This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft File: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft (raw, json) Hash identifier: 44KR4iCuds3e9242Ug4k1Gca0dtKVfID4k1uTR2gYBo= Subject key identifier: D9:CB:B3:BB:FA:FE:62:2E:A0:62:8B:47:9C:FD:B3:79:AF:CB:74:CC Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6 Certificate issuer: /CN=5be39da3aaa52d130ff074fb049221966d2b57c6 Certificate serial: 019AF31D2F99AE0090FB967C67D5345FFF73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft Manifest number: 1702 Signing time: Sat 06 Dec 2025 10:02:47 +0000 Manifest this update: Sat 06 Dec 2025 10:02:47 +0000 Manifest next update: Sun 07 Dec 2025 10:02:47 +0000 Files and hashes: 1: Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa (hash: PzV+Hvm8wXtJUXwK3RxNsLo6F6xHiBk0IePHLXsbPqk=) 2: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl (hash: PcmA++fuJkThdP56rIoXypnDe+0rp/pl+IeWbXmW96Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:2f:99:ae:00:90:fb:96:7c:67:d5:34:5f:ff:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6 Validity Not Before: Dec 6 10:02:47 2025 GMT Not After : Dec 7 10:02:47 2025 GMT Subject: CN=d9cbb3bbfafe622ea0628b479cfdb379afcb74cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:bd:4a:d8:c5:e3:94:06:53:5e:c4:e4:68: 4d:a7:59:68:d2:2d:56:c3:62:f0:e3:a8:cd:99:4b: 14:25:25:a9:f3:92:c5:06:65:6a:54:c8:17:3b:b8: 31:22:22:8a:ed:0d:8e:83:d2:f6:f0:ce:7c:ab:bf: 3d:f3:d4:2d:92:f1:61:db:f3:f8:d1:be:f7:76:42: d1:ef:f1:56:c8:3f:95:7f:61:13:76:5b:63:6e:de: ee:8a:f3:f2:b8:da:79:a2:65:3f:f2:a0:38:47:ab: d3:68:a0:1d:c1:37:6e:67:56:05:a6:57:6b:a3:38: c6:99:51:4f:0b:0e:34:93:2d:a3:dd:19:35:24:62: 19:56:93:3f:b4:d0:09:2f:15:bb:90:df:f1:0c:cb: 9c:bc:ed:6c:b7:b2:82:49:d6:84:fa:22:1a:53:d9: b8:60:4b:6f:e9:9b:07:f4:1c:3a:b4:e5:50:fa:59: 7a:71:9a:13:b2:d0:d7:7a:f4:9b:9a:7b:38:d4:9f: 16:61:2d:bf:59:56:6a:ea:ae:37:6a:5e:d0:28:91: de:06:28:ff:8b:c4:10:46:31:82:ab:5a:f2:92:38: 76:37:62:e1:3c:d0:f1:b0:aa:00:97:0e:79:67:da: 07:25:eb:b5:a2:fa:ee:c8:f6:69:f7:ad:0d:c7:f3: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:B3:BB:FA:FE:62:2E:A0:62:8B:47:9C:FD:B3:79:AF:CB:74:CC X509v3 Authority Key Identifier: keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e0:bf:f9:0d:96:23:21:9d:6d:94:2f:26:18:d3:12:43:15: 19:70:4a:be:76:48:0f:d9:06:ed:c9:f9:21:1d:2d:84:e4:b6: 4d:36:f9:02:0c:14:28:45:38:35:8c:92:32:5d:e3:2e:d5:cf: 5a:eb:4c:1d:c1:1c:6e:f4:c3:e0:99:c0:69:17:90:fd:b9:b2: 3a:2c:11:26:fc:7c:9f:7e:c0:ba:17:e3:11:87:d3:b9:80:eb: a1:3a:a2:17:29:2d:ec:46:e4:4a:8d:db:7a:36:06:8b:c5:f9: 06:15:a7:93:7f:16:fe:b2:06:1b:24:bc:f5:09:c9:34:71:ef: b7:83:9a:1b:ba:db:b3:a4:ab:e0:79:28:ac:a2:5c:b1:23:b1: 48:4d:a7:15:a2:65:d7:03:82:fd:59:13:43:5a:ee:0f:ce:0c: 60:24:40:94:c7:09:59:e7:b2:ae:71:ce:21:6e:52:3d:8a:1c: 5d:2b:e7:7c:78:17:61:15:3a:5c:51:95:2e:2f:81:f6:ef:02: 4d:6c:88:62:6c:ec:c4:f8:b4:7b:e9:22:dd:e1:25:f9:e0:37: 49:7b:4e:72:a6:4f:0b:79:d3:ad:aa:f1:55:24:1c:f8:78:bc: ef:42:9a:a9:86:41:e4:cc:ae:49:1c:1d:2b:82:da:5b:48:44: ef:b0:85:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHS+ZrgCQ+5Z8Z9U0X/9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTM5ZGEzYWFhNTJkMTMwZmYwNzRmYjA0OTIyMTk2NmQy YjU3YzYwHhcNMjUxMjA2MTAwMjQ3WhcNMjUxMjA3MTAwMjQ3WjAzMTEwLwYDVQQD EyhkOWNiYjNiYmZhZmU2MjJlYTA2MjhiNDc5Y2ZkYjM3OWFmY2I3NGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZe9StjF45QGU17E5GhNp1lo0i1W w2Lw46jNmUsUJSWp85LFBmVqVMgXO7gxIiKK7Q2Og9L28M58q78989QtkvFh2/P4 0b73dkLR7/FWyD+Vf2ETdltjbt7uivPyuNp5omU/8qA4R6vTaKAdwTduZ1YFpldr ozjGmVFPCw40ky2j3Rk1JGIZVpM/tNAJLxW7kN/xDMucvO1st7KCSdaE+iIaU9m4 YEtv6ZsH9Bw6tOVQ+ll6cZoTstDXevSbmns41J8WYS2/WVZq6q43al7QKJHeBij/ i8QQRjGCq1rykjh2N2LhPNDxsKoAlw55Z9oHJeu1ovruyPZp960Nx/Nv3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnLs7v6/mIuoGKLR5z9s3mvy3TMMB8GA1UdIwQY MBaAFFvjnaOqpS0TD/B0+wSSIZZtK1fGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUt ZTg3MmMwZDQwOGEzLzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iMWU2NmEtNTE2Yi00ZDY0LWE2NDUtZTg3MmMwZDQwOGEz LzEvVy1PZG82cWxMUk1QOEhUN0JKSWhsbTByVjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuC/+Q2W IyGdbZQvJhjTEkMVGXBKvnZID9kG7cn5IR0thOS2TTb5AgwUKEU4NYySMl3jLtXP WutMHcEcbvTD4JnAaReQ/bmyOiwRJvx8n37AuhfjEYfTuYDroTqiFykt7EbkSo3b ejYGi8X5BhWnk38W/rIGGyS89QnJNHHvt4OaG7rbs6Sr4HkorKJcsSOxSE2nFaJl 1wOC/VkTQ1ruD84MYCRAlMcJWeeyrnHOIW5SPYocXSvnfHgXYRU6XFGVLi+B9u8C TWyIYmzsxPi0e+ki3eEl+eA3SXtOcqZPC3nTrarxVSQc+Hi870KaqYZB5MyuSRwd K4LaW0hE77CFUg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:54 2025 by rpki-client