This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft File: W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json) Hash identifier: quj+C1+DgWlLQeSQY+MnsWTpwz3JBk5jdlcHBhuzyGs= Subject key identifier: 30:E6:47:16:5E:5D:8F:0B:97:1F:C6:E1:6D:6D:6F:E4:CF:9E:DF:D0 Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3 Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3 Certificate serial: 019B6F21E9D636E027C81B6029CCA32115E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft Manifest number: 0BDC Signing time: Tue 30 Dec 2025 12:00:52 +0000 Manifest this update: Tue 30 Dec 2025 12:00:52 +0000 Manifest next update: Wed 31 Dec 2025 12:00:52 +0000 Files and hashes: 1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: m1x+V/yUMOS41JsWvZ/gZ2Tla50TdSldl++413KJjqw=) 2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:e9:d6:36:e0:27:c8:1b:60:29:cc:a3:21:15:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3 Validity Not Before: Dec 30 12:00:52 2025 GMT Not After : Dec 31 12:00:52 2025 GMT Subject: CN=30e647165e5d8f0b971fc6e16d6d6fe4cf9edfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4a:24:bf:1a:4d:3b:07:03:a4:eb:a0:98:5b: 14:31:fe:91:b9:ac:53:4c:e4:48:aa:4f:6d:96:f5: 36:87:42:7d:bf:4d:9b:c5:87:8a:2a:98:49:1e:62: 5b:5d:3a:b1:e9:ca:45:ec:f5:84:58:39:0b:84:62: 72:53:20:20:90:77:66:b2:af:74:f3:96:cd:d7:7d: 84:94:7c:65:39:8c:29:08:22:f0:c7:bf:85:a3:45: 04:9b:32:57:b9:50:53:4e:b9:34:68:65:8e:2b:27: bd:93:a1:0d:a3:6b:13:b2:08:73:14:a1:31:8a:86: 77:8f:43:79:1a:0c:7b:ff:fc:20:39:2b:1f:16:b6: e2:b3:46:d0:89:07:00:ba:1e:1c:f0:40:6f:86:73: f3:c7:0b:8c:12:20:3d:ef:95:fb:38:41:6f:a4:d8: 8d:30:01:89:8e:46:85:ad:15:4c:b2:a9:1e:9d:b3: 19:fe:b2:5f:eb:15:fb:0f:40:35:c8:ef:5a:ab:23: 4d:77:40:d4:c9:af:e1:c7:6a:7e:88:59:fa:ce:e7: 62:b1:23:a7:af:9f:45:07:00:5f:e4:3c:14:12:4e: 6f:8a:24:0f:c8:c9:3c:13:d9:27:84:1b:e4:99:91: a3:01:68:4a:03:0a:10:b0:ab:39:29:21:03:93:e5: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E6:47:16:5E:5D:8F:0B:97:1F:C6:E1:6D:6D:6F:E4:CF:9E:DF:D0 X509v3 Authority Key Identifier: keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:1b:82:1e:15:37:56:f7:3c:6d:fe:15:42:f0:c7:dc:4f:ff: 74:69:55:28:65:03:2a:06:19:ac:9c:9a:34:1e:d3:7c:7a:8c: 1b:99:aa:ad:c5:ea:84:03:46:16:82:c5:66:f4:27:e5:22:aa: 71:cd:90:e7:b1:a1:58:b7:e3:dc:1d:2c:69:d2:9d:ef:9e:33: 13:87:5a:b2:ec:bf:77:33:b9:35:01:5a:56:aa:c5:58:c2:aa: c0:e5:47:2c:36:df:15:ad:12:01:82:f0:ca:6c:a4:7c:1d:9e: 5f:ae:b5:7e:91:db:09:6f:56:98:59:5f:4c:c6:34:56:0a:38: 4a:47:76:4d:a7:40:11:55:e4:bb:ff:25:45:4f:f3:df:5f:e9: 1e:38:65:d1:4f:1d:55:fa:ac:e4:5a:e8:b7:f8:86:ca:76:51: ce:eb:cf:be:b9:85:52:2f:2d:86:5a:87:b2:be:44:36:db:2b: 52:20:d8:c4:63:81:e2:1f:ed:8f:9e:de:4a:c6:2b:80:15:56: 9a:f9:ce:8c:9a:f1:30:e2:ca:0d:b8:69:bc:07:f0:33:72:59: e8:ca:eb:7c:0c:3a:c9:b9:fc:a5:e4:ba:72:3f:de:87:15:af: 54:62:27:10:03:25:b2:c8:2c:0b:cf:62:1d:b4:96:a7:13:dd: cf:1a:bb:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIenWNuAnyBtgKcyjIRXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZThmZTg4MjdiZGM2MDkzNTU1MDllMGM5ZTgwZWFiMjFm OWNkYzMwHhcNMjUxMjMwMTIwMDUyWhcNMjUxMjMxMTIwMDUyWjAzMTEwLwYDVQQD EygzMGU2NDcxNjVlNWQ4ZjBiOTcxZmM2ZTE2ZDZkNmZlNGNmOWVkZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UokvxpNOwcDpOugmFsUMf6RuaxT TORIqk9tlvU2h0J9v02bxYeKKphJHmJbXTqx6cpF7PWEWDkLhGJyUyAgkHdmsq90 85bN132ElHxlOYwpCCLwx7+Fo0UEmzJXuVBTTrk0aGWOKye9k6ENo2sTsghzFKEx ioZ3j0N5Ggx7//wgOSsfFrbis0bQiQcAuh4c8EBvhnPzxwuMEiA975X7OEFvpNiN MAGJjkaFrRVMsqkenbMZ/rJf6xX7D0A1yO9aqyNNd0DUya/hx2p+iFn6zudisSOn r59FBwBf5DwUEk5viiQPyMk8E9knhBvkmZGjAWhKAwoQsKs5KSEDk+UQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDmRxZeXY8Llx/G4W1tb+TPnt/QMB8GA1UdIwQY MBaAFFvo/ognvcYJNVUJ4MnoDqsh+c3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgt NjEwMDcyZDgwMTE1LzEvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgtNjEwMDcyZDgwMTE1 LzEvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhuCHhU3 Vvc8bf4VQvDH3E//dGlVKGUDKgYZrJyaNB7TfHqMG5mqrcXqhANGFoLFZvQn5SKq cc2Q57GhWLfj3B0sadKd754zE4dasuy/dzO5NQFaVqrFWMKqwOVHLDbfFa0SAYLw ymykfB2eX661fpHbCW9WmFlfTMY0Vgo4Skd2TadAEVXku/8lRU/z31/pHjhl0U8d Vfqs5Frot/iGynZRzuvPvrmFUi8thlqHsr5ENtsrUiDYxGOB4h/tj57eSsYrgBVW mvnOjJrxMOLKDbhpvAfwM3JZ6MrrfAw6ybn8peS6cj/ehxWvVGInEAMlssgsC89i HbSWpxPdzxq76w== -----END CERTIFICATE-----Generated at Tue Dec 30 22:01:37 2025 by rpki-client