This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft File: W4M_gwOig5k2kGEKkYWlybaCv_s.mft (raw, json) Hash identifier: r7jSXHQCyg+zhTFQTZOTFjq6fJDc0Mp1MMmZxzfmVfk= Subject key identifier: A7:62:03:72:EE:30:8B:09:40:10:01:14:42:9C:23:56:C1:AD:9F:2B Authority key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB Certificate issuer: /CN=5b833f8303a283993690610a9185a5c9b682bffb Certificate serial: 019AF12D7B0CF9841B5E6612A48576B95C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: W4M_gwOig5k2kGEKkYWlybaCv_s.crl (hash: G/Cle0VtnMBVq5W8hQKcUHeehpEVohi2+yGGcgBoW3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7b:0c:f9:84:1b:5e:66:12:a4:85:76:b9:5c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b833f8303a283993690610a9185a5c9b682bffb Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=a7620372ee308b0940100114429c2356c1ad9f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:56:9f:14:ca:cf:95:c9:3f:cb:b4:e3:85:9e: 6e:94:89:8e:e1:59:53:58:db:a4:8e:e9:df:48:5b: aa:b6:09:6e:b4:6d:bb:9e:d0:7b:b8:07:25:7d:1b: 71:dd:af:12:5c:6d:91:7e:0f:ed:dd:11:28:cb:1a: 31:b2:f7:f3:f5:59:dd:46:92:aa:d3:02:35:5f:8a: c3:b5:4b:72:5e:f9:80:e1:0b:b0:23:4f:e2:aa:59: 38:dd:ac:64:4f:08:c4:42:c3:5d:34:e6:33:12:b1: c3:44:63:72:86:c2:6a:86:39:51:c0:87:2b:01:6f: 22:85:81:3a:31:31:20:92:5a:4e:49:a8:78:4e:ff: 60:a1:c3:44:38:0f:8f:af:5d:53:4b:ce:f2:d7:39: 27:26:11:57:09:e3:b9:eb:13:6f:be:33:5e:ae:b8: 60:9b:48:93:e6:6f:e0:95:0e:7d:83:5a:ef:14:79: 0d:25:fe:6e:da:a1:2d:3f:62:7a:ad:d0:5f:b4:12: d2:fa:05:d3:1b:82:5a:64:f9:2c:87:71:be:5e:d5: 10:7e:8c:d8:d6:bf:a5:39:79:72:0b:ba:c0:89:0c: d6:43:f7:3e:f3:a9:bd:43:de:95:48:c6:f3:d3:f5: c4:b8:37:74:9e:77:37:f9:9d:9e:81:ac:1b:1d:1d: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:62:03:72:EE:30:8B:09:40:10:01:14:42:9C:23:56:C1:AD:9F:2B X509v3 Authority Key Identifier: keyid:5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a7:18:67:46:1b:fd:aa:2b:0b:8c:16:1d:ad:aa:df:79:e0: 7f:43:12:8a:5a:13:9a:66:a6:0c:31:0d:3f:9a:d3:58:37:b0: f5:10:cf:d6:7e:0e:08:e6:93:b4:f4:19:17:aa:92:e3:eb:56: 2f:65:c7:98:41:9d:cd:79:7f:47:00:52:78:3d:ce:8e:44:c6: 2e:8e:64:69:59:b8:f6:95:fa:6a:2b:c0:1b:22:95:26:36:dd: 4f:3d:e8:68:30:16:0e:63:8f:1c:80:13:4b:ef:5c:ac:7d:bc: 62:86:10:29:1c:34:65:1f:a8:b6:cc:8d:01:bc:8f:33:04:a7: 24:82:e5:e8:f4:d5:b6:06:b8:78:a1:a6:fb:b0:cf:34:5f:26: c7:c5:65:f8:8f:2a:8c:d6:fc:37:c8:41:a8:2f:97:2c:ae:fd: b3:ec:3b:f7:1b:bf:74:fe:ab:9e:70:9c:e1:56:c7:da:17:dc: 4b:5f:98:9b:c6:e7:97:e2:cd:81:26:1d:1b:d6:62:eb:53:71: ee:fc:6f:cb:1e:01:5f:45:e3:e8:5e:80:05:0d:53:f1:1c:09: be:24:10:ea:8a:57:37:74:38:a8:9c:b6:3f:9b:5e:dd:82:d4: 15:f6:89:52:c0:0c:af:ab:8b:89:56:1d:e5:83:9c:f7:ea:88: e4:03:eb:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXsM+YQbXmYSpIV2uVwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODMzZjgzMDNhMjgzOTkzNjkwNjEwYTkxODVhNWM5YjY4 MmJmZmIwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD EyhhNzYyMDM3MmVlMzA4YjA5NDAxMDAxMTQ0MjljMjM1NmMxYWQ5ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lafFMrPlck/y7TjhZ5ulImO4VlT WNukjunfSFuqtglutG27ntB7uAclfRtx3a8SXG2Rfg/t3REoyxoxsvfz9VndRpKq 0wI1X4rDtUtyXvmA4QuwI0/iqlk43axkTwjEQsNdNOYzErHDRGNyhsJqhjlRwIcr AW8ihYE6MTEgklpOSah4Tv9gocNEOA+Pr11TS87y1zknJhFXCeO56xNvvjNerrhg m0iT5m/glQ59g1rvFHkNJf5u2qEtP2J6rdBftBLS+gXTG4JaZPksh3G+XtUQfozY 1r+lOXlyC7rAiQzWQ/c+86m9Q96VSMbz0/XEuDd0nnc3+Z2egawbHR1EzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdiA3LuMIsJQBABFEKcI1bBrZ8rMB8GA1UdIwQY MBaAFFuDP4MDooOZNpBhCpGFpcm2gr/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZjIxNWItMzVlNy00Y2NjLWFhOGMt YzEyOGYyN2NjYzc4LzEvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kZjIxNWItMzVlNy00Y2NjLWFhOGMtYzEyOGYyN2NjYzc4 LzEvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALacYZ0Yb /aorC4wWHa2q33ngf0MSiloTmmamDDENP5rTWDew9RDP1n4OCOaTtPQZF6qS4+tW L2XHmEGdzXl/RwBSeD3OjkTGLo5kaVm49pX6aivAGyKVJjbdTz3oaDAWDmOPHIAT S+9crH28YoYQKRw0ZR+otsyNAbyPMwSnJILl6PTVtga4eKGm+7DPNF8mx8Vl+I8q jNb8N8hBqC+XLK79s+w79xu/dP6rnnCc4VbH2hfcS1+Ym8bnl+LNgSYdG9Zi61Nx 7vxvyx4BX0Xj6F6ABQ1T8RwJviQQ6opXN3Q4qJy2P5te3YLUFfaJUsAMr6uLiVYd 5YOc9+qI5APrsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:29 2025 by rpki-client