This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json) Hash identifier: PAq376ID0qOvTs7qzJNyDI4ehTMGKhkIy/QSGoSxXDY= Subject key identifier: 83:EB:FF:36:C2:93:81:BE:86:3C:BA:5A:23:BD:93:E8:7B:54:81:EC Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b Certificate serial: 019B601C9C45826FBF3B01A8049E1FA8FD1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft Manifest number: 0307 Signing time: Sat 27 Dec 2025 14:00:45 +0000 Manifest this update: Sat 27 Dec 2025 14:00:45 +0000 Manifest next update: Sun 28 Dec 2025 14:00:45 +0000 Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=) 2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: ezVjZ9mpoo4DWGArmhJ1F74Y/VJ2hKnYNvfYFf5y50c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:9c:45:82:6f:bf:3b:01:a8:04:9e:1f:a8:fd:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b Validity Not Before: Dec 27 14:00:45 2025 GMT Not After : Dec 28 14:00:45 2025 GMT Subject: CN=83ebff36c29381be863cba5a23bd93e87b5481ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:2c:4a:e1:dc:0d:ca:27:0d:20:ee:0a:8f: 9b:00:84:66:cc:ce:eb:bd:60:a8:b4:16:42:bb:dc: aa:d5:e3:31:5f:fc:d9:44:28:e5:58:eb:67:b7:db: 58:ae:51:ea:cd:cb:b7:db:f4:63:a1:12:1c:3a:bb: 5b:87:30:e1:b8:3e:c7:81:6f:1d:90:be:a7:a4:32: 59:d9:cf:f0:ee:50:c1:a2:72:97:4e:64:8f:6c:e1: 69:cd:ee:87:87:a7:ae:d3:dd:23:6d:d1:75:27:f3: 2f:c6:6f:78:0a:73:6e:87:dc:81:5c:55:a4:c9:e0: cc:e2:4d:24:0c:52:35:d9:72:89:06:5e:95:75:e0: e4:3a:a1:9e:30:56:62:e6:a7:58:33:b0:39:81:f2: 55:5b:18:68:a7:94:f4:ca:3e:69:c3:2f:f2:4b:04: ac:f8:c9:75:9b:18:47:29:fd:25:80:78:e9:11:34: 0b:89:5f:67:5c:12:6a:44:2f:14:ec:eb:46:9e:8e: 37:13:ed:d5:e6:a4:c3:e1:54:6f:e5:06:c3:46:ef: 1e:7a:57:8f:5c:ae:74:66:94:1d:41:e3:66:44:4b: 22:56:58:bc:e2:7d:0a:69:85:07:e5:75:0c:24:c4: d5:d0:62:5c:d3:36:2a:53:5a:cd:3a:cc:8c:7e:97: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EB:FF:36:C2:93:81:BE:86:3C:BA:5A:23:BD:93:E8:7B:54:81:EC X509v3 Authority Key Identifier: keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a1:2b:82:ed:d9:bc:1c:bf:d3:f7:05:6e:0b:d3:1e:5f:21: a4:5b:31:31:ee:6e:e1:d1:3d:17:cb:ff:74:d7:08:f2:d8:94: 46:d2:d7:83:a3:7d:98:48:2d:7a:1c:79:62:61:6c:11:17:db: 02:a8:8f:6a:5c:5a:a1:0e:97:e6:56:21:ca:38:0b:81:00:3b: 00:76:6b:b5:6c:1b:46:df:8b:11:f4:0e:be:0a:5d:5d:ef:42: c1:1b:e6:a9:12:81:39:32:56:48:57:21:f2:cf:9a:ec:72:72: 29:7b:24:c4:8c:c4:42:ff:b0:9a:52:12:9a:17:90:70:7d:42: 8f:1e:ec:4c:7a:d1:eb:a0:7f:b7:4a:eb:33:f6:77:0f:b0:5a: f6:cc:4c:c8:fa:0e:de:c8:7d:40:e6:1c:24:c6:d3:7a:e9:b7: 70:87:95:ca:d2:b3:7d:35:93:92:00:1d:1d:f6:62:16:4a:b7: 40:34:b5:b2:aa:9a:d2:85:ac:c5:10:2b:6a:49:44:5d:d8:3f: ec:a0:47:de:f7:2d:c5:f0:24:35:92:45:ed:3e:78:94:53:ad: 7a:a3:8e:b9:a4:2d:07:7b:32:c4:1f:c6:33:a9:7a:a1:cd:d1: ff:f3:63:f9:aa:b8:0b:e7:a8:bc:ca:cb:3f:a5:bb:25:06:f7: c2:36:9e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHJxFgm+/OwGoBJ4fqP0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNzk3ZmNkODQzM2IxZjQ4OWY4OTExOTQ4NjJmYzM2YmZi ZWY2NmIwHhcNMjUxMjI3MTQwMDQ1WhcNMjUxMjI4MTQwMDQ1WjAzMTEwLwYDVQQD Eyg4M2ViZmYzNmMyOTM4MWJlODYzY2JhNWEyM2JkOTNlODdiNTQ4MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkYsSuHcDconDSDuCo+bAIRmzM7r vWCotBZCu9yq1eMxX/zZRCjlWOtnt9tYrlHqzcu32/RjoRIcOrtbhzDhuD7HgW8d kL6npDJZ2c/w7lDBonKXTmSPbOFpze6Hh6eu090jbdF1J/Mvxm94CnNuh9yBXFWk yeDM4k0kDFI12XKJBl6VdeDkOqGeMFZi5qdYM7A5gfJVWxhop5T0yj5pwy/ySwSs +Ml1mxhHKf0lgHjpETQLiV9nXBJqRC8U7OtGno43E+3V5qTD4VRv5QbDRu8eeleP XK50ZpQdQeNmREsiVli84n0KaYUH5XUMJMTV0GJc0zYqU1rNOsyMfpdm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPr/zbCk4G+hjy6WiO9k+h7VIHsMB8GA1UdIwQY MBaAFFt5f82EM7H0ifiRGUhi/Da/vvZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAt ZTU5NmU1MjRjYWJlLzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAtZTU5NmU1MjRjYWJl LzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqErgu3Z vBy/0/cFbgvTHl8hpFsxMe5u4dE9F8v/dNcI8tiURtLXg6N9mEgtehx5YmFsERfb AqiPalxaoQ6X5lYhyjgLgQA7AHZrtWwbRt+LEfQOvgpdXe9CwRvmqRKBOTJWSFch 8s+a7HJyKXskxIzEQv+wmlISmheQcH1Cjx7sTHrR66B/t0rrM/Z3D7Ba9sxMyPoO 3sh9QOYcJMbTeum3cIeVytKzfTWTkgAdHfZiFkq3QDS1sqqa0oWsxRAraklEXdg/ 7KBH3vctxfAkNZJF7T54lFOteqOOuaQtB3syxB/GM6l6oc3R//Nj+aq4C+eovMrL P6W7JQb3wjaeaA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:08 2025 by rpki-client