This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json) Hash identifier: 7jB5hz27WzFgLSj3zLJqqTMQxMO2PRuQ7mXtGD4nNkI= Subject key identifier: 1F:58:80:E6:D0:63:BE:8B:B6:B6:10:33:3E:A8:93:12:F1:D5:B3:9D Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71 Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71 Certificate serial: 019B51BD424EBD83529D46A7E1D18783D560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft Manifest number: 0D35 Signing time: Wed 24 Dec 2025 19:01:56 +0000 Manifest this update: Wed 24 Dec 2025 19:01:56 +0000 Manifest next update: Thu 25 Dec 2025 19:01:56 +0000 Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=) 2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: Cg6OQEWbqv3M8gcLw2LktmMUw1zAU00EjWea6nBKHPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:42:4e:bd:83:52:9d:46:a7:e1:d1:87:83:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71 Validity Not Before: Dec 24 19:01:56 2025 GMT Not After : Dec 25 19:01:56 2025 GMT Subject: CN=1f5880e6d063be8bb6b610333ea89312f1d5b39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:b6:ab:e2:6b:a5:60:5a:5d:fe:e4:45:b8: b8:38:d2:9d:c3:20:63:33:d9:eb:09:ec:78:4a:bd: 25:e2:dc:f7:72:a5:45:24:84:f4:fa:b3:15:78:62: 81:49:4b:55:d6:c2:27:5f:15:2c:d3:cb:f4:7d:c0: de:b2:51:a5:d8:77:ac:c7:5b:ee:4e:5e:8a:89:34: 6e:c1:0e:bc:3a:88:05:cd:93:ca:7d:9b:15:61:88: 6f:87:92:3e:a3:23:13:40:bc:80:ee:2b:5e:71:6b: 80:db:81:40:65:f9:cf:fd:b5:59:f0:5e:0d:16:03: 08:62:81:77:4d:16:50:cf:c3:e9:1c:6f:25:bf:5e: 4b:ad:91:55:f3:d5:72:11:31:6c:a3:84:81:a7:88: e9:e5:e7:c3:57:9c:7d:ba:5a:1e:11:20:92:30:93: 17:3b:d6:f5:2f:ee:5d:05:2d:49:8d:03:60:8a:58: 7e:5e:8b:5f:9c:e2:ed:b3:e5:26:ff:7e:d5:bc:0f: ee:48:99:1a:38:19:bb:82:30:a6:c4:91:b1:12:a6: cb:11:12:c7:3a:76:82:6c:55:52:f9:a8:c8:94:3d: 58:7b:3e:61:d3:7f:cc:fa:4f:6e:33:b9:86:0f:62: 37:67:62:5d:89:21:0a:26:be:6d:a1:26:83:0b:1e: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:58:80:E6:D0:63:BE:8B:B6:B6:10:33:3E:A8:93:12:F1:D5:B3:9D X509v3 Authority Key Identifier: keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:dd:6a:7b:db:d2:f2:3d:db:b0:2f:2d:3f:46:19:5e:00:bd: fc:ff:8a:6b:2e:30:99:ba:04:db:56:17:c4:bd:6e:fa:15:02: 1c:1f:2e:0b:e5:29:fc:09:1f:de:44:8b:52:8b:e7:64:07:7f: b4:89:78:99:63:38:44:14:8e:17:89:70:2f:6f:00:c8:65:ae: a1:91:af:8a:04:51:b2:79:ce:52:77:49:a3:b2:fd:30:e6:89: 6b:e7:64:ff:6e:c3:05:01:9a:6c:53:25:a7:0c:19:8b:fd:d8: 27:94:91:72:f9:20:92:ef:e9:4b:d9:3c:dd:5d:bd:75:ff:94: 71:f0:33:d8:f3:72:38:ff:96:79:26:3b:a0:62:1c:72:22:c3: a6:bd:f5:84:f8:94:8c:53:ad:e0:4e:cd:dc:96:09:fc:7a:9c: 38:8c:e4:4c:f0:0a:b7:18:74:11:72:ed:c8:d0:6e:ab:f4:48: 3a:86:85:39:ac:2e:ed:b9:16:f8:2a:1e:66:e1:03:bc:a0:ae: 16:00:8c:42:a1:6e:e9:16:88:51:ee:15:dd:ac:9e:25:69:ea: 40:ea:3b:3b:ad:41:15:f1:a2:04:6a:f9:2f:dd:ef:82:95:0c: 1d:2e:bc:ea:04:82:75:fc:6e:75:db:8b:2f:d1:21:8a:a7:b2: ab:2f:39:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvUJOvYNSnUan4dGHg9VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNGI0NTJkYmZkNGM3MDRiZGE5Y2MyYTRlOTE1ZjQ3MTky YTdmNzEwHhcNMjUxMjI0MTkwMTU2WhcNMjUxMjI1MTkwMTU2WjAzMTEwLwYDVQQD EygxZjU4ODBlNmQwNjNiZThiYjZiNjEwMzMzZWE4OTMxMmYxZDViMzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJi2q+JrpWBaXf7kRbi4ONKdwyBj M9nrCex4Sr0l4tz3cqVFJIT0+rMVeGKBSUtV1sInXxUs08v0fcDeslGl2Hesx1vu Tl6KiTRuwQ68OogFzZPKfZsVYYhvh5I+oyMTQLyA7itecWuA24FAZfnP/bVZ8F4N FgMIYoF3TRZQz8PpHG8lv15LrZFV89VyETFso4SBp4jp5efDV5x9uloeESCSMJMX O9b1L+5dBS1JjQNgilh+XotfnOLts+Um/37VvA/uSJkaOBm7gjCmxJGxEqbLERLH OnaCbFVS+ajIlD1Yez5h03/M+k9uM7mGD2I3Z2JdiSEKJr5toSaDCx4QpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9YgObQY76LtrYQMz6okxLx1bOdMB8GA1UdIwQY MBaAFFtLRS2/1McEvanMKk6RX0cZKn9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgt ZTU4ZWRjNDJmMDRjLzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgtZTU4ZWRjNDJmMDRj LzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt1qe9vS 8j3bsC8tP0YZXgC9/P+Kay4wmboE21YXxL1u+hUCHB8uC+Up/Akf3kSLUovnZAd/ tIl4mWM4RBSOF4lwL28AyGWuoZGvigRRsnnOUndJo7L9MOaJa+dk/27DBQGabFMl pwwZi/3YJ5SRcvkgku/pS9k83V29df+UcfAz2PNyOP+WeSY7oGIcciLDpr31hPiU jFOt4E7N3JYJ/HqcOIzkTPAKtxh0EXLtyNBuq/RIOoaFOawu7bkW+CoeZuEDvKCu FgCMQqFu6RaIUe4V3ayeJWnqQOo7O61BFfGiBGr5L93vgpUMHS686gSCdfxudduL L9Ehiqeyqy85eA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:19 2025 by rpki-client