This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft File: W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json) Hash identifier: GmUAGrqCjuII2L/G2FiVbn0wLBnJpNm0vJcONqF09Po= Subject key identifier: 30:F9:5C:56:5B:A3:E3:6F:89:F9:6B:BF:D0:A4:E9:D0:C4:E9:33:2B Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B Certificate issuer: /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b Certificate serial: 019B51BCCDDD3077D2ECE80911AD2EF4B00C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft Manifest number: 033C Signing time: Wed 24 Dec 2025 19:01:26 +0000 Manifest this update: Wed 24 Dec 2025 19:01:26 +0000 Manifest next update: Thu 25 Dec 2025 19:01:26 +0000 Files and hashes: 1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: Ksq9bHJGfS3/IGBAFJvChlke6wUJzvVGnb5VXc+CmYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:cd:dd:30:77:d2:ec:e8:09:11:ad:2e:f4:b0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b Validity Not Before: Dec 24 19:01:26 2025 GMT Not After : Dec 25 19:01:26 2025 GMT Subject: CN=30f95c565ba3e36f89f96bbfd0a4e9d0c4e9332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b6:a1:77:3e:61:81:1f:a3:a3:b5:3a:23:2b: 38:18:ed:9b:0b:94:e2:0e:7c:64:f6:7f:36:fe:9b: 4c:4e:f5:1c:0b:b7:38:45:97:c9:7e:2d:1b:94:52: 0a:45:d1:6d:27:d3:57:70:a2:ec:8b:38:a5:fb:94: 0c:14:9e:de:00:7d:21:5e:b9:3c:3a:92:5e:94:92: 32:32:30:0e:c2:b6:91:4f:6f:3d:98:cb:42:b8:3e: f9:a5:2b:3e:da:45:12:b1:cc:99:b2:ba:16:34:8a: a4:69:52:51:ff:b2:0e:cb:e1:c2:7c:ec:ed:fb:3a: 2e:7d:20:0c:55:46:74:50:23:b5:b8:a4:17:5c:86: fd:4c:7c:5c:8b:97:76:71:31:64:6c:32:c0:ea:66: 4f:fe:9e:97:b3:8f:99:4a:94:a0:77:19:80:ef:d0: ba:b1:b0:81:f9:3a:e2:87:29:ac:87:59:f6:e2:c6: 25:91:b8:e4:c3:71:e3:c2:59:d3:47:30:46:b0:b4: 58:17:58:f6:aa:ff:a2:c0:ea:50:98:42:a3:a3:84: 45:fc:ad:5b:57:36:88:ef:d2:45:2b:2f:7e:8e:9f: 04:2d:8d:2a:d5:a3:40:32:54:2a:53:b6:23:14:41: c0:3a:e9:e7:f2:69:22:7b:77:49:01:68:4f:3c:d3: 33:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F9:5C:56:5B:A3:E3:6F:89:F9:6B:BF:D0:A4:E9:D0:C4:E9:33:2B X509v3 Authority Key Identifier: keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e1:5c:5d:6c:32:09:b6:4f:b0:fd:61:43:85:48:9d:1e:4b: c7:77:71:e2:2c:6b:63:32:11:46:c6:8d:8c:71:79:ce:f1:99: 46:d5:a6:c6:80:66:d0:b4:8d:96:fb:85:f1:31:4a:b0:e6:94: 51:fe:45:06:e8:39:c2:f8:32:4a:1d:9f:14:25:34:c2:35:34: 40:9b:c0:f0:b6:7d:4a:95:a5:72:07:1e:23:6c:f9:1a:5c:fe: 7e:e1:6b:87:d8:82:00:8c:b7:22:9e:1d:39:57:19:02:6f:c0: fd:a6:a0:c7:3a:8b:fc:26:18:5b:be:aa:9a:c9:80:95:e6:a8: c3:8f:3e:cd:20:5e:5f:24:2e:8f:3d:f7:db:3e:ec:4f:c8:96: 7b:1e:21:e6:b4:06:b6:85:03:8d:8f:ce:54:75:fc:06:55:34: 5b:c1:a2:6e:70:c6:bf:fe:1d:b4:2e:bb:cd:ed:90:3a:6b:4e: dc:b1:ec:94:9a:55:cf:60:6f:e5:e7:f7:15:1f:a3:95:45:36: 90:0e:01:1f:6d:a8:b7:07:cc:38:c0:58:0e:3c:cd:ee:5b:50: 03:4f:b4:65:e7:88:51:58:d0:25:e4:ec:8b:37:65:ab:dc:cb: d0:bf:9f:b6:ca:6a:0a:86:82:79:fc:8f:67:1a:99:70:76:45: d1:0b:d5:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvM3dMHfS7OgJEa0u9LAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTk5NmQ3YzQ0NGQ2NmE1MmJjYTEwMWIwNmNhNzM4YTdm Y2FhOWIwHhcNMjUxMjI0MTkwMTI2WhcNMjUxMjI1MTkwMTI2WjAzMTEwLwYDVQQD EygzMGY5NWM1NjViYTNlMzZmODlmOTZiYmZkMGE0ZTlkMGM0ZTkzMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7ahdz5hgR+jo7U6Iys4GO2bC5Ti Dnxk9n82/ptMTvUcC7c4RZfJfi0blFIKRdFtJ9NXcKLsizil+5QMFJ7eAH0hXrk8 OpJelJIyMjAOwraRT289mMtCuD75pSs+2kUSscyZsroWNIqkaVJR/7IOy+HCfOzt +zoufSAMVUZ0UCO1uKQXXIb9THxci5d2cTFkbDLA6mZP/p6Xs4+ZSpSgdxmA79C6 sbCB+Trihymsh1n24sYlkbjkw3HjwlnTRzBGsLRYF1j2qv+iwOpQmEKjo4RF/K1b VzaI79JFKy9+jp8ELY0q1aNAMlQqU7YjFEHAOunn8mkie3dJAWhPPNMzxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDD5XFZbo+Nviflrv9Ck6dDE6TMrMB8GA1UdIwQY MBaAFFtZltfERNZqUryhAbBspzin/KqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMmU0YmYtMTdhYy00NjkwLTg2Yzct YTQwZWE0N2I2OWNjLzEvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iMmU0YmYtMTdhYy00NjkwLTg2YzctYTQwZWE0N2I2OWNj LzEvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+FcXWwy CbZPsP1hQ4VInR5Lx3dx4ixrYzIRRsaNjHF5zvGZRtWmxoBm0LSNlvuF8TFKsOaU Uf5FBug5wvgySh2fFCU0wjU0QJvA8LZ9SpWlcgceI2z5Glz+fuFrh9iCAIy3Ip4d OVcZAm/A/aagxzqL/CYYW76qmsmAleaow48+zSBeXyQujz332z7sT8iWex4h5rQG toUDjY/OVHX8BlU0W8GibnDGv/4dtC67ze2QOmtO3LHslJpVz2Bv5ef3FR+jlUU2 kA4BH22otwfMOMBYDjzN7ltQA0+0ZeeIUVjQJeTsizdlq9zL0L+ftspqCoaCefyP ZxqZcHZF0QvVnA== -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:18 2025 by rpki-client