This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft File: W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json) Hash identifier: CknittytwzI7la+3UTxOViUaqT18T6Ux4b4Xf5HQoH0= Subject key identifier: 7B:D7:1F:5C:99:20:CC:CB:54:45:E3:16:54:73:52:F1:BC:D7:B9:00 Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Certificate serial: 019B39B45C9F92E48481FA299161E3ECCDA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft Manifest number: 1533 Signing time: Sat 20 Dec 2025 03:01:19 +0000 Manifest this update: Sat 20 Dec 2025 03:01:19 +0000 Manifest next update: Sun 21 Dec 2025 03:01:19 +0000 Files and hashes: 1: 279VdnG-Fdszjb2yG7-2IjnNQq8.roa (hash: 39BYbVFVCqd2qENpfGmBlifLRcfQzLv4w9dE1us6VMw=) 2: 4LSDpWlsgJw9Otx93_mKw6B9grg.roa (hash: c67VMb5sCTD5NQ5KlZtleOn3Nkqt4gilHv8oqn6VVoY=) 3: QZsEzF5Uanou3frIfzrz7sXtIzk.roa (hash: 6qhVEn0UXh14a1V5qFmAi7r1Lf/LN44JR4TpHEtpYIQ=) 4: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: A6GwZFrX0OtvSE7OmM9HvIO8bO6OX5nTFYN57B8T+2Q=) 5: _AxdM0TapJRwZRPAoGLBTsCIVsg.roa (hash: XGaXRToDPIvjJqkgJCg3fbR7ABXKEIiZ37d2bopOgi8=) 6: aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa (hash: WYgPsctqzKEHGx9t7skC8EcDRaeZlFuUGl3x2x/2Veg=) 7: ckuQTVeOTWmVeOP4EBOPI4_kTkg.roa (hash: lbXsTVgXldq8a0VyZZLgKrRQ4BJoKPMcORX5A8N1vSY=) 8: zFUuUqldPrww63cIqo-XRanNcj0.roa (hash: HhvvF7xBmpx9/nrDHNfcu7tTXTmL5HjPzqI7CeF2/lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:5c:9f:92:e4:84:81:fa:29:91:61:e3:ec:cd:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Validity Not Before: Dec 20 03:01:19 2025 GMT Not After : Dec 21 03:01:19 2025 GMT Subject: CN=7bd71f5c9920cccb5445e316547352f1bcd7b900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:bf:c3:7a:da:b6:b3:3a:a0:96:cb:48:4b: 01:cf:51:fd:e4:43:02:99:ce:e7:87:84:1f:b0:41: 61:43:9d:9e:83:53:80:3d:a4:ee:18:ae:01:9b:29: 37:d7:d5:70:dd:b4:f1:94:03:5d:35:c1:20:f5:e8: fd:64:14:f0:a6:28:90:dc:b8:65:ab:5b:50:4b:0e: 9c:c9:8c:95:f7:6e:a6:6f:d9:f7:c8:f6:32:b2:9a: 8b:a9:d0:b0:d6:35:8b:30:31:9b:5d:e2:01:07:01: c8:bc:36:4c:a3:dd:13:97:89:9c:a7:59:7a:9b:59: 6b:8f:f1:51:fa:37:54:c9:2a:4b:f1:b4:c5:31:40: 9c:8d:f6:6b:b1:9d:07:64:60:43:21:23:7f:7b:b5: ce:20:11:ff:d5:08:d4:3b:36:2c:81:5f:2c:e9:79: 52:5c:e1:70:bd:99:64:1c:59:d6:4e:79:4b:8c:d4: 3f:79:c5:a1:b0:20:7d:3c:47:19:a1:a0:6a:a6:04: a8:e4:53:e8:4b:9f:4f:bb:56:03:6e:54:be:b9:fa: fc:b6:a9:69:c3:75:41:f5:ef:df:98:9b:ee:ba:5e: 5e:6a:b8:d7:45:ce:a2:2b:91:2b:bf:78:9e:1b:f2: b6:ec:2c:55:08:75:cc:de:9f:24:7b:f3:38:5f:6a: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:1F:5C:99:20:CC:CB:54:45:E3:16:54:73:52:F1:BC:D7:B9:00 X509v3 Authority Key Identifier: keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8f:b4:1e:10:f1:1c:c3:e6:7f:56:20:9f:ac:02:89:05:1d: d5:8f:7c:1b:38:d6:d3:58:f1:b7:6d:24:64:91:20:7d:64:8d: 6c:da:dc:0d:e3:25:3a:de:11:98:83:54:57:81:4e:a2:ea:8d: 6e:f1:b2:1f:13:18:ae:21:b1:6c:02:32:c5:54:4f:0d:d4:55: db:08:50:c5:d0:dd:f3:a5:7f:84:96:20:bd:ee:34:a9:a2:f0: 44:59:05:e4:cf:a4:cf:c2:70:23:0a:f5:f2:b4:c6:50:66:63: 7c:88:cc:14:5f:d1:15:92:48:af:1e:67:a8:2a:07:5c:05:5b: e4:42:32:15:e0:b3:0c:08:ba:3a:7d:82:76:ac:b7:40:41:2f: 06:28:0b:f4:fa:2a:37:95:d4:74:cb:05:4a:c8:7d:2a:f9:97: 53:ce:85:78:2d:cf:8f:e9:e4:eb:98:99:20:7c:1c:4d:d3:63: 3f:29:43:63:56:cc:91:1e:2a:ec:4c:ce:9c:d2:fb:82:c9:50: 4b:f2:22:2a:03:cf:51:de:3d:96:f9:49:cd:86:0a:7d:0f:19: 1c:4d:34:fb:1d:e9:60:b7:37:f7:6a:52:40:74:2c:99:91:15: b9:40:73:60:00:05:54:9a:ae:8e:d1:f8:dc:a1:14:a8:e2:68: a0:9b:2c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFyfkuSEgfopkWHj7M2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3 YjlmYzEwHhcNMjUxMjIwMDMwMTE5WhcNMjUxMjIxMDMwMTE5WjAzMTEwLwYDVQQD Eyg3YmQ3MWY1Yzk5MjBjY2NiNTQ0NWUzMTY1NDczNTJmMWJjZDdiOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a6/w3ratrM6oJbLSEsBz1H95EMC mc7nh4QfsEFhQ52eg1OAPaTuGK4Bmyk319Vw3bTxlANdNcEg9ej9ZBTwpiiQ3Lhl q1tQSw6cyYyV926mb9n3yPYyspqLqdCw1jWLMDGbXeIBBwHIvDZMo90Tl4mcp1l6 m1lrj/FR+jdUySpL8bTFMUCcjfZrsZ0HZGBDISN/e7XOIBH/1QjUOzYsgV8s6XlS XOFwvZlkHFnWTnlLjNQ/ecWhsCB9PEcZoaBqpgSo5FPoS59Pu1YDblS+ufr8tqlp w3VB9e/fmJvuul5earjXRc6iK5Erv3ieG/K27CxVCHXM3p8ke/M4X2q8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvXH1yZIMzLVEXjFlRzUvG817kAMB8GA1UdIwQY MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt YTUyYTg3OTVkOTU2LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2 LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACY+0HhDx HMPmf1Ygn6wCiQUd1Y98GzjW01jxt20kZJEgfWSNbNrcDeMlOt4RmINUV4FOouqN bvGyHxMYriGxbAIyxVRPDdRV2whQxdDd86V/hJYgve40qaLwRFkF5M+kz8JwIwr1 8rTGUGZjfIjMFF/RFZJIrx5nqCoHXAVb5EIyFeCzDAi6On2Cdqy3QEEvBigL9Poq N5XUdMsFSsh9KvmXU86FeC3Pj+nk65iZIHwcTdNjPylDY1bMkR4q7EzOnNL7gslQ S/IiKgPPUd49lvlJzYYKfQ8ZHE00+x3pYLc392pSQHQsmZEVuUBzYAAFVJqujtH4 3KEUqOJooJssdQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:03:17 2025 by rpki-client