This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json) Hash identifier: CQ32VzBLTSSOQqBrATmJRHfQhzepS4o+7OEtMRWNqhY= Subject key identifier: 80:C3:E2:2F:12:B0:42:D5:63:09:B6:15:40:0E:69:85:B2:AE:19:33 Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Certificate serial: 019B3D59C8F35719A9347BA909FB022FE8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 20:00:52 +0000 Manifest this update: Sat 20 Dec 2025 20:00:52 +0000 Manifest next update: Sun 21 Dec 2025 20:00:52 +0000 Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: h+lBSq1QwU+8jJaawaf3MxlQ8Os0a2p+lbdw2q+0n40=) 2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c8:f3:57:19:a9:34:7b:a9:09:fb:02:2f:e8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Validity Not Before: Dec 20 20:00:52 2025 GMT Not After : Dec 21 20:00:52 2025 GMT Subject: CN=80c3e22f12b042d56309b615400e6985b2ae1933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:13:1f:c7:44:d5:c8:54:47:32:3c:fd:47: 15:5f:52:64:8b:85:e1:ef:82:f1:eb:8d:3c:a5:6d: d4:05:20:89:22:92:ef:f8:2c:7f:87:04:2e:39:67: 14:41:c2:5b:cc:dd:d2:cd:ad:dc:a9:9a:ca:17:f0: 84:91:4c:3e:e7:03:39:3e:d2:ec:75:f6:d0:4a:6d: 2d:69:7f:9c:b1:ee:5c:aa:35:37:b7:fb:f9:79:8c: bf:dd:04:c5:80:7e:bf:fc:6a:28:9b:0d:a6:69:a6: fc:ef:ab:b7:2a:f8:a1:6a:af:10:f8:14:ea:6f:06: 2c:f6:45:97:cc:b7:7a:ba:07:12:6b:5d:91:63:d2: 5c:c8:bf:c0:4d:5e:59:92:e1:29:8b:09:61:d0:e1: 28:67:96:15:de:e1:95:13:52:10:ba:a9:be:9b:ea: b4:14:a7:09:3a:88:22:58:49:b6:85:98:ea:ac:bd: 7e:37:3c:d9:27:de:fa:08:a0:79:cc:cc:cb:3e:5d: 72:f7:b8:73:98:9c:bb:b0:77:e5:71:9d:bc:a1:52: 89:32:4a:3a:10:c6:2e:1e:00:ad:03:08:1d:1a:ef: 53:ca:1b:e8:65:26:38:48:10:ad:9b:74:23:a9:9b: 87:f0:ad:06:5e:bb:68:5f:7c:76:8a:39:f5:e0:fd: 70:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C3:E2:2F:12:B0:42:D5:63:09:B6:15:40:0E:69:85:B2:AE:19:33 X509v3 Authority Key Identifier: keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:22:4e:57:ec:39:30:01:47:16:3e:5f:c9:53:50:ee:74:05: 51:95:72:60:99:5a:10:33:ce:b5:d8:72:e2:8f:0e:67:a3:87: b2:fe:28:53:8b:7f:d9:80:2d:66:9c:30:03:0f:62:cd:43:df: 60:eb:1b:2d:7b:20:a2:32:10:7f:68:cb:cc:5b:ef:c2:ff:fa: 7a:c3:cf:ef:bd:2f:aa:20:f2:a9:29:2d:6c:90:cc:cd:46:55: 39:15:67:49:37:27:7d:28:d4:27:e2:0b:12:11:d5:e9:e4:1e: 18:f4:d8:ec:0b:55:e2:01:42:8b:7c:03:95:04:bd:7b:b9:45: 5d:94:a6:76:fa:f6:ea:5f:41:b3:88:31:c9:0e:67:15:b3:26: ed:72:fe:98:87:67:2c:3e:d4:b5:0a:29:d5:0a:fa:d0:79:3e: ef:7c:18:9a:fe:4a:f2:fd:e4:6f:2f:0b:14:e6:5e:df:75:e6: be:e8:4a:2a:4f:96:be:17:5b:07:b9:67:69:a2:a9:20:77:98: 80:c1:3d:0a:35:4b:be:5b:a3:0f:e6:22:75:62:80:96:52:56: f0:75:6a:fd:4d:b5:30:00:76:30:cc:0a:15:ec:6f:c4:71:2f: f3:a9:ca:27:8d:91:5f:09:7f:21:db:8e:49:5a:b9:3c:fc:74: 45:de:da:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcjzVxmpNHupCfsCL+j5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOWE0MGZjM2YzNTBhYmRhNTlkYmZjMDFjYTM3YTQ2ZDhk NzQ3NjQwHhcNMjUxMjIwMjAwMDUyWhcNMjUxMjIxMjAwMDUyWjAzMTEwLwYDVQQD Eyg4MGMzZTIyZjEyYjA0MmQ1NjMwOWI2MTU0MDBlNjk4NWIyYWUxOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriUTH8dE1chURzI8/UcVX1Jki4Xh 74Lx6408pW3UBSCJIpLv+Cx/hwQuOWcUQcJbzN3Sza3cqZrKF/CEkUw+5wM5PtLs dfbQSm0taX+cse5cqjU3t/v5eYy/3QTFgH6//Goomw2maab876u3Kvihaq8Q+BTq bwYs9kWXzLd6ugcSa12RY9JcyL/ATV5ZkuEpiwlh0OEoZ5YV3uGVE1IQuqm+m+q0 FKcJOogiWEm2hZjqrL1+NzzZJ976CKB5zMzLPl1y97hzmJy7sHflcZ28oVKJMko6 EMYuHgCtAwgdGu9TyhvoZSY4SBCtm3QjqZuH8K0GXrtoX3x2ijn14P1wXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDD4i8SsELVYwm2FUAOaYWyrhkzMB8GA1UdIwQY MBaAFFuaQPw/NQq9pZ2/wByjekbY10dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjkt NzI1Mzc1MjZhZWUyLzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjktNzI1Mzc1MjZhZWUy LzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1yJOV+w5 MAFHFj5fyVNQ7nQFUZVyYJlaEDPOtdhy4o8OZ6OHsv4oU4t/2YAtZpwwAw9izUPf YOsbLXsgojIQf2jLzFvvwv/6esPP770vqiDyqSktbJDMzUZVORVnSTcnfSjUJ+IL EhHV6eQeGPTY7AtV4gFCi3wDlQS9e7lFXZSmdvr26l9Bs4gxyQ5nFbMm7XL+mIdn LD7UtQop1Qr60Hk+73wYmv5K8v3kby8LFOZe33XmvuhKKk+WvhdbB7lnaaKpIHeY gME9CjVLvlujD+YidWKAllJW8HVq/U21MAB2MMwKFexvxHEv86nKJ42RXwl/IduO SVq5PPx0Rd7a0Q== -----END CERTIFICATE-----Generated at Sat Dec 20 22:24:41 2025 by rpki-client