This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json) Hash identifier: QaJ9M2tlpRuGqQNTWKmnOm12SAYds4hVQT66Hs5vpiw= Subject key identifier: 69:F3:AD:89:1E:45:66:C2:C6:B7:42:39:82:AB:68:AE:6D:16:50:39 Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c Certificate serial: 019B3DC77DBC2471A6A789622C3F1B759C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:00:42 +0000 Manifest this update: Sat 20 Dec 2025 22:00:42 +0000 Manifest next update: Sun 21 Dec 2025 22:00:42 +0000 Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=) 2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: oFw/Q/M5iB5A6qP6E1kDGhNe+177CllsBSXA+Gwep/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:7d:bc:24:71:a6:a7:89:62:2c:3f:1b:75:9c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c Validity Not Before: Dec 20 22:00:42 2025 GMT Not After : Dec 21 22:00:42 2025 GMT Subject: CN=69f3ad891e4566c2c6b7423982ab68ae6d165039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4b:b6:d9:07:49:f3:c9:7b:16:25:d3:b4:d1: 7d:a1:84:e5:01:bd:cf:5d:65:f5:aa:2a:6f:83:a7: 93:4f:90:6f:74:90:b8:82:8d:b1:cc:6d:05:86:0f: a5:11:8d:90:b6:4a:42:1c:3b:85:3d:6a:55:2f:fa: 95:d1:9b:05:06:f2:9f:7c:19:1e:bb:b4:44:21:85: 3c:fc:9a:86:4f:2c:fc:ef:42:c6:50:93:83:10:9a: 8d:44:64:6d:a6:2a:e5:44:83:db:c1:7f:1b:9d:b9: 2d:83:d9:0b:3a:f2:f0:32:2b:21:1f:e3:8f:a1:cb: 3a:63:d6:c0:e4:92:46:c2:d7:5c:6e:7c:c0:d3:39: 04:f4:4b:0c:65:24:d7:54:e2:82:99:b8:a9:08:c6: 2a:36:e5:df:fa:58:fa:bd:2c:96:9e:77:44:df:fd: 10:75:63:ac:42:a8:aa:1f:66:79:e9:80:79:17:72: 05:9d:b8:e8:be:df:8e:9a:4d:44:b9:77:0d:31:ab: 93:82:c1:e0:4c:b5:c2:97:85:17:82:a4:a2:1d:3b: 86:2a:b7:f6:60:9d:a5:82:3a:43:0f:af:74:69:86: a8:94:a8:7e:46:14:10:74:24:7b:d8:f4:dc:89:f0: 9a:5e:4c:e4:78:51:ca:9a:bd:5b:08:b2:fc:50:87: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:AD:89:1E:45:66:C2:C6:B7:42:39:82:AB:68:AE:6D:16:50:39 X509v3 Authority Key Identifier: keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:22:ff:c5:e2:ef:a9:ee:85:57:21:41:86:14:61:2a:74:94: c1:b6:eb:89:34:b7:22:c3:24:12:da:15:b3:06:a3:66:79:a7: a8:c3:f2:73:09:19:ea:25:a4:3e:18:2a:e3:18:e8:34:02:8e: ec:db:4a:03:1b:50:20:89:6e:54:b5:b2:81:4c:c1:85:67:04: b9:f0:2b:d1:e0:a2:44:93:a7:00:b8:df:8e:d9:36:80:92:60: 63:99:ed:22:f9:7d:3d:e2:d2:36:dc:89:9e:7c:2e:c1:22:37: f4:2f:21:25:b3:35:23:8e:a7:f8:2c:ec:60:ec:64:93:aa:9b: 7a:4b:cd:0e:9f:ed:14:21:14:33:37:da:d7:0b:7e:83:35:9c: 0a:ce:f6:44:50:a3:8d:53:8c:8c:bf:62:77:c1:23:9b:48:d6: e7:67:2f:e8:dc:2e:07:df:b0:b0:61:50:55:df:72:16:c7:00: 77:da:ca:d9:9a:26:7b:ad:e8:13:2c:07:ba:01:7b:11:2d:cf: c5:4d:03:35:47:17:bf:6f:79:70:15:11:7c:e1:85:25:4a:0e: b7:85:e0:bd:1c:ca:38:25:f2:68:b9:5f:89:7f:57:f5:92:fd: a9:e7:98:6c:b0:6c:09:6c:87:12:22:37:b0:1c:67:49:44:df: 4d:ce:75:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x328JHGmp4liLD8bdZwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx NTZkN2MwHhcNMjUxMjIwMjIwMDQyWhcNMjUxMjIxMjIwMDQyWjAzMTEwLwYDVQQD Eyg2OWYzYWQ4OTFlNDU2NmMyYzZiNzQyMzk4MmFiNjhhZTZkMTY1MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Uu22QdJ88l7FiXTtNF9oYTlAb3P XWX1qipvg6eTT5BvdJC4go2xzG0Fhg+lEY2QtkpCHDuFPWpVL/qV0ZsFBvKffBke u7REIYU8/JqGTyz870LGUJODEJqNRGRtpirlRIPbwX8bnbktg9kLOvLwMishH+OP ocs6Y9bA5JJGwtdcbnzA0zkE9EsMZSTXVOKCmbipCMYqNuXf+lj6vSyWnndE3/0Q dWOsQqiqH2Z56YB5F3IFnbjovt+Omk1EuXcNMauTgsHgTLXCl4UXgqSiHTuGKrf2 YJ2lgjpDD690aYaolKh+RhQQdCR72PTcifCaXkzkeFHKmr1bCLL8UIc3/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnzrYkeRWbCxrdCOYKraK5tFlA5MB8GA1UdIwQY MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViL/xeLv qe6FVyFBhhRhKnSUwbbriTS3IsMkEtoVswajZnmnqMPycwkZ6iWkPhgq4xjoNAKO 7NtKAxtQIIluVLWygUzBhWcEufAr0eCiRJOnALjfjtk2gJJgY5ntIvl9PeLSNtyJ nnwuwSI39C8hJbM1I46n+CzsYOxkk6qbekvNDp/tFCEUMzfa1wt+gzWcCs72RFCj jVOMjL9id8Ejm0jW52cv6NwuB9+wsGFQVd9yFscAd9rK2Zome63oEywHugF7ES3P xU0DNUcXv295cBURfOGFJUoOt4XgvRzKOCXyaLlfiX9X9ZL9qeeYbLBsCWyHEiI3 sBxnSUTfTc51+w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:46 2025 by rpki-client