This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json) Hash identifier: 5m7CmVwhNi8M/gSq9DHiqLm30rtsQZhbb1GWTMyMTxI= Subject key identifier: 6C:30:85:B7:91:E6:2F:D4:1B:E2:0A:DE:04:C2:21:DB:BD:FD:9D:BA Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a Certificate serial: 019B26D21F8B9A349D339111B3A9D02F6F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft Manifest number: 0E21 Signing time: Tue 16 Dec 2025 11:01:03 +0000 Manifest this update: Tue 16 Dec 2025 11:01:03 +0000 Manifest next update: Wed 17 Dec 2025 11:01:03 +0000 Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: 7FvB4m5CYjVSFM2gI37D181WIVnpEcdrDUP1/prtIEw=) 2: p6zJI7fLaajTwxijhyxSXHf0c_A.roa (hash: xRiSXGx292mwjOrVD1g1q4F+cBXFDzNZJugikcE8Q4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:1f:8b:9a:34:9d:33:91:11:b3:a9:d0:2f:6f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a Validity Not Before: Dec 16 11:01:03 2025 GMT Not After : Dec 17 11:01:03 2025 GMT Subject: CN=6c3085b791e62fd41be20ade04c221dbbdfd9dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:81:01:17:8b:9b:38:fe:65:41:cd:d0:2a: 11:82:76:bd:98:92:31:27:30:bb:ca:b0:98:9b:0b: bb:12:dd:d5:bf:78:8a:2a:c5:9e:04:d5:c2:06:89: 50:61:fd:be:8b:b2:33:d6:3b:96:3e:7d:cc:99:93: 42:2d:db:ec:eb:59:29:5d:26:19:0d:f9:05:40:0d: 51:dc:78:26:8f:cd:32:ae:27:30:8a:d7:05:68:49: 97:ec:95:d4:c5:fe:c7:47:97:09:6a:e6:2f:37:f1: 47:17:df:b9:c8:51:db:9a:65:8e:56:69:a2:f9:d6: d7:2b:92:c9:97:4e:2a:30:91:d1:a2:f1:7a:6f:16: 4e:34:8b:5f:c1:d4:aa:22:2e:be:fb:ef:f5:99:6f: 98:98:7f:e5:f2:9b:c0:78:f1:95:77:14:4f:d7:63: ac:98:70:32:e2:d4:3b:18:c9:d5:6c:a1:98:1b:41: 53:6c:38:c6:27:d0:aa:d0:e3:23:a4:79:43:81:5a: ff:66:53:db:6b:69:aa:3a:00:58:0c:76:ff:f2:ce: 58:c9:44:e7:77:d1:b8:fb:28:d1:b5:a9:77:8e:75: 48:e7:e5:39:49:a5:e6:94:41:9d:80:0b:b5:f9:f2: a3:53:8b:fd:9b:57:d7:a3:5f:de:b0:62:1f:20:a6: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:30:85:B7:91:E6:2F:D4:1B:E2:0A:DE:04:C2:21:DB:BD:FD:9D:BA X509v3 Authority Key Identifier: keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ba:c1:1d:17:5b:89:f2:f5:c9:0a:56:30:3b:3e:eb:50:63: 5f:df:94:5c:15:5f:d3:79:ae:b3:fc:69:14:32:c7:81:d8:db: bf:f0:82:e4:c7:97:85:3b:a9:17:6f:70:c1:8f:6d:3c:a8:98: 90:0c:79:b9:db:3f:97:30:56:c9:2e:0a:32:32:0f:fe:14:ae: bf:4d:b6:21:2d:a9:d8:ef:f6:f1:af:7c:cb:8a:91:61:80:31: a4:1e:97:cc:f6:eb:28:11:dd:21:8c:f3:04:bc:0d:da:4e:87: eb:ea:a2:c9:61:4b:1d:5f:a9:ab:4a:bf:53:51:c6:c1:af:c3: 79:ca:f1:3f:88:dc:bf:cd:7c:5f:e9:2f:d2:65:63:be:34:7b: fa:eb:e0:d2:a7:38:2f:5c:e4:e6:6d:2f:89:60:33:25:fc:53: 7f:3c:97:3c:23:32:a7:90:d8:fd:db:10:dc:90:25:19:8b:7f: 58:f8:91:1a:39:a6:7d:87:f7:16:c3:e9:b8:b4:d6:fb:90:1c: 5c:63:e7:9a:81:a4:a9:0b:6c:c7:ea:f3:34:48:51:86:e0:71: c7:a6:2c:d6:1c:36:ca:b4:d3:5d:da:79:14:ea:d3:f5:6d:9a: 83:db:72:8f:d2:a5:a7:dc:10:02:72:51:7e:5f:7e:15:9b:62: 14:88:ea:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0h+LmjSdM5ERs6nQL29YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzE1MDM2MTBiZjgyZDg2ODdiN2FlZmI4NzlhNjU3ODcw NGYzMmEwHhcNMjUxMjE2MTEwMTAzWhcNMjUxMjE3MTEwMTAzWjAzMTEwLwYDVQQD Eyg2YzMwODViNzkxZTYyZmQ0MWJlMjBhZGUwNGMyMjFkYmJkZmQ5ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbCBAReLmzj+ZUHN0CoRgna9mJIx JzC7yrCYmwu7Et3Vv3iKKsWeBNXCBolQYf2+i7Iz1juWPn3MmZNCLdvs61kpXSYZ DfkFQA1R3Hgmj80yricwitcFaEmX7JXUxf7HR5cJauYvN/FHF9+5yFHbmmWOVmmi +dbXK5LJl04qMJHRovF6bxZONItfwdSqIi6+++/1mW+YmH/l8pvAePGVdxRP12Os mHAy4tQ7GMnVbKGYG0FTbDjGJ9Cq0OMjpHlDgVr/ZlPba2mqOgBYDHb/8s5YyUTn d9G4+yjRtal3jnVI5+U5SaXmlEGdgAu1+fKjU4v9m1fXo1/esGIfIKbmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwwhbeR5i/UG+IK3gTCIdu9/Z26MB8GA1UdIwQY MBaAFFvBUDYQv4LYaHt677h5pleHBPMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2Ut ZTdiMzcyZTRjN2M1LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2UtZTdiMzcyZTRjN2M1 LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrrBHRdb ifL1yQpWMDs+61BjX9+UXBVf03mus/xpFDLHgdjbv/CC5MeXhTupF29wwY9tPKiY kAx5uds/lzBWyS4KMjIP/hSuv022IS2p2O/28a98y4qRYYAxpB6XzPbrKBHdIYzz BLwN2k6H6+qiyWFLHV+pq0q/U1HGwa/DecrxP4jcv818X+kv0mVjvjR7+uvg0qc4 L1zk5m0viWAzJfxTfzyXPCMyp5DY/dsQ3JAlGYt/WPiRGjmmfYf3FsPpuLTW+5Ac XGPnmoGkqQtsx+rzNEhRhuBxx6Ys1hw2yrTTXdp5FOrT9W2ag9tyj9Klp9wQAnJR fl9+FZtiFIjqGw== -----END CERTIFICATE-----Generated at Tue Dec 16 20:55:04 2025 by rpki-client