This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json) Hash identifier: pdhn69kfMqUJVOCNX5BYbGzbDw2uuiw8FM3gFNrGVik= Subject key identifier: 15:7A:A7:31:C8:5E:07:23:3F:B1:12:2B:B1:FC:07:79:B1:DE:3D:26 Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35 Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35 Certificate serial: 019B45818E12B266C11B91F934A04A1E6720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft Manifest number: 054F Signing time: Mon 22 Dec 2025 10:01:16 +0000 Manifest this update: Mon 22 Dec 2025 10:01:16 +0000 Manifest next update: Tue 23 Dec 2025 10:01:16 +0000 Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: YKjYN4kXWMPVTjAMqDzAB/jspSEIWT8peP2E8viABcU=) 2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=) 3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=) 4: yFZR2dMAN5V-U5yvB8zako3sBAI.roa (hash: Su1HZF/T/54lCtr91bZGjGbSwHR7/PFdtQAeMPFLxmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:8e:12:b2:66:c1:1b:91:f9:34:a0:4a:1e:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35 Validity Not Before: Dec 22 10:01:16 2025 GMT Not After : Dec 23 10:01:16 2025 GMT Subject: CN=157aa731c85e07233fb1122bb1fc0779b1de3d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:e2:19:73:17:cf:2e:c0:0d:39:4e:cf:29: e3:ca:40:1d:64:19:3b:ae:ea:f4:37:0b:c6:95:fd: ed:8f:4b:f6:58:55:89:d1:08:84:01:dc:59:2a:82: 58:f0:6e:d4:81:5b:2d:c5:9e:f4:3d:c0:e5:9e:70: 96:0e:45:a8:92:52:54:d6:6c:84:05:81:12:d8:01: 9e:98:b6:f0:4b:b3:6d:75:2b:44:fe:28:77:6b:9a: 7e:f1:f4:ad:41:2e:17:fa:0c:ed:34:c1:00:cf:a6: 25:79:39:7a:1c:d3:44:5b:73:32:b8:50:b1:e0:67: f1:67:71:18:ba:2d:2d:bf:b1:22:52:ee:7a:c4:47: fa:00:60:3c:fa:2b:7f:8e:d6:03:63:5f:8a:51:35: 75:3b:c2:d1:26:8a:76:01:34:5c:d2:b7:d2:af:00: 89:f2:ed:e9:af:70:f1:a9:40:8e:bb:eb:d2:01:cd: 5b:39:28:b9:ad:b9:86:0e:8d:ee:ac:2e:df:7f:54: af:d1:cb:f7:93:19:0e:53:af:7f:90:f5:4c:d3:9d: c7:b9:a0:28:8a:6c:55:fe:44:ce:3e:ab:aa:bf:65: 9d:4e:b4:e0:1b:5f:74:c9:20:0c:8e:e5:30:45:9e: ae:ab:13:bf:42:2b:16:ce:9e:80:bd:b5:ce:b9:ef: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7A:A7:31:C8:5E:07:23:3F:B1:12:2B:B1:FC:07:79:B1:DE:3D:26 X509v3 Authority Key Identifier: keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:46:95:b4:f7:a4:57:80:89:e8:a3:83:07:0d:b2:c6:22:15: e4:19:a2:8f:74:75:66:97:87:39:45:46:b1:6a:d5:cc:2e:a6: b7:5d:8d:82:63:d8:77:a8:f4:e8:b3:cf:94:20:1a:26:73:f1: ff:bf:98:1f:04:7d:3f:78:10:b3:81:08:ea:7e:3b:9a:c9:37: d9:79:31:e5:76:31:c1:41:97:6b:9c:20:73:8e:65:61:68:61: 5e:9c:b0:e2:69:8f:58:5e:98:9b:04:84:a0:25:cc:25:5c:e5: 93:15:ae:e7:f5:89:7e:a1:21:35:d5:64:a5:e0:07:6f:80:48: 3d:4d:61:78:e6:6a:e9:7d:df:b1:d9:30:b4:66:cf:12:b7:50: 68:d5:18:dd:76:ae:b0:55:e2:76:58:4a:83:8f:38:8b:0a:86: a7:ca:fd:2a:a8:55:4a:f5:57:64:36:ab:9e:e3:6f:76:cc:c3: af:dc:a3:da:8b:65:7a:11:46:56:41:6d:06:33:39:ad:f8:8c: 4e:ca:5a:95:f4:b8:2e:2a:63:39:99:79:70:a0:80:05:14:e3: 8f:1f:4d:a6:7d:e3:4f:28:5f:52:3b:54:d5:b8:50:be:99:0c: 92:1a:67:d0:ee:2c:11:91:1e:c4:88:9b:e6:66:46:10:17:a2: 67:b4:84:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgY4SsmbBG5H5NKBKHmcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTg4MzU5Yjk1YTM5NjRhZTZmOWEwY2RhYWUwN2Y1Nzlm OThjMzUwHhcNMjUxMjIyMTAwMTE2WhcNMjUxMjIzMTAwMTE2WjAzMTEwLwYDVQQD EygxNTdhYTczMWM4NWUwNzIzM2ZiMTEyMmJiMWZjMDc3OWIxZGUzZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZriGXMXzy7ADTlOzynjykAdZBk7 rur0NwvGlf3tj0v2WFWJ0QiEAdxZKoJY8G7UgVstxZ70PcDlnnCWDkWoklJU1myE BYES2AGemLbwS7NtdStE/ih3a5p+8fStQS4X+gztNMEAz6YleTl6HNNEW3MyuFCx 4GfxZ3EYui0tv7EiUu56xEf6AGA8+it/jtYDY1+KUTV1O8LRJop2ATRc0rfSrwCJ 8u3pr3DxqUCOu+vSAc1bOSi5rbmGDo3urC7ff1Sv0cv3kxkOU69/kPVM053HuaAo imxV/kTOPquqv2WdTrTgG190ySAMjuUwRZ6uqxO/QisWzp6AvbXOue9LgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV6pzHIXgcjP7ESK7H8B3mx3j0mMB8GA1UdIwQY MBaAFJXog1m5Wjlkrm+aDNquB/V5+Yw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTkt NzEyZDVlMTdhNmY2LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTktNzEyZDVlMTdhNmY2 LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0aVtPek V4CJ6KODBw2yxiIV5Bmij3R1ZpeHOUVGsWrVzC6mt12NgmPYd6j06LPPlCAaJnPx /7+YHwR9P3gQs4EI6n47msk32Xkx5XYxwUGXa5wgc45lYWhhXpyw4mmPWF6YmwSE oCXMJVzlkxWu5/WJfqEhNdVkpeAHb4BIPU1heOZq6X3fsdkwtGbPErdQaNUY3Xau sFXidlhKg484iwqGp8r9KqhVSvVXZDarnuNvdszDr9yj2otlehFGVkFtBjM5rfiM TspalfS4LipjOZl5cKCABRTjjx9Npn3jTyhfUjtU1bhQvpkMkhpn0O4sEZEexIib 5mZGEBeiZ7SE/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 15:59:50 2025 by rpki-client