This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft File: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json) Hash identifier: ronlOV3zfKbvjmPqkbpdX6ZZsz+E0ixI394+jXmz3os= Subject key identifier: 89:68:E7:1A:7D:19:67:3E:9A:A1:78:33:F7:7B:CC:A1:9A:2E:8F:3C Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4 Certificate issuer: /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4 Certificate serial: 019AF19B6957102C0A6D501A1C37B0379D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft Manifest number: 14FA Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: Vm7I/neURil/3kqCDRpFDOvjKD+WkvpxgadgqolkBxg=) 2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:57:10:2c:0a:6d:50:1a:1c:37:b0:37:9d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=8968e71a7d19673e9aa17833f77bcca19a2e8f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:91:6a:50:7a:14:fd:85:c6:41:5a:e4:ab: ce:24:4c:a6:98:64:23:f4:2f:44:69:f9:8c:7e:9a: 66:fc:8c:79:6a:cf:7d:d8:b5:27:88:ec:fb:3f:0b: 71:62:3e:f4:18:98:da:89:95:f0:0d:82:21:69:8e: ee:ab:2a:53:01:5f:7f:5e:0b:9e:a8:56:dc:d0:50: 85:10:70:58:de:6a:fd:f2:ad:ea:fd:ba:cd:bc:54: 2f:21:30:2f:7a:28:ee:c6:57:3c:fb:2c:b5:1c:d9: 2c:4c:77:76:5d:40:71:9c:4f:c9:51:09:c4:8c:c3: 4b:32:fe:57:df:4b:9a:cc:df:dd:0c:c0:27:7b:1d: d8:5f:23:4c:df:d9:c2:d0:57:fb:45:28:b5:92:6e: df:7b:f3:e2:9e:d1:3b:ea:d4:d0:3e:5e:9f:a6:e4: 94:d4:41:99:47:bb:6a:5b:59:9c:e0:55:62:45:d6: 13:ec:da:a0:69:6c:b5:fc:0d:d3:41:13:0e:99:e4: b0:1d:70:e8:f6:46:88:b5:98:6d:9e:3b:8b:8f:a2: 94:ce:24:c6:11:dc:ce:18:d9:6f:62:52:56:04:0f: cc:0b:aa:e3:ce:3f:2e:19:2c:81:ef:b1:cb:f0:91: 24:7a:7a:c6:1c:d1:ad:cc:a4:42:2c:fe:41:33:a1: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:68:E7:1A:7D:19:67:3E:9A:A1:78:33:F7:7B:CC:A1:9A:2E:8F:3C X509v3 Authority Key Identifier: keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d3:7c:fb:3a:78:c7:9c:22:57:a5:21:40:19:3e:9e:f5:32: 98:bf:8e:f0:7f:11:92:e2:f4:ca:78:c5:70:97:3a:9c:e3:ec: 58:40:a8:e5:de:18:26:c5:4d:ba:22:ea:2c:59:05:54:6a:04: a3:75:6a:5b:3d:41:24:33:02:3a:fc:16:3c:0f:4e:d6:66:66: 5e:db:0f:52:c4:d5:77:bf:6b:67:42:70:ff:56:97:6d:4f:b6: bd:bc:bf:b8:a2:f0:97:70:7a:0a:21:0d:d3:1a:c5:dd:0c:3e: ab:11:bb:ef:7f:ce:44:f0:bb:03:90:98:52:07:a5:3b:1b:2d: 7a:f2:09:2c:c3:e6:98:01:a5:f5:98:ae:34:78:30:61:e0:fe: d6:e6:52:a9:2d:0a:b8:a1:65:9e:fe:2d:f2:2d:09:12:5c:7f: 7f:76:ae:0e:c3:e6:e8:be:35:55:18:9a:42:b6:aa:6e:39:30: cb:79:d7:df:fd:24:07:c6:06:a1:17:c1:cd:48:36:b3:dd:6b: 56:46:11:4f:c2:f5:09:93:b4:36:32:33:d7:48:ee:25:73:37: c0:db:cc:bf:97:76:e6:a6:1d:1b:ff:1c:62:52:dc:ef:89:7e: 38:40:d8:1c:48:52:2c:ab:70:44:34:dc:89:5a:28:70:9a:bf: 91:45:b3:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2lXECwKbVAaHDewN52aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZTVmMTk1M2UwMzFkMjc5ODY0ZjNjM2JlZmYwYmM2NzVh MDBlZTQwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg4OTY4ZTcxYTdkMTk2NzNlOWFhMTc4MzNmNzdiY2NhMTlhMmU4ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm+RalB6FP2FxkFa5KvOJEymmGQj 9C9EafmMfppm/Ix5as992LUniOz7PwtxYj70GJjaiZXwDYIhaY7uqypTAV9/Xgue qFbc0FCFEHBY3mr98q3q/brNvFQvITAveijuxlc8+yy1HNksTHd2XUBxnE/JUQnE jMNLMv5X30uazN/dDMAnex3YXyNM39nC0Ff7RSi1km7fe/PintE76tTQPl6fpuSU 1EGZR7tqW1mc4FViRdYT7NqgaWy1/A3TQRMOmeSwHXDo9kaItZhtnjuLj6KUziTG EdzOGNlvYlJWBA/MC6rjzj8uGSyB77HL8JEkenrGHNGtzKRCLP5BM6Gv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlo5xp9GWc+mqF4M/d7zKGaLo88MB8GA1UdIwQY MBaAFFvl8ZU+Ax0nmGTzw77/C8Z1oA7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZTEyY2EtYWI3ZS00ODU0LWJjNjct OGM2MDBlYWU3ZDgwLzEvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jZTEyY2EtYWI3ZS00ODU0LWJjNjctOGM2MDBlYWU3ZDgw LzEvVy1YeGxUNERIU2VZWlBQRHZ2OEx4bldnRHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdN8+zp4 x5wiV6UhQBk+nvUymL+O8H8RkuL0ynjFcJc6nOPsWECo5d4YJsVNuiLqLFkFVGoE o3VqWz1BJDMCOvwWPA9O1mZmXtsPUsTVd79rZ0Jw/1aXbU+2vby/uKLwl3B6CiEN 0xrF3Qw+qxG773/ORPC7A5CYUgelOxstevIJLMPmmAGl9ZiuNHgwYeD+1uZSqS0K uKFlnv4t8i0JElx/f3auDsPm6L41VRiaQraqbjkwy3nX3/0kB8YGoRfBzUg2s91r VkYRT8L1CZO0NjIz10juJXM3wNvMv5d25qYdG/8cYlLc74l+OEDYHEhSLKtwRDTc iVoocJq/kUWzSA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:45 2025 by rpki-client