This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json) Hash identifier: FLnVCXIic9wkP4S7513OyY78N/+XkQP2Sri0q9lO9og= Subject key identifier: 02:65:CE:D7:1C:E9:DC:B4:64:DA:3A:04:4D:24:47:7B:E2:60:B2:40 Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8 Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8 Certificate serial: 019B27AE2C0DEA37EF0B6C51C523277AD50F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft Manifest number: 03EB Signing time: Tue 16 Dec 2025 15:01:24 +0000 Manifest this update: Tue 16 Dec 2025 15:01:24 +0000 Manifest next update: Wed 17 Dec 2025 15:01:24 +0000 Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=) 2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: TEp1tyqE6nhCj8rnHElltZBWooxN82anMXz51k1SlyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:2c:0d:ea:37:ef:0b:6c:51:c5:23:27:7a:d5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8 Validity Not Before: Dec 16 15:01:24 2025 GMT Not After : Dec 17 15:01:24 2025 GMT Subject: CN=0265ced71ce9dcb464da3a044d24477be260b240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:cd:0d:1a:c7:6c:be:55:cd:3c:cb:d0:da: d4:4a:58:d9:12:f4:e0:7f:d1:31:89:28:c3:51:c0: 98:2e:76:3d:ea:a5:a8:a7:59:e2:c5:81:aa:e5:06: a6:59:dc:7c:c4:ac:14:2b:73:14:f5:15:b5:ad:ce: 4e:82:ca:56:eb:56:48:72:96:17:c5:31:4d:ab:ba: 9a:67:c2:1e:b8:7e:3b:2a:9d:f8:e3:f4:ba:31:0f: f0:9b:62:79:2a:5f:57:1f:69:5d:5f:2d:df:11:42: d7:e9:dd:cb:d1:76:c5:02:f9:58:31:b7:e1:9a:5c: 72:e0:1f:85:0c:08:ea:68:b3:60:d1:6a:3f:8c:cf: c0:03:82:18:be:79:c6:4f:91:71:3c:9f:79:0d:36: aa:9c:4a:44:18:ba:08:34:c1:d6:0c:a7:8e:51:a5: f0:ad:c0:04:23:6a:15:1a:02:9f:f0:1a:54:b2:b8: 17:f9:9b:ca:6e:f0:24:3a:a5:c1:ba:fa:e0:a6:7e: 59:b1:5a:c5:0e:3b:76:7b:85:66:61:f3:7e:48:d1: c8:7c:26:53:02:e3:c3:91:ee:47:c3:49:52:85:0e: e6:4a:c7:25:21:7c:5e:da:0f:40:a1:2f:91:6f:4b: ac:9b:d6:a7:fb:27:ba:75:69:8e:75:9f:bd:83:1d: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:CE:D7:1C:E9:DC:B4:64:DA:3A:04:4D:24:47:7B:E2:60:B2:40 X509v3 Authority Key Identifier: keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f9:94:ec:bf:db:02:3b:c8:60:f2:11:6b:5d:ca:5f:5e:60: 6d:27:18:51:fc:03:e8:b0:cb:14:d6:49:c8:32:19:a9:5b:e3: 25:43:bf:c2:60:88:a4:f0:69:01:35:a9:1d:3b:5f:c9:2a:ea: 41:89:bf:cb:ad:7e:98:bd:a8:87:0e:4b:92:d9:4d:95:4a:50: 5a:a7:00:16:bc:0a:85:4b:ee:b2:f2:fe:8b:c6:3a:e4:71:79: 3a:4f:9c:61:e5:f1:c6:3a:79:bb:c7:f7:c5:cb:d6:8d:eb:94: e2:6b:54:53:ac:80:c2:5b:9e:52:50:e7:54:36:bc:49:04:35: 64:b0:7a:8b:76:aa:43:60:c8:f7:4d:47:e7:13:0b:33:4d:d4: ae:15:80:bf:0d:53:dd:f1:c8:6e:03:02:2f:56:b4:7a:07:8a: 20:21:64:e5:45:44:39:51:35:3a:21:0c:e1:f2:66:c8:2b:87: 8a:b6:69:ba:fd:8c:7f:85:db:56:21:ac:be:ad:0e:92:1c:85: fa:1a:e7:52:9a:71:92:38:27:39:6e:b1:31:46:59:7a:c2:65: a7:6c:7c:2d:c0:9e:16:18:b6:fc:2e:81:73:a7:70:14:84:15: ea:03:4c:71:08:c5:dc:dc:bb:5e:66:98:10:53:26:52:52:7f: 29:23:96:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnriwN6jfvC2xRxSMnetUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzOTBiMjE3NGFhZTIyOTYxYTBmM2MyOWZjNDAyZjFm ZTIzYzgwHhcNMjUxMjE2MTUwMTI0WhcNMjUxMjE3MTUwMTI0WjAzMTEwLwYDVQQD EygwMjY1Y2VkNzFjZTlkY2I0NjRkYTNhMDQ0ZDI0NDc3YmUyNjBiMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7NDRrHbL5VzTzL0NrUSljZEvTg f9ExiSjDUcCYLnY96qWop1nixYGq5QamWdx8xKwUK3MU9RW1rc5OgspW61ZIcpYX xTFNq7qaZ8IeuH47Kp344/S6MQ/wm2J5Kl9XH2ldXy3fEULX6d3L0XbFAvlYMbfh mlxy4B+FDAjqaLNg0Wo/jM/AA4IYvnnGT5FxPJ95DTaqnEpEGLoINMHWDKeOUaXw rcAEI2oVGgKf8BpUsrgX+ZvKbvAkOqXBuvrgpn5ZsVrFDjt2e4VmYfN+SNHIfCZT AuPDke5Hw0lShQ7mSsclIXxe2g9AoS+Rb0usm9an+ye6dWmOdZ+9gx3SiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJlztcc6dy0ZNo6BE0kR3viYLJAMB8GA1UdIwQY MBaAFMNZOQshdKriKWGg88KfxALx/iPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAt ZWM1YzdkZTdhYWUxLzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAtZWM1YzdkZTdhYWUx LzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPmU7L/b AjvIYPIRa13KX15gbScYUfwD6LDLFNZJyDIZqVvjJUO/wmCIpPBpATWpHTtfySrq QYm/y61+mL2ohw5LktlNlUpQWqcAFrwKhUvusvL+i8Y65HF5Ok+cYeXxxjp5u8f3 xcvWjeuU4mtUU6yAwlueUlDnVDa8SQQ1ZLB6i3aqQ2DI901H5xMLM03UrhWAvw1T 3fHIbgMCL1a0egeKICFk5UVEOVE1OiEM4fJmyCuHirZpuv2Mf4XbViGsvq0OkhyF +hrnUppxkjgnOW6xMUZZesJlp2x8LcCeFhi2/C6Bc6dwFIQV6gNMcQjF3Ny7XmaY EFMmUlJ/KSOW4w== -----END CERTIFICATE-----Generated at Tue Dec 16 21:00:19 2025 by rpki-client