This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft File: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json) Hash identifier: aVPh43fLWxVtCldyZvp1COxMoKRlI/pvC4t4X3L0cR4= Subject key identifier: F9:1C:98:75:AB:43:7F:7F:19:9D:06:DD:E9:D8:D9:74:76:7C:51:69 Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4 Certificate issuer: /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4 Certificate serial: 019B6B45C802BFFB114AC99F50B3F53F1B34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft Manifest number: 1539 Signing time: Mon 29 Dec 2025 18:01:33 +0000 Manifest this update: Mon 29 Dec 2025 18:01:33 +0000 Manifest next update: Tue 30 Dec 2025 18:01:33 +0000 Files and hashes: 1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: IDKF2JOmvdEwbtHvD8rojaNDtsgEWO9YFo6dlT1iNQc=) 2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:c8:02:bf:fb:11:4a:c9:9f:50:b3:f5:3f:1b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4 Validity Not Before: Dec 29 18:01:33 2025 GMT Not After : Dec 30 18:01:33 2025 GMT Subject: CN=f91c9875ab437f7f199d06dde9d8d974767c5169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:7b:d0:9d:af:e0:e3:ed:4e:bb:94:7d:63: 6f:a9:b1:ec:fe:c2:b0:84:38:b5:99:18:7b:26:d6: 9f:4c:8a:e2:a1:f1:95:a3:7f:7c:20:37:98:df:76: c1:c5:38:0b:93:28:28:22:f0:4a:6a:32:42:05:0c: 0a:a1:89:a2:32:ef:2f:02:c8:a4:64:74:f0:4a:70: 87:16:0a:df:bd:26:b0:b1:b7:b2:44:b9:30:37:61: c1:19:81:d5:25:4c:e4:ce:d6:c0:1f:2f:7f:71:52: d5:47:97:1a:fc:c4:4d:2c:e7:b5:7b:ae:e5:65:92: 04:e9:13:57:8c:81:c5:ba:06:16:b8:29:3f:92:fc: 83:b3:f0:b9:88:6c:be:f2:8d:39:b3:b6:1e:a9:87: fd:f8:c9:6e:f3:0e:e5:63:8a:8e:bd:68:48:2b:55: f2:a2:22:07:5e:ae:f7:5a:fe:61:10:ea:7b:91:86: 2d:51:c5:2e:48:fd:5f:69:b7:e7:80:93:1b:73:9f: d2:a2:ab:3d:46:5b:b0:fd:f1:5d:da:3b:cd:fc:1f: ae:1a:0a:df:ed:db:99:b8:be:25:85:11:e7:58:e9: 69:ef:9e:7a:05:81:b3:9d:24:d8:62:ca:af:0a:f1: 5d:f1:21:c8:11:a5:ef:b0:ab:dd:d1:32:de:ad:b2: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:98:75:AB:43:7F:7F:19:9D:06:DD:E9:D8:D9:74:76:7C:51:69 X509v3 Authority Key Identifier: keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d6:8b:a3:c8:78:31:77:38:67:96:8a:aa:3d:52:56:ec:90: 47:06:31:32:5e:c6:be:61:b4:7b:d0:4b:2c:08:82:e6:f9:0d: e2:3a:5e:f5:58:7e:ac:7b:e2:14:fa:a6:5f:9e:36:16:97:c2: 51:2e:0f:65:45:dc:9b:ef:7e:3d:be:36:f8:d0:51:53:7e:0c: b8:6b:2e:dd:4e:49:ea:69:6f:9d:4a:12:1c:fb:ba:bb:c7:e3: 78:ab:31:af:0e:78:5b:68:f6:8e:8d:52:29:65:53:93:ab:8a: 57:36:23:b9:04:4e:85:52:df:e2:5a:12:0b:9c:69:5c:55:06: 53:98:f1:46:a5:ee:a6:e9:f6:b5:fb:86:9f:36:d8:16:a9:e6: ee:a5:54:27:69:2b:c6:ad:20:fa:ad:43:73:a0:f7:61:14:b1: c1:ff:92:94:f0:f3:75:41:fa:7b:8d:ab:d5:71:34:de:e9:b8: 13:7c:9e:34:7c:fe:82:a4:4b:84:4e:cb:b2:55:55:47:6e:4f: 3e:2f:a7:91:96:ee:1b:19:5a:ff:aa:90:59:59:47:df:27:70: 5a:dc:28:7b:fd:99:c7:4b:d1:b0:a1:f8:af:dc:a1:c5:e9:f0: c1:10:2a:ee:4e:37:6a:62:7d:f6:a1:60:17:2b:cb:24:1f:6d: 5c:f5:31:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRcgCv/sRSsmfULP1Pxs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTVmMTk1M2UwMzFkMjc5ODY0ZjNjM2JlZmYwYmM2NzVh MDBlZTQwHhcNMjUxMjI5MTgwMTMzWhcNMjUxMjMwMTgwMTMzWjAzMTEwLwYDVQQD EyhmOTFjOTg3NWFiNDM3ZjdmMTk5ZDA2ZGRlOWQ4ZDk3NDc2N2M1MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLV70J2v4OPtTruUfWNvqbHs/sKw hDi1mRh7JtafTIriofGVo398IDeY33bBxTgLkygoIvBKajJCBQwKoYmiMu8vAsik ZHTwSnCHFgrfvSawsbeyRLkwN2HBGYHVJUzkztbAHy9/cVLVR5ca/MRNLOe1e67l ZZIE6RNXjIHFugYWuCk/kvyDs/C5iGy+8o05s7YeqYf9+Mlu8w7lY4qOvWhIK1Xy oiIHXq73Wv5hEOp7kYYtUcUuSP1fabfngJMbc5/Soqs9Rluw/fFd2jvN/B+uGgrf 7duZuL4lhRHnWOlp7556BYGznSTYYsqvCvFd8SHIEaXvsKvd0TLerbKiSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkcmHWrQ39/GZ0G3enY2XR2fFFpMB8GA1UdIwQY MBaAFFvl8ZU+Ax0nmGTzw77/C8Z1oA7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZTEyY2EtYWI3ZS00ODU0LWJjNjct OGM2MDBlYWU3ZDgwLzEvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jZTEyY2EtYWI3ZS00ODU0LWJjNjctOGM2MDBlYWU3ZDgw LzEvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNaLo8h4 MXc4Z5aKqj1SVuyQRwYxMl7GvmG0e9BLLAiC5vkN4jpe9Vh+rHviFPqmX542FpfC US4PZUXcm+9+Pb42+NBRU34MuGsu3U5J6mlvnUoSHPu6u8fjeKsxrw54W2j2jo1S KWVTk6uKVzYjuQROhVLf4loSC5xpXFUGU5jxRqXupun2tfuGnzbYFqnm7qVUJ2kr xq0g+q1Dc6D3YRSxwf+SlPDzdUH6e42r1XE03um4E3yeNHz+gqRLhE7LslVVR25P Pi+nkZbuGxla/6qQWVlH3ydwWtwoe/2Zx0vRsKH4r9yhxenwwRAq7k43amJ99qFg FyvLJB9tXPUxIA== -----END CERTIFICATE-----Generated at Mon Dec 29 19:52:32 2025 by rpki-client