This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json) Hash identifier: uaIVHlwBAOuYpDfqHKVwomcYCFbmtEZNo8BzswfLhio= Subject key identifier: F9:CD:79:1A:9C:57:33:3E:00:19:53:8F:E1:1A:A4:11:A3:DC:09:30 Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46 Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046 Certificate serial: 019B360E25D593F6CDABB42DBF699A09E908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 10:00:55 +0000 Manifest this update: Fri 19 Dec 2025 10:00:55 +0000 Manifest next update: Sat 20 Dec 2025 10:00:55 +0000 Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: wJc4vgamcyt2NkulQLWfyb4XqE1B5ALTPq5EP7wNHpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:25:d5:93:f6:cd:ab:b4:2d:bf:69:9a:09:e9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046 Validity Not Before: Dec 19 10:00:55 2025 GMT Not After : Dec 20 10:00:55 2025 GMT Subject: CN=f9cd791a9c57333e0019538fe11aa411a3dc0930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:e6:8f:38:f4:17:8c:44:d1:5c:35:f8:6b: 1a:c6:66:e6:41:0d:ca:38:96:d7:a1:c7:d2:43:56: c2:b7:c6:e2:8d:1a:df:31:91:74:93:32:73:84:30: 48:b9:08:86:24:31:8a:25:d3:1a:9e:c4:61:7c:77: 14:c5:4c:9e:cb:3d:8e:ee:35:70:ac:94:b7:7c:0a: 6d:aa:ef:48:91:11:84:17:25:e1:91:7d:c3:97:d1: 75:19:05:d1:6d:0c:81:19:7b:00:e5:c5:33:9c:39: 7b:28:de:ab:46:4c:a4:9e:f5:b4:2e:de:f4:ce:18: ba:39:05:02:50:b5:a2:b3:33:75:88:f3:e3:96:27: bf:70:44:2d:c2:23:b7:8d:a9:32:f0:6a:b4:72:85: 8e:2d:d4:7b:85:98:5c:8a:7f:dd:82:62:38:38:6c: 86:31:10:d9:fc:94:e8:3b:bd:60:ce:69:04:b9:47: 26:b5:0a:8f:52:8c:49:e9:16:6b:45:31:a4:b2:e8: 60:c8:5c:3e:0d:90:cc:ed:b4:a4:2f:60:5e:35:e0: 7a:80:10:5a:39:f6:30:d9:cc:5a:7e:b4:b8:76:24: dd:1b:0b:88:5c:7b:59:ff:4d:a6:88:4b:b9:e8:a9: 74:3b:26:29:63:5c:7a:78:b4:9d:85:ad:63:e1:7e: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CD:79:1A:9C:57:33:3E:00:19:53:8F:E1:1A:A4:11:A3:DC:09:30 X509v3 Authority Key Identifier: keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a5:4f:4c:41:e4:37:bb:d7:38:fb:12:31:e1:64:66:57:66: e9:2c:3a:a4:31:24:db:24:d9:a1:3d:94:3b:fb:cf:2c:e7:20: 46:1b:ed:ff:6b:96:47:64:52:a7:93:5e:8d:03:b0:09:ef:9b: ae:12:2b:49:3f:0e:5e:c0:d4:a4:3c:be:ec:e9:2b:3e:41:3e: 6c:03:34:ca:1f:e5:a2:c4:cb:b9:8c:a3:92:26:a2:a7:df:3d: fe:86:82:3f:83:da:af:15:7e:4c:d4:92:7a:c1:b7:ad:87:2d: 40:78:2c:f1:73:3b:b2:8e:9c:2c:ba:70:f4:02:09:fb:18:78: 87:fa:46:0a:da:1f:94:63:d4:56:60:29:d8:aa:d8:bc:80:c8: ea:c1:88:9f:37:56:71:b0:45:4b:8f:e7:83:75:08:b0:c9:a2: 1f:e2:4f:e3:ec:f1:8b:59:d8:48:9f:10:f0:3a:4b:5e:be:69: 7a:9b:e5:79:f8:c3:62:0b:c9:70:1c:6f:2d:2a:4e:9b:48:7c: d7:6e:13:2e:50:7a:f2:98:81:03:ea:57:d9:d9:30:17:ba:b8: 8c:43:ab:8d:07:1e:0e:9a:a2:12:b3:a1:38:23:86:17:9f:0f: 20:8c:f0:c3:bd:2c:15:b6:5d:68:84:55:68:41:48:b8:dc:28: 2d:b5:35:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DiXVk/bNq7Qtv2maCekIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzNjYTBkNjNhOGZjY2RjMGU5MmE4OGE2YmFjZWZmMjc1 ZTcwNDYwHhcNMjUxMjE5MTAwMDU1WhcNMjUxMjIwMTAwMDU1WjAzMTEwLwYDVQQD EyhmOWNkNzkxYTljNTczMzNlMDAxOTUzOGZlMTFhYTQxMWEzZGMwOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsjmjzj0F4xE0Vw1+GsaxmbmQQ3K OJbXocfSQ1bCt8bijRrfMZF0kzJzhDBIuQiGJDGKJdMansRhfHcUxUyeyz2O7jVw rJS3fAptqu9IkRGEFyXhkX3Dl9F1GQXRbQyBGXsA5cUznDl7KN6rRkyknvW0Lt70 zhi6OQUCULWiszN1iPPjlie/cEQtwiO3jaky8Gq0coWOLdR7hZhcin/dgmI4OGyG MRDZ/JToO71gzmkEuUcmtQqPUoxJ6RZrRTGksuhgyFw+DZDM7bSkL2BeNeB6gBBa OfYw2cxafrS4diTdGwuIXHtZ/02miEu56Kl0OyYpY1x6eLSdha1j4X71hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnNeRqcVzM+ABlTj+EapBGj3AkwMB8GA1UdIwQY MBaAFFvDyg1jqPzNwOkqiKa6zv8nXnBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDkt M2MxZTA1MThmOWU1LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDktM2MxZTA1MThmOWU1 LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6VPTEHk N7vXOPsSMeFkZldm6Sw6pDEk2yTZoT2UO/vPLOcgRhvt/2uWR2RSp5NejQOwCe+b rhIrST8OXsDUpDy+7OkrPkE+bAM0yh/losTLuYyjkiaip989/oaCP4ParxV+TNSS esG3rYctQHgs8XM7so6cLLpw9AIJ+xh4h/pGCtoflGPUVmAp2KrYvIDI6sGInzdW cbBFS4/ng3UIsMmiH+JP4+zxi1nYSJ8Q8DpLXr5pepvlefjDYgvJcBxvLSpOm0h8 124TLlB68piBA+pX2dkwF7q4jEOrjQceDpqiErOhOCOGF58PIIzww70sFbZdaIRV aEFIuNwoLbU1iA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:21:31 2025 by rpki-client