This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json) Hash identifier: g/mvJkkzuX06KYDASRpObH01SX2IhNwT3Pxe91boCXU= Subject key identifier: C4:28:DA:30:58:CC:C5:B3:51:1B:55:4E:C0:09:1E:37:17:EF:A4:1F Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Certificate serial: 019B3A8FFDBE7E09B7DDF6A07820567DF7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft Manifest number: 0FB5 Signing time: Sat 20 Dec 2025 07:01:13 +0000 Manifest this update: Sat 20 Dec 2025 07:01:13 +0000 Manifest next update: Sun 21 Dec 2025 07:01:13 +0000 Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: 4+49HHKTSMIcB90pSfikkV+YcmETAMMSjoEbrnOurCw=) 2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:fd:be:7e:09:b7:dd:f6:a0:78:20:56:7d:f7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Validity Not Before: Dec 20 07:01:13 2025 GMT Not After : Dec 21 07:01:13 2025 GMT Subject: CN=c428da3058ccc5b3511b554ec0091e3717efa41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:0d:2f:61:04:e0:8c:a2:ea:a2:60:43:a5: 8c:14:4f:d0:67:65:95:55:5f:0d:cb:8a:62:2c:14: 9a:07:3e:85:50:3d:8a:51:76:c6:52:59:ce:68:19: ce:1f:bb:61:f7:e9:a8:dc:47:6b:ab:61:3d:22:3b: 34:3d:77:82:2f:e1:52:66:44:00:9f:17:95:51:40: 51:15:ee:1e:81:d1:b1:4b:70:1b:56:68:95:68:80: f2:a3:78:fc:8f:8d:3f:90:df:92:86:c2:c6:c9:4f: 32:d2:6b:ea:ef:1e:3d:1d:31:fc:4c:77:aa:5b:9f: 1f:ac:49:3b:85:a9:4d:3b:f9:6a:ab:63:c6:3b:78: dd:c2:1c:9e:2f:dc:b3:b4:be:cc:8d:cd:15:04:68: 21:27:37:97:1a:bc:dc:85:ae:80:36:0a:07:49:8f: 00:7d:93:37:a8:da:e3:33:be:85:fe:cb:d4:d0:d1: 35:7f:5b:c4:0b:f6:2a:c8:be:9b:c0:68:bd:ad:fc: a9:a6:d2:fc:52:a4:71:f7:68:82:1e:1a:86:46:d4: 05:62:57:32:32:74:7b:c1:16:17:74:cd:60:7c:5e: ad:75:2d:f3:7c:49:53:3f:5f:e5:e5:98:c0:db:45: ec:21:29:41:59:ae:fa:f9:51:7e:c7:a0:9c:64:c6: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:28:DA:30:58:CC:C5:B3:51:1B:55:4E:C0:09:1E:37:17:EF:A4:1F X509v3 Authority Key Identifier: keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:68:c5:83:75:84:7c:6d:1a:c0:da:d4:bc:c3:27:0c:a6:1c: 52:96:47:5b:89:80:da:15:64:2f:a0:ea:18:7e:2a:06:1b:8c: a9:d4:fa:3f:5a:ad:66:2f:06:68:4e:7b:db:2d:61:eb:31:93: 48:5f:90:a2:73:74:7f:1c:e7:9e:aa:72:43:45:35:ee:2e:8f: 79:17:af:f6:23:7c:b3:5d:d4:50:20:89:e6:16:0b:fc:81:65: 1a:e7:50:76:68:53:73:f7:a2:67:a6:a4:a4:70:2b:48:c4:42: 61:25:af:0d:aa:65:3a:24:b3:a9:15:bd:cd:ca:10:3e:bd:ba: 0e:ac:b2:db:1b:7c:f6:75:53:30:3b:49:45:bd:bd:df:14:eb: a4:8b:10:b6:6b:7e:23:44:4a:b1:21:34:66:38:01:fd:bb:5c: 44:75:03:4b:9c:9d:13:61:10:65:b7:d9:f6:b9:75:7f:31:36: c6:1e:ca:0b:b7:16:e0:36:27:48:c5:e1:a6:f2:d1:bc:9b:ee: 46:35:3d:3e:f3:4c:37:3e:86:ca:ad:40:11:cd:0a:f2:16:31: e8:49:5c:f8:61:63:08:5e:66:cb:1a:cc:66:fc:e9:7f:94:fa: b6:b8:6d:67:62:5f:48:e0:8b:7e:0b:17:bf:6b:4d:6b:05:c2: 23:ad:46:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/2+fgm33fageCBWfff3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw YTg3YTQwHhcNMjUxMjIwMDcwMTEzWhcNMjUxMjIxMDcwMTEzWjAzMTEwLwYDVQQD EyhjNDI4ZGEzMDU4Y2NjNWIzNTExYjU1NGVjMDA5MWUzNzE3ZWZhNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaYNL2EE4Iyi6qJgQ6WMFE/QZ2WV VV8Ny4piLBSaBz6FUD2KUXbGUlnOaBnOH7th9+mo3Edrq2E9Ijs0PXeCL+FSZkQA nxeVUUBRFe4egdGxS3AbVmiVaIDyo3j8j40/kN+ShsLGyU8y0mvq7x49HTH8THeq W58frEk7halNO/lqq2PGO3jdwhyeL9yztL7Mjc0VBGghJzeXGrzcha6ANgoHSY8A fZM3qNrjM76F/svU0NE1f1vEC/YqyL6bwGi9rfypptL8UqRx92iCHhqGRtQFYlcy MnR7wRYXdM1gfF6tdS3zfElTP1/l5ZjA20XsISlBWa76+VF+x6CcZMacDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQo2jBYzMWzURtVTsAJHjcX76QfMB8GA1UdIwQY MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGjFg3WE fG0awNrUvMMnDKYcUpZHW4mA2hVkL6DqGH4qBhuMqdT6P1qtZi8GaE572y1h6zGT SF+QonN0fxznnqpyQ0U17i6PeRev9iN8s13UUCCJ5hYL/IFlGudQdmhTc/eiZ6ak pHArSMRCYSWvDaplOiSzqRW9zcoQPr26Dqyy2xt89nVTMDtJRb293xTrpIsQtmt+ I0RKsSE0ZjgB/btcRHUDS5ydE2EQZbfZ9rl1fzE2xh7KC7cW4DYnSMXhpvLRvJvu RjU9PvNMNz6Gyq1AEc0K8hYx6Elc+GFjCF5myxrMZvzpf5T6trhtZ2JfSOCLfgsX v2tNawXCI61GwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:44:43 2025 by rpki-client