This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft File: W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft (raw, json) Hash identifier: AxOWwXOWXuF5Rn8CO/rhkUvkXFiaRoltoAQc5zUtu6M= Subject key identifier: A9:6B:29:E0:05:56:6A:17:8C:12:9C:91:AB:42:B5:FD:CB:F2:29:17 Authority key identifier: 5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0 Certificate issuer: /CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0 Certificate serial: 019AF23FC22CF74488D69D381AA3DA37D59C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft Manifest number: 03E1 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl (hash: c08fq1H956dOWnpdlXhS9mFqA4EBaATTtHVOpuR8Rzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c2:2c:f7:44:88:d6:9d:38:1a:a3:da:37:d5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=a96b29e005566a178c129c91ab42b5fdcbf22917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:05:ce:3d:65:a2:af:9b:61:a1:63:57:b2: 7d:3d:e8:9d:97:fe:ef:f0:ad:7d:86:c5:91:7f:7c: e6:ec:72:85:03:1d:40:e5:7b:f7:03:b8:33:48:a5: 48:8c:d0:27:d3:11:d1:63:65:76:73:8b:72:23:60: c6:8f:1a:fd:05:49:99:13:f6:68:16:51:ab:22:37: ab:13:cd:bb:83:48:50:a8:f9:3c:24:70:08:5a:20: 5c:3c:60:97:fa:91:04:b7:79:04:04:13:fa:7a:5a: 37:e2:fe:3e:99:44:da:b2:d2:5f:dc:59:1e:6f:2b: ec:7b:f2:28:ba:bc:4e:0e:b3:e2:51:a0:37:20:df: 6e:e2:fb:c4:60:db:77:a0:05:f2:93:9a:31:01:5b: 9f:92:71:67:10:6d:d6:f7:75:a1:a3:66:ad:8d:ea: 4c:a0:24:d3:f8:2c:11:83:b5:fa:9b:c5:31:fc:77: 31:eb:7a:8d:58:47:4e:54:50:cd:0f:93:94:64:d0: 4a:42:e6:04:a4:09:7e:a6:16:45:c0:8e:58:e2:bd: c7:1e:7f:34:45:f4:cd:3b:ba:40:57:bd:76:52:0f: af:2b:81:03:b0:ae:87:da:11:7c:17:55:c7:b5:86: f6:34:90:86:33:60:bd:e9:3e:ed:a5:93:8f:f4:78: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6B:29:E0:05:56:6A:17:8C:12:9C:91:AB:42:B5:FD:CB:F2:29:17 X509v3 Authority Key Identifier: keyid:5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:55:4f:d8:01:f2:65:2f:56:42:a2:cb:fb:0f:a4:7c:22:29: b2:bb:d6:9f:4c:db:76:b7:be:c5:5c:dd:8d:ef:c5:20:19:1e: d4:c6:25:2d:d3:71:a9:63:71:64:19:b4:87:4a:f1:67:f0:e7: 3c:e0:a7:00:bd:70:a3:3c:84:df:96:9d:cd:8a:89:43:cf:b3: 6d:87:60:f9:b2:3f:9c:3a:3b:80:01:a6:c4:38:3c:50:8a:30: 76:60:16:35:f7:1d:d6:f2:d8:61:e9:4b:4a:31:e6:67:48:2d: 8c:94:34:3f:db:59:ab:1f:9f:f1:84:9c:e8:0d:36:87:f6:c3: 6b:ec:72:7a:24:c4:fe:7c:fb:ae:05:a0:17:3f:85:a0:28:4e: c9:7c:2d:d5:25:99:86:d7:d6:01:e9:6a:9c:21:c2:1c:e1:02: 93:64:06:0b:38:aa:c4:74:34:e9:5e:59:e8:bf:7f:46:c9:c9: 65:2e:45:8a:18:ee:2c:85:da:61:c9:97:87:7f:83:d3:64:ea: 46:c6:aa:65:14:e5:f3:52:bb:1a:1f:05:0f:e1:a5:e9:f4:ac: 79:12:55:d7:ef:7f:94:58:9c:11:2f:fc:a7:d9:ed:ae:b6:8e: 5b:e0:7b:d2:2d:bc:01:1e:70:ca:7b:12:4f:ef:53:b4:1d:93: 9d:44:90:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8Is90SI1p04GqPaN9WcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViN2ZhMDI3ZDJlZGI3OWM3NmY0OGJmMTI3NzNjZDhiMjI5 NTE3ZjAwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhhOTZiMjllMDA1NTY2YTE3OGMxMjljOTFhYjQyYjVmZGNiZjIyOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozkFzj1loq+bYaFjV7J9Peidl/7v 8K19hsWRf3zm7HKFAx1A5Xv3A7gzSKVIjNAn0xHRY2V2c4tyI2DGjxr9BUmZE/Zo FlGrIjerE827g0hQqPk8JHAIWiBcPGCX+pEEt3kEBBP6elo34v4+mUTastJf3Fke byvse/IourxODrPiUaA3IN9u4vvEYNt3oAXyk5oxAVufknFnEG3W93Who2atjepM oCTT+CwRg7X6m8Ux/Hcx63qNWEdOVFDND5OUZNBKQuYEpAl+phZFwI5Y4r3HHn80 RfTNO7pAV712Ug+vK4EDsK6H2hF8F1XHtYb2NJCGM2C96T7tpZOP9HjOYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlrKeAFVmoXjBKckatCtf3L8ikXMB8GA1UdIwQY MBaAFFt/oCfS7becdvSL8SdzzYsilRfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzMtZ0o5THR0NXgyOUl2eEozUE5peUtWRl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83YzYyYjYtZjQwMS00YjE2LWEyMWMt MTA4NTVjZmRjOGFmLzEvVzMtZ0o5THR0NXgyOUl2eEozUE5peUtWRl9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83YzYyYjYtZjQwMS00YjE2LWEyMWMtMTA4NTVjZmRjOGFm LzEvVzMtZ0o5THR0NXgyOUl2eEozUE5peUtWRl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVVP2AHy ZS9WQqLL+w+kfCIpsrvWn0zbdre+xVzdje/FIBke1MYlLdNxqWNxZBm0h0rxZ/Dn POCnAL1wozyE35adzYqJQ8+zbYdg+bI/nDo7gAGmxDg8UIowdmAWNfcd1vLYYelL SjHmZ0gtjJQ0P9tZqx+f8YSc6A02h/bDa+xyeiTE/nz7rgWgFz+FoChOyXwt1SWZ htfWAelqnCHCHOECk2QGCziqxHQ06V5Z6L9/RsnJZS5FihjuLIXaYcmXh3+D02Tq RsaqZRTl81K7Gh8FD+Gl6fSseRJV1+9/lFicES/8p9ntrraOW+B70i28AR5wynsS T+9TtB2TnUSQmw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:14 2025 by rpki-client