This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft File: W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json) Hash identifier: BpVE8+7CM6tXYODIVdAifD5WYx0PpOQQQd7/bSn9lAY= Subject key identifier: F6:B6:31:CD:0E:C5:26:D6:75:B6:22:1F:CF:DA:B2:55:71:08:2F:22 Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3 Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3 Certificate serial: 019AF19ABB88274F1E48FCE520330EEBAEC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft Manifest number: 0B9B Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: OaQSswI3bxwd7H98Kl83VSjS2sk4fegBfwyv7frMg5U=) 2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bb:88:27:4f:1e:48:fc:e5:20:33:0e:eb:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=f6b631cd0ec526d675b6221fcfdab25571082f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:24:45:65:bd:d7:d7:10:45:68:cf:3e:80: 7a:58:6d:96:0d:4b:1c:a0:f6:55:8a:99:6e:ef:ad: 30:3c:ae:fd:c3:b3:ad:4c:c0:71:b6:24:4a:08:19: d5:72:1e:86:4a:b5:61:05:f5:d9:de:80:18:3a:eb: 9a:44:17:11:64:67:1b:83:23:a7:78:b6:ba:62:3a: af:d5:6a:8a:d3:71:c9:e0:82:f2:aa:46:91:51:b4: 5a:33:a9:2d:42:4a:7a:28:1c:c5:ff:b8:d1:ea:70: 95:e7:d8:88:2c:39:eb:c3:06:60:d0:a8:a6:e2:91: 71:c7:23:33:0f:0f:3f:0f:fe:ba:4a:4f:87:d8:18: 53:2b:f5:4d:e5:e7:1b:30:9e:79:61:75:66:bf:03: 5b:f1:73:7a:e5:55:fe:44:c9:f7:0e:2b:03:bb:8c: 8a:e2:50:5c:c8:3e:ca:11:f4:6e:20:ef:af:c8:bf: 40:93:e6:cd:0b:48:44:05:77:41:7f:0d:24:79:ad: 26:8b:01:97:0f:84:85:1e:7b:5c:c7:2b:d6:ff:e7: 0b:46:68:15:5b:a7:85:16:14:1b:71:24:2d:b7:89: 70:0b:fc:9f:88:13:3c:d7:ab:21:8b:16:d8:7a:54: 25:c1:be:64:32:9b:a0:bc:29:99:d1:c7:14:a2:13: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B6:31:CD:0E:C5:26:D6:75:B6:22:1F:CF:DA:B2:55:71:08:2F:22 X509v3 Authority Key Identifier: keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:eb:c3:d7:66:42:c6:b1:e7:d4:eb:76:b8:45:33:e1:66:09: 3c:2c:ac:45:78:f3:7a:75:a6:e6:ac:9b:b5:53:78:3a:09:17: 9d:17:04:d2:e7:98:d3:9b:04:bc:71:41:98:e3:88:74:f3:bc: a5:11:41:0d:e9:69:ed:76:7b:16:e0:a3:11:47:b6:e8:11:40: a6:71:ad:5e:3b:a5:53:20:f2:63:f2:46:9c:36:a5:b3:2f:57: 48:f1:e1:c5:e5:e9:ac:95:dd:c2:c2:d9:63:b6:5c:46:37:fc: 09:46:49:69:66:e6:76:54:e5:c2:91:f5:9b:8a:d9:d5:08:75: 8e:53:46:48:90:66:a2:b1:6f:48:2b:4d:03:65:6b:a1:a7:e3: 1b:f0:29:cf:4d:4d:97:52:cd:fe:13:d2:12:83:a1:65:3c:8f: f5:80:52:9b:f2:fd:b8:00:68:33:8f:1e:75:ef:f2:41:ac:8b: 8a:83:56:9e:ac:65:1a:cd:33:c4:52:40:ab:e4:e9:d4:fe:a7: 0a:76:f4:dc:c5:ed:47:92:2c:aa:74:1b:25:87:58:91:ca:ef: 03:ae:85:f9:56:a2:93:76:63:79:fd:dc:9d:7d:e4:15:0c:6c: 84:d1:3c:96:fa:0f:b3:73:30:7b:15:65:b3:74:17:2b:a0:56: 69:b1:5d:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmruIJ08eSPzlIDMO667AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZThmZTg4MjdiZGM2MDkzNTU1MDllMGM5ZTgwZWFiMjFm OWNkYzMwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EyhmNmI2MzFjZDBlYzUyNmQ2NzViNjIyMWZjZmRhYjI1NTcxMDgyZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvMkRWW919cQRWjPPoB6WG2WDUsc oPZViplu760wPK79w7OtTMBxtiRKCBnVch6GSrVhBfXZ3oAYOuuaRBcRZGcbgyOn eLa6Yjqv1WqK03HJ4ILyqkaRUbRaM6ktQkp6KBzF/7jR6nCV59iILDnrwwZg0Kim 4pFxxyMzDw8/D/66Sk+H2BhTK/VN5ecbMJ55YXVmvwNb8XN65VX+RMn3DisDu4yK 4lBcyD7KEfRuIO+vyL9Ak+bNC0hEBXdBfw0kea0miwGXD4SFHntcxyvW/+cLRmgV W6eFFhQbcSQtt4lwC/yfiBM816shixbYelQlwb5kMpugvCmZ0ccUohONLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPa2Mc0OxSbWdbYiH8/aslVxCC8iMB8GA1UdIwQY MBaAFFvo/ognvcYJNVUJ4MnoDqsh+c3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgt NjEwMDcyZDgwMTE1LzEvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgtNjEwMDcyZDgwMTE1 LzEvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuvD12ZC xrHn1Ot2uEUz4WYJPCysRXjzenWm5qybtVN4OgkXnRcE0ueY05sEvHFBmOOIdPO8 pRFBDelp7XZ7FuCjEUe26BFApnGtXjulUyDyY/JGnDalsy9XSPHhxeXprJXdwsLZ Y7ZcRjf8CUZJaWbmdlTlwpH1m4rZ1Qh1jlNGSJBmorFvSCtNA2VroafjG/Apz01N l1LN/hPSEoOhZTyP9YBSm/L9uABoM48ede/yQayLioNWnqxlGs0zxFJAq+Tp1P6n Cnb03MXtR5IsqnQbJYdYkcrvA66F+Vaik3Zjef3cnX3kFQxshNE8lvoPs3MwexVl s3QXK6BWabFd2g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:54 2025 by rpki-client