This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft File: W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json) Hash identifier: 3YYCIlb5pN5OnFqUHOscHQWBtzLCDC3jbpt2+MgP64c= Subject key identifier: 28:36:65:E0:E6:CE:7E:00:0D:B3:1A:17:0F:EA:7D:38:D3:D1:AB:4D Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b Certificate serial: 019AF49BD71584D3359CA08AD0279871D27A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:00:45 +0000 Manifest this update: Sat 06 Dec 2025 17:00:45 +0000 Manifest next update: Sun 07 Dec 2025 17:00:45 +0000 Files and hashes: 1: 7z1CEaiQeIhLfGd7pGfu2uxsPac.roa (hash: 7C2NyJj4g6x2FviGxPNRDMPSybLsn4cJWtQ3CeiM6xk=) 2: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: V1rmTCkpeLMawDCkh55kUpSymCKhnhWOX/vEda9c7dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d7:15:84:d3:35:9c:a0:8a:d0:27:98:71:d2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b Validity Not Before: Dec 6 17:00:45 2025 GMT Not After : Dec 7 17:00:45 2025 GMT Subject: CN=283665e0e6ce7e000db31a170fea7d38d3d1ab4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f0:40:b4:cd:59:d9:50:d6:bf:ee:e9:98:4e: d0:ba:96:54:1b:b1:5a:ce:1f:c2:7f:3d:f5:04:ff: 05:04:7d:ae:ca:23:67:62:04:17:04:2d:1f:8d:8c: 4b:f1:0a:91:b0:69:16:1c:5e:fb:60:bb:ed:70:c1: 64:12:84:b7:80:e4:60:f9:aa:6f:8f:65:86:b3:d0: ca:6e:0c:11:ff:3d:bc:27:86:28:19:17:6c:1e:fa: bd:9b:67:9d:24:6c:ca:70:67:4c:24:6a:44:89:31: 5c:00:2e:f8:59:6d:a0:d4:e9:fc:1d:41:ec:6f:41: 2b:10:87:cf:c9:6b:3a:65:15:b2:c7:dc:99:e6:cb: 4e:9c:93:bd:2e:cb:7f:5e:b7:d6:35:f9:b3:6e:2d: 58:3e:70:ec:cd:f5:cc:09:e3:84:13:cc:7e:f2:03: 7f:f0:b9:a9:77:c2:90:c5:c3:95:2b:db:76:2f:d4: 43:40:1a:3f:00:b2:56:32:09:44:04:e0:15:69:62: 3f:59:c6:63:36:db:61:9f:9b:00:fa:36:63:81:29: d6:e3:17:e6:29:9b:40:91:88:86:75:70:c0:3f:cf: d0:ad:c5:35:8f:aa:76:e7:72:01:42:60:36:0e:5c: 46:b1:04:fe:14:39:e9:f1:61:bf:ab:4c:d8:ab:38: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:65:E0:E6:CE:7E:00:0D:B3:1A:17:0F:EA:7D:38:D3:D1:AB:4D X509v3 Authority Key Identifier: keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:be:28:e7:d4:51:c6:df:77:75:93:66:1f:1a:9a:a1:d3:38: 92:ca:70:86:41:33:1b:a2:a5:e7:4a:f4:4e:7f:b6:cd:30:8c: 37:03:23:4e:be:3a:30:05:c1:5e:72:f7:e8:e9:dc:53:b8:57: 7f:c4:5d:52:7e:2f:33:e2:a7:2b:fa:7d:3c:e9:14:02:5f:16: b4:f7:00:23:7c:45:45:50:6e:41:13:3f:36:b8:62:26:5c:40: cf:90:64:f3:38:58:b9:0d:ff:8a:6b:ab:47:84:6d:fc:29:69: 90:e0:02:89:16:23:d8:30:28:bc:1d:ce:35:a3:da:8c:ce:7a: 3a:b9:08:ec:55:8d:33:b7:98:d2:9a:9e:b0:af:f5:e4:c0:cc: 95:14:90:4d:0a:0d:9f:4c:77:71:79:08:53:17:e1:f6:2c:0e: 9f:b0:74:2d:e6:7d:11:ce:1e:0f:2b:ef:d3:5f:88:6b:8a:3f: 01:34:f7:82:cb:e2:37:c2:51:04:29:d6:60:42:9d:9d:7d:f2: df:37:e3:83:b0:70:eb:c5:9e:7b:c8:85:56:7d:e4:5d:14:80: 89:6c:09:1e:6a:f8:a4:0a:38:89:00:8f:78:0e:66:3b:4a:85: 77:fb:65:63:cf:bb:fd:b8:38:27:f6:43:1c:84:32:ca:4b:18: 79:e9:36:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9cVhNM1nKCK0CeYcdJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTk3OWZiOGU0NzczMDRiYjU5MWQ2YjY4ZWVhNzNkYTk0 YTgxNWIwHhcNMjUxMjA2MTcwMDQ1WhcNMjUxMjA3MTcwMDQ1WjAzMTEwLwYDVQQD EygyODM2NjVlMGU2Y2U3ZTAwMGRiMzFhMTcwZmVhN2QzOGQzZDFhYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fBAtM1Z2VDWv+7pmE7QupZUG7Fa zh/Cfz31BP8FBH2uyiNnYgQXBC0fjYxL8QqRsGkWHF77YLvtcMFkEoS3gORg+apv j2WGs9DKbgwR/z28J4YoGRdsHvq9m2edJGzKcGdMJGpEiTFcAC74WW2g1On8HUHs b0ErEIfPyWs6ZRWyx9yZ5stOnJO9Lst/XrfWNfmzbi1YPnDszfXMCeOEE8x+8gN/ 8Lmpd8KQxcOVK9t2L9RDQBo/ALJWMglEBOAVaWI/WcZjNtthn5sA+jZjgSnW4xfm KZtAkYiGdXDAP8/QrcU1j6p253IBQmA2DlxGsQT+FDnp8WG/q0zYqzhPhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg2ZeDmzn4ADbMaFw/qfTjT0atNMB8GA1UdIwQY MBaAFFvpefuOR3MEu1kda2jupz2pSoFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMt MTYwNWIxYmQyOThlLzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMtMTYwNWIxYmQyOThl LzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1b4o59RR xt93dZNmHxqaodM4kspwhkEzG6Kl50r0Tn+2zTCMNwMjTr46MAXBXnL36OncU7hX f8RdUn4vM+KnK/p9POkUAl8WtPcAI3xFRVBuQRM/NrhiJlxAz5Bk8zhYuQ3/imur R4Rt/ClpkOACiRYj2DAovB3ONaPajM56OrkI7FWNM7eY0pqesK/15MDMlRSQTQoN n0x3cXkIUxfh9iwOn7B0LeZ9Ec4eDyvv01+Ia4o/ATT3gsviN8JRBCnWYEKdnX3y 3zfjg7Bw68Wee8iFVn3kXRSAiWwJHmr4pAo4iQCPeA5mO0qFd/tlY8+7/bg4J/ZD HIQyyksYeek2oQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:34 2025 by rpki-client