This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json) Hash identifier: PNl0XcpJ1RE2DvJ4grPqRGt+6hBs4hmdOujqZxteFhk= Subject key identifier: 16:15:68:33:3A:C1:0A:53:A6:E9:A7:F3:08:3B:F4:9D:69:4E:3D:43 Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9 Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9 Certificate serial: 019B3EDAEA7B4C51321749F463D73D59DB38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft Manifest number: 14CA Signing time: Sun 21 Dec 2025 03:01:32 +0000 Manifest this update: Sun 21 Dec 2025 03:01:32 +0000 Manifest next update: Mon 22 Dec 2025 03:01:32 +0000 Files and hashes: 1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: adMm5xU+rA72rxOISbaBgGVd84LE2HiZlYbsZEbFEv8=) 2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:ea:7b:4c:51:32:17:49:f4:63:d7:3d:59:db:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9 Validity Not Before: Dec 21 03:01:32 2025 GMT Not After : Dec 22 03:01:32 2025 GMT Subject: CN=161568333ac10a53a6e9a7f3083bf49d694e3d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:1a:95:05:2e:1c:11:6d:82:3f:98:9d:f3: 7f:ea:a4:9c:d4:94:35:58:84:02:3d:ae:66:a8:60: e7:c1:2f:20:81:2a:6a:d5:a0:be:53:4d:87:15:0c: 0e:54:b2:c3:68:73:bb:54:02:26:79:0e:97:dc:51: 30:c5:89:55:da:3c:ea:8b:3b:ec:30:b1:02:cc:86: fe:70:34:5a:48:21:c0:30:0f:94:d7:e3:51:23:62: ee:1e:66:77:64:6a:5d:cb:b5:d3:b0:f6:a4:6b:de: 72:8c:49:50:e0:aa:97:f4:9b:4b:de:a2:3c:f6:18: 76:4a:af:9b:24:18:4c:33:4e:45:a0:ac:85:89:3c: 7e:25:17:e4:c5:97:95:ae:ba:fd:42:1e:2f:03:3b: a1:3c:2e:2c:ab:72:67:ec:3d:f7:29:3d:08:e1:8f: 79:29:ec:4e:a4:09:de:3e:8b:ee:3b:54:a6:bc:04: 20:c6:17:94:67:cf:6d:df:b9:a8:8b:5b:0c:9a:d3: 54:35:89:43:20:ec:c8:d9:fd:2e:46:31:90:2a:bb: db:1d:8c:bc:d4:0b:62:a7:f0:54:e3:a2:a3:bd:4e: 45:8a:0e:cb:4a:2a:3e:3e:2e:57:0b:08:b5:4b:68: fe:c9:e7:de:c6:4e:e7:a1:37:9d:3b:0e:d9:3b:24: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:15:68:33:3A:C1:0A:53:A6:E9:A7:F3:08:3B:F4:9D:69:4E:3D:43 X509v3 Authority Key Identifier: keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:de:95:d0:b2:20:9e:47:ef:98:d9:3f:34:70:60:e8:7d:b6: 80:ab:71:c3:ba:e6:2b:4e:ea:8a:ab:7d:e0:ae:4c:bb:28:38: 5e:72:12:2c:da:62:2b:4f:a7:a8:e1:f8:8f:aa:5e:54:54:f1: bb:2b:d1:4a:1c:36:1d:84:4b:92:e5:9f:d4:ec:fc:91:d5:ba: a9:12:8b:dc:57:a8:05:92:43:6f:56:fc:87:00:41:5a:37:e7: 8f:f3:d2:d0:4e:cf:09:ce:c8:05:f3:da:dd:96:2b:52:0e:05: fe:0d:6d:46:e1:8b:5f:0f:28:75:d5:b3:df:e8:b7:9a:e6:8c: 19:39:88:d8:28:dd:98:f0:21:70:ca:01:39:51:a2:bb:ff:2d: ea:d0:cd:63:d3:8b:26:ee:20:90:a9:50:20:13:ba:9c:28:f2: 24:04:bd:b2:9d:9d:5e:35:cb:4d:06:63:89:a7:07:c3:9c:92: 71:70:15:72:9b:39:68:9f:15:de:6a:7a:ca:2b:a7:ee:09:a4: 00:07:4f:e0:d9:6e:70:1a:56:5c:a3:0b:20:7c:2f:bb:0e:0c: 0b:ab:9e:e3:5d:b7:78:f4:65:20:67:64:9b:16:40:47:dd:b5: 34:89:8c:b8:95:a7:80:45:ed:84:47:c2:ce:c2:78:1b:7e:27: 3b:fc:5d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2up7TFEyF0n0Y9c9Wds4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjczNDIyZWZmN2U0MWM1ZTA2ZDc4ZTUyOWY0OTFmNTkx NTBmZjkwHhcNMjUxMjIxMDMwMTMyWhcNMjUxMjIyMDMwMTMyWjAzMTEwLwYDVQQD EygxNjE1NjgzMzNhYzEwYTUzYTZlOWE3ZjMwODNiZjQ5ZDY5NGUzZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD0alQUuHBFtgj+YnfN/6qSc1JQ1 WIQCPa5mqGDnwS8ggSpq1aC+U02HFQwOVLLDaHO7VAImeQ6X3FEwxYlV2jzqizvs MLECzIb+cDRaSCHAMA+U1+NRI2LuHmZ3ZGpdy7XTsPaka95yjElQ4KqX9JtL3qI8 9hh2Sq+bJBhMM05FoKyFiTx+JRfkxZeVrrr9Qh4vAzuhPC4sq3Jn7D33KT0I4Y95 KexOpAnePovuO1SmvAQgxheUZ89t37moi1sMmtNUNYlDIOzI2f0uRjGQKrvbHYy8 1Atip/BU46KjvU5Fig7LSio+Pi5XCwi1S2j+yefexk7noTedOw7ZOyRLZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYVaDM6wQpTpumn8wg79J1pTj1DMB8GA1UdIwQY MBaAFFtnNCLv9+QcXgbXjlKfSR9ZFQ/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jN2QyMmItMjE0Ny00MzM2LTkwMDkt ZjkzNTVmZDk4YjZiLzEvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jN2QyMmItMjE0Ny00MzM2LTkwMDktZjkzNTVmZDk4YjZi LzEvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd6V0LIg nkfvmNk/NHBg6H22gKtxw7rmK07qiqt94K5Muyg4XnISLNpiK0+nqOH4j6peVFTx uyvRShw2HYRLkuWf1Oz8kdW6qRKL3FeoBZJDb1b8hwBBWjfnj/PS0E7PCc7IBfPa 3ZYrUg4F/g1tRuGLXw8oddWz3+i3muaMGTmI2CjdmPAhcMoBOVGiu/8t6tDNY9OL Ju4gkKlQIBO6nCjyJAS9sp2dXjXLTQZjiacHw5yScXAVcps5aJ8V3mp6yiun7gmk AAdP4NlucBpWXKMLIHwvuw4MC6ue4123ePRlIGdkmxZAR921NImMuJWngEXthEfC zsJ4G34nO/xdeA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:17:19 2025 by rpki-client