This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json) Hash identifier: 4RGX4Ba0mIJmRnrRU/g4h6+YsFj1nMnNyqNx7yI9oy8= Subject key identifier: 49:B4:7F:F8:48:A8:24:12:48:30:71:CC:AE:1D:0C:CE:EF:F7:5F:C4 Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Certificate serial: 019AF3C016987DAF487E5DFF3D47BB14BA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 13:00:43 +0000 Manifest this update: Sat 06 Dec 2025 13:00:43 +0000 Manifest next update: Sun 07 Dec 2025 13:00:43 +0000 Files and hashes: 1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=) 2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: HbEX6RUzf9UT9750F7e885fsj3Z6HnHEw0cdylO+S6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:16:98:7d:af:48:7e:5d:ff:3d:47:bb:14:ba:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Validity Not Before: Dec 6 13:00:43 2025 GMT Not After : Dec 7 13:00:43 2025 GMT Subject: CN=49b47ff848a82412483071ccae1d0cceeff75fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:2c:9f:8e:1e:35:1e:a4:da:d4:c1:13:b3: 73:9f:f8:2a:ce:bd:dd:92:7b:89:41:c4:39:9d:74: 25:1a:e8:02:38:15:e0:95:61:10:06:f8:c8:07:0b: 7c:3b:f4:d8:c9:03:31:3d:75:a6:1b:2b:c7:de:8e: 7a:d8:b9:00:74:31:9a:4c:da:b6:2a:b3:8b:f7:c6: 25:60:e7:4f:ac:33:34:2e:7f:cf:39:38:08:87:98: f8:39:c0:53:3c:a0:17:23:24:3d:bf:4a:60:63:f8: 49:bd:3b:be:ac:54:4d:02:c5:6c:81:a4:06:f6:17: 84:c0:ee:04:2c:c1:05:3b:29:a8:0c:b3:bf:8a:0b: 4d:3f:d9:da:25:1c:55:8e:50:f8:e0:ff:06:9d:ca: 5e:28:b0:a2:04:93:00:52:1b:ef:45:0c:55:be:91: 0b:f1:35:64:3d:d5:76:b2:f9:26:08:c8:96:42:bf: 70:cb:04:cb:a8:18:98:a2:62:ae:d9:ed:2f:be:7a: 29:5f:e7:78:fe:ee:84:37:d3:b4:91:f8:24:96:1d: 9e:9f:1d:16:41:c8:ac:a9:e4:d9:99:a0:3f:12:1f: 76:25:c2:12:eb:80:55:6d:76:d1:6e:0a:63:87:f0: f3:e6:a6:e6:4a:db:ab:ee:90:41:4a:ee:2e:cc:ee: 21:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:7F:F8:48:A8:24:12:48:30:71:CC:AE:1D:0C:CE:EF:F7:5F:C4 X509v3 Authority Key Identifier: keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9c:0e:e5:e7:1f:96:a3:32:03:50:70:c7:2a:f7:9e:53:f0: 5c:b2:fd:ef:f2:8d:3e:f2:e5:4a:6d:ab:1b:2c:94:c5:28:76: 56:86:83:cd:11:2f:82:2e:47:35:ff:79:da:00:02:d1:94:00: d6:a5:31:1e:77:c7:1d:a7:08:8b:b3:ba:a7:36:c8:86:47:c6: 15:00:8c:c7:e4:16:2c:f8:cc:38:c3:2a:03:d8:06:40:f0:81: 11:ea:f0:4f:42:23:85:4a:7e:d2:78:d2:68:13:b9:eb:66:d9: 72:23:22:6d:17:d1:91:c6:88:6e:47:7e:7b:65:9d:0e:55:cc: 2c:71:45:4d:7d:77:a5:c2:6e:a4:d6:54:92:9a:16:f3:71:fa: 7b:75:ac:88:2e:c3:34:14:57:38:d4:8b:d5:f8:e9:e6:e7:a8: ed:c7:d6:bf:8f:b4:62:bf:0d:dd:56:b5:34:ad:dc:fb:54:7d: ad:ad:c2:f4:bc:36:b0:a3:1f:ba:c0:fc:2b:71:cd:27:7e:ff: 02:cb:79:0b:df:4b:9a:ab:3f:4d:42:e6:9c:13:fd:c7:39:b6: f1:12:59:86:21:97:4c:20:2a:5e:c6:8d:b0:65:bb:03:6b:75: e3:54:34:5c:e9:04:bd:26:9b:a8:43:05:2f:bf:bb:6e:06:5f: 08:a8:56:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBaYfa9Ifl3/PUe7FLokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOGIyNmM1MzJmYmM1MmI1ZGU2NzJhYjM1NzYxZDFjN2Q5 N2ViMjYwHhcNMjUxMjA2MTMwMDQzWhcNMjUxMjA3MTMwMDQzWjAzMTEwLwYDVQQD Eyg0OWI0N2ZmODQ4YTgyNDEyNDgzMDcxY2NhZTFkMGNjZWVmZjc1ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiwsn44eNR6k2tTBE7Nzn/gqzr3d knuJQcQ5nXQlGugCOBXglWEQBvjIBwt8O/TYyQMxPXWmGyvH3o562LkAdDGaTNq2 KrOL98YlYOdPrDM0Ln/POTgIh5j4OcBTPKAXIyQ9v0pgY/hJvTu+rFRNAsVsgaQG 9heEwO4ELMEFOymoDLO/igtNP9naJRxVjlD44P8GncpeKLCiBJMAUhvvRQxVvpEL 8TVkPdV2svkmCMiWQr9wywTLqBiYomKu2e0vvnopX+d4/u6EN9O0kfgklh2enx0W QcisqeTZmaA/Eh92JcIS64BVbXbRbgpjh/Dz5qbmStur7pBBSu4uzO4hZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEm0f/hIqCQSSDBxzK4dDM7v91/EMB8GA1UdIwQY MBaAFFuLJsUy+8UrXeZyqzV2HRx9l+smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMt ZTcyZTliNGI3NjU4LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMtZTcyZTliNGI3NjU4 LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpwO5ecf lqMyA1Bwxyr3nlPwXLL97/KNPvLlSm2rGyyUxSh2VoaDzREvgi5HNf952gAC0ZQA 1qUxHnfHHacIi7O6pzbIhkfGFQCMx+QWLPjMOMMqA9gGQPCBEerwT0IjhUp+0njS aBO562bZciMibRfRkcaIbkd+e2WdDlXMLHFFTX13pcJupNZUkpoW83H6e3WsiC7D NBRXONSL1fjp5ueo7cfWv4+0Yr8N3Va1NK3c+1R9ra3C9Lw2sKMfusD8K3HNJ37/ Ast5C99Lmqs/TULmnBP9xzm28RJZhiGXTCAqXsaNsGW7A2t141Q0XOkEvSabqEMF L7+7bgZfCKhW7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:49 2025 by rpki-client