This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json) Hash identifier: coeS7RWUWVKg4bvKw67/jRLL18JCsJERMbkDQFMOiU0= Subject key identifier: B8:00:3C:B4:66:BF:64:A4:E2:3E:33:A7:66:08:DE:A6:FF:3D:A5:9E Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51 Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851 Certificate serial: 019B4A0333FCE627D963F62390DBD5D687D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft Manifest number: 0D3F Signing time: Tue 23 Dec 2025 07:01:22 +0000 Manifest this update: Tue 23 Dec 2025 07:01:22 +0000 Manifest next update: Wed 24 Dec 2025 07:01:22 +0000 Files and hashes: 1: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: twb3hZ3l+u8yh40G5oLQN4cuEdPw4BJNLoU2hcSY4Dc=) 2: WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa (hash: 9FkYuv3N9sKiJBFCLi9r1CgkkKmg2nuXBs/YrWrih48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:33:fc:e6:27:d9:63:f6:23:90:db:d5:d6:87:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851 Validity Not Before: Dec 23 07:01:22 2025 GMT Not After : Dec 24 07:01:22 2025 GMT Subject: CN=b8003cb466bf64a4e23e33a76608dea6ff3da59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:88:9d:29:66:5f:07:0a:1e:eb:fa:8d:cd: cf:11:bb:a3:f9:12:4c:68:e4:a5:9e:9e:39:84:83: fb:40:0a:ee:a1:e1:8f:b4:68:38:85:1d:5b:24:50: fc:fe:92:de:c7:ee:ed:a1:fa:4c:7c:2f:7c:72:c7: 97:93:86:91:df:de:b8:ae:bc:6a:89:36:96:af:5e: bd:a4:2a:f4:c0:0a:6f:3e:20:a6:0f:a0:a3:1e:5b: c4:66:78:8f:86:35:55:ef:3a:55:ad:28:ce:3e:d3: 54:ef:63:56:b7:35:1e:2a:bb:3e:91:23:f0:f7:4c: bf:96:6f:b3:a0:56:fb:58:e7:50:89:1f:38:16:67: 8c:1c:c4:d4:72:00:27:46:8d:96:f8:76:21:2f:93: 71:d5:c2:ff:fd:b0:da:6a:57:59:06:e7:6f:a5:37: 7e:2f:4f:f5:66:a7:7c:9c:c4:2a:5d:3b:c5:c4:f9: 73:6f:49:34:ba:a3:6a:74:41:3f:d9:83:56:f5:14: d0:ea:6c:f8:e2:97:d3:df:ac:8c:04:8f:11:9f:66: e4:03:36:79:04:bc:a5:cf:ad:47:90:69:c9:2d:d4: ce:35:ca:7a:09:6d:cd:b6:27:d2:d9:dc:28:18:e3: 4f:66:b7:8d:b2:d0:2d:69:48:54:88:bb:5a:41:8b: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:00:3C:B4:66:BF:64:A4:E2:3E:33:A7:66:08:DE:A6:FF:3D:A5:9E X509v3 Authority Key Identifier: keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:59:9b:90:b5:38:f8:1a:92:47:2b:61:1f:84:46:43:08: e8:c7:74:55:fb:76:93:f2:94:af:0a:f8:09:83:a3:1d:af:f8: 23:13:fb:ac:ee:c6:30:7f:59:da:e6:56:41:89:35:93:bc:58: 3b:d0:26:82:37:79:ae:64:39:d9:ce:35:05:53:38:e7:1d:81: 1c:d6:d8:67:1e:d2:b2:62:88:13:7e:4d:34:42:e5:e4:e8:ce: 7a:18:0b:5d:01:fd:d0:50:42:d7:ab:db:ec:a3:3c:eb:e5:aa: 72:f6:98:7f:74:7a:bb:f7:17:54:90:96:35:12:1a:1a:50:80: c5:bc:a4:73:3f:5b:bc:5f:a1:4c:84:d8:92:8f:38:f1:98:3f: 48:61:8e:be:de:cc:32:ef:f7:55:b1:be:6a:bc:aa:1a:f6:66: dc:2c:de:fd:01:d9:49:c4:3d:c3:7c:68:67:69:c0:52:d0:b4: ce:a8:34:63:6d:c8:97:79:b0:b4:78:ab:ba:29:a6:fc:3b:44: 62:e7:12:e3:11:17:40:b1:18:40:b9:f3:93:52:61:5f:b8:a7: f7:79:50:1d:3c:ee:16:f3:17:30:fe:3c:48:fc:ff:44:06:b1: 63:0a:81:69:8d:7d:0f:ba:d5:fb:ed:cf:f0:3d:df:3d:79:79: 00:63:d0:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAzP85ifZY/YjkNvV1ofYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZGM0MTY3NGQ2NWQyYWY5MTc0YjFhYmFjZTBiMzcxMzYy YjQ4NTEwHhcNMjUxMjIzMDcwMTIyWhcNMjUxMjI0MDcwMTIyWjAzMTEwLwYDVQQD EyhiODAwM2NiNDY2YmY2NGE0ZTIzZTMzYTc2NjA4ZGVhNmZmM2RhNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ6InSlmXwcKHuv6jc3PEbuj+RJM aOSlnp45hIP7QAruoeGPtGg4hR1bJFD8/pLex+7tofpMfC98cseXk4aR3964rrxq iTaWr169pCr0wApvPiCmD6CjHlvEZniPhjVV7zpVrSjOPtNU72NWtzUeKrs+kSPw 90y/lm+zoFb7WOdQiR84FmeMHMTUcgAnRo2W+HYhL5Nx1cL//bDaaldZBudvpTd+ L0/1Zqd8nMQqXTvFxPlzb0k0uqNqdEE/2YNW9RTQ6mz44pfT36yMBI8Rn2bkAzZ5 BLylz61HkGnJLdTONcp6CW3NtifS2dwoGONPZreNstAtaUhUiLtaQYvzVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgAPLRmv2Sk4j4zp2YI3qb/PaWeMB8GA1UdIwQY MBaAFFvcQWdNZdKvkXSxq6zgs3E2K0hRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWIt OWY2N2ZmNmFmZDUwLzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWItOWY2N2ZmNmFmZDUw LzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrxZm5C1 OPgakkcrYR+ERkMI6Md0Vft2k/KUrwr4CYOjHa/4IxP7rO7GMH9Z2uZWQYk1k7xY O9Amgjd5rmQ52c41BVM45x2BHNbYZx7SsmKIE35NNELl5OjOehgLXQH90FBC16vb 7KM86+WqcvaYf3R6u/cXVJCWNRIaGlCAxbykcz9bvF+hTITYko848Zg/SGGOvt7M Mu/3VbG+aryqGvZm3Cze/QHZScQ9w3xoZ2nAUtC0zqg0Y23Il3mwtHiruimm/DtE YucS4xEXQLEYQLnzk1JhX7in93lQHTzuFvMXMP48SPz/RAaxYwqBaY19D7rV++3P 8D3fPXl5AGPQ1A== -----END CERTIFICATE-----Generated at Tue Dec 23 10:51:14 2025 by rpki-client