This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft File: W5Mah05ojyfJWsrY29Md9pjyEX0.mft (raw, json) Hash identifier: pnIPmS+cevTUry/nmrEPgtsb38Ku6oIY9FEnU8Wntr4= Subject key identifier: D5:05:3A:EA:48:AB:B7:DC:71:FC:BC:7C:9B:9D:9E:82:42:FC:F5:72 Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D Certificate issuer: /CN=5b931a874e688f27c95acad8dbd31df698f2117d Certificate serial: 019AF3F76697023DBE22B21313A34D042B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft Manifest number: 0172 Signing time: Sat 06 Dec 2025 14:01:08 +0000 Manifest this update: Sat 06 Dec 2025 14:01:08 +0000 Manifest next update: Sun 07 Dec 2025 14:01:08 +0000 Files and hashes: 1: T_aE1VBzRFBW86cu7jRpCvqMP_0.roa (hash: Br23NBG7MwrWwFTa8s2oq/DVFkGOhwRXNYpcFdJ00mE=) 2: W5Mah05ojyfJWsrY29Md9pjyEX0.crl (hash: rt9u3rib/X0nUrNkVNtvNbal06A5zBkIBu+pHVGz5ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:66:97:02:3d:be:22:b2:13:13:a3:4d:04:2b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d Validity Not Before: Dec 6 14:01:08 2025 GMT Not After : Dec 7 14:01:08 2025 GMT Subject: CN=d5053aea48abb7dc71fcbc7c9b9d9e8242fcf572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:05:ef:94:19:ef:6a:2e:d6:b7:32:f6:1c: 71:75:0c:28:ec:78:76:98:95:ed:11:ad:8b:b0:b1: 4b:10:4b:f8:cb:d8:ae:04:48:c6:08:4b:36:53:53: e9:7a:04:52:5d:a2:4e:76:02:7d:61:54:15:6d:00: 65:9c:e8:fb:f2:23:70:3d:eb:d6:80:a4:26:3a:8a: cd:8e:1c:32:97:fa:b0:44:1c:d0:0b:f5:bc:69:cb: d7:02:f0:22:cc:3f:f3:30:d0:bc:87:7a:87:ca:30: 9a:3a:32:24:29:b2:81:eb:b4:1a:90:e2:54:ed:78: 21:da:0b:f4:3d:1b:4f:c1:6a:a6:a1:63:cd:97:46: cc:7d:09:7a:e4:51:a5:a7:b8:9e:75:ae:c0:f4:0d: 3b:14:04:2e:e5:97:2a:06:bd:88:1d:98:de:03:2a: b3:ed:5c:2b:05:67:82:60:41:f2:e0:57:1c:d6:c6: 55:81:eb:9a:b5:e6:d0:27:10:0b:47:97:f1:c2:42: 54:5e:d3:41:be:b3:00:80:a2:19:42:56:06:04:9e: 64:50:0e:0a:6b:6e:17:a9:94:f7:c9:81:b4:93:86: ea:06:c0:9c:04:bf:67:21:f6:51:4b:19:49:c4:2b: 26:75:65:64:e5:1a:61:25:de:3c:6e:0d:55:92:a1: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:05:3A:EA:48:AB:B7:DC:71:FC:BC:7C:9B:9D:9E:82:42:FC:F5:72 X509v3 Authority Key Identifier: keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6d:df:f4:f8:84:ab:82:9b:b2:41:bd:58:d4:63:a1:5e:18: 19:7d:5a:c4:8a:da:f4:a3:f7:78:69:13:73:35:b5:52:85:7d: da:fd:0c:ab:8b:fc:c9:f8:4f:37:e5:d6:d5:c5:4a:e9:77:35: 7a:ba:38:d2:ca:4c:bc:13:62:3d:22:53:ca:cd:ff:34:91:6f: 81:9b:a5:32:8b:71:45:8b:36:2a:00:8c:38:4b:aa:7a:81:dd: 82:a0:cc:50:82:98:90:d1:e5:30:52:12:2a:d0:9f:a9:20:b1: 2f:87:7f:b8:b1:1c:af:23:ef:5e:bb:9e:46:1b:3d:08:be:3a: 6c:ce:bd:80:16:53:26:6e:d7:2a:28:f4:48:66:c5:1f:62:82: e6:54:b6:1c:d8:93:87:b4:da:85:a9:03:fe:39:20:b1:fd:52: c9:e9:22:3c:3a:96:e0:3d:27:ff:86:31:d8:b0:42:59:cb:31: de:af:74:ea:9a:19:16:36:05:dd:c2:96:de:04:b9:03:c9:81: c1:21:b1:65:60:d9:89:e0:18:80:d3:ff:64:eb:a2:3d:5f:71: ea:9a:14:be:67:38:70:d8:22:4f:a1:d8:87:d8:7d:bc:e5:5a: 57:5a:39:0c:02:c0:e0:e5:e7:69:b8:22:3f:00:6a:29:21:05: 02:ab:e1:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92aXAj2+IrITE6NNBCuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOTMxYTg3NGU2ODhmMjdjOTVhY2FkOGRiZDMxZGY2OThm MjExN2QwHhcNMjUxMjA2MTQwMTA4WhcNMjUxMjA3MTQwMTA4WjAzMTEwLwYDVQQD EyhkNTA1M2FlYTQ4YWJiN2RjNzFmY2JjN2M5YjlkOWU4MjQyZmNmNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QgF75QZ72ou1rcy9hxxdQwo7Hh2 mJXtEa2LsLFLEEv4y9iuBEjGCEs2U1PpegRSXaJOdgJ9YVQVbQBlnOj78iNwPevW gKQmOorNjhwyl/qwRBzQC/W8acvXAvAizD/zMNC8h3qHyjCaOjIkKbKB67QakOJU 7Xgh2gv0PRtPwWqmoWPNl0bMfQl65FGlp7ieda7A9A07FAQu5ZcqBr2IHZjeAyqz 7VwrBWeCYEHy4Fcc1sZVgeuatebQJxALR5fxwkJUXtNBvrMAgKIZQlYGBJ5kUA4K a24XqZT3yYG0k4bqBsCcBL9nIfZRSxlJxCsmdWVk5RphJd48bg1VkqEl6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUFOupIq7fccfy8fJudnoJC/PVyMB8GA1UdIwQY MBaAFFuTGodOaI8nyVrK2NvTHfaY8hF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lZjBlZTQtYTM5OC00ZWVjLTk1Mjkt OWFlNmE2MWEzNjFkLzEvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lZjBlZTQtYTM5OC00ZWVjLTk1MjktOWFlNmE2MWEzNjFk LzEvVzVNYWgwNW9qeWZKV3NyWTI5TWQ5cGp5RVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD23f9PiE q4KbskG9WNRjoV4YGX1axIra9KP3eGkTczW1UoV92v0Mq4v8yfhPN+XW1cVK6Xc1 ero40spMvBNiPSJTys3/NJFvgZulMotxRYs2KgCMOEuqeoHdgqDMUIKYkNHlMFIS KtCfqSCxL4d/uLEcryPvXrueRhs9CL46bM69gBZTJm7XKij0SGbFH2KC5lS2HNiT h7TahakD/jkgsf1SyekiPDqW4D0n/4Yx2LBCWcsx3q906poZFjYF3cKW3gS5A8mB wSGxZWDZieAYgNP/ZOuiPV9x6poUvmc4cNgiT6HYh9h9vOVaV1o5DALA4OXnabgi PwBqKSEFAqvhMg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:34 2025 by rpki-client