This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft File: W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json) Hash identifier: bCHADIfR57N8Qzxm+Y1lwN5gurW98uKx7Aitj0rzH8g= Subject key identifier: 96:8B:DE:75:CA:20:97:09:42:1C:F0:F7:7E:65:05:EC:CE:31:C7:D9 Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1 Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1 Certificate serial: 019AF31C2C1ED57DEC399633945E27D58C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft Manifest number: 15AD Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=) 2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: vHvjgLIys5WKx/mGMRAONLB1eg+SMq9eTivd+rAuYME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2c:1e:d5:7d:ec:39:96:33:94:5e:27:d5:8c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1 Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=968bde75ca209709421cf0f77e6505ecce31c7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:32:4e:35:02:3d:29:63:97:9e:09:05:e5: 07:3a:5b:c5:2e:7c:c4:00:e1:fe:34:bb:9a:ae:eb: b8:5b:80:79:1b:7e:73:81:04:36:0e:32:15:39:dd: 74:22:f4:8e:16:ed:f8:2e:b4:03:fc:6a:93:d5:0a: b9:14:46:ef:f2:b9:52:c2:29:9a:4a:59:c5:9e:0c: bb:7a:ac:04:ee:2f:0b:83:1b:6a:89:80:a5:60:d4: 77:d7:a9:65:fe:e8:14:ba:5c:66:e5:c0:6c:98:b7: a5:c4:22:86:b5:98:51:37:f1:f4:d2:c1:cf:22:0e: bf:96:ff:df:d5:3a:a7:c6:2b:d4:b8:dd:9b:a4:90: 94:97:35:a2:d7:14:85:ac:30:50:d3:c0:87:1e:c7: a8:53:19:3a:da:3b:25:a6:48:9b:62:f8:54:d6:99: 19:c9:25:39:d5:80:41:f6:80:8a:03:d1:db:06:3e: 95:0d:37:e6:69:3f:ae:11:eb:60:95:43:5b:16:26: 00:20:71:f1:69:e0:35:26:06:c6:15:0a:f2:06:b6: 69:52:3b:74:d0:ff:e3:d1:7e:57:1e:ec:95:f1:cd: 0b:4c:4a:3d:18:69:fa:86:00:81:41:fb:bd:10:a1: 9c:66:ae:20:90:22:01:3b:0f:f9:12:6b:6a:10:b8: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8B:DE:75:CA:20:97:09:42:1C:F0:F7:7E:65:05:EC:CE:31:C7:D9 X509v3 Authority Key Identifier: keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ec:3b:c1:1f:03:ac:15:3a:bb:29:c2:80:d5:93:46:ac:b5: 5e:6a:13:86:ce:40:9d:0f:bb:52:5c:6c:93:4d:4b:7f:68:bd: 06:08:39:3d:56:88:c4:19:26:b0:fd:95:f5:5e:2a:d0:fc:72: b4:74:84:fb:ad:3e:8e:e1:fa:38:5f:90:8c:86:f5:a2:48:2b: c7:cf:c4:ee:1e:b6:6c:9f:e0:08:17:66:88:b3:f2:59:3b:d1: c2:57:00:5c:b5:bc:28:6d:51:e7:65:12:d7:42:7b:94:e3:c0: e5:46:47:4f:3c:41:5d:db:3a:15:4d:68:2f:dd:f8:9c:15:7f: bd:59:c0:f6:b5:e0:84:72:60:91:e6:81:cb:7c:d1:59:c5:4e: 93:95:4d:86:d4:dd:6f:4c:98:79:12:0e:71:12:c1:84:24:54: 9e:95:be:d5:f3:3c:82:14:56:6e:2e:37:3e:89:f4:14:43:6f: 50:8a:69:3c:de:b0:11:69:e7:5f:d2:16:9b:24:fd:bc:e0:2b: f6:83:c9:07:80:36:55:ec:ab:ec:ca:f5:f1:27:af:ce:2f:a7: 93:80:3d:9b:c4:67:cb:66:1c:1d:62:92:e3:f6:91:61:eb:ed: 03:6c:ef:ed:8c:7b:0f:d7:aa:0b:e4:01:a5:cd:fc:b0:14:c1: 7c:6d:51:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCwe1X3sOZYzlF4n1YyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOGExNjUyMmVjMzRiMWM1YmM0NzA4MjA2Y2MxOTYzYTE1 YmJkYjEwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD Eyg5NjhiZGU3NWNhMjA5NzA5NDIxY2YwZjc3ZTY1MDVlY2NlMzFjN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudcyTjUCPSljl54JBeUHOlvFLnzE AOH+NLuaruu4W4B5G35zgQQ2DjIVOd10IvSOFu34LrQD/GqT1Qq5FEbv8rlSwima SlnFngy7eqwE7i8LgxtqiYClYNR316ll/ugUulxm5cBsmLelxCKGtZhRN/H00sHP Ig6/lv/f1TqnxivUuN2bpJCUlzWi1xSFrDBQ08CHHseoUxk62jslpkibYvhU1pkZ ySU51YBB9oCKA9HbBj6VDTfmaT+uEetglUNbFiYAIHHxaeA1JgbGFQryBrZpUjt0 0P/j0X5XHuyV8c0LTEo9GGn6hgCBQfu9EKGcZq4gkCIBOw/5EmtqELgUlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaL3nXKIJcJQhzw935lBezOMcfZMB8GA1UdIwQY MBaAFFuKFlIuw0scW8RwggbMGWOhW72xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQt Y2FjOGVkNzZhODQ0LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8zNDUzNmEtNzcxYS00Nzc1LWIyYmQtY2FjOGVkNzZhODQ0 LzEvVzRvV1VpN0RTeHhieEhDQ0Jzd1pZNkZidmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmew7wR8D rBU6uynCgNWTRqy1XmoThs5AnQ+7Ulxsk01Lf2i9Bgg5PVaIxBkmsP2V9V4q0Pxy tHSE+60+juH6OF+QjIb1okgrx8/E7h62bJ/gCBdmiLPyWTvRwlcAXLW8KG1R52US 10J7lOPA5UZHTzxBXds6FU1oL934nBV/vVnA9rXghHJgkeaBy3zRWcVOk5VNhtTd b0yYeRIOcRLBhCRUnpW+1fM8ghRWbi43Pon0FENvUIppPN6wEWnnX9IWmyT9vOAr 9oPJB4A2Veyr7Mr18Sevzi+nk4A9m8Rny2YcHWKS4/aRYevtA2zv7Yx7D9eqC+QB pc38sBTBfG1RWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:28 2025 by rpki-client