This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json) Hash identifier: LQ7U82OkWAgDjqNQGsWeXm00FQKroM1wNuvkNBxH+Ac= Subject key identifier: 5C:91:DC:C6:62:84:D0:87:24:AA:E2:F3:BE:FA:A5:C5:15:53:85:88 Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76 Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976 Certificate serial: 019AF50B9156D2CEB00DA5C02845FB8B1DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 19:02:47 +0000 Manifest this update: Sat 06 Dec 2025 19:02:47 +0000 Manifest next update: Sun 07 Dec 2025 19:02:47 +0000 Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: cvphAnebVq4OnLwIXYZAVrdFUcNoYPghdjRpvh7Sdqw=) 2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=) 3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:91:56:d2:ce:b0:0d:a5:c0:28:45:fb:8b:1d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976 Validity Not Before: Dec 6 19:02:47 2025 GMT Not After : Dec 7 19:02:47 2025 GMT Subject: CN=5c91dcc66284d08724aae2f3befaa5c515538588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:54:fd:b9:66:b0:94:24:d7:f3:7a:9b:98: 0f:02:93:4f:19:80:0b:ac:0a:27:90:d3:44:91:d2: 7e:95:4f:f3:b5:6c:2c:39:be:3b:d4:bc:10:a0:11: 02:27:73:87:ef:14:5c:ea:32:b9:3c:54:be:93:40: 3c:e1:57:43:0e:99:f3:ca:b9:07:5d:3a:37:3a:95: e9:88:b3:cb:7d:da:fe:72:d6:05:45:43:0e:fc:e7: cf:fd:13:bf:12:0d:a9:2a:29:ae:96:6d:1a:0b:40: 75:06:93:33:11:f3:4f:e7:1d:19:96:a1:7a:d3:2e: a0:3c:61:97:f7:8d:01:56:1e:e2:8d:cd:9d:5f:f4: 5f:27:d1:f4:6a:28:03:fd:ee:bf:c1:e0:b0:eb:9b: dc:98:44:9b:4b:bf:e5:a0:43:48:a7:13:2d:2e:2d: 1f:9a:d0:d5:c5:8e:e5:eb:c7:3a:a2:01:4e:ee:17: 7c:2c:06:8d:d5:a2:0f:c3:6b:39:02:99:27:b3:fc: 12:4e:81:d1:95:e9:26:e0:f7:a9:2d:ff:f2:d3:b2: 72:00:c8:da:4f:bb:d1:fd:08:b4:a1:cd:43:a5:16: 47:69:7e:9e:a0:e5:7c:5a:46:15:d5:ff:99:e3:eb: 98:79:ee:d2:ea:7a:ec:08:a4:03:cf:c2:00:43:04: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:91:DC:C6:62:84:D0:87:24:AA:E2:F3:BE:FA:A5:C5:15:53:85:88 X509v3 Authority Key Identifier: keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cd:27:88:31:08:d9:f3:b1:6f:ab:b2:3e:74:0c:4a:22:a1: f8:e6:7a:1c:60:f5:26:8d:71:b5:1c:d0:3c:35:6e:c4:b0:a4: f9:29:f6:4f:74:54:55:ec:ca:92:fa:20:c1:eb:22:cc:bb:6e: 13:bd:f8:2b:f0:52:4e:ba:e2:b8:81:1b:8e:81:55:00:1d:33: 21:4b:ff:03:67:43:49:6f:d7:7a:8c:fb:01:57:8c:c5:5b:58: b8:65:ed:50:de:93:13:6a:8f:3c:0a:dd:9f:e7:ad:c8:8f:ca: 9c:81:ea:fc:91:af:49:10:0d:49:3f:fa:29:55:a5:98:42:f4: d3:0f:21:c4:9b:6c:f7:ef:20:fd:ce:c7:8d:32:f6:37:38:2e: aa:8d:98:43:e6:90:83:ac:76:0d:fe:66:40:04:14:fc:9d:e7: c6:31:18:fa:aa:d6:94:15:b3:72:ee:8f:eb:6b:8f:7e:87:1e: 96:71:ce:93:07:e5:4a:aa:84:db:cf:f7:0a:9c:a9:b4:ac:0a: f2:43:96:c9:03:d1:57:a8:2f:a1:26:e2:c4:84:01:b3:16:d7: f8:39:c8:67:22:bf:33:bc:b7:1c:14:2e:e9:a6:80:a2:7a:70: 28:45:f9:ec:b5:14:c8:cc:13:0c:75:1a:7d:ac:18:a5:f0:fa: 00:53:ce:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5FW0s6wDaXAKEX7ix2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmZhNjY5MDk5NzQxMmU3MTY2MTZjODFlNGY3YzA4NzVm ZmQ5NzYwHhcNMjUxMjA2MTkwMjQ3WhcNMjUxMjA3MTkwMjQ3WjAzMTEwLwYDVQQD Eyg1YzkxZGNjNjYyODRkMDg3MjRhYWUyZjNiZWZhYTVjNTE1NTM4NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LNU/blmsJQk1/N6m5gPApNPGYAL rAonkNNEkdJ+lU/ztWwsOb471LwQoBECJ3OH7xRc6jK5PFS+k0A84VdDDpnzyrkH XTo3OpXpiLPLfdr+ctYFRUMO/OfP/RO/Eg2pKimulm0aC0B1BpMzEfNP5x0ZlqF6 0y6gPGGX940BVh7ijc2dX/RfJ9H0aigD/e6/weCw65vcmESbS7/loENIpxMtLi0f mtDVxY7l68c6ogFO7hd8LAaN1aIPw2s5Apkns/wSToHRlekm4PepLf/y07JyAMja T7vR/Qi0oc1DpRZHaX6eoOV8WkYV1f+Z4+uYee7S6nrsCKQDz8IAQwQ+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyR3MZihNCHJKri8776pcUVU4WIMB8GA1UdIwQY MBaAFFtvpmkJl0EucWYWyB5PfAh1/9l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTct MTJhZDE0NjY1NWNlLzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTctMTJhZDE0NjY1NWNl LzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD80niDEI 2fOxb6uyPnQMSiKh+OZ6HGD1Jo1xtRzQPDVuxLCk+Sn2T3RUVezKkvogwesizLtu E734K/BSTrriuIEbjoFVAB0zIUv/A2dDSW/Xeoz7AVeMxVtYuGXtUN6TE2qPPArd n+etyI/KnIHq/JGvSRANST/6KVWlmEL00w8hxJts9+8g/c7HjTL2Nzguqo2YQ+aQ g6x2Df5mQAQU/J3nxjEY+qrWlBWzcu6P62uPfocelnHOkwflSqqE28/3CpyptKwK 8kOWyQPRV6gvoSbixIQBsxbX+DnIZyK/M7y3HBQu6aaAonpwKEX57LUUyMwTDHUa fawYpfD6AFPOVA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:37 2025 by rpki-client