This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json) Hash identifier: 4aOLZgD5ESruiIqHEifFjYvn+H7c/aS0l5lYSH5s/M4= Subject key identifier: 08:EE:69:EC:6C:B0:35:3A:00:E2:0F:83:07:57:33:67:80:12:27:81 Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019B563E58F4AAA9F4ECF5FF7878378DEAA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft Manifest number: 0E31 Signing time: Thu 25 Dec 2025 16:01:24 +0000 Manifest this update: Thu 25 Dec 2025 16:01:24 +0000 Manifest next update: Fri 26 Dec 2025 16:01:24 +0000 Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=) 2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: isX4lArd4zNe4FkUCSSt9rTLZd+XKOJa8xkPvx0yF28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3e:58:f4:aa:a9:f4:ec:f5:ff:78:78:37:8d:ea:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Dec 25 16:01:24 2025 GMT Not After : Dec 26 16:01:24 2025 GMT Subject: CN=08ee69ec6cb0353a00e20f830757336780122781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:c5:16:99:87:52:5d:ee:d4:7d:73:95:2f: 9c:10:38:a9:95:e9:04:02:14:0b:84:64:6e:38:c9: c3:52:2e:20:88:9c:5f:3f:8b:95:c9:45:7a:e9:76: a6:8b:89:bc:28:d1:39:84:97:d8:f1:81:80:41:84: 21:3d:37:e0:b8:f7:e0:a4:91:41:87:2a:22:20:fc: 60:02:71:97:23:eb:63:51:91:75:40:1c:22:30:97: 11:62:da:12:53:4a:c1:9a:f2:f2:79:5a:b0:2c:14: b5:45:68:10:09:58:f4:cb:f3:51:f2:f8:01:96:1b: d7:af:8e:34:5a:31:0d:dc:59:e1:2a:77:be:5f:1b: 5d:35:b9:aa:ad:ff:79:e8:95:ae:ec:91:10:65:a4: e0:c4:4d:6c:c0:26:b8:ae:b3:fd:21:99:ca:1d:2a: 62:f1:52:8a:30:8a:35:57:78:d4:87:e3:d0:17:9a: a3:9e:05:5d:8f:67:2f:0e:f2:96:2e:f9:96:11:88: 3f:ba:0e:8c:09:2b:c2:86:2e:d0:14:2f:05:60:ab: 54:f8:6b:4b:08:ee:a4:ef:1d:b1:36:22:23:fa:35: 02:b3:32:eb:67:69:8f:fa:7d:6d:42:63:79:d8:73: 5d:d8:19:59:2d:0b:36:99:c2:41:de:9e:c0:e3:74: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EE:69:EC:6C:B0:35:3A:00:E2:0F:83:07:57:33:67:80:12:27:81 X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e5:e7:f5:8d:ec:d8:d1:c9:ff:3c:a8:bd:24:7a:9c:4b:39: e9:01:6d:d5:d5:ce:bf:fb:50:b9:c6:ed:3c:3e:bc:7e:15:01: 1d:fc:da:da:38:ea:9e:77:9b:3f:05:0a:0c:44:07:cd:1b:56: 77:53:62:ef:7c:57:b0:aa:bc:e8:f4:e4:de:2f:67:b6:95:f8: e0:18:8a:5b:41:7a:52:b5:f5:30:23:c4:c4:da:6a:73:3b:61: a4:27:78:26:23:93:cb:ef:e1:47:c3:b8:df:de:92:ed:e8:3e: f9:80:83:06:54:d0:4e:25:0e:01:c0:86:fc:87:56:91:d5:e0: 60:d2:ac:61:d4:c6:16:57:89:d7:44:6a:75:94:67:7b:51:8b: 4f:69:02:1d:a3:47:31:89:88:44:e4:6f:d2:21:e1:e7:95:d5: fd:76:79:84:a6:f1:21:b2:55:b6:e4:f0:5b:9e:69:c2:e2:c7: c6:f2:ae:51:b0:97:a1:d5:d2:a7:f5:b7:e6:b5:d9:88:d0:e6: 44:f5:05:f8:1c:0f:68:9b:10:90:7d:eb:94:d4:b7:66:c3:f0: 67:03:47:d2:b4:cf:ca:7c:f4:9d:fe:cd:4a:bf:11:f2:69:40: 51:64:fb:92:f8:ef:bd:e7:5a:1c:fe:48:da:4b:8d:0b:3f:53: 24:18:0c:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPlj0qqn07PX/eHg3jeqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjUxMjI1MTYwMTI0WhcNMjUxMjI2MTYwMTI0WjAzMTEwLwYDVQQD EygwOGVlNjllYzZjYjAzNTNhMDBlMjBmODMwNzU3MzM2NzgwMTIyNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CHFFpmHUl3u1H1zlS+cEDiplekE AhQLhGRuOMnDUi4giJxfP4uVyUV66Xami4m8KNE5hJfY8YGAQYQhPTfguPfgpJFB hyoiIPxgAnGXI+tjUZF1QBwiMJcRYtoSU0rBmvLyeVqwLBS1RWgQCVj0y/NR8vgB lhvXr440WjEN3FnhKne+XxtdNbmqrf956JWu7JEQZaTgxE1swCa4rrP9IZnKHSpi 8VKKMIo1V3jUh+PQF5qjngVdj2cvDvKWLvmWEYg/ug6MCSvChi7QFC8FYKtU+GtL CO6k7x2xNiIj+jUCszLrZ2mP+n1tQmN52HNd2BlZLQs2mcJB3p7A43TqewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjuaexssDU6AOIPgwdXM2eAEieBMB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+Xn9Y3s 2NHJ/zyovSR6nEs56QFt1dXOv/tQucbtPD68fhUBHfza2jjqnnebPwUKDEQHzRtW d1Ni73xXsKq86PTk3i9ntpX44BiKW0F6UrX1MCPExNpqczthpCd4JiOTy+/hR8O4 396S7eg++YCDBlTQTiUOAcCG/IdWkdXgYNKsYdTGFleJ10RqdZRne1GLT2kCHaNH MYmIRORv0iHh55XV/XZ5hKbxIbJVtuTwW55pwuLHxvKuUbCXodXSp/W35rXZiNDm RPUF+BwPaJsQkH3rlNS3ZsPwZwNH0rTPynz0nf7NSr8R8mlAUWT7kvjvvedaHP5I 2kuNCz9TJBgMqg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:47 2025 by rpki-client