This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json) Hash identifier: JuF3hI7paWEFXZWiWMjWh4OMwujG3IccgrckQZ67k3U= Subject key identifier: 84:A8:E1:57:04:93:B8:0A:27:43:C3:B1:4A:5A:54:3F:CF:B8:B4:84 Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd Certificate serial: 019B6CFC89B103D42DEF9DB684966DEE6FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft Manifest number: 168B Signing time: Tue 30 Dec 2025 02:00:48 +0000 Manifest this update: Tue 30 Dec 2025 02:00:48 +0000 Manifest next update: Wed 31 Dec 2025 02:00:48 +0000 Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=) 2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: 8gm6CEsBV4Pwuy8rHOUvfclcbQi4KL9jDHNYGeuaFJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:89:b1:03:d4:2d:ef:9d:b6:84:96:6d:ee:6f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd Validity Not Before: Dec 30 02:00:48 2025 GMT Not After : Dec 31 02:00:48 2025 GMT Subject: CN=84a8e1570493b80a2743c3b14a5a543fcfb8b484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:16:ac:6d:0f:e5:81:53:f4:08:0b:5f:85: e2:cf:e6:a8:10:eb:a1:95:05:b4:b5:d9:67:28:e2: 5d:c8:8b:d2:3b:e0:5d:81:c2:0b:b2:97:ba:91:e2: f5:7e:80:93:2e:77:3d:4c:33:f0:ae:9c:c2:e4:91: 5d:92:91:51:ba:2d:7c:55:1f:9c:2c:fb:35:a6:5b: af:b7:cb:be:d2:68:02:96:6f:78:be:6c:4e:ee:80: 8c:02:40:05:af:be:2d:0e:50:a2:4c:c2:51:ca:2b: 13:7d:96:3b:75:1e:33:f8:35:05:c8:3f:7e:1b:5c: 13:84:37:d9:33:67:30:67:41:16:50:fb:85:5e:b2: 1e:24:c5:f4:7d:65:77:3b:d5:fa:66:3f:a2:3b:33: 23:17:33:bb:b2:38:61:8d:8e:db:4b:3a:39:7b:27: 2e:7c:03:36:08:70:06:38:85:dc:ce:ac:eb:0f:96: de:ad:70:98:b8:35:ec:62:87:11:88:84:b6:49:d0: 50:e2:e6:b3:7f:e8:c1:88:24:14:d0:d0:f0:15:66: 01:95:82:e7:0e:86:86:51:c1:45:eb:1a:fd:bb:75: e8:6a:f4:b0:29:c3:a8:f6:e9:0e:6f:ad:4a:aa:94: 95:88:69:12:1b:36:c3:14:80:fc:e3:a4:23:93:30: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A8:E1:57:04:93:B8:0A:27:43:C3:B1:4A:5A:54:3F:CF:B8:B4:84 X509v3 Authority Key Identifier: keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0c:75:c0:32:96:6a:47:b6:95:5e:37:cf:03:db:37:f8:8f: 8a:c7:9d:6e:ca:86:51:d7:7a:83:57:d3:73:35:08:c5:23:78: f0:96:81:d3:fc:5d:a1:1c:7f:c4:1f:a0:12:3c:01:8b:0f:f6: 04:c5:d7:ab:48:bf:d0:e9:ff:76:b9:fd:80:81:72:e2:0a:c2: 99:f1:f9:9c:cb:b9:32:0d:f5:59:83:21:3a:9e:a5:32:c0:d3: 17:2c:96:26:8d:3f:16:ad:30:3c:bd:a9:66:d7:fd:16:15:73: d4:e7:62:b3:ea:e1:3d:d0:77:46:2d:16:df:ee:bb:4a:af:13: 37:7b:26:6b:03:4e:73:6d:89:fb:84:c8:2a:55:8b:38:db:6e: de:29:d4:ad:8f:95:d9:f7:73:cb:39:6e:96:a0:75:e9:2d:6a: c2:65:00:80:e7:8d:64:50:05:e1:12:18:ae:84:24:c1:e9:03: 98:04:a7:9b:7c:64:20:dc:cd:18:7c:e6:93:37:74:ef:82:d1: c5:a9:67:c4:d2:fd:20:e0:53:c2:e1:7f:6c:25:15:9c:1c:a1: 2d:46:a8:fd:6c:d6:77:b8:9a:fe:4d:01:9f:91:d6:c0:70:c3: b4:1b:a5:96:ec:a4:c6:b0:c4:8d:a3:8d:b4:c1:57:cb:eb:68: f9:b5:99:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/ImxA9Qt7522hJZt7m+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWEwNDZiNDk5NzgwYWVjN2Q2MTgyZDJkNTZhNzVlYjA4 OTY4Y2QwHhcNMjUxMjMwMDIwMDQ4WhcNMjUxMjMxMDIwMDQ4WjAzMTEwLwYDVQQD Eyg4NGE4ZTE1NzA0OTNiODBhMjc0M2MzYjE0YTVhNTQzZmNmYjhiNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZgWrG0P5YFT9AgLX4Xiz+aoEOuh lQW0tdlnKOJdyIvSO+BdgcILspe6keL1foCTLnc9TDPwrpzC5JFdkpFRui18VR+c LPs1pluvt8u+0mgClm94vmxO7oCMAkAFr74tDlCiTMJRyisTfZY7dR4z+DUFyD9+ G1wThDfZM2cwZ0EWUPuFXrIeJMX0fWV3O9X6Zj+iOzMjFzO7sjhhjY7bSzo5eycu fAM2CHAGOIXczqzrD5berXCYuDXsYocRiIS2SdBQ4uazf+jBiCQU0NDwFWYBlYLn DoaGUcFF6xr9u3XoavSwKcOo9ukOb61KqpSViGkSGzbDFID846QjkzBtswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISo4VcEk7gKJ0PDsUpaVD/PuLSEMB8GA1UdIwQY MBaAFFvqBGtJl4Cux9YYLS1Wp16wiWjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEt Mjk2MDIyMTVhZGQwLzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEtMjk2MDIyMTVhZGQw LzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwx1wDKW ake2lV43zwPbN/iPisedbsqGUdd6g1fTczUIxSN48JaB0/xdoRx/xB+gEjwBiw/2 BMXXq0i/0On/drn9gIFy4grCmfH5nMu5Mg31WYMhOp6lMsDTFyyWJo0/Fq0wPL2p Ztf9FhVz1Odis+rhPdB3Ri0W3+67Sq8TN3smawNOc22J+4TIKlWLONtu3inUrY+V 2fdzyzlulqB16S1qwmUAgOeNZFAF4RIYroQkwekDmASnm3xkINzNGHzmkzd074LR xalnxNL9IOBTwuF/bCUVnByhLUao/WzWd7ia/k0Bn5HWwHDDtBulluykxrDEjaON tMFXy+to+bWZjw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:13:08 2025 by rpki-client