This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json) Hash identifier: Sz8rN8PO8oyFciP0exA/zg01AJfTgAInDcrVpVr/Vjg= Subject key identifier: 83:7A:59:BE:08:17:E4:D0:7D:79:49:9F:B5:28:2F:58:04:A3:02:17 Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Certificate serial: 019B57888F6B4079E72DD14C5E88B8F87C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 22:02:05 +0000 Manifest this update: Thu 25 Dec 2025 22:02:05 +0000 Manifest next update: Fri 26 Dec 2025 22:02:05 +0000 Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=) 2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: rN3Y+b2mSNJC3cNSlQGZSK3/BWAeBO+muWlWT9rvALA=) 3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:8f:6b:40:79:e7:2d:d1:4c:5e:88:b8:f8:7c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Validity Not Before: Dec 25 22:02:05 2025 GMT Not After : Dec 26 22:02:05 2025 GMT Subject: CN=837a59be0817e4d07d79499fb5282f5804a30217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:b1:2c:5b:00:6e:55:ca:d0:93:09:3e:9b: 9e:7d:98:73:b6:b1:bd:f8:22:49:30:72:4f:27:6c: 50:15:49:f2:d9:04:68:65:15:b7:52:b0:e5:ef:5e: a3:d6:0a:38:c3:80:45:59:bc:b8:5b:8f:61:37:3f: 47:b6:b9:aa:cd:03:57:9a:40:38:88:d2:7a:7c:10: 48:4c:9c:bd:7c:98:93:e0:f6:05:28:d7:ad:4a:0f: b2:d9:88:16:ac:48:30:18:b0:91:c2:2c:8c:14:cd: 6c:80:87:24:90:12:4e:cc:df:23:cc:2e:5c:d4:e7: 03:4d:80:15:d2:b8:e4:90:d0:51:d4:d3:c8:da:d9: d4:34:2e:c3:4b:ca:b0:ff:35:01:4f:a3:ad:7c:0a: ce:54:e2:d7:0c:9d:05:87:c2:02:c3:5e:9d:3f:d1: a6:d6:96:f4:eb:32:b3:80:4e:c5:60:65:04:10:09: 5a:c5:43:db:e1:03:02:17:85:be:9c:37:97:cf:e2: 21:78:d1:60:7d:16:3b:b0:c6:6d:fb:e1:bf:49:6d: f0:93:76:4f:11:d8:c6:35:da:3e:a0:e9:cf:97:5d: 75:f6:95:5b:cd:fa:5f:46:c9:53:79:bc:b5:18:5a: a3:b5:45:36:07:68:3a:11:e4:59:8e:94:2d:3f:19: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7A:59:BE:08:17:E4:D0:7D:79:49:9F:B5:28:2F:58:04:A3:02:17 X509v3 Authority Key Identifier: keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e5:6b:c2:a1:ce:7f:1e:a9:b2:74:02:6d:9d:33:93:07:93: 3f:26:d1:bd:2b:16:10:2c:14:31:16:64:07:46:6b:ca:77:b1: f7:89:bc:11:4c:c3:a3:40:2c:1c:e7:55:92:ae:f8:9b:d4:40: 2c:b7:ad:21:e2:5f:4e:e6:00:33:94:db:d7:2d:12:e4:56:76: 02:ed:d6:e1:d8:cf:c1:c7:b6:35:89:91:66:21:81:a0:da:63: b7:8d:ed:21:17:d1:14:6d:07:08:06:3f:fa:fb:1b:81:1e:c9: 63:a4:a3:8e:4b:e6:c4:fe:2a:9d:53:18:66:60:2a:15:d3:6e: 6a:44:1d:e0:4b:6c:1e:b9:38:31:5b:02:17:b4:4f:65:93:cf: 36:52:d8:54:69:64:13:96:89:8f:0e:3d:2a:ae:ab:73:b2:78: a2:c0:aa:ab:52:94:ec:3f:97:0d:67:54:e5:53:b2:75:d2:46: 8c:ea:e6:b7:af:f8:63:34:84:ca:99:1f:59:20:b4:c7:d6:2e: 98:21:ac:50:e9:f9:d0:a6:76:fb:a1:d1:4a:57:92:36:de:f4: a7:a7:96:e8:10:5c:68:39:c5:5e:ec:a8:11:d9:73:07:4a:89: 8b:f9:4d:ef:da:34:84:aa:9f:6f:bc:1d:bc:e3:fc:fe:37:c5: 0b:6a:7d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiI9rQHnnLdFMXoi4+HxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk MzIzM2EwHhcNMjUxMjI1MjIwMjA1WhcNMjUxMjI2MjIwMjA1WjAzMTEwLwYDVQQD Eyg4MzdhNTliZTA4MTdlNGQwN2Q3OTQ5OWZiNTI4MmY1ODA0YTMwMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SuxLFsAblXK0JMJPpuefZhztrG9 +CJJMHJPJ2xQFUny2QRoZRW3UrDl716j1go4w4BFWby4W49hNz9HtrmqzQNXmkA4 iNJ6fBBITJy9fJiT4PYFKNetSg+y2YgWrEgwGLCRwiyMFM1sgIckkBJOzN8jzC5c 1OcDTYAV0rjkkNBR1NPI2tnUNC7DS8qw/zUBT6OtfArOVOLXDJ0Fh8ICw16dP9Gm 1pb06zKzgE7FYGUEEAlaxUPb4QMCF4W+nDeXz+IheNFgfRY7sMZt++G/SW3wk3ZP EdjGNdo+oOnPl1119pVbzfpfRslTeby1GFqjtUU2B2g6EeRZjpQtPxnOgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIN6Wb4IF+TQfXlJn7UoL1gEowIXMB8GA1UdIwQY MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0 LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOVrwqHO fx6psnQCbZ0zkweTPybRvSsWECwUMRZkB0Zrynex94m8EUzDo0AsHOdVkq74m9RA LLetIeJfTuYAM5Tb1y0S5FZ2Au3W4djPwce2NYmRZiGBoNpjt43tIRfRFG0HCAY/ +vsbgR7JY6SjjkvmxP4qnVMYZmAqFdNuakQd4EtsHrk4MVsCF7RPZZPPNlLYVGlk E5aJjw49Kq6rc7J4osCqq1KU7D+XDWdU5VOyddJGjOrmt6/4YzSEypkfWSC0x9Yu mCGsUOn50KZ2+6HRSleSNt70p6eW6BBcaDnFXuyoEdlzB0qJi/lN79o0hKqfb7wd vOP8/jfFC2p92w== -----END CERTIFICATE-----Generated at Thu Dec 25 23:07:23 2025 by rpki-client