This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft File: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft (raw, json) Hash identifier: o4RmfaOW2BZJQEKCCQdsp/OuNTPKf/Tx34qm0iGSIgU= Subject key identifier: E1:67:96:2F:EF:3F:77:1F:85:5D:B1:68:CA:6B:8E:9D:A6:3C:57:FA Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6 Certificate issuer: /CN=5be39da3aaa52d130ff074fb049221966d2b57c6 Certificate serial: 019B3C7F9E323C540B91D771BAA97D5694C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft Manifest number: 1728 Signing time: Sat 20 Dec 2025 16:02:34 +0000 Manifest this update: Sat 20 Dec 2025 16:02:34 +0000 Manifest next update: Sun 21 Dec 2025 16:02:34 +0000 Files and hashes: 1: Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa (hash: PzV+Hvm8wXtJUXwK3RxNsLo6F6xHiBk0IePHLXsbPqk=) 2: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl (hash: s2zwArRULUTVtvoXrFHOdtcMF4t/F2L7V52qu4Zops0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:9e:32:3c:54:0b:91:d7:71:ba:a9:7d:56:94:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6 Validity Not Before: Dec 20 16:02:34 2025 GMT Not After : Dec 21 16:02:34 2025 GMT Subject: CN=e167962fef3f771f855db168ca6b8e9da63c57fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:11:76:e6:d2:dd:68:af:d1:1f:28:fd:0e: be:02:f6:f0:d2:bc:22:50:06:83:4b:03:ff:73:2b: 2e:65:7e:b3:1a:41:2f:6f:95:86:20:dd:0e:0a:58: 49:25:64:f7:db:cc:22:32:b5:bb:05:0e:64:7c:d5: 8d:5d:60:6e:b5:fb:78:8e:70:6e:66:32:02:1b:96: 72:ed:a8:25:6f:1c:59:42:54:5e:e6:fa:ed:d4:d9: 9b:a1:1a:bd:a9:82:60:c3:53:f0:93:37:ff:46:e4: c7:73:8a:3e:89:a3:eb:01:3c:35:c9:50:19:9c:ac: 84:c9:2f:73:72:ec:fc:bd:c3:da:92:45:9f:6b:07: 67:7c:46:9b:05:b9:8a:51:05:88:dc:93:d3:7b:59: 58:0b:bd:9d:57:8e:0d:30:06:46:91:0f:87:ab:39: d5:42:86:ef:c0:85:39:1d:ac:a2:8e:d0:88:b8:c6: 79:24:aa:56:9f:dd:ee:d1:38:3a:bc:09:de:41:c4: 03:7c:b7:0c:ee:67:bd:86:67:36:09:d4:90:86:b5: 01:19:b9:3a:9e:81:a5:c7:63:a6:8d:e4:f5:5a:6c: 2a:72:9e:4c:6c:05:38:96:95:80:76:2d:dd:eb:97: ef:18:11:dc:4e:08:f9:5e:99:4c:d2:53:16:ac:22: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:67:96:2F:EF:3F:77:1F:85:5D:B1:68:CA:6B:8E:9D:A6:3C:57:FA X509v3 Authority Key Identifier: keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:53:3c:06:c2:23:c7:e0:a5:46:f9:a0:de:30:db:de:3b:ea: 98:9c:30:c0:ee:9c:13:0c:fa:a0:c7:ef:96:7c:24:e4:09:ce: f9:ac:e4:ec:54:d9:2c:a1:6c:9e:90:ff:80:4d:9f:a9:26:07: b7:ee:81:af:c1:ae:fb:7a:65:70:88:7c:c6:8d:d5:7f:3e:c1: 64:ba:e4:51:e4:8f:98:25:b0:5c:e1:03:cb:0b:91:ba:4c:9d: 33:a6:49:97:25:ed:c1:33:de:c1:c9:86:31:d5:12:13:d5:7e: f9:16:23:00:6e:b9:12:e8:27:1e:6a:67:f5:07:eb:33:24:33: 73:22:50:5e:90:78:3d:97:a1:62:5b:e5:c1:ff:67:ad:68:be: 37:aa:b5:69:a6:c6:2b:00:f5:d9:3e:fd:23:ad:73:a0:a2:a5: 02:55:e4:e7:fc:56:a1:e1:e4:ff:a9:20:75:18:ce:a4:21:4a: e2:cb:9e:58:34:27:38:6d:7f:b5:10:c6:f0:27:67:cc:36:a0: 3e:56:82:7a:4e:e3:f0:6b:93:6d:6c:c4:89:7d:ef:e4:af:ce: 06:26:e0:e0:b2:e9:71:16:cb:0b:4a:08:dc:1c:54:2c:9c:47: cb:1a:6d:e7:25:3d:b7:b0:59:5e:0e:11:43:64:7c:61:33:fb: 30:a9:93:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f54yPFQLkddxuql9VpTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTM5ZGEzYWFhNTJkMTMwZmYwNzRmYjA0OTIyMTk2NmQy YjU3YzYwHhcNMjUxMjIwMTYwMjM0WhcNMjUxMjIxMTYwMjM0WjAzMTEwLwYDVQQD EyhlMTY3OTYyZmVmM2Y3NzFmODU1ZGIxNjhjYTZiOGU5ZGE2M2M1N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRURdubS3Wiv0R8o/Q6+Avbw0rwi UAaDSwP/cysuZX6zGkEvb5WGIN0OClhJJWT328wiMrW7BQ5kfNWNXWButft4jnBu ZjICG5Zy7aglbxxZQlRe5vrt1NmboRq9qYJgw1Pwkzf/RuTHc4o+iaPrATw1yVAZ nKyEyS9zcuz8vcPakkWfawdnfEabBbmKUQWI3JPTe1lYC72dV44NMAZGkQ+HqznV QobvwIU5HayijtCIuMZ5JKpWn93u0Tg6vAneQcQDfLcM7me9hmc2CdSQhrUBGbk6 noGlx2OmjeT1Wmwqcp5MbAU4lpWAdi3d65fvGBHcTgj5XplM0lMWrCJWYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFnli/vP3cfhV2xaMprjp2mPFf6MB8GA1UdIwQY MBaAFFvjnaOqpS0TD/B0+wSSIZZtK1fGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUt ZTg3MmMwZDQwOGEzLzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUtZTg3MmMwZDQwOGEz LzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1M8BsIj x+ClRvmg3jDb3jvqmJwwwO6cEwz6oMfvlnwk5AnO+azk7FTZLKFsnpD/gE2fqSYH t+6Br8Gu+3plcIh8xo3Vfz7BZLrkUeSPmCWwXOEDywuRukydM6ZJlyXtwTPewcmG MdUSE9V++RYjAG65EugnHmpn9QfrMyQzcyJQXpB4PZehYlvlwf9nrWi+N6q1aabG KwD12T79I61zoKKlAlXk5/xWoeHk/6kgdRjOpCFK4sueWDQnOG1/tRDG8CdnzDag PlaCek7j8GuTbWzEiX3v5K/OBibg4LLpcRbLC0oI3BxULJxHyxpt5yU9t7BZXg4R Q2R8YTP7MKmTrA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:11 2025 by rpki-client