This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json) Hash identifier: 8+O5dDPaBtpGt+OhhehOpIu5bLkwugYYzp20s6FiFKA= Subject key identifier: 9F:67:69:9C:0D:E2:C9:AB:29:D8:A7:DF:1C:8D:5C:E3:B4:63:E8:12 Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Certificate serial: 019B3F11460DD01E11936FF247A8DCF0486B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft Manifest number: 023C Signing time: Sun 21 Dec 2025 04:00:55 +0000 Manifest this update: Sun 21 Dec 2025 04:00:55 +0000 Manifest next update: Mon 22 Dec 2025 04:00:55 +0000 Files and hashes: 1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=) 2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: CPtIsrmcsYPML7UdsEchSjTxLdxWewxC0zxITbsDhMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:46:0d:d0:1e:11:93:6f:f2:47:a8:dc:f0:48:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Validity Not Before: Dec 21 04:00:55 2025 GMT Not After : Dec 22 04:00:55 2025 GMT Subject: CN=9f67699c0de2c9ab29d8a7df1c8d5ce3b463e812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:20:3f:45:3d:7e:75:4e:9c:4c:ac:3d:55: 74:ac:8d:89:5e:98:fa:d4:42:fd:58:f3:b6:ce:29: 5b:07:60:44:23:80:9c:4e:2e:5b:b8:5f:60:8f:d7: 61:14:7d:77:9b:65:e1:c9:92:3a:d3:e2:fd:93:78: a2:f3:54:ad:dc:ee:a8:58:94:b8:c8:28:8d:57:2f: c6:5a:7d:29:d7:48:a8:2c:af:f4:a4:67:f2:e7:26: e1:af:dc:24:39:5b:40:c8:a4:fe:7a:c8:45:44:35: 7f:ab:21:1c:23:c5:bd:d1:68:26:f0:f2:83:f3:72: c2:5c:e5:ba:f2:f2:4d:d0:f7:ce:6a:a5:3d:d8:29: 1b:30:cb:96:c1:75:44:ac:b4:65:c9:8b:a3:2a:8a: e9:8b:28:26:1b:3e:b9:e5:64:20:cf:15:1e:a4:b1: 1f:be:a3:8c:dc:99:b8:61:06:17:fa:98:f3:2d:c6: f6:4d:05:d5:25:5a:b9:9f:28:9f:4c:4e:c3:b7:aa: 14:03:f7:9a:70:bf:d7:44:78:a6:f9:78:05:39:7e: 73:f5:45:fb:60:26:b7:6c:7f:01:f4:ba:08:b2:a7: 7f:03:ea:24:59:92:73:01:4c:25:7b:7c:da:54:4f: 82:00:17:2d:d6:04:98:d3:28:40:15:60:26:9d:bf: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:67:69:9C:0D:E2:C9:AB:29:D8:A7:DF:1C:8D:5C:E3:B4:63:E8:12 X509v3 Authority Key Identifier: keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:17:30:1f:16:1e:d8:8d:89:b2:e8:ff:4e:36:99:f1:aa:72: c2:14:85:02:eb:c6:0c:de:2a:f6:aa:3f:c2:38:09:63:14:1b: e5:be:6e:32:04:0d:5c:86:cf:9f:d9:50:85:2b:1d:b1:99:c0: 7a:47:c4:09:50:b4:03:e7:f7:92:f1:b3:7a:5e:44:64:ea:02: 05:63:d7:40:cf:44:e1:ff:9c:be:02:90:89:00:ea:f5:cd:67: da:d2:07:ea:7a:50:6d:77:f6:50:e1:a6:37:72:ff:e0:98:9d: 6b:d3:db:ab:d7:a0:5a:09:67:8d:fb:6f:8b:a7:7c:59:e7:30: bf:35:3e:d9:e0:04:4e:ed:82:b0:82:8e:09:09:d7:e2:db:c2: 3c:da:7c:34:b9:15:d1:b2:a2:7e:b9:f4:18:e3:cb:28:87:c0: 8d:88:bb:03:5f:81:a4:52:0a:97:a4:20:64:70:20:3b:d8:51: 82:f7:83:c9:37:2a:bf:26:88:37:18:4d:ec:41:47:2e:cf:2d: 7f:70:4e:0d:59:5f:01:53:35:e6:0b:ca:b2:36:7a:7b:29:ad: c9:09:4f:a5:77:c2:53:d1:5e:81:d0:f5:70:56:d4:df:a0:e5: 87:2f:f4:08:61:cc:9a:ae:78:68:aa:2a:21:4a:de:3a:13:b7: 04:fe:6d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EUYN0B4Rk2/yR6jc8EhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOGIyNmM1MzJmYmM1MmI1ZGU2NzJhYjM1NzYxZDFjN2Q5 N2ViMjYwHhcNMjUxMjIxMDQwMDU1WhcNMjUxMjIyMDQwMDU1WjAzMTEwLwYDVQQD Eyg5ZjY3Njk5YzBkZTJjOWFiMjlkOGE3ZGYxYzhkNWNlM2I0NjNlODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOkgP0U9fnVOnEysPVV0rI2JXpj6 1EL9WPO2zilbB2BEI4CcTi5buF9gj9dhFH13m2XhyZI60+L9k3ii81St3O6oWJS4 yCiNVy/GWn0p10ioLK/0pGfy5ybhr9wkOVtAyKT+eshFRDV/qyEcI8W90Wgm8PKD 83LCXOW68vJN0PfOaqU92CkbMMuWwXVErLRlyYujKorpiygmGz655WQgzxUepLEf vqOM3Jm4YQYX+pjzLcb2TQXVJVq5nyifTE7Dt6oUA/eacL/XRHim+XgFOX5z9UX7 YCa3bH8B9LoIsqd/A+okWZJzAUwle3zaVE+CABct1gSY0yhAFWAmnb9mBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9naZwN4smrKdin3xyNXOO0Y+gSMB8GA1UdIwQY MBaAFFuLJsUy+8UrXeZyqzV2HRx9l+smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMt ZTcyZTliNGI3NjU4LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMtZTcyZTliNGI3NjU4 LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRcwHxYe 2I2Jsuj/TjaZ8apywhSFAuvGDN4q9qo/wjgJYxQb5b5uMgQNXIbPn9lQhSsdsZnA ekfECVC0A+f3kvGzel5EZOoCBWPXQM9E4f+cvgKQiQDq9c1n2tIH6npQbXf2UOGm N3L/4Jida9Pbq9egWglnjftvi6d8WecwvzU+2eAETu2CsIKOCQnX4tvCPNp8NLkV 0bKifrn0GOPLKIfAjYi7A1+BpFIKl6QgZHAgO9hRgveDyTcqvyaINxhN7EFHLs8t f3BODVlfAVM15gvKsjZ6eymtyQlPpXfCU9FegdD1cFbU36Dlhy/0CGHMmq54aKoq IUreOhO3BP5tFg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:17 2025 by rpki-client