This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft File: W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json) Hash identifier: p+Xi53ldiDReiDxvzPzwDKJ+ztlltY0lWykvqgyloEA= Subject key identifier: 23:EB:EA:47:07:4B:5E:F8:9F:5F:04:5F:43:40:CF:1A:D5:CA:D8:EB Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b Certificate serial: 019B3C103E218EE3D030B17E3CFCEA546384 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 14:00:55 +0000 Manifest this update: Sat 20 Dec 2025 14:00:55 +0000 Manifest next update: Sun 21 Dec 2025 14:00:55 +0000 Files and hashes: 1: 7z1CEaiQeIhLfGd7pGfu2uxsPac.roa (hash: 7C2NyJj4g6x2FviGxPNRDMPSybLsn4cJWtQ3CeiM6xk=) 2: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: Ncv6D5ir8KCUVXSElKs2bg0qHhVI3zHIkiNaXJWOXhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:3e:21:8e:e3:d0:30:b1:7e:3c:fc:ea:54:63:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b Validity Not Before: Dec 20 14:00:55 2025 GMT Not After : Dec 21 14:00:55 2025 GMT Subject: CN=23ebea47074b5ef89f5f045f4340cf1ad5cad8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:e1:15:f6:b2:3f:04:54:f6:dd:b9:e1:cc: 48:23:19:b2:e0:42:48:eb:b0:00:39:9d:16:d6:5b: b3:f9:03:d3:b2:e1:13:1f:a9:95:7d:71:ca:30:fe: 09:07:29:b5:cf:1d:41:2d:bc:2b:eb:3d:22:7d:7e: 63:af:9d:2b:f0:b9:2c:8d:fc:52:fb:52:12:05:75: 96:e7:a0:a1:f5:c5:5e:5c:ab:fd:63:83:d3:db:06: f6:c6:82:3f:2c:20:6a:c1:63:b1:96:66:94:71:f9: 49:2f:d9:86:f0:98:c2:5f:8f:2b:d1:94:70:fc:36: c3:2f:14:8c:b2:fe:ee:ce:cb:8a:de:06:14:b7:4e: 5a:2e:02:d1:65:20:36:34:8f:90:24:ad:f8:0f:6d: 44:e2:00:80:20:e8:2d:11:db:f3:e7:ed:0f:3e:03: ff:da:64:3a:6d:e5:40:4d:9f:0b:a1:1e:e9:14:33: 49:95:88:64:e4:f0:2d:89:a1:ae:7a:58:5b:62:c0: c4:93:c6:1e:e3:4d:0c:d8:ed:65:a4:03:8f:99:fd: 35:a7:98:67:4f:ce:cb:49:72:df:76:0b:44:ee:12: 8b:70:02:6a:09:57:53:78:90:70:ab:c1:76:3f:a7: d1:11:82:a0:67:86:07:14:f7:de:ab:56:54:89:99: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EB:EA:47:07:4B:5E:F8:9F:5F:04:5F:43:40:CF:1A:D5:CA:D8:EB X509v3 Authority Key Identifier: keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:df:70:44:74:aa:8a:1f:f6:3e:46:ec:6a:e9:c0:18:e9:70: 15:c1:27:7d:e9:02:73:6b:e8:df:db:dc:f9:ac:f2:db:42:07: e2:ee:31:35:39:d9:11:f7:0a:f1:cf:39:93:92:47:58:9d:5f: d5:1b:df:47:a0:26:89:09:ff:56:29:14:43:82:32:bf:d7:71: 2a:a7:61:61:6f:22:a1:cc:da:91:14:e1:70:fd:65:9c:17:ca: 05:ce:bb:a7:cd:db:4c:24:8e:a9:d3:f8:bd:08:a7:aa:47:ce: e1:1b:16:91:b7:8a:a8:0f:93:64:9c:39:4a:8b:33:b5:e3:03: 3e:3b:50:7c:e8:3e:1e:28:bb:4d:60:cc:56:49:10:9c:d4:41: f0:af:50:a9:59:76:64:69:42:09:42:ef:88:03:a8:99:48:9c: f9:ff:6a:f8:ca:49:4a:b5:d3:ce:12:b9:05:30:90:8c:a2:c8: 1e:65:8e:82:06:07:cb:8d:f8:fc:6f:3b:be:e1:b3:23:51:29: 28:17:79:fb:ed:98:b7:0f:d6:0b:00:d0:b5:c0:16:9b:66:76: f7:72:c4:0b:71:df:83:6e:13:89:a8:e4:86:80:df:75:7c:79: 4e:fa:00:9c:a9:9c:9a:e8:92:86:a4:25:ca:1a:6b:e4:26:85: 01:14:0e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ED4hjuPQMLF+PPzqVGOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTk3OWZiOGU0NzczMDRiYjU5MWQ2YjY4ZWVhNzNkYTk0 YTgxNWIwHhcNMjUxMjIwMTQwMDU1WhcNMjUxMjIxMTQwMDU1WjAzMTEwLwYDVQQD EygyM2ViZWE0NzA3NGI1ZWY4OWY1ZjA0NWY0MzQwY2YxYWQ1Y2FkOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuPhFfayPwRU9t254cxIIxmy4EJI 67AAOZ0W1luz+QPTsuETH6mVfXHKMP4JBym1zx1BLbwr6z0ifX5jr50r8LksjfxS +1ISBXWW56Ch9cVeXKv9Y4PT2wb2xoI/LCBqwWOxlmaUcflJL9mG8JjCX48r0ZRw /DbDLxSMsv7uzsuK3gYUt05aLgLRZSA2NI+QJK34D21E4gCAIOgtEdvz5+0PPgP/ 2mQ6beVATZ8LoR7pFDNJlYhk5PAtiaGuelhbYsDEk8Ye400M2O1lpAOPmf01p5hn T87LSXLfdgtE7hKLcAJqCVdTeJBwq8F2P6fREYKgZ4YHFPfeq1ZUiZl6nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPr6kcHS174n18EX0NAzxrVytjrMB8GA1UdIwQY MBaAFFvpefuOR3MEu1kda2jupz2pSoFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMt MTYwNWIxYmQyOThlLzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMtMTYwNWIxYmQyOThl LzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwt9wRHSq ih/2PkbsaunAGOlwFcEnfekCc2vo39vc+azy20IH4u4xNTnZEfcK8c85k5JHWJ1f 1RvfR6AmiQn/VikUQ4Iyv9dxKqdhYW8ioczakRThcP1lnBfKBc67p83bTCSOqdP4 vQinqkfO4RsWkbeKqA+TZJw5SoszteMDPjtQfOg+Hii7TWDMVkkQnNRB8K9QqVl2 ZGlCCULviAOomUic+f9q+MpJSrXTzhK5BTCQjKLIHmWOggYHy434/G87vuGzI1Ep KBd5++2Ytw/WCwDQtcAWm2Z293LEC3Hfg24TiajkhoDfdXx5TvoAnKmcmuiShqQl yhpr5CaFARQOTg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:34 2025 by rpki-client