This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json) Hash identifier: zbyS4dxr0vtsOAmjIF5W2jRsPEA6gEugWfLw+u53Udk= Subject key identifier: 43:1B:0B:5E:BE:47:7C:68:42:79:60:B1:02:07:6E:CE:74:A3:3B:7C Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e Certificate serial: 019AF2402C3F13FF665D2B4B51ECE4B5340E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft Manifest number: 10B5 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: 9dU3b18c/7FpqIwr76Wc3v98Pk0dkaqyl7XPRN4U6ZI=) 2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2c:3f:13:ff:66:5d:2b:4b:51:ec:e4:b5:34:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=431b0b5ebe477c68427960b102076ece74a33b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:6f:2c:f6:59:fb:6e:89:9a:af:17:37:56: 17:50:b1:1a:54:25:51:c7:1c:f4:6a:cb:50:1b:24: 66:33:ae:97:52:13:fb:66:2c:35:8e:4c:08:3c:e3: 50:2a:89:93:2d:ae:5d:c1:a8:e5:ab:87:6c:69:72: 64:dd:ba:42:4c:42:44:b0:99:5a:4b:01:9d:a4:e4: 29:34:6f:36:db:3f:a0:7c:86:bb:79:70:24:9f:f3: 75:c7:53:6e:c0:de:6f:a7:83:fa:d6:64:2d:75:d0: df:91:fa:9f:21:e8:c6:88:f6:c2:13:ad:85:04:aa: 35:95:4a:c4:95:3f:68:f7:84:24:8c:92:2e:0b:c0: 7e:0c:e3:45:a5:e0:88:83:ec:1d:f6:ff:05:52:c4: 04:0b:ba:3b:e5:1a:c2:45:64:d7:4a:1a:d4:12:ec: ba:81:c3:fc:5e:ed:76:ba:53:56:66:ab:4e:eb:6f: 1d:fb:fc:37:1a:22:89:bb:0f:36:d1:40:62:6f:7a: c6:23:41:95:fd:be:9b:83:b0:06:1c:61:64:f0:c0: d0:be:df:e8:20:79:b0:a7:49:35:db:f2:28:db:77: b6:0b:16:60:a4:c2:ea:dc:b4:7c:cc:82:b2:46:df: 4e:1d:9b:86:6d:68:df:dd:12:85:0d:23:4c:63:29: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:0B:5E:BE:47:7C:68:42:79:60:B1:02:07:6E:CE:74:A3:3B:7C X509v3 Authority Key Identifier: keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:57:bc:c0:40:ce:81:7e:84:a5:e3:af:9d:52:be:cb:21:17: 2c:d5:a7:e3:10:a7:e7:e7:d9:c2:b6:7a:e3:eb:8d:0f:3d:66: b6:c3:31:9a:67:e0:b6:2c:f2:97:a3:0e:2e:3c:af:e5:d9:5c: 60:a4:2e:52:d8:46:43:5f:87:8b:9c:38:09:31:73:32:8b:61: 31:d8:e7:f4:87:f9:47:59:7b:6a:27:65:54:ce:77:c7:2b:b8: b7:cc:a7:af:67:e2:5f:34:a4:ac:10:6d:3f:20:c3:69:e2:02: 4b:6d:15:df:76:f6:e0:f2:91:f8:f9:ff:12:90:fa:70:c4:45: 37:49:db:29:60:40:cb:0c:55:17:e7:59:10:2f:00:62:cd:69: 23:ba:56:ba:25:07:60:16:f8:ff:d6:17:77:f1:e7:6f:09:68: 89:46:60:c3:b3:99:83:fe:1d:82:46:1e:27:dd:4c:4b:13:8c: 0b:a0:c5:f6:30:28:b8:4e:3d:31:d2:20:01:3b:96:9b:76:b3: d6:9f:a6:5c:27:c3:c7:46:2f:86:c9:71:2e:a9:ad:76:08:52: 63:78:47:8f:5f:99:6c:59:1b:91:1c:03:18:44:9b:ae:5c:77: 7f:45:33:42:69:f2:66:5a:e4:30:de:f5:eb:87:58:61:94:a8: 58:80:bf:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCw/E/9mXStLUezktTQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ1ZDlhMWEyMjQxNjgzM2RlNTlhNWU2MTlkMTIwOTZk MDk2OWUwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD Eyg0MzFiMGI1ZWJlNDc3YzY4NDI3OTYwYjEwMjA3NmVjZTc0YTMzYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvtvLPZZ+26Jmq8XN1YXULEaVCVR xxz0astQGyRmM66XUhP7Ziw1jkwIPONQKomTLa5dwajlq4dsaXJk3bpCTEJEsJla SwGdpOQpNG822z+gfIa7eXAkn/N1x1NuwN5vp4P61mQtddDfkfqfIejGiPbCE62F BKo1lUrElT9o94QkjJIuC8B+DONFpeCIg+wd9v8FUsQEC7o75RrCRWTXShrUEuy6 gcP8Xu12ulNWZqtO628d+/w3GiKJuw820UBib3rGI0GV/b6bg7AGHGFk8MDQvt/o IHmwp0k12/Io23e2CxZgpMLq3LR8zIKyRt9OHZuGbWjf3RKFDSNMYylT7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMbC16+R3xoQnlgsQIHbs50ozt8MB8GA1UdIwQY MBaAFFrEXZoaIkFoM95ZpeYZ0SCW0JaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMt M2EwMDMxMzVhYWQxLzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMtM2EwMDMxMzVhYWQx LzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFe8wEDO gX6EpeOvnVK+yyEXLNWn4xCn5+fZwrZ64+uNDz1mtsMxmmfgtizyl6MOLjyv5dlc YKQuUthGQ1+Hi5w4CTFzMothMdjn9If5R1l7aidlVM53xyu4t8ynr2fiXzSkrBBt PyDDaeICS20V33b24PKR+Pn/EpD6cMRFN0nbKWBAywxVF+dZEC8AYs1pI7pWuiUH YBb4/9YXd/HnbwloiUZgw7OZg/4dgkYeJ91MSxOMC6DF9jAouE49MdIgATuWm3az 1p+mXCfDx0YvhslxLqmtdghSY3hHj1+ZbFkbkRwDGESbrlx3f0UzQmnyZlrkMN71 64dYYZSoWIC/Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:17 2025 by rpki-client