This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json) Hash identifier: +ZmlJrIiTjljWCa1+gK5USxlVMdYa1/zbj097V3xkxY= Subject key identifier: ED:49:5F:B3:CD:3A:11:5C:8E:59:CC:90:DB:0B:DD:D6:CD:8B:AD:41 Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24 Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24 Certificate serial: 019B6A32C176D0BBF109B5EFE227E39A2AE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft Manifest number: 05E9 Signing time: Mon 29 Dec 2025 13:01:09 +0000 Manifest this update: Mon 29 Dec 2025 13:01:09 +0000 Manifest next update: Tue 30 Dec 2025 13:01:09 +0000 Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: 9CQCIWAtSjMrDBsoypyRrxK/n+/NhgrU158wMOFv2CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:c1:76:d0:bb:f1:09:b5:ef:e2:27:e3:9a:2a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24 Validity Not Before: Dec 29 13:01:09 2025 GMT Not After : Dec 30 13:01:09 2025 GMT Subject: CN=ed495fb3cd3a115c8e59cc90db0bddd6cd8bad41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:88:22:6f:2e:0b:e6:91:f6:d7:04:28:4d: fb:e8:f2:c1:30:2f:9b:d2:93:c9:d7:16:3c:59:66: f9:9d:21:d9:2c:3d:d4:ec:3b:f8:9a:b1:ba:2a:c3: a4:36:36:c5:c8:ee:86:9c:c4:a6:d7:72:ca:e0:58: 5a:e4:32:68:3e:b4:8d:24:08:52:84:2d:a5:27:b2: ee:c3:89:85:fc:a5:cc:d5:d7:c4:a3:fd:95:74:3a: bf:ea:c5:18:5b:79:e3:f6:bd:79:45:af:05:9d:4f: c1:2e:81:58:cd:b9:9f:e6:a7:fa:41:9b:c5:92:3a: cc:56:3f:30:07:e0:a9:c9:2b:c0:f8:8b:a1:17:84: 7d:a1:64:6a:0e:9e:17:7d:35:48:b1:8b:a0:1c:e6: f5:56:01:3b:d0:5e:6c:7b:93:ad:e8:b0:03:6b:ac: 6f:55:e8:61:05:55:fd:9c:f0:77:5d:73:c9:6d:ce: d7:e4:b1:48:c5:03:37:4e:d1:1e:01:b9:5a:8e:d1: f1:aa:e0:33:fb:8f:e7:b8:b3:41:af:bf:54:cd:77: 36:d2:29:1c:19:83:5f:ed:c0:67:f5:47:73:64:d1: 6e:30:ae:bd:3a:f4:1b:59:c4:b7:41:43:f2:82:a2: 1a:a2:5f:72:18:70:4f:93:33:78:b3:5e:d3:cf:50: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:49:5F:B3:CD:3A:11:5C:8E:59:CC:90:DB:0B:DD:D6:CD:8B:AD:41 X509v3 Authority Key Identifier: keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6c:84:32:09:c0:0f:17:b2:74:aa:4a:e3:11:29:e0:37:30: 1c:7e:de:5a:4f:7c:f4:af:6f:a2:40:6b:b9:b9:9d:c8:05:13: 62:0f:26:e3:e1:90:0a:9c:0e:a0:08:95:ce:ea:99:33:09:95: 39:6a:02:d5:1c:8a:95:d2:5e:c3:c7:c5:70:9c:da:c4:10:e4: e7:5f:b2:ae:14:03:11:e2:4c:6b:e8:6f:de:63:e5:8f:54:05: 1f:a1:6b:59:d6:04:05:96:26:10:d4:62:c7:14:09:3d:47:9c: d6:a0:91:e4:d5:51:1a:dc:42:6f:ec:dd:be:32:82:fd:5e:da: 66:66:f5:f7:cd:43:24:df:56:db:a3:69:59:28:c4:9b:84:19: fd:3c:fb:b9:47:66:6e:f7:98:4d:1a:b7:90:ea:0a:96:f2:35: 33:01:08:5c:8d:fd:08:77:e6:16:17:43:ee:e5:3f:8d:35:46: 95:7a:2d:79:cd:48:ec:4f:ff:e6:16:63:da:6c:cd:8e:4d:20: 3b:29:18:33:68:e9:14:50:5b:49:e9:d9:b1:66:b1:df:be:26: 73:55:70:e6:49:2b:5b:e5:5e:8d:a2:5b:4a:5f:4c:b1:ab:70: a0:40:87:4e:32:41:4e:f7:c0:de:ac:e6:fd:a6:7d:0e:ce:8a: ea:44:8c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMsF20LvxCbXv4ifjmirpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNWI3N2Q2NDU4ZmZhZDk4NGU1MWRmMzM0ZjNlOGY5ODM4 MmFjMjQwHhcNMjUxMjI5MTMwMTA5WhcNMjUxMjMwMTMwMTA5WjAzMTEwLwYDVQQD EyhlZDQ5NWZiM2NkM2ExMTVjOGU1OWNjOTBkYjBiZGRkNmNkOGJhZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WiIIm8uC+aR9tcEKE376PLBMC+b 0pPJ1xY8WWb5nSHZLD3U7Dv4mrG6KsOkNjbFyO6GnMSm13LK4Fha5DJoPrSNJAhS hC2lJ7Luw4mF/KXM1dfEo/2VdDq/6sUYW3nj9r15Ra8FnU/BLoFYzbmf5qf6QZvF kjrMVj8wB+CpySvA+IuhF4R9oWRqDp4XfTVIsYugHOb1VgE70F5se5Ot6LADa6xv VehhBVX9nPB3XXPJbc7X5LFIxQM3TtEeAblajtHxquAz+4/nuLNBr79UzXc20ikc GYNf7cBn9UdzZNFuMK69OvQbWcS3QUPygqIaol9yGHBPkzN4s17Tz1DwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1JX7PNOhFcjlnMkNsL3dbNi61BMB8GA1UdIwQY MBaAFFtbd9ZFj/rZhOUd8zTz6PmDgqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWIt ZjNkOWY2M2Q1ZDk3LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWItZjNkOWY2M2Q1ZDk3 LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGyEMgnA DxeydKpK4xEp4DcwHH7eWk989K9vokBrubmdyAUTYg8m4+GQCpwOoAiVzuqZMwmV OWoC1RyKldJew8fFcJzaxBDk51+yrhQDEeJMa+hv3mPlj1QFH6FrWdYEBZYmENRi xxQJPUec1qCR5NVRGtxCb+zdvjKC/V7aZmb1981DJN9W26NpWSjEm4QZ/Tz7uUdm bveYTRq3kOoKlvI1MwEIXI39CHfmFhdD7uU/jTVGlXotec1I7E//5hZj2mzNjk0g OykYM2jpFFBbSenZsWax374mc1Vw5kkrW+VejaJbSl9MsatwoECHTjJBTvfA3qzm /aZ9Ds6K6kSMhw== -----END CERTIFICATE-----Generated at Mon Dec 29 14:40:51 2025 by rpki-client