This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft File: W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json) Hash identifier: 6DTErAztb8VT6lfRl9s7g6dwPGHj+1kJ0MOIOmeneqk= Subject key identifier: A9:D0:C9:2F:F1:66:0A:E5:F2:8D:30:EB:2D:C0:71:8E:83:99:D6:41 Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Certificate serial: 019B777FCA6D293C2FD262BF773933A2FCC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft Manifest number: 1553 Signing time: Thu 01 Jan 2026 03:00:22 +0000 Manifest this update: Thu 01 Jan 2026 03:00:22 +0000 Manifest next update: Fri 02 Jan 2026 03:00:22 +0000 Files and hashes: 1: 279VdnG-Fdszjb2yG7-2IjnNQq8.roa (hash: 39BYbVFVCqd2qENpfGmBlifLRcfQzLv4w9dE1us6VMw=) 2: 4LSDpWlsgJw9Otx93_mKw6B9grg.roa (hash: c67VMb5sCTD5NQ5KlZtleOn3Nkqt4gilHv8oqn6VVoY=) 3: QZsEzF5Uanou3frIfzrz7sXtIzk.roa (hash: 6qhVEn0UXh14a1V5qFmAi7r1Lf/LN44JR4TpHEtpYIQ=) 4: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: R2PIXu/v2aVFdHcFP3NZQEd0WGiabOZD13ayWm+k+IU=) 5: _AxdM0TapJRwZRPAoGLBTsCIVsg.roa (hash: XGaXRToDPIvjJqkgJCg3fbR7ABXKEIiZ37d2bopOgi8=) 6: aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa (hash: WYgPsctqzKEHGx9t7skC8EcDRaeZlFuUGl3x2x/2Veg=) 7: ckuQTVeOTWmVeOP4EBOPI4_kTkg.roa (hash: lbXsTVgXldq8a0VyZZLgKrRQ4BJoKPMcORX5A8N1vSY=) 8: zFUuUqldPrww63cIqo-XRanNcj0.roa (hash: HhvvF7xBmpx9/nrDHNfcu7tTXTmL5HjPzqI7CeF2/lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:7f:ca:6d:29:3c:2f:d2:62:bf:77:39:33:a2:fc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Validity Not Before: Jan 1 03:00:22 2026 GMT Not After : Jan 2 03:00:22 2026 GMT Subject: CN=a9d0c92ff1660ae5f28d30eb2dc0718e8399d641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:11:57:59:bc:6e:c1:4f:e9:a3:3e:4c:ea: b1:fb:c0:83:17:7d:e2:0e:ed:1d:4b:d7:c2:0c:73: 30:5e:32:31:44:66:76:2f:86:08:5b:11:65:d8:37: 25:39:3c:fc:6e:6d:33:da:28:67:92:f9:43:a8:fd: d7:7f:82:ff:81:22:78:7f:1d:b7:1c:ab:c6:1f:d5: 32:18:d1:de:f2:36:5b:5e:39:5d:39:79:91:46:b0: 6c:15:80:aa:36:b4:82:fb:6e:c9:15:f8:d2:d7:a1: d5:7d:47:c7:66:41:fe:a6:eb:61:91:50:af:63:11: 00:38:56:9d:63:52:9e:b1:5d:fe:9b:b3:94:26:a8: 96:32:d3:57:8b:e2:3d:35:b1:b4:b6:a5:82:f8:38: 0d:26:22:72:fd:2e:8a:d0:14:de:d0:5d:79:53:f1: 98:55:b0:44:4c:2f:7e:29:14:f4:95:12:02:63:76: 03:b5:55:2b:cc:55:f1:a2:63:44:9d:1a:71:20:d3: 11:99:53:34:8f:ae:67:9f:bf:02:cb:e9:59:98:39: 01:2a:2d:1e:e0:2b:f9:10:f0:ac:80:b1:b8:c3:66: 8e:1c:23:1a:c0:1a:32:8e:01:b2:a2:98:e1:5e:79: 13:39:ed:0f:0b:d6:53:57:23:33:7f:7a:b8:26:36: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D0:C9:2F:F1:66:0A:E5:F2:8D:30:EB:2D:C0:71:8E:83:99:D6:41 X509v3 Authority Key Identifier: keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:59:f8:ad:f3:57:7e:57:05:52:8f:a9:2e:83:2c:4d:a6:61: a6:72:a9:47:51:9f:ec:ed:5b:ec:cb:ce:fe:a0:10:16:97:62: bb:0a:04:32:4d:ee:2b:b3:41:5f:8a:5b:08:69:a5:86:1c:86: aa:9c:3e:26:32:09:4f:aa:40:20:28:a2:99:0b:1d:55:37:b5: 51:c9:d7:80:fd:49:c9:d0:82:47:40:d2:8c:be:ff:0f:e0:f5: 89:90:02:6d:cc:43:10:3c:c0:3a:bf:e9:7d:01:fe:26:48:24: 9c:a9:7d:b4:ed:7c:74:fd:0d:27:2e:32:8e:76:4e:1c:6e:92: 49:cb:a8:1c:9f:04:64:81:e3:ef:e8:ba:de:33:0b:1d:f1:37: ff:b7:90:b5:ee:49:68:a5:c5:90:03:b6:13:40:f0:64:ca:fb: d7:a1:e8:db:cf:d0:b2:94:50:3e:c8:cd:86:b1:45:13:5a:90: ee:52:f8:af:32:5b:ea:7a:8a:85:95:bf:40:4a:87:2d:ea:5c: 2d:a5:a0:b5:e7:ce:a4:b6:80:f6:8d:20:a7:14:1a:45:42:57: b2:67:81:bd:d0:d3:70:f3:9a:2d:3f:e8:32:77:3c:0b:2a:1f: 60:f8:cd:2d:f7:39:a4:81:11:8f:1d:c8:fa:8f:d8:4d:f5:37: 9e:98:7f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3f8ptKTwv0mK/dzkzovzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3 YjlmYzEwHhcNMjYwMTAxMDMwMDIyWhcNMjYwMTAyMDMwMDIyWjAzMTEwLwYDVQQD EyhhOWQwYzkyZmYxNjYwYWU1ZjI4ZDMwZWIyZGMwNzE4ZTgzOTlkNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ERV1m8bsFP6aM+TOqx+8CDF33i Du0dS9fCDHMwXjIxRGZ2L4YIWxFl2DclOTz8bm0z2ihnkvlDqP3Xf4L/gSJ4fx23 HKvGH9UyGNHe8jZbXjldOXmRRrBsFYCqNrSC+27JFfjS16HVfUfHZkH+puthkVCv YxEAOFadY1KesV3+m7OUJqiWMtNXi+I9NbG0tqWC+DgNJiJy/S6K0BTe0F15U/GY VbBETC9+KRT0lRICY3YDtVUrzFXxomNEnRpxINMRmVM0j65nn78Cy+lZmDkBKi0e 4Cv5EPCsgLG4w2aOHCMawBoyjgGyopjhXnkTOe0PC9ZTVyMzf3q4JjYV3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnQyS/xZgrl8o0w6y3AcY6DmdZBMB8GA1UdIwQY MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt YTUyYTg3OTVkOTU2LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2 LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1n4rfNX flcFUo+pLoMsTaZhpnKpR1Gf7O1b7MvO/qAQFpdiuwoEMk3uK7NBX4pbCGmlhhyG qpw+JjIJT6pAICiimQsdVTe1UcnXgP1JydCCR0DSjL7/D+D1iZACbcxDEDzAOr/p fQH+JkgknKl9tO18dP0NJy4yjnZOHG6SScuoHJ8EZIHj7+i63jMLHfE3/7eQte5J aKXFkAO2E0DwZMr716Ho28/QspRQPsjNhrFFE1qQ7lL4rzJb6nqKhZW/QEqHLepc LaWgtefOpLaA9o0gpxQaRUJXsmeBvdDTcPOaLT/oMnc8CyofYPjNLfc5pIERjx3I +o/YTfU3nph/fg== -----END CERTIFICATE-----Generated at Thu Jan 1 05:51:54 2026 by rpki-client