This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json) Hash identifier: qrbSsQv9vlv3XluxW58Jv9IahSLerC6qrVeWU9r1I8s= Subject key identifier: 3C:D5:88:C3:A4:76:C6:B1:C4:02:C0:5A:4B:61:9A:F1:14:C8:04:95 Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019B3B3490B27860FD098231C1A91BDE4811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft Manifest number: 0E23 Signing time: Sat 20 Dec 2025 10:00:59 +0000 Manifest this update: Sat 20 Dec 2025 10:00:59 +0000 Manifest next update: Sun 21 Dec 2025 10:00:59 +0000 Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=) 2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: 7oYkUcOoMzPxb+AmZlPNLK2SAr8vLjPnAvRJEUPIyAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:90:b2:78:60:fd:09:82:31:c1:a9:1b:de:48:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Dec 20 10:00:59 2025 GMT Not After : Dec 21 10:00:59 2025 GMT Subject: CN=3cd588c3a476c6b1c402c05a4b619af114c80495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:96:de:ea:06:a6:aa:4b:c3:25:e0:5b:5b:7e: 2f:a4:dd:ea:21:d3:ee:26:3c:78:d3:5a:38:f2:37: b2:24:90:f1:cd:34:e5:93:d3:4b:25:04:67:aa:c1: 0b:de:74:6c:03:8c:7c:4e:9d:80:e3:b3:1a:69:e0: 69:51:48:fc:25:58:00:4d:96:5c:a0:35:15:50:3c: 00:d1:6b:bc:01:12:75:f6:30:b2:a3:5b:d0:92:09: e8:98:fe:0e:b3:4e:c7:ee:78:da:a1:cf:9c:6a:2e: 28:09:a4:00:83:ae:79:ef:1f:20:80:ff:50:e6:11: 94:49:42:84:44:5c:a4:7c:55:e0:91:39:bb:66:7d: ce:b6:59:2e:03:54:81:41:03:18:97:e6:1b:36:a1: fb:c5:56:2a:33:0f:90:9f:72:22:5c:26:fb:2c:99: ad:47:e7:4c:1d:c0:6d:89:30:9e:a6:97:b5:78:92: fc:cf:c3:b4:6a:9f:cf:ea:2e:28:72:53:40:a1:e2: b5:9e:35:1e:16:51:11:1b:12:e3:86:cf:72:31:8f: 32:fc:e4:df:a5:44:d4:3c:32:7a:d0:d3:63:d4:e3: aa:50:39:4c:a5:db:2f:02:a7:f5:fb:f1:fd:35:dd: 92:c6:87:e7:0d:ad:83:0e:1b:0e:81:4a:ca:b1:96: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:88:C3:A4:76:C6:B1:C4:02:C0:5A:4B:61:9A:F1:14:C8:04:95 X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:80:06:24:c2:6d:a5:13:0a:1e:2c:94:e0:f4:c7:45:cd:87: 8a:fe:85:f2:cc:fe:e1:5b:99:11:c0:98:7a:ba:32:79:10:b0: 65:32:98:04:ef:a7:70:9c:7f:19:21:e5:9a:cf:8a:fc:94:c0: e3:4e:cd:88:c7:d1:60:7e:b7:87:30:8f:d1:a0:f9:3a:42:ba: 5b:86:9c:4e:94:8d:c2:1f:32:d0:55:42:ac:3c:94:5f:b6:ec: 44:b3:1f:21:fd:4a:a8:cb:c6:3d:ee:19:2d:a5:17:b6:c5:ae: 7e:90:43:ad:a6:71:b6:e7:e2:ae:82:0c:a7:1f:4c:25:36:d6: b6:82:3f:ae:02:f4:bf:3d:3f:d3:ec:6f:20:09:e1:2a:94:96: b3:c9:4c:7c:d0:cb:df:ff:fc:2a:16:ce:ac:cc:b9:ec:a6:21: b2:87:12:06:46:66:e7:33:d6:67:d9:78:e0:99:04:69:3b:e6: 3d:27:ee:4d:08:a8:73:83:c8:89:ec:12:ba:df:35:b8:7b:05: 65:5b:ab:9d:c4:6d:dd:2c:15:09:e3:e3:48:9d:73:63:ed:9c: 74:71:a9:cd:1a:7c:d2:93:e9:d6:ca:67:f1:7f:34:20:33:7d: 92:a6:55:62:97:d3:ee:bf:6b:89:90:ea:f5:32:11:4c:9e:2d: 39:36:6c:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NJCyeGD9CYIxwakb3kgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjUxMjIwMTAwMDU5WhcNMjUxMjIxMTAwMDU5WjAzMTEwLwYDVQQD EygzY2Q1ODhjM2E0NzZjNmIxYzQwMmMwNWE0YjYxOWFmMTE0YzgwNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pbe6gamqkvDJeBbW34vpN3qIdPu Jjx401o48jeyJJDxzTTlk9NLJQRnqsEL3nRsA4x8Tp2A47MaaeBpUUj8JVgATZZc oDUVUDwA0Wu8ARJ19jCyo1vQkgnomP4Os07H7njaoc+cai4oCaQAg6557x8ggP9Q 5hGUSUKERFykfFXgkTm7Zn3OtlkuA1SBQQMYl+YbNqH7xVYqMw+Qn3IiXCb7LJmt R+dMHcBtiTCeppe1eJL8z8O0ap/P6i4oclNAoeK1njUeFlERGxLjhs9yMY8y/OTf pUTUPDJ60NNj1OOqUDlMpdsvAqf1+/H9Nd2SxofnDa2DDhsOgUrKsZb5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzViMOkdsaxxALAWkthmvEUyASVMB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4AGJMJt pRMKHiyU4PTHRc2Hiv6F8sz+4VuZEcCYeroyeRCwZTKYBO+ncJx/GSHlms+K/JTA 407NiMfRYH63hzCP0aD5OkK6W4acTpSNwh8y0FVCrDyUX7bsRLMfIf1KqMvGPe4Z LaUXtsWufpBDraZxtufiroIMpx9MJTbWtoI/rgL0vz0/0+xvIAnhKpSWs8lMfNDL 3//8KhbOrMy57KYhsocSBkZm5zPWZ9l44JkEaTvmPSfuTQioc4PIiewSut81uHsF ZVurncRt3SwVCePjSJ1zY+2cdHGpzRp80pPp1spn8X80IDN9kqZVYpfT7r9riZDq 9TIRTJ4tOTZsOA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:57:30 2025 by rpki-client