This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft File: W-rKvp_cy7VH7V6plEr9ed3zUZc.mft (raw, json) Hash identifier: GGJhRN+gHS8EO5uIySZlsEoPIAfe7O4fe4shwDv70zs= Subject key identifier: 90:88:31:C8:F1:EE:0A:E3:23:7C:C0:D7:0B:D4:26:FF:18:C3:72:0F Authority key identifier: 5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97 Certificate issuer: /CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197 Certificate serial: 019AF4D2BCC8A35C00CDA7EC263A15E70A4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft Manifest number: 0B27 Signing time: Sat 06 Dec 2025 18:00:42 +0000 Manifest this update: Sat 06 Dec 2025 18:00:42 +0000 Manifest next update: Sun 07 Dec 2025 18:00:42 +0000 Files and hashes: 1: UWG68TUhxQ5rdmjT9or0tbc2r3g.roa (hash: hGDufwDgqiOJ7DNdGZkyQ5sM1ddhpmms1eW+c/C//xU=) 2: W-rKvp_cy7VH7V6plEr9ed3zUZc.crl (hash: yxEuK9RJBoSrKogyBnL38duybMBP7+QR4RtbPxXmdEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:bc:c8:a3:5c:00:cd:a7:ec:26:3a:15:e7:0a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197 Validity Not Before: Dec 6 18:00:42 2025 GMT Not After : Dec 7 18:00:42 2025 GMT Subject: CN=908831c8f1ee0ae3237cc0d70bd426ff18c3720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:74:fe:05:a5:e0:f2:16:85:ea:07:a9:f6: 09:86:6c:c4:7a:24:83:b7:74:57:96:7a:ae:c1:5d: 32:a2:93:30:fb:90:49:44:bd:f6:f6:48:82:42:99: 66:da:33:04:8a:dc:c4:83:9b:00:c3:bc:74:b5:7b: 82:97:ff:95:21:15:7a:ba:ff:68:8c:61:b1:bc:f1: e9:99:2e:a8:d3:fb:dc:d9:3a:d1:8b:e1:1f:56:d9: 63:3a:c8:b2:ab:b9:3d:2f:56:61:e8:eb:80:fe:bd: 16:5a:fd:54:9f:38:77:d3:c5:6d:81:ab:57:b7:ca: 04:7e:54:b9:0d:9a:f5:ea:93:99:b1:82:e0:a0:36: b6:14:07:4d:ad:70:d4:a1:9d:80:b2:62:eb:93:c3: ce:a8:f3:72:ef:ba:c2:76:41:ac:a6:e0:10:60:2e: 50:94:77:5f:bb:60:4b:01:7a:a9:ea:88:83:88:50: 23:07:d6:e0:6a:8b:3f:12:3f:72:34:fc:96:a5:03: 04:06:e9:ef:b9:9f:4e:15:e4:2d:5a:23:e0:db:ad: d6:d0:7b:99:bd:64:d5:b8:fe:56:0e:fd:34:57:50: f8:dd:21:52:e0:7b:8f:d4:59:48:3f:c2:ac:7a:82: e6:17:67:d7:e4:31:bd:32:80:37:f1:e0:9b:9b:67: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:88:31:C8:F1:EE:0A:E3:23:7C:C0:D7:0B:D4:26:FF:18:C3:72:0F X509v3 Authority Key Identifier: keyid:5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:49:ac:22:23:2f:89:c2:2f:db:d8:16:d8:a6:74:f3:b5:d7: 81:1b:a7:8b:3d:2f:9a:50:00:3b:6b:6e:b6:15:8e:46:fc:74: 31:28:7d:38:57:5a:19:db:3a:62:46:68:c3:2c:9f:de:c7:35: 0e:4b:8a:8d:7f:4d:ec:f7:dd:d9:b7:ca:b3:05:3e:b6:73:b9: ba:e2:36:33:19:4d:71:a5:e4:7d:76:b3:c7:31:34:86:0e:d5: cc:bf:74:ab:7e:11:1e:64:0d:b2:82:17:31:fd:79:84:02:b5: 76:43:f8:42:a8:ff:68:b3:99:7f:07:7c:c7:0f:f0:50:6b:c7: 3b:8f:21:7a:eb:1d:4c:1b:6f:35:bd:c2:70:1b:d6:8d:24:2d: 11:9d:3c:b3:ef:ff:a8:eb:89:e6:4e:5b:89:d7:97:80:e2:54: aa:00:c2:4a:2b:50:b6:60:c6:1b:a1:f4:dd:ef:7d:ae:18:09: 34:ae:ab:9b:50:94:03:1f:3c:a0:0f:04:57:df:32:fd:82:1b: 77:ee:1a:da:e4:16:f5:b2:cf:1f:45:33:72:a3:19:ba:26:75: e7:d0:c3:f0:39:6a:d0:ba:9d:99:46:08:70:29:0e:b0:f5:ce: b1:3d:5c:69:5d:0e:0e:44:a4:e1:b4:94:ca:58:7f:e3:19:81: f6:ff:4d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rzIo1wAzafsJjoV5wpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWFjYWJlOWZkY2NiYjU0N2VkNWVhOTk0NGFmZDc5ZGRm MzUxOTcwHhcNMjUxMjA2MTgwMDQyWhcNMjUxMjA3MTgwMDQyWjAzMTEwLwYDVQQD Eyg5MDg4MzFjOGYxZWUwYWUzMjM3Y2MwZDcwYmQ0MjZmZjE4YzM3MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6t0/gWl4PIWheoHqfYJhmzEeiSD t3RXlnquwV0yopMw+5BJRL329kiCQplm2jMEitzEg5sAw7x0tXuCl/+VIRV6uv9o jGGxvPHpmS6o0/vc2TrRi+EfVtljOsiyq7k9L1Zh6OuA/r0WWv1Unzh308VtgatX t8oEflS5DZr16pOZsYLgoDa2FAdNrXDUoZ2AsmLrk8POqPNy77rCdkGspuAQYC5Q lHdfu2BLAXqp6oiDiFAjB9bgaos/Ej9yNPyWpQMEBunvuZ9OFeQtWiPg263W0HuZ vWTVuP5WDv00V1D43SFS4HuP1FlIP8KseoLmF2fX5DG9MoA38eCbm2dTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCIMcjx7grjI3zA1wvUJv8Yw3IPMB8GA1UdIwQY MBaAFFvqyr6f3Mu1R+1eqZRK/Xnd81GXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMjZmMTYtNWM0Yy00OWFkLWEwMzAt ODEyYmJlZWM1MWRmLzEvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wMjZmMTYtNWM0Yy00OWFkLWEwMzAtODEyYmJlZWM1MWRm LzEvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0msIiMv icIv29gW2KZ087XXgRuniz0vmlAAO2tuthWORvx0MSh9OFdaGds6YkZowyyf3sc1 DkuKjX9N7Pfd2bfKswU+tnO5uuI2MxlNcaXkfXazxzE0hg7VzL90q34RHmQNsoIX Mf15hAK1dkP4Qqj/aLOZfwd8xw/wUGvHO48heusdTBtvNb3CcBvWjSQtEZ08s+// qOuJ5k5bideXgOJUqgDCSitQtmDGG6H03e99rhgJNK6rm1CUAx88oA8EV98y/YIb d+4a2uQW9bLPH0UzcqMZuiZ159DD8Dlq0LqdmUYIcCkOsPXOsT1caV0ODkSk4bSU ylh/4xmB9v9Nhg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:08 2025 by rpki-client