This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json) Hash identifier: K+JC83tQOT0Ez9Xqd9jsBFRwnQsn695PZ0kaifq46qM= Subject key identifier: 1C:B4:6D:F4:42:D8:CE:76:4C:0E:30:C3:2D:04:D3:8D:F8:51:08:B6 Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51 Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851 Certificate serial: 019AF12E9ABD6C0A82B8CF3234C819CAFBF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft Manifest number: 0D11 Signing time: Sat 06 Dec 2025 01:02:34 +0000 Manifest this update: Sat 06 Dec 2025 01:02:34 +0000 Manifest next update: Sun 07 Dec 2025 01:02:34 +0000 Files and hashes: 1: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: EGzhZxWY9KlXF96kZfu0/3EWtq9I855znFVs2qKM9is=) 2: WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa (hash: 9FkYuv3N9sKiJBFCLi9r1CgkkKmg2nuXBs/YrWrih48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:9a:bd:6c:0a:82:b8:cf:32:34:c8:19:ca:fb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851 Validity Not Before: Dec 6 01:02:34 2025 GMT Not After : Dec 7 01:02:34 2025 GMT Subject: CN=1cb46df442d8ce764c0e30c32d04d38df85108b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:e4:7c:9a:25:c4:0a:f1:ff:b0:27:55:ef: 9c:31:e7:67:9e:ca:7c:a0:7f:69:05:ac:d6:46:4a: 33:03:e7:51:d5:cf:85:80:ac:0d:d9:6e:f3:c3:46: cb:cb:a0:b8:cc:37:3d:6c:2d:24:2e:26:a6:75:38: 36:0f:da:bb:2c:60:be:17:f1:90:d3:c4:98:98:15: 8b:1d:81:ae:ad:d2:ad:8f:fe:48:8f:2c:c0:2e:3b: 39:92:a0:ed:0b:05:fb:88:6a:59:d0:0b:4d:e6:ee: f6:b1:a9:cf:c3:a4:ad:e8:09:ca:ac:9d:d8:3e:20: ad:9a:d3:fc:a5:81:33:5a:25:76:20:51:14:40:c0: 54:eb:09:ec:ee:61:2e:e3:46:13:82:f3:49:23:85: 47:90:e2:0f:30:b7:8e:77:29:19:c3:88:12:4c:41: 71:17:97:c0:aa:40:c3:76:b9:40:b4:ae:03:9b:d8: 92:f2:5a:21:c4:30:c8:44:12:f0:7b:3a:77:ba:20: ab:7e:37:0f:c6:18:61:10:a8:16:8d:ae:7f:47:0f: fd:a0:52:a1:f1:54:5a:c7:26:d6:53:30:b1:9b:3c: f5:3e:a6:24:60:fa:ae:6b:94:ad:d9:df:83:28:ba: a0:94:bf:a9:46:a3:0f:eb:80:96:5d:d6:34:30:07: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B4:6D:F4:42:D8:CE:76:4C:0E:30:C3:2D:04:D3:8D:F8:51:08:B6 X509v3 Authority Key Identifier: keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f3:a0:fc:96:6b:db:0d:38:76:03:5e:63:03:8d:f3:b5:72: d5:a3:c4:0f:10:cc:1f:e9:28:27:f0:82:f1:ff:10:0e:b1:2c: 18:2f:1d:44:fb:06:4d:62:61:e2:46:8e:b7:5a:df:dc:7d:6f: d6:28:62:30:89:28:03:71:81:bd:0b:81:e3:fb:fc:db:fa:75: 73:0c:3e:c7:3f:c4:24:ab:5c:2f:5d:74:d0:e6:1e:a8:a4:39: 35:77:6c:b5:47:9e:cf:fe:aa:a5:9f:b6:43:1d:9e:a2:85:8d: 2f:e2:1b:37:56:c8:80:06:78:72:f0:ea:7e:38:84:d1:95:36: 8f:72:b1:6c:58:87:e1:9b:61:c9:e0:bf:05:e5:e3:4e:14:30: 02:1b:4c:e5:db:c3:b4:35:5b:7f:89:9c:f4:cd:2b:85:04:a2: 14:67:5e:da:84:e6:7f:e4:61:a3:1a:89:b2:d8:62:49:8e:d2: 78:21:1a:75:31:e2:53:b8:c2:c6:f0:fa:91:b4:62:ed:72:39: 65:04:e5:16:fb:04:bf:cb:28:71:99:ba:ad:b0:43:8a:1e:10: a0:69:b1:f3:5a:41:59:3d:95:2a:6a:11:94:c5:d4:74:1f:e5: 60:26:99:ea:36:3d:29:a2:65:00:6f:d9:91:7f:40:70:0e:44: 82:7d:16:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpq9bAqCuM8yNMgZyvv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZGM0MTY3NGQ2NWQyYWY5MTc0YjFhYmFjZTBiMzcxMzYy YjQ4NTEwHhcNMjUxMjA2MDEwMjM0WhcNMjUxMjA3MDEwMjM0WjAzMTEwLwYDVQQD EygxY2I0NmRmNDQyZDhjZTc2NGMwZTMwYzMyZDA0ZDM4ZGY4NTEwOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/kfJolxArx/7AnVe+cMednnsp8 oH9pBazWRkozA+dR1c+FgKwN2W7zw0bLy6C4zDc9bC0kLiamdTg2D9q7LGC+F/GQ 08SYmBWLHYGurdKtj/5IjyzALjs5kqDtCwX7iGpZ0AtN5u72sanPw6St6AnKrJ3Y PiCtmtP8pYEzWiV2IFEUQMBU6wns7mEu40YTgvNJI4VHkOIPMLeOdykZw4gSTEFx F5fAqkDDdrlAtK4Dm9iS8lohxDDIRBLwezp3uiCrfjcPxhhhEKgWja5/Rw/9oFKh 8VRaxybWUzCxmzz1PqYkYPqua5St2d+DKLqglL+pRqMP64CWXdY0MAf7pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy0bfRC2M52TA4wwy0E0434UQi2MB8GA1UdIwQY MBaAFFvcQWdNZdKvkXSxq6zgs3E2K0hRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWIt OWY2N2ZmNmFmZDUwLzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWItOWY2N2ZmNmFmZDUw LzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/Og/JZr 2w04dgNeYwON87Vy1aPEDxDMH+koJ/CC8f8QDrEsGC8dRPsGTWJh4kaOt1rf3H1v 1ihiMIkoA3GBvQuB4/v82/p1cww+xz/EJKtcL1100OYeqKQ5NXdstUeez/6qpZ+2 Qx2eooWNL+IbN1bIgAZ4cvDqfjiE0ZU2j3KxbFiH4ZthyeC/BeXjThQwAhtM5dvD tDVbf4mc9M0rhQSiFGde2oTmf+RhoxqJsthiSY7SeCEadTHiU7jCxvD6kbRi7XI5 ZQTlFvsEv8socZm6rbBDih4QoGmx81pBWT2VKmoRlMXUdB/lYCaZ6jY9KaJlAG/Z kX9AcA5Egn0WPw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:32 2025 by rpki-client