This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json) Hash identifier: 83Tk0vSHvJOjfDVyO+gV+9ZuGkdjFwKzbjszyUfKIY8= Subject key identifier: 07:E4:64:B7:2B:D6:EB:42:D1:7F:3E:BD:27:E4:20:C2:31:F2:A7:D4 Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d Certificate serial: 019AF31B6DD20D88CDF17AAC8D19C0310FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: Pd7yhanFzH/skoiBeHLaM4t/XaCQE/Qv12fPmvwFUM4=) 2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6d:d2:0d:88:cd:f1:7a:ac:8d:19:c0:31:0f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=07e464b72bd6eb42d17f3ebd27e420c231f2a7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:0e:59:37:d5:45:fb:f8:9d:dd:31:ae:89: 9a:f3:81:94:d7:d2:b8:21:a2:37:c8:df:fa:1c:78: 8f:9c:e4:b3:aa:8d:cf:eb:d9:e0:8e:61:42:b1:e9: 38:48:be:b1:b5:22:06:d2:10:ae:fe:2c:a1:bf:5a: ba:d5:0b:3e:54:fb:61:f6:7a:49:70:b9:44:a6:66: e3:d7:b4:aa:11:ec:9b:67:ec:98:cc:ad:31:a5:f8: 21:f1:08:c5:47:d9:d3:f4:25:cf:23:a9:6e:c9:a0: b8:8a:6e:76:2c:7b:ce:15:40:a6:81:5d:8b:c3:1e: b4:df:f4:87:af:7d:e4:d1:5a:32:a5:9c:61:8d:01: 07:3d:b6:7b:eb:bc:2e:ca:a7:bb:c7:45:e0:ab:8b: 34:6f:bf:ed:fb:b3:04:dd:b7:98:35:81:25:92:30: fc:11:a2:00:c8:32:4f:4e:33:42:28:ad:ba:18:ef: b5:07:d9:22:70:6c:f1:ce:8c:1d:ed:34:89:40:0c: d7:c2:68:8b:d3:f3:e0:df:40:e4:5a:a7:f1:4c:9f: db:28:d8:aa:83:04:36:11:01:2e:e8:79:ab:d8:b4: 97:b7:22:b2:1d:6b:63:1d:19:04:87:3d:42:f1:fe: 84:a0:89:9b:f3:26:3d:5b:96:64:91:0a:96:3c:f0: 0c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E4:64:B7:2B:D6:EB:42:D1:7F:3E:BD:27:E4:20:C2:31:F2:A7:D4 X509v3 Authority Key Identifier: keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:67:30:00:5b:12:c1:49:6e:05:23:80:ae:a3:96:07:28:6e: ad:16:c0:83:ae:b2:82:d0:6b:9d:e8:c4:ab:a7:23:98:82:a9: f5:53:39:cd:10:71:5e:da:ef:6f:b9:1c:86:fe:6b:41:02:f4: 6c:42:ba:ba:46:c4:69:f5:4d:0b:e6:b2:7f:33:aa:47:7e:81: b2:70:42:67:4b:71:cd:fc:4e:a4:6d:93:ca:c5:ae:68:06:01: 63:01:77:bb:94:9a:03:53:e3:82:37:eb:91:c9:2a:e4:ba:9e: ff:f7:a4:10:c9:72:ac:f0:37:75:23:1c:7f:97:ea:b1:cf:97: 40:25:90:2b:08:69:79:44:3b:37:0b:d9:c6:0e:c1:c3:36:2f: b8:7f:e0:5b:b3:9c:89:58:75:44:88:5d:24:dd:8e:d4:09:99: 4b:d1:94:cc:98:23:f0:77:5c:b1:43:ab:f7:7f:60:93:90:93: 73:2f:75:53:44:49:5f:2a:39:0e:f9:5f:6c:ee:f7:be:d6:3f: 8a:eb:9f:a4:a9:25:52:ac:57:77:d2:e4:5d:38:77:21:e4:34: 7f:43:48:eb:c7:e2:82:1a:45:17:47:dc:6a:2f:26:13:d9:66: a1:06:93:b6:5c:8b:bd:b3:fc:31:e9:f1:e0:50:2f:03:d6:b2: 23:f7:3f:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG23SDYjN8XqsjRnAMQ+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTcxOWY5ODVkZjM5NGE0MmFjMTFlNWNiYzhmODJiNGI3 YWVjNWQwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EygwN2U0NjRiNzJiZDZlYjQyZDE3ZjNlYmQyN2U0MjBjMjMxZjJhN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqUOWTfVRfv4nd0xroma84GU19K4 IaI3yN/6HHiPnOSzqo3P69ngjmFCsek4SL6xtSIG0hCu/iyhv1q61Qs+VPth9npJ cLlEpmbj17SqEeybZ+yYzK0xpfgh8QjFR9nT9CXPI6luyaC4im52LHvOFUCmgV2L wx603/SHr33k0VoypZxhjQEHPbZ767wuyqe7x0Xgq4s0b7/t+7ME3beYNYElkjD8 EaIAyDJPTjNCKK26GO+1B9kicGzxzowd7TSJQAzXwmiL0/Pg30DkWqfxTJ/bKNiq gwQ2EQEu6Hmr2LSXtyKyHWtjHRkEhz1C8f6EoImb8yY9W5ZkkQqWPPAMTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfkZLcr1utC0X8+vSfkIMIx8qfUMB8GA1UdIwQY MBaAFFvnGfmF3zlKQqwR5cvI+CtLeuxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2Mt MjRhZWUyYjBlODJiLzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2MtMjRhZWUyYjBlODJi LzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGcwAFsS wUluBSOArqOWByhurRbAg66ygtBrnejEq6cjmIKp9VM5zRBxXtrvb7kchv5rQQL0 bEK6ukbEafVNC+ayfzOqR36BsnBCZ0txzfxOpG2TysWuaAYBYwF3u5SaA1Pjgjfr kckq5Lqe//ekEMlyrPA3dSMcf5fqsc+XQCWQKwhpeUQ7NwvZxg7BwzYvuH/gW7Oc iVh1RIhdJN2O1AmZS9GUzJgj8HdcsUOr939gk5CTcy91U0RJXyo5DvlfbO73vtY/ iuufpKklUqxXd9LkXTh3IeQ0f0NI68fighpFF0fcai8mE9lmoQaTtlyLvbP8Menx 4FAvA9ayI/c/XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:10 2025 by rpki-client