This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft File: W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json) Hash identifier: ZI4oQ8hwXK9srnHbgk9m6mCTdErteUXXje7Y2bTtfH0= Subject key identifier: 21:C8:6F:2E:DC:F5:B5:00:8E:97:A2:E9:32:06:3F:3A:32:30:D0:58 Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb Certificate serial: 019AFCC432416A6007C9172C3426EB5E8ACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft Manifest number: 102B Signing time: Mon 08 Dec 2025 07:01:47 +0000 Manifest this update: Mon 08 Dec 2025 07:01:47 +0000 Manifest next update: Tue 09 Dec 2025 07:01:47 +0000 Files and hashes: 1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=) 2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: MePZQCl+20yNRKQ59UExxouu/V7Q3a6xAaPduxsaExc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:32:41:6a:60:07:c9:17:2c:34:26:eb:5e:8a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb Validity Not Before: Dec 8 07:01:47 2025 GMT Not After : Dec 9 07:01:47 2025 GMT Subject: CN=21c86f2edcf5b5008e97a2e932063f3a3230d058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:91:a4:73:84:33:7f:4b:2c:3b:5a:80:60: 15:b7:86:cd:d8:9c:b0:45:36:04:a4:19:fa:cf:7b: 7e:e5:fe:46:91:ba:46:96:de:fb:f8:23:b6:65:aa: b0:3a:5c:03:fd:a8:6a:a7:2f:0d:bb:78:ff:9a:e4: 52:b5:c7:91:15:09:88:30:14:ce:67:08:db:fa:63: c7:99:e0:0f:ce:12:38:98:64:4b:2a:82:b4:2d:b7: e4:cd:73:0b:b4:5b:e7:7e:48:80:64:c5:56:9e:fc: 66:03:0e:8d:e5:49:85:0c:16:24:67:42:5e:fa:d5: 3b:aa:53:50:c6:95:ee:e7:7c:7a:61:6d:e2:7c:28: 04:8d:fa:52:c0:cf:7c:b6:15:99:43:f9:8a:f3:24: 29:1c:57:60:58:4c:36:0f:b6:cf:93:56:f0:97:6c: a2:3e:46:c4:4c:d1:26:bd:4e:22:12:f6:d2:4d:0d: 3e:9c:58:d9:67:9a:5e:70:da:4a:78:72:97:73:9d: 93:30:69:c8:d1:26:dd:5f:0b:75:b0:af:8e:67:0e: fa:27:02:69:c0:bc:67:e7:ea:00:cd:b3:c2:e2:db: 21:18:69:39:8e:b7:10:42:21:f3:cd:bb:9d:bb:de: fa:aa:00:91:38:26:0e:43:ed:10:ca:33:cc:df:8f: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:6F:2E:DC:F5:B5:00:8E:97:A2:E9:32:06:3F:3A:32:30:D0:58 X509v3 Authority Key Identifier: keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:de:80:d7:e4:bd:11:44:b2:27:4d:3b:f8:04:15:d3:77:27: 18:80:e8:c0:84:b9:ac:c8:d9:38:fc:eb:f6:19:28:fc:d3:ac: c5:72:94:78:13:aa:41:38:83:d5:82:17:76:7d:56:fc:29:dd: 00:12:96:8a:08:6f:57:3c:e2:43:00:94:11:4d:9a:63:e6:01: 32:9c:19:e8:65:a7:d9:9d:a4:a4:fd:4c:f9:98:0c:ac:32:06: 28:70:64:60:ea:f2:5a:21:0e:81:39:37:53:3e:ec:4c:b7:63: ce:a8:cc:a3:30:eb:2b:11:77:e1:99:ce:f6:ed:1a:da:7a:eb: 42:a8:0f:99:0d:65:3d:78:a7:bb:12:da:29:c0:b6:33:fd:f0: 41:99:46:f9:1f:d8:03:5a:4f:71:e9:f5:07:15:ba:12:57:bd: 9d:e1:b8:2a:f5:b6:18:32:6d:a8:c4:6a:44:33:9e:7a:a5:e0: dd:20:74:37:5a:2d:06:c9:5b:36:af:37:ec:69:e4:30:2e:45: 22:5f:cf:f9:f7:75:ab:4a:4a:1b:bc:72:07:64:17:c7:99:ed: 55:a7:a7:3b:68:d4:84:1a:74:d5:73:07:83:ec:6d:f0:79:11: e5:0c:09:f4:3e:74:61:67:6e:4c:52:52:4f:0c:07:b5:8a:6a: c4:ed:7e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xDJBamAHyRcsNCbrXorOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOTVhOTRhZGFkM2EyODk2YzcyMDc0ZDY2N2MxYjYyMDc1 OTU4Y2IwHhcNMjUxMjA4MDcwMTQ3WhcNMjUxMjA5MDcwMTQ3WjAzMTEwLwYDVQQD EygyMWM4NmYyZWRjZjViNTAwOGU5N2EyZTkzMjA2M2YzYTMyMzBkMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg6RpHOEM39LLDtagGAVt4bN2Jyw RTYEpBn6z3t+5f5GkbpGlt77+CO2ZaqwOlwD/ahqpy8Nu3j/muRStceRFQmIMBTO Zwjb+mPHmeAPzhI4mGRLKoK0LbfkzXMLtFvnfkiAZMVWnvxmAw6N5UmFDBYkZ0Je +tU7qlNQxpXu53x6YW3ifCgEjfpSwM98thWZQ/mK8yQpHFdgWEw2D7bPk1bwl2yi PkbETNEmvU4iEvbSTQ0+nFjZZ5pecNpKeHKXc52TMGnI0SbdXwt1sK+OZw76JwJp wLxn5+oAzbPC4tshGGk5jrcQQiHzzbudu976qgCROCYOQ+0QyjPM34+FmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHIby7c9bUAjpei6TIGPzoyMNBYMB8GA1UdIwQY MBaAFFuVqUra06KJbHIHTWZ8G2IHWVjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYt N2ZlYWI0OGVlZTYxLzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYtN2ZlYWI0OGVlZTYx LzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQN6A1+S9 EUSyJ007+AQV03cnGIDowIS5rMjZOPzr9hko/NOsxXKUeBOqQTiD1YIXdn1W/Cnd ABKWighvVzziQwCUEU2aY+YBMpwZ6GWn2Z2kpP1M+ZgMrDIGKHBkYOryWiEOgTk3 Uz7sTLdjzqjMozDrKxF34ZnO9u0a2nrrQqgPmQ1lPXinuxLaKcC2M/3wQZlG+R/Y A1pPcen1BxW6Ele9neG4KvW2GDJtqMRqRDOeeqXg3SB0N1otBslbNq837GnkMC5F Il/P+fd1q0pKG7xyB2QXx5ntVaenO2jUhBp01XMHg+xt8HkR5QwJ9D50YWduTFJS TwwHtYpqxO1+Tw== -----END CERTIFICATE-----Generated at Mon Dec 8 10:27:58 2025 by rpki-client