This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft File: ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json) Hash identifier: V4RZOOZ8Z/i3OqPwrENZrCXKwi5vtNnQeqsN4z9Ok+A= Subject key identifier: 5B:F0:93:31:D0:8B:3E:C5:2E:C6:DC:DD:B9:00:93:4F:7F:54:9F:E6 Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B Certificate issuer: /CN=c30d03e64676e720a4ff55179e196fec6591886b Certificate serial: 019B4581E2198C612A3D7F1015F79DF14F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft Manifest number: 05F5 Signing time: Mon 22 Dec 2025 10:01:38 +0000 Manifest this update: Mon 22 Dec 2025 10:01:38 +0000 Manifest next update: Tue 23 Dec 2025 10:01:38 +0000 Files and hashes: 1: O_SKclTWbwMrHuJ-wu_A_gUlj98.roa (hash: wqqIe428dBMOphAjwqG0MbbSQPuyl8AVjDeCz3ynOtk=) 2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: evPIyKVSkLC93p5I8vpOJF057PtEhW4fRwrKJFyojz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:e2:19:8c:61:2a:3d:7f:10:15:f7:9d:f1:4f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b Validity Not Before: Dec 22 10:01:38 2025 GMT Not After : Dec 23 10:01:38 2025 GMT Subject: CN=5bf09331d08b3ec52ec6dcddb900934f7f549fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:17:fb:d5:b7:aa:e1:4c:eb:be:71:a6:0d: 16:02:42:b2:ac:cf:e1:eb:6f:e1:d4:7c:f2:3f:a1: 13:c0:3c:08:a7:7f:d3:42:53:92:61:07:ba:d2:d0: 39:83:00:8e:94:6d:ad:e6:17:64:ee:1f:db:91:65: 00:37:8e:5c:19:c6:b2:80:b5:35:f3:44:dc:f7:1e: 2e:6d:9d:70:c9:44:51:f1:ef:74:1e:65:f8:50:3d: dd:b6:c3:fe:06:4d:c4:a1:b4:f5:94:29:c2:ef:e2: d3:3b:5a:cf:11:55:f9:16:d0:0f:b1:db:ea:75:10: e0:7e:eb:f0:f8:c8:8d:e3:3a:29:31:43:8c:a3:75: 4a:f4:d9:c2:fc:1d:7d:a3:0d:75:75:9a:5b:3e:ce: fc:44:ee:12:6b:41:4b:90:0d:64:6f:f0:1e:16:3b: 52:df:33:f5:c8:a0:79:20:54:47:79:5c:6c:93:a3: fc:92:df:54:6e:fa:a8:a8:95:07:f6:74:6d:bb:a6: 4d:01:39:61:ed:2c:ba:b4:82:8b:4c:f0:ca:a2:54: 3d:28:52:b3:be:7a:d8:46:32:cc:e3:2d:73:50:c3: ca:d8:44:a9:94:49:85:d9:8b:ad:94:3d:e1:25:40: a7:7e:e6:f0:0f:0a:5d:59:ab:d6:32:7b:e3:ae:d4: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F0:93:31:D0:8B:3E:C5:2E:C6:DC:DD:B9:00:93:4F:7F:54:9F:E6 X509v3 Authority Key Identifier: keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:35:dc:2f:73:4f:e9:06:a3:ec:3f:df:11:77:18:ca:d9:a1: a9:11:98:71:e7:14:d7:d6:55:87:cc:8e:0d:e3:4d:3a:cb:2b: c6:31:3d:b8:a5:3b:46:7b:23:f9:cc:e4:be:58:f5:3a:9b:c5: cb:bb:ff:e9:05:fb:59:35:11:71:30:37:2d:69:02:a9:6c:96: 6a:ce:2c:64:b2:40:63:1d:ed:da:d9:18:44:46:89:8c:e1:0b: b2:d6:68:f3:59:e9:b4:69:48:04:e8:47:a3:fa:29:23:5a:aa: 04:d8:a5:19:20:36:95:e7:c9:aa:e5:e9:85:01:4e:34:7e:b6: dc:c3:89:21:cd:ab:3e:f8:ee:78:c0:89:0f:b6:34:34:5a:bf: 4e:b1:74:33:fd:6d:e9:0d:2a:fc:32:60:d2:4e:b6:7a:c3:98: 83:4d:6c:07:90:e6:5f:51:00:dc:9d:1f:37:6d:be:da:23:a2: 5c:15:2d:a1:5e:b8:ba:f5:7f:15:20:d5:f2:9b:21:af:c3:dd: 64:a5:32:fb:0e:04:85:15:b5:fb:b4:b7:30:55:ce:90:fb:a0: b1:e7:93:ae:03:7a:54:19:05:99:99:c9:82:ea:b6:b9:35:d6: fa:e5:9f:ca:15:de:73:25:29:10:b5:b7:d3:91:cb:91:68:9a: 9d:d2:4a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgeIZjGEqPX8QFfed8U8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMGQwM2U2NDY3NmU3MjBhNGZmNTUxNzllMTk2ZmVjNjU5 MTg4NmIwHhcNMjUxMjIyMTAwMTM4WhcNMjUxMjIzMTAwMTM4WjAzMTEwLwYDVQQD Eyg1YmYwOTMzMWQwOGIzZWM1MmVjNmRjZGRiOTAwOTM0ZjdmNTQ5ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G0X+9W3quFM675xpg0WAkKyrM/h 62/h1HzyP6ETwDwIp3/TQlOSYQe60tA5gwCOlG2t5hdk7h/bkWUAN45cGcaygLU1 80Tc9x4ubZ1wyURR8e90HmX4UD3dtsP+Bk3EobT1lCnC7+LTO1rPEVX5FtAPsdvq dRDgfuvw+MiN4zopMUOMo3VK9NnC/B19ow11dZpbPs78RO4Sa0FLkA1kb/AeFjtS 3zP1yKB5IFRHeVxsk6P8kt9UbvqoqJUH9nRtu6ZNATlh7Sy6tIKLTPDKolQ9KFKz vnrYRjLM4y1zUMPK2ESplEmF2YutlD3hJUCnfubwDwpdWavWMnvjrtS9NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvwkzHQiz7FLsbc3bkAk09/VJ/mMB8GA1UdIwQY MBaAFMMNA+ZGducgpP9VF54Zb+xlkYhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3cwRDVrWjI1eUNrXzFVWG5obHY3R1dSaUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zMjlkNDEtZjRhZC00MTNjLWJjMDct Mzg5NTNmOWFkMDU3LzEvd3cwRDVrWjI1eUNrXzFVWG5obHY3R1dSaUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zMjlkNDEtZjRhZC00MTNjLWJjMDctMzg5NTNmOWFkMDU3 LzEvd3cwRDVrWjI1eUNrXzFVWG5obHY3R1dSaUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDXcL3NP 6Qaj7D/fEXcYytmhqRGYcecU19ZVh8yODeNNOssrxjE9uKU7Rnsj+czkvlj1OpvF y7v/6QX7WTURcTA3LWkCqWyWas4sZLJAYx3t2tkYREaJjOELstZo81nptGlIBOhH o/opI1qqBNilGSA2lefJquXphQFONH623MOJIc2rPvjueMCJD7Y0NFq/TrF0M/1t 6Q0q/DJg0k62esOYg01sB5DmX1EA3J0fN22+2iOiXBUtoV64uvV/FSDV8pshr8Pd ZKUy+w4EhRW1+7S3MFXOkPugseeTrgN6VBkFmZnJguq2uTXW+uWfyhXecyUpELW3 05HLkWiandJKWg== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:54 2025 by rpki-client