This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft File: w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json) Hash identifier: q1OZz78zK9R/c1Zde2WMLf31jD5N2f7XvJXwbAIHUzo= Subject key identifier: A5:F4:56:48:FF:45:41:4F:CB:70:05:49:E8:69:0D:55:3F:47:08:5B Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d Certificate serial: 019AF4D2B000BA6CE010251677E4B85208DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft Manifest number: 0831 Signing time: Sat 06 Dec 2025 18:00:39 +0000 Manifest this update: Sat 06 Dec 2025 18:00:39 +0000 Manifest next update: Sun 07 Dec 2025 18:00:39 +0000 Files and hashes: 1: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: Y0pHZioxk9TTkJESotqpWybntEtO3Oop4Zx0WiRxhVA=) 2: yO9sM3Dqyygq-N46b0jWKjNmuu4.roa (hash: ZYzYqF0JFtlb4C5F4uKW1WdeJkwaMXC9t3i6JUhvzN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:b0:00:ba:6c:e0:10:25:16:77:e4:b8:52:08:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d Validity Not Before: Dec 6 18:00:39 2025 GMT Not After : Dec 7 18:00:39 2025 GMT Subject: CN=a5f45648ff45414fcb700549e8690d553f47085b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:0c:7d:eb:d7:b5:c9:37:ae:bd:eb:a5:c1: ed:ff:4b:54:22:9d:b9:dd:f2:63:4e:7b:6a:d2:1e: b7:69:d1:bd:c2:4a:bd:12:4e:a2:f9:04:da:2d:5f: 23:d5:c2:c0:c5:cc:a7:b9:b8:20:0b:ed:6d:9b:3e: 3a:67:09:03:c8:7d:24:50:46:0c:4c:81:99:9e:d6: 00:f9:23:94:b7:c6:3c:47:13:95:0c:9e:76:d9:d9: ac:77:76:29:47:db:5b:d2:07:81:8e:3a:1e:98:e5: 12:3b:b4:ad:71:32:aa:69:d4:3f:12:3b:23:cc:01: c1:68:c9:82:2b:ea:cc:53:d9:aa:65:5c:2a:81:ec: 7a:2a:34:39:b2:1d:3d:12:90:d1:eb:24:09:d7:cb: eb:f5:b4:d2:64:0e:ad:42:43:1f:a4:7c:10:e7:27: 99:df:bc:b9:71:18:01:d9:24:bb:63:0e:88:8c:13: c7:d1:88:5a:51:82:a5:83:a4:98:4c:71:17:18:80: 02:5b:54:31:a0:14:d7:11:d3:cb:96:63:3c:2c:66: 3c:cd:5d:04:c5:53:61:a6:c3:64:de:8f:ab:b4:56: 5c:dc:6e:fb:a7:39:fd:c9:da:fe:99:15:22:5f:13: ec:0f:44:db:74:c3:14:62:90:7d:f9:51:05:1d:7a: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F4:56:48:FF:45:41:4F:CB:70:05:49:E8:69:0D:55:3F:47:08:5B X509v3 Authority Key Identifier: keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bf:3b:3e:17:44:67:31:44:02:61:92:16:d5:4c:35:89:36: f6:67:0e:a9:36:b8:e4:34:7e:f7:a4:ee:7a:67:87:28:f2:cd: cc:20:d2:64:d6:e1:c2:68:7d:7d:b3:8d:92:2c:0c:02:54:00: b5:75:f4:01:64:63:9e:35:d0:93:1c:2a:b6:eb:63:1d:28:31: d6:cb:62:6d:6a:ed:34:5d:ac:b9:cf:e6:c1:d3:d9:a9:f0:d8: 8b:2f:2b:d4:ce:cf:bd:83:3e:1c:4b:77:af:ad:61:4e:22:3c: fc:8f:74:c7:21:d0:28:b2:eb:74:cf:d8:7a:23:7a:c0:84:6a: b8:69:91:28:fe:dd:6e:c0:76:25:f0:d8:12:fd:31:c9:4d:9a: d6:94:5e:d6:81:4c:ca:c7:89:19:0f:7f:99:c7:a6:b2:c6:16: 4e:e1:1b:c0:27:0c:86:c1:28:12:da:cf:7f:b4:01:83:4f:4e: 66:fe:80:88:a6:64:f7:30:81:d1:f2:c7:32:2d:ca:e7:33:76: cc:18:00:5c:23:20:32:31:3c:0b:52:2c:c6:59:56:df:b4:43: 20:a7:90:cd:ae:b5:cd:4d:d1:59:46:da:77:9f:06:90:b4:7f: 80:c7:0c:be:d2:42:64:54:44:0c:86:9b:35:9d:25:4b:ae:d3: 51:5a:de:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rAAumzgECUWd+S4UgjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOWJjMzBhNzQ4OTYwYjIyN2ExYmYyNjIxNjA2N2VkZDA1 YzFhN2QwHhcNMjUxMjA2MTgwMDM5WhcNMjUxMjA3MTgwMDM5WjAzMTEwLwYDVQQD EyhhNWY0NTY0OGZmNDU0MTRmY2I3MDA1NDllODY5MGQ1NTNmNDcwODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0MfevXtck3rr3rpcHt/0tUIp25 3fJjTntq0h63adG9wkq9Ek6i+QTaLV8j1cLAxcynubggC+1tmz46ZwkDyH0kUEYM TIGZntYA+SOUt8Y8RxOVDJ522dmsd3YpR9tb0geBjjoemOUSO7StcTKqadQ/Ejsj zAHBaMmCK+rMU9mqZVwqgex6KjQ5sh09EpDR6yQJ18vr9bTSZA6tQkMfpHwQ5yeZ 37y5cRgB2SS7Yw6IjBPH0YhaUYKlg6SYTHEXGIACW1QxoBTXEdPLlmM8LGY8zV0E xVNhpsNk3o+rtFZc3G77pzn9ydr+mRUiXxPsD0TbdMMUYpB9+VEFHXpWvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKX0Vkj/RUFPy3AFSehpDVU/RwhbMB8GA1UdIwQY MBaAFMObwwp0iWCyJ6G/JiFgZ+3QXBp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgt OTIwOWY3YjdlZjgxLzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgtOTIwOWY3YjdlZjgx LzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA787PhdE ZzFEAmGSFtVMNYk29mcOqTa45DR+96TuemeHKPLNzCDSZNbhwmh9fbONkiwMAlQA tXX0AWRjnjXQkxwqtutjHSgx1stibWrtNF2suc/mwdPZqfDYiy8r1M7PvYM+HEt3 r61hTiI8/I90xyHQKLLrdM/YeiN6wIRquGmRKP7dbsB2JfDYEv0xyU2a1pRe1oFM yseJGQ9/mcemssYWTuEbwCcMhsEoEtrPf7QBg09OZv6AiKZk9zCB0fLHMi3K5zN2 zBgAXCMgMjE8C1IsxllW37RDIKeQza61zU3RWUbad58GkLR/gMcMvtJCZFREDIab NZ0lS67TUVretg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:27 2025 by rpki-client