This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft File: W-4FGpOQHswBdEB5qkrC-wd7n8E.mft (raw, json) Hash identifier: JeZmANhf8IMUvJaSEls4OBeOHBLBjL++hdfCNr1Z8f8= Subject key identifier: 97:22:33:F3:2E:E1:76:B8:AA:A8:7F:5D:3B:6B:5F:3F:0E:C9:81:AD Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Certificate serial: 019AF61C39D30B88C368254D7E526635A970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft Manifest number: 1510 Signing time: Sun 07 Dec 2025 00:00:36 +0000 Manifest this update: Sun 07 Dec 2025 00:00:36 +0000 Manifest next update: Mon 08 Dec 2025 00:00:36 +0000 Files and hashes: 1: 279VdnG-Fdszjb2yG7-2IjnNQq8.roa (hash: 39BYbVFVCqd2qENpfGmBlifLRcfQzLv4w9dE1us6VMw=) 2: 4LSDpWlsgJw9Otx93_mKw6B9grg.roa (hash: c67VMb5sCTD5NQ5KlZtleOn3Nkqt4gilHv8oqn6VVoY=) 3: QZsEzF5Uanou3frIfzrz7sXtIzk.roa (hash: 6qhVEn0UXh14a1V5qFmAi7r1Lf/LN44JR4TpHEtpYIQ=) 4: W-4FGpOQHswBdEB5qkrC-wd7n8E.crl (hash: MkngX/RNuM3oAeHBINiZeDQgaEbklbLC1ichtAo/x+8=) 5: _AxdM0TapJRwZRPAoGLBTsCIVsg.roa (hash: XGaXRToDPIvjJqkgJCg3fbR7ABXKEIiZ37d2bopOgi8=) 6: aFIEwyn9QMrdZxgjt2xaRy3HuBU.roa (hash: WYgPsctqzKEHGx9t7skC8EcDRaeZlFuUGl3x2x/2Veg=) 7: ckuQTVeOTWmVeOP4EBOPI4_kTkg.roa (hash: lbXsTVgXldq8a0VyZZLgKrRQ4BJoKPMcORX5A8N1vSY=) 8: zFUuUqldPrww63cIqo-XRanNcj0.roa (hash: HhvvF7xBmpx9/nrDHNfcu7tTXTmL5HjPzqI7CeF2/lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:39:d3:0b:88:c3:68:25:4d:7e:52:66:35:a9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1 Validity Not Before: Dec 7 00:00:36 2025 GMT Not After : Dec 8 00:00:36 2025 GMT Subject: CN=972233f32ee176b8aaa87f5d3b6b5f3f0ec981ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:f5:4e:a7:6d:bd:10:09:0c:c6:93:c6:55: e3:d3:08:66:ae:07:7d:22:e8:e4:e6:1e:78:20:e4: 35:cc:e3:46:4e:17:02:c5:94:42:42:96:07:17:25: 7e:e9:d9:40:d6:c5:d1:92:59:69:5e:14:6d:cf:d1: a9:ae:c3:44:89:25:ee:3a:68:40:bd:bc:ad:bb:db: 76:a7:c6:64:9a:b2:57:42:5e:ac:84:2a:2c:4f:6a: 27:2d:11:5e:db:4f:f0:1e:62:cb:2e:b7:80:85:45: 74:cd:27:81:d7:71:30:7f:58:12:97:c2:36:c5:96: e6:56:44:40:39:07:82:11:c9:5b:c5:11:c8:7a:ef: 75:86:25:ad:7e:e0:3c:92:fa:5e:bd:a0:61:ec:eb: 0f:07:0a:51:28:46:4b:fd:57:3f:84:0c:72:c6:f1: ae:c3:d8:aa:97:3d:6f:a0:97:2a:5a:52:dc:84:69: 96:a4:f0:a5:c0:44:d7:b5:16:5b:5c:99:56:05:cd: 30:fc:a8:b4:a4:96:86:94:32:d1:fb:50:18:7f:00: 31:2a:a1:15:81:14:44:24:f5:74:50:27:84:5e:0d: 76:3e:4c:96:13:55:bc:f2:5e:59:8d:8f:12:0c:68: 4b:ca:8c:0f:a3:83:8f:c4:98:86:bb:c2:70:39:d7: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:22:33:F3:2E:E1:76:B8:AA:A8:7F:5D:3B:6B:5F:3F:0E:C9:81:AD X509v3 Authority Key Identifier: keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ca:b5:e1:f9:90:fa:36:79:24:29:c7:9a:0e:27:5a:e2:7a: c1:5b:52:a7:17:da:ea:46:2e:1c:01:57:07:c6:aa:40:c5:8d: 9e:a0:25:c2:71:eb:e5:f7:1d:5d:45:3e:b9:0d:b9:0b:ad:be: 17:e3:d1:8a:ca:3b:5c:66:cb:de:1a:0f:15:7a:ca:32:23:d7: 74:50:ff:85:bb:06:74:d4:d6:5c:2c:90:c6:11:1f:c1:a9:a0: b1:51:67:7b:05:6d:a2:5f:16:b2:bd:75:a3:f7:00:8c:28:d3: 74:69:c5:e1:db:6f:91:f0:0b:3e:22:6f:db:17:c8:48:47:6c: d5:53:15:9e:5f:d9:65:d6:a0:16:14:a4:c0:c9:08:01:d7:45: ab:16:81:f8:ad:dc:fc:a0:54:04:0a:66:4c:71:2a:26:57:4a: 11:0d:7b:4e:fb:85:e6:e7:be:61:52:d3:43:68:f0:5d:61:f7: 0f:64:8f:1f:9a:74:02:6d:be:b9:42:43:f8:1a:22:0a:ec:cb: bc:21:35:1e:b5:7f:3f:3b:e2:56:c0:08:d9:ef:f8:08:bc:ad: 55:41:4c:d4:4d:87:fb:76:2a:7c:64:7a:14:bc:2b:04:2a:20: 4b:cc:23:ae:b5:17:c0:89:86:57:d8:d1:22:b5:14:1b:5b:3e: f8:31:49:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDnTC4jDaCVNflJmNalwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3 YjlmYzEwHhcNMjUxMjA3MDAwMDM2WhcNMjUxMjA4MDAwMDM2WjAzMTEwLwYDVQQD Eyg5NzIyMzNmMzJlZTE3NmI4YWFhODdmNWQzYjZiNWYzZjBlYzk4MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV31TqdtvRAJDMaTxlXj0whmrgd9 Iujk5h54IOQ1zONGThcCxZRCQpYHFyV+6dlA1sXRkllpXhRtz9GprsNEiSXuOmhA vbytu9t2p8ZkmrJXQl6shCosT2onLRFe20/wHmLLLreAhUV0zSeB13Ewf1gSl8I2 xZbmVkRAOQeCEclbxRHIeu91hiWtfuA8kvpevaBh7OsPBwpRKEZL/Vc/hAxyxvGu w9iqlz1voJcqWlLchGmWpPClwETXtRZbXJlWBc0w/Ki0pJaGlDLR+1AYfwAxKqEV gRREJPV0UCeEXg12PkyWE1W88l5ZjY8SDGhLyowPo4OPxJiGu8JwOdc9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJciM/Mu4Xa4qqh/XTtrXz8OyYGtMB8GA1UdIwQY MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt YTUyYTg3OTVkOTU2LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2 LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsq14fmQ +jZ5JCnHmg4nWuJ6wVtSpxfa6kYuHAFXB8aqQMWNnqAlwnHr5fcdXUU+uQ25C62+ F+PRiso7XGbL3hoPFXrKMiPXdFD/hbsGdNTWXCyQxhEfwamgsVFnewVtol8Wsr11 o/cAjCjTdGnF4dtvkfALPiJv2xfISEds1VMVnl/ZZdagFhSkwMkIAddFqxaB+K3c /KBUBApmTHEqJldKEQ17TvuF5ue+YVLTQ2jwXWH3D2SPH5p0Am2+uUJD+BoiCuzL vCE1HrV/PzviVsAI2e/4CLytVUFM1E2H+3YqfGR6FLwrBCogS8wjrrUXwImGV9jR IrUUG1s++DFJRg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:35 2025 by rpki-client