This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json) Hash identifier: G5WKMLEfZY4Ak4HYP5VYz8SRNc04Jn9mlc4Uxnz+R3M= Subject key identifier: 80:A8:78:F1:95:34:81:5E:D2:3F:7F:A5:1B:DC:15:C7:21:E4:63:9D Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18 Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518 Certificate serial: 019AF19AA05E60B3CB7CF2E0228C0D3A5F1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft Manifest number: 1471 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: 1s4EZDei5vFeW1ho3Jdp0FUtD6VlZuxFN3FIzk4PuEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a0:5e:60:b3:cb:7c:f2:e0:22:8c:0d:3a:5f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=80a878f19534815ed23f7fa51bdc15c721e4639d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:ec:02:4d:19:d9:d9:8b:f9:82:ad:f9:e9: 39:92:80:4d:eb:cb:ce:97:35:61:17:c3:91:85:64: 2f:e4:28:7e:81:03:a8:ff:df:cb:98:d9:b0:a2:74: 9f:9f:57:94:b7:2d:14:9c:3a:f3:9b:02:f7:df:a4: c3:0b:c6:0b:b4:f8:36:cc:53:b0:d1:97:18:fb:a9: 31:38:53:dd:82:2e:c4:01:d8:33:80:63:a2:5f:52: 2d:5d:62:af:5c:d8:fe:47:80:24:33:b6:43:1b:23: d4:80:a8:3d:94:51:9d:a4:f9:8e:ec:9d:66:e1:09: 67:43:03:b4:17:14:90:59:81:3e:8e:89:5b:b5:74: 8b:0d:03:92:38:43:87:1c:36:d5:98:42:44:cc:35: e8:78:a7:d6:c8:4b:12:a0:42:26:68:6d:b6:ef:72: 2e:ad:a2:ba:40:97:10:3f:00:5d:3e:c1:b4:ce:fa: d5:4c:02:7e:c7:fc:6b:e0:fc:12:6a:66:4b:9b:76: 7c:a3:fc:fb:aa:66:a4:37:6a:35:40:27:e2:11:48: 86:10:54:de:d9:bf:42:df:bb:85:df:86:fd:fe:a4: 32:cc:07:e9:dc:17:00:b0:bc:a4:69:66:cd:5a:67: 18:15:ff:46:ac:94:d2:5b:1a:a4:7b:2c:8f:99:1d: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A8:78:F1:95:34:81:5E:D2:3F:7F:A5:1B:DC:15:C7:21:E4:63:9D X509v3 Authority Key Identifier: keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:7a:97:50:d9:22:27:e5:7b:71:c1:81:38:04:7d:ba:70:2c: 98:b5:f2:f1:30:fa:33:f9:d8:ab:65:9e:5a:82:d2:be:52:8e: ef:26:c3:1e:57:5e:e7:7a:46:e3:b7:fa:6b:2b:99:fb:94:73: 73:4d:e9:b3:16:cb:fe:72:76:34:0c:13:f8:04:d5:5a:28:ae: 10:54:8d:c6:33:de:e1:5b:6a:df:52:05:7a:a2:33:dc:23:30: 76:05:64:38:31:97:6c:75:cd:9f:a8:24:f4:92:33:b9:51:93: 06:fe:59:0d:d7:0b:82:76:10:4c:52:02:bd:2a:00:48:2c:66: 33:7a:24:88:13:11:fe:25:19:f8:cb:e6:b7:2a:1f:16:1d:97: 74:56:40:62:ce:0d:47:b3:6c:26:31:0a:dd:26:d2:e7:b8:83: 79:1c:05:70:32:88:b8:b7:a0:f3:66:83:7d:1c:ad:2d:ce:83: f3:4b:02:79:be:2e:75:d3:6c:c7:02:81:15:9d:5d:d2:e1:5c: bb:f1:0f:03:87:20:0a:a6:dd:5f:4b:eb:72:1b:2e:97:e0:8e: 98:d9:99:70:da:46:21:69:ba:c3:cb:7e:64:4a:b3:4c:f9:1c: d7:11:de:86:8c:28:27:5b:6d:41:f0:a8:ff:62:a9:95:52:b4: b8:9d:75:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqBeYLPLfPLgIowNOl8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzI5OWM5NDliM2FkYWI5ZWY5MzUyNjMzZmNlY2MzYjcy YmQ1MTgwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD Eyg4MGE4NzhmMTk1MzQ4MTVlZDIzZjdmYTUxYmRjMTVjNzIxZTQ2MzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw/sAk0Z2dmL+YKt+ek5koBN68vO lzVhF8ORhWQv5Ch+gQOo/9/LmNmwonSfn1eUty0UnDrzmwL336TDC8YLtPg2zFOw 0ZcY+6kxOFPdgi7EAdgzgGOiX1ItXWKvXNj+R4AkM7ZDGyPUgKg9lFGdpPmO7J1m 4QlnQwO0FxSQWYE+jolbtXSLDQOSOEOHHDbVmEJEzDXoeKfWyEsSoEImaG2273Iu raK6QJcQPwBdPsG0zvrVTAJ+x/xr4PwSamZLm3Z8o/z7qmakN2o1QCfiEUiGEFTe 2b9C37uF34b9/qQyzAfp3BcAsLykaWbNWmcYFf9GrJTSWxqkeyyPmR0UawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICoePGVNIFe0j9/pRvcFcch5GOdMB8GA1UdIwQY MBaAFFvCmclJs62rnvk1JjP87MO3K9UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMt OWQyNWMzMzQ5ZDExLzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMtOWQyNWMzMzQ5ZDEx LzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnqXUNki J+V7ccGBOAR9unAsmLXy8TD6M/nYq2WeWoLSvlKO7ybDHlde53pG47f6ayuZ+5Rz c03psxbL/nJ2NAwT+ATVWiiuEFSNxjPe4Vtq31IFeqIz3CMwdgVkODGXbHXNn6gk 9JIzuVGTBv5ZDdcLgnYQTFICvSoASCxmM3okiBMR/iUZ+MvmtyofFh2XdFZAYs4N R7NsJjEK3SbS57iDeRwFcDKIuLeg82aDfRytLc6D80sCeb4uddNsxwKBFZ1d0uFc u/EPA4cgCqbdX0vrchsul+COmNmZcNpGIWm6w8t+ZEqzTPkc1xHehowoJ1ttQfCo /2KplVK0uJ110w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:20 2025 by rpki-client