This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: stRnzHI9ffLz0OZBYlxfiAslc7ibvVHCWXUVquPKik4= Subject key identifier: 19:43:73:97:6D:7C:86:A2:5F:A1:18:64:32:CE:36:52:DF:AC:BC:B3 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B514E72726354248657656620DEF855AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 17CB Signing time: Wed 24 Dec 2025 17:00:54 +0000 Manifest this update: Wed 24 Dec 2025 17:00:54 +0000 Manifest next update: Thu 25 Dec 2025 17:00:54 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: 7sYC2HPXTRXSgFwGJBI_aMn1Sls.roa (hash: jNxwvCYUNHETc1lJzQ1miztj7GesEWdkNQJ05PgoDvM=) 3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 5: LRiyT-rlzmXrQXbcYMWhBU482eg.roa (hash: ICoe3kPCb8Fc28l3cr0GMLtrwRJd+KH/IvmqLhqbyWo=) 6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: do8Z/XluA8zneH9hdI6wS9o7Ry2W64jjlX3Ela4EyiU=) 11: XoEgN8Rzf-_O70nBq2ov0ajUPeY.roa (hash: Uqsa+8GNjpiZZotqp2+P9cchtd9l85RTnq9RE86H8w8=) 12: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 13: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 14: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 15: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 16: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:72:72:63:54:24:86:57:65:66:20:de:f8:55:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Dec 24 17:00:54 2025 GMT Not After : Dec 25 17:00:54 2025 GMT Subject: CN=194373976d7c86a25fa1186432ce3652dfacbcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:a2:5f:78:85:cd:2e:a6:1d:2f:8e:73:ec: 29:28:f6:e1:b2:5c:b7:b0:3d:21:9e:5e:ed:61:60: 5c:81:15:16:8d:43:98:e1:59:c1:82:ef:71:27:cd: 52:ee:b5:76:db:e3:79:65:55:b9:6a:96:85:e5:3d: de:30:08:3d:35:e2:b8:6e:17:cb:84:c7:a9:18:72: a2:e9:81:58:b2:b7:4f:35:86:84:88:47:04:e1:9e: a3:27:58:21:a9:d4:47:d4:15:71:ae:49:76:08:54: e8:ae:9a:c9:5e:ba:bb:6b:6c:ac:3d:45:01:33:e4: 21:85:52:b6:1b:bb:bb:17:74:73:08:fd:97:b3:ae: 8a:47:4d:b5:01:48:3f:cb:e0:33:b9:40:50:60:da: 3a:9b:ab:fb:61:56:1b:8f:8d:53:4b:78:3d:fa:f6: 33:ad:be:ab:d6:de:7d:b4:4d:9b:a4:6e:cc:b0:df: 7d:f4:90:88:c0:86:dc:b5:ad:d9:58:e9:85:4b:e1: 31:3b:9e:7d:90:ae:64:f0:78:f6:0f:05:bf:33:a3: bb:11:20:7e:22:3c:67:0d:ba:cf:84:a0:74:6b:07: ba:21:90:b9:80:ba:93:b8:dd:a3:47:23:7f:37:46: 8a:4c:9b:22:60:a3:3c:ec:94:67:9f:da:40:f0:29: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:43:73:97:6D:7C:86:A2:5F:A1:18:64:32:CE:36:52:DF:AC:BC:B3 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2b:51:91:d8:7d:51:c2:7e:ee:01:b6:21:6e:c3:40:77:9b: 15:cf:f9:03:ae:dd:7e:e3:71:15:76:b7:f2:a2:31:99:07:ae: 1b:88:5a:6f:dc:d7:0a:f4:f6:cc:8a:4d:8e:ac:74:c1:1a:26: ba:01:da:4c:8c:00:50:d9:eb:83:78:c2:4a:d0:11:00:9b:8d: 16:a0:bb:23:f4:ca:79:22:9f:d8:d9:3c:2a:f1:3f:e4:15:43: 2c:74:e1:b4:ec:11:40:7a:1d:97:83:6c:fc:da:d3:12:c7:93: 7f:36:80:1d:2d:11:5b:04:a0:c5:0c:68:d7:30:18:e0:f2:a7: 4c:3a:c3:32:ec:ff:4d:21:b2:7b:32:e7:f3:0d:77:8d:43:20: a9:75:96:f5:84:c0:eb:1a:f1:e7:44:f7:56:5e:66:45:3e:ba: 50:8b:2c:15:1e:58:ce:1b:22:1f:0b:66:ad:36:ed:e7:da:c0: d6:47:d8:ec:f5:2a:8f:2b:2c:93:79:b5:d9:f0:1c:7d:04:ea: 54:69:eb:ab:9c:e2:41:a2:e6:d4:da:b3:c2:9e:59:a4:15:27: 5f:2e:e2:32:bd:e2:8f:6f:84:18:8a:bf:23:65:c9:10:de:4b: 5b:6e:75:81:99:a5:aa:4f:1b:7c:04:54:df:44:83:13:76:e3: 51:c3:05:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTnJyY1QkhldlZiDe+FWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUxMjI0MTcwMDU0WhcNMjUxMjI1MTcwMDU0WjAzMTEwLwYDVQQD EygxOTQzNzM5NzZkN2M4NmEyNWZhMTE4NjQzMmNlMzY1MmRmYWNiY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUOiX3iFzS6mHS+Oc+wpKPbhsly3 sD0hnl7tYWBcgRUWjUOY4VnBgu9xJ81S7rV22+N5ZVW5apaF5T3eMAg9NeK4bhfL hMepGHKi6YFYsrdPNYaEiEcE4Z6jJ1ghqdRH1BVxrkl2CFTorprJXrq7a2ysPUUB M+QhhVK2G7u7F3RzCP2Xs66KR021AUg/y+AzuUBQYNo6m6v7YVYbj41TS3g9+vYz rb6r1t59tE2bpG7MsN999JCIwIbcta3ZWOmFS+ExO559kK5k8Hj2DwW/M6O7ESB+ IjxnDbrPhKB0awe6IZC5gLqTuN2jRyN/N0aKTJsiYKM87JRnn9pA8Cne8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlDc5dtfIaiX6EYZDLONlLfrLyzMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKytRkdh9 UcJ+7gG2IW7DQHebFc/5A67dfuNxFXa38qIxmQeuG4hab9zXCvT2zIpNjqx0wRom ugHaTIwAUNnrg3jCStARAJuNFqC7I/TKeSKf2Nk8KvE/5BVDLHThtOwRQHodl4Ns /NrTEseTfzaAHS0RWwSgxQxo1zAY4PKnTDrDMuz/TSGyezLn8w13jUMgqXWW9YTA 6xrx50T3Vl5mRT66UIssFR5YzhsiHwtmrTbt59rA1kfY7PUqjyssk3m12fAcfQTq VGnrq5ziQaLm1Nqzwp5ZpBUnXy7iMr3ij2+EGIq/I2XJEN5LW251gZmlqk8bfARU 30SDE3bjUcMFmw== -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:55 2025 by rpki-client