This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft File: W8qreqGscUP4vII8c0sWc6CbuIA.mft (raw, json) Hash identifier: H6rdm4D8LUlNHtw8xVXYKHELryRMYUEEN/IS2N6I6x8= Subject key identifier: 29:E1:B2:34:C3:B2:22:0A:97:75:06:0B:F4:E4:13:EA:CA:99:A0:EF Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80 Certificate issuer: /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880 Certificate serial: 019AF20934461CBF4537FD3408E15095E541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft Manifest number: 149D Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: MAQmOa8DCOFnP1AvP10tvRzxgoU.roa (hash: js//CnDRXGCUWJu0u0iMvymBvRN/ZDLpajOTcw67kv0=) 2: W8qreqGscUP4vII8c0sWc6CbuIA.crl (hash: 9xY3x05TIj0RCdc+XG0FihkzRf9iMgQsuC2Ttxtj2O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:34:46:1c:bf:45:37:fd:34:08:e1:50:95:e5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880 Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=29e1b234c3b2220a9775060bf4e413eaca99a0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:30:a7:c8:40:ef:8a:52:18:3b:93:a5:7a: a7:44:d5:48:48:cf:73:9d:52:44:32:f0:45:41:a1: ec:8e:92:64:8b:df:68:8c:a7:c6:75:89:80:f0:e2: e4:86:0a:69:a8:46:96:0b:70:46:9c:18:bf:d6:97: a0:5d:d9:1b:cd:68:18:6c:eb:7a:ab:6b:11:b5:8c: 8a:62:eb:ce:0c:d7:2f:b6:66:67:b5:ca:37:70:0e: b0:76:60:ed:7b:06:76:2f:b9:60:ae:04:7b:3a:00: 43:33:43:4a:1a:f4:24:1a:b2:b1:dd:b1:b2:9d:c9: 91:f6:c3:c9:a2:cb:dd:83:b2:a2:99:2f:d7:cc:30: 23:b3:cb:f0:d9:22:42:67:9a:6a:4e:59:23:63:c6: db:34:70:03:b0:aa:7d:29:6d:97:87:9f:8d:20:9d: 8d:fe:26:be:28:48:a9:ee:40:75:21:39:92:7f:ce: 1d:8d:85:50:46:2d:86:67:b5:0d:a5:b7:c2:a3:1b: ab:ac:98:70:1f:8e:2b:99:95:5d:c3:f8:a9:10:f7: ba:94:e8:6e:72:4b:fd:6f:06:10:f3:88:25:d5:f3: 89:89:37:79:cf:ad:fe:58:c4:3c:54:80:29:ca:2e: 58:0b:b8:c9:41:ab:8c:77:c0:8f:b6:a9:58:98:19: 79:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E1:B2:34:C3:B2:22:0A:97:75:06:0B:F4:E4:13:EA:CA:99:A0:EF X509v3 Authority Key Identifier: keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:58:ec:2e:cc:94:3e:e5:78:20:08:c9:ec:d1:2d:6a:44:f8: ff:b0:82:ab:30:d7:ae:c4:07:17:5f:9b:7b:d9:58:8f:5a:a8: 8f:df:a0:4f:02:33:82:1a:75:35:3e:30:64:a1:03:65:35:81: d8:23:54:72:f5:42:0e:9c:bd:5d:08:5a:3a:74:ac:96:00:b1: a5:7a:2d:68:32:19:80:19:87:ad:3d:72:ed:25:5e:18:fc:b4: 8b:2e:99:ea:91:ee:32:c1:29:db:7b:eb:19:40:26:ed:1a:28: 9a:65:f8:c3:c1:b9:b5:57:e5:ea:f4:92:e4:bf:7a:23:fa:ac: f2:20:3f:7c:12:c6:e6:9d:af:69:fd:16:d7:31:bb:6f:72:83: 98:29:bb:4c:4f:cc:d4:be:71:65:d3:3d:e5:34:72:fd:37:af: 15:27:93:bb:60:6a:02:3f:da:3d:ee:13:53:a7:46:89:b8:0e: 88:a1:80:79:95:2d:94:3b:cf:9a:c8:56:ff:23:7f:a8:05:a1: 42:36:87:82:46:72:ef:b2:b5:5a:6f:fe:6e:90:41:8a:2e:af: c5:62:14:d6:a3:df:9d:97:0d:b7:91:62:18:fb:1d:5d:82:c7: d4:35:9b:7a:bd:67:e8:c5:bc:04:88:08:5d:b0:9a:2e:a7:1e: fe:25:f5:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTRGHL9FN/00COFQleVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViY2FhYjdhYTFhYzcxNDNmOGJjODIzYzczNGIxNjczYTA5 YmI4ODAwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EygyOWUxYjIzNGMzYjIyMjBhOTc3NTA2MGJmNGU0MTNlYWNhOTlhMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGAwp8hA74pSGDuTpXqnRNVISM9z nVJEMvBFQaHsjpJki99ojKfGdYmA8OLkhgppqEaWC3BGnBi/1pegXdkbzWgYbOt6 q2sRtYyKYuvODNcvtmZntco3cA6wdmDtewZ2L7lgrgR7OgBDM0NKGvQkGrKx3bGy ncmR9sPJosvdg7KimS/XzDAjs8vw2SJCZ5pqTlkjY8bbNHADsKp9KW2Xh5+NIJ2N /ia+KEip7kB1ITmSf84djYVQRi2GZ7UNpbfCoxurrJhwH44rmZVdw/ipEPe6lOhu ckv9bwYQ84gl1fOJiTd5z63+WMQ8VIApyi5YC7jJQauMd8CPtqlYmBl50wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnhsjTDsiIKl3UGC/TkE+rKmaDvMB8GA1UdIwQY MBaAFFvKq3qhrHFD+LyCPHNLFnOgm7iAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWIt M2QxZTBlZTRiNjUxLzEvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWItM2QxZTBlZTRiNjUx LzEvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgljsLsyU PuV4IAjJ7NEtakT4/7CCqzDXrsQHF1+be9lYj1qoj9+gTwIzghp1NT4wZKEDZTWB 2CNUcvVCDpy9XQhaOnSslgCxpXotaDIZgBmHrT1y7SVeGPy0iy6Z6pHuMsEp23vr GUAm7RoommX4w8G5tVfl6vSS5L96I/qs8iA/fBLG5p2vaf0W1zG7b3KDmCm7TE/M 1L5xZdM95TRy/TevFSeTu2BqAj/aPe4TU6dGibgOiKGAeZUtlDvPmshW/yN/qAWh QjaHgkZy77K1Wm/+bpBBii6vxWIU1qPfnZcNt5FiGPsdXYLH1DWber1n6MW8BIgI XbCaLqce/iX1kw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:21 2025 by rpki-client