e:ea:12:db:e1:c9:15:29:f3:9c:92:2d:14:d0:8d:65:ca: d9:58:c9:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmi+09G/iPhM+a/z4AcJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk MzIzM2EwHhcNMjUxMjI1MTMwMjA2WhcNMjUxMjI2MTMwMjA2WjAzMTEwLwYDVQQD EygwODhjODFjMWQ1YzI1NTJlMWMyNzIyODAxMjk5MWNhMzNkZjU2OGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYr6XCQjyNAopPpz0C7/YW8AEU/f bxDWkpxqjQxroeK7JkfK49/Ot4Y8Fz5lOspjgm0puKC90ym+dH+nmeCBR2+RsIFq tljKYtvJzR5J8z1uXCcOT7qzxUbKGYNUlJfr937mj7gGRHYl5fklrA/u99hsyt/n 33IuEJjXsgRmcqfY/vaqLFx6FmSDGdXVAO5QjYFPLvudXjb5+msI47mf0fiFDIzO ceHD+xDxAwniT1hqCXq2qkxJPallBLqI7ap/6GXuSEIyHPJCOP/s1RVeZHJ9Sr03 lLm2tOg6wM8DlFKEVBo8VYPbR0cmHa1yBKX1hOv8GsxSFuR6Uzb1XwjldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiMgcHVwlUuHCcigBKZHKM99WixMB8GA1UdIwQY MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0 LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIVYJX5x Sp7LMJdO8E7XnWaILANOp6LSc/pXV27PDLQ/wNXJL7rZtjdLtww093EP9wvqXyLD y58MskXvsV06Wfk363qB+iGkmLtIU7WF0DzSipES5jM3YCbi0LlcqhAREOB9+pou LauOv0OGbteLCNK+rlOkyWdvL1Ok8MzsEY4IUg1XI9Y01j0lXeTPbNFpDwslpcm2 57TBYdZsrHKqHpIISr6CfT3wxNpbm05/SK8s10ZknhbB5DUSaUawqG4aliJoLnk/ JzJ+PcuTWZPnHC5WvESIVp8jZPXXXQeFygr/fknH9oUE1dG9RZ7qEtvhyRUp85yS LRTQjWXK2VjJkA== -----END CERTIFICATE-----Generated at Thu Dec 25 21:27:08 2025 by rpki-client