This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft File: W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json) Hash identifier: S8OKZPWu/QFo3EsFierXuDNHKviHS+niyDrQIYXfdPw= Subject key identifier: AD:A8:32:00:68:FC:EF:DD:2E:86:55:FF:3F:27:C4:E2:37:F9:BD:F5 Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7 Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7 Certificate serial: 019AF23FA32A9CD7D8DFE15B9A7EE8263211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: 6LdSv/rkL64TQD6Ibr9Sx3s7awllJQktNI2YNAc1OHU=) 2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a3:2a:9c:d7:d8:df:e1:5b:9a:7e:e8:26:32:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=ada8320068fcefdd2e8655ff3f27c4e237f9bdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:c8:59:b7:17:61:64:79:37:36:54:0b:d3: 4b:fa:3d:2f:40:1b:8d:67:43:02:3f:56:75:17:e1: 5e:2e:8d:10:18:be:a3:62:04:a0:7f:6a:10:4a:72: 3d:17:dc:64:e3:40:84:8a:85:b4:dd:a2:66:15:5b: 9b:20:2c:56:be:b2:75:84:ed:fa:76:d0:b7:6a:94: ce:f0:a6:ac:2a:20:2d:6f:da:c2:d7:b7:68:86:27: 02:9c:59:62:02:88:ae:fb:ad:43:6d:ad:ea:8c:49: 60:ec:90:30:b0:b5:b1:59:18:35:bc:db:0f:6e:c3: 4c:60:34:d6:1b:f4:8b:4a:bb:08:95:de:11:c7:d3: 98:8b:23:b2:99:d9:8b:db:c2:bf:79:eb:12:d9:ec: d1:81:52:ab:75:31:9c:fd:b5:f4:9b:73:69:0e:70: 9a:c3:51:76:c1:53:8e:6c:22:2b:99:fd:d9:95:27: 23:c1:16:68:d6:8e:78:c0:93:ac:d1:c1:63:9a:69: fd:dd:70:64:8a:4b:34:0d:3d:e1:ad:f2:d6:54:e6: e9:91:75:66:f4:97:2f:63:fa:ce:85:8f:9d:05:2d: 5d:fa:c1:e7:44:f7:ee:ce:aa:7a:8b:9c:2c:d0:1b: 71:37:56:5d:6d:96:96:41:6e:f2:4c:78:ea:25:cb: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A8:32:00:68:FC:EF:DD:2E:86:55:FF:3F:27:C4:E2:37:F9:BD:F5 X509v3 Authority Key Identifier: keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1c:77:e8:d8:30:d7:7a:8d:be:47:e3:3d:a2:b0:fb:28:21: a7:85:cf:7b:e8:d7:5a:35:7b:4d:a0:58:0a:7d:19:17:0b:f6: f0:80:72:4e:6e:55:9a:fa:fb:98:e9:47:32:e3:b7:bd:06:2f: b2:0c:4c:08:16:ca:5b:70:4b:c4:e0:63:ab:ee:71:fb:91:d6: a1:84:cd:fb:65:56:29:90:36:7a:10:42:14:2b:05:e1:b3:9d: 27:26:d5:22:c5:62:60:8c:7b:69:05:bb:f1:e3:b7:aa:e1:f2: 26:35:c4:66:74:9f:2f:07:83:f3:e5:7c:17:73:ba:d1:f0:1c: f0:43:be:39:23:e5:dc:80:64:88:ac:d5:39:8d:9c:fc:38:14: c6:5b:c7:1f:f1:4b:7c:14:9e:20:4d:7e:c4:91:09:5c:7c:26: 19:51:01:49:3c:09:7a:08:15:34:ca:c8:a3:91:22:1a:21:ac: 77:c2:31:ce:74:8d:ad:7a:1f:73:b0:3b:fe:a3:4c:98:12:53: 79:58:ca:19:f8:f8:17:8b:42:79:ac:ca:84:94:20:30:20:91: f9:0c:ae:56:4e:ab:19:9f:5f:a0:3c:8f:5e:aa:55:9f:09:84: 94:6a:9b:23:10:dd:4c:59:60:0c:fe:9b:71:12:de:f5:ef:39: f6:a2:f5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6MqnNfY3+Fbmn7oJjIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDNlODQ4YzU4YTY0NTFjYTg3NGNkY2ZjMzdlOWJjMGY1 ZDlhYzcwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EyhhZGE4MzIwMDY4ZmNlZmRkMmU4NjU1ZmYzZjI3YzRlMjM3ZjliZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCnIWbcXYWR5NzZUC9NL+j0vQBuN Z0MCP1Z1F+FeLo0QGL6jYgSgf2oQSnI9F9xk40CEioW03aJmFVubICxWvrJ1hO36 dtC3apTO8KasKiAtb9rC17dohicCnFliAoiu+61Dba3qjElg7JAwsLWxWRg1vNsP bsNMYDTWG/SLSrsIld4Rx9OYiyOymdmL28K/eesS2ezRgVKrdTGc/bX0m3NpDnCa w1F2wVOObCIrmf3ZlScjwRZo1o54wJOs0cFjmmn93XBkiks0DT3hrfLWVObpkXVm 9JcvY/rOhY+dBS1d+sHnRPfuzqp6i5ws0BtxN1ZdbZaWQW7yTHjqJcsROQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2oMgBo/O/dLoZV/z8nxOI3+b31MB8GA1UdIwQY MBaAFFvT6EjFimRRyodM3Pw36bwPXZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAt NDg0ZDQ1ODZlZTdiLzEvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wYjg3ZjUtZTVkMi00NTZmLWFiZTAtNDg0ZDQ1ODZlZTdi LzEvVzlQb1NNV0taRkhLaDB6Y19EZnB2QTlkbXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxx36Ngw 13qNvkfjPaKw+yghp4XPe+jXWjV7TaBYCn0ZFwv28IByTm5Vmvr7mOlHMuO3vQYv sgxMCBbKW3BLxOBjq+5x+5HWoYTN+2VWKZA2ehBCFCsF4bOdJybVIsViYIx7aQW7 8eO3quHyJjXEZnSfLweD8+V8F3O60fAc8EO+OSPl3IBkiKzVOY2c/DgUxlvHH/FL fBSeIE1+xJEJXHwmGVEBSTwJeggVNMrIo5EiGiGsd8IxznSNrXofc7A7/qNMmBJT eVjKGfj4F4tCeazKhJQgMCCR+QyuVk6rGZ9foDyPXqpVnwmElGqbIxDdTFlgDP6b cRLe9e859qL1Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:33 2025 by rpki-client