This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json) Hash identifier: eo4HPgjYiaRAgMxaApfFbk6tNs7v7WlU16oMJ5/c1sU= Subject key identifier: EF:EC:C7:8B:FD:87:3E:29:57:AE:5F:1A:AD:10:7D:8A:86:26:C4:AE Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Certificate serial: 019AF12D6BD25F5583BDB7EC80130C94CEBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft Manifest number: 0F8F Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: N03lRPDmPwHIR3coLfqyOpypMbWnWlEENc/26KemXNI=) 2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6b:d2:5f:55:83:bd:b7:ec:80:13:0c:94:ce:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=efecc78bfd873e2957ae5f1aad107d8a8626c4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:27:e7:28:f1:87:41:77:28:ef:d5:b2:44: f3:4d:f8:4e:e6:6b:8b:fc:c8:57:ff:74:d2:48:71: df:3d:5d:d3:4a:12:5b:26:c7:4c:d8:10:5f:6d:9a: 62:8b:6a:be:bd:ba:0e:f3:4f:36:bb:ba:80:45:e7: 55:fb:06:91:7a:26:05:87:69:80:70:60:58:a5:6a: cb:ea:48:4e:1a:d9:8c:c8:a8:76:4e:3a:b5:f2:1e: e9:64:d8:6a:1d:f3:09:6d:6a:a4:62:28:5d:54:f7: 2c:18:ac:24:9c:2e:2f:5e:ca:bc:d9:6e:ce:82:aa: 17:65:24:78:f8:cd:26:aa:c6:2e:9e:70:b0:9b:18: 64:69:b1:50:41:ec:da:ab:07:4f:c4:4a:43:3b:e4: 32:2e:e9:2a:89:64:9f:7e:fa:4f:26:00:ee:31:6c: 9e:14:2a:1d:2b:ac:33:6e:23:ba:03:29:a1:f8:e3: 3f:7e:33:ba:85:9a:63:cb:38:24:a5:b1:f1:11:fc: 25:ed:eb:12:a6:50:b8:3f:ab:f6:2d:80:22:94:ad: 4e:7c:12:48:c2:1b:1b:e5:81:37:f0:c2:98:55:37: 7d:f1:ec:6f:7f:8b:dd:de:34:86:67:60:9d:c8:ea: e4:19:9c:be:72:c4:59:f1:b8:37:f2:ed:2f:10:d6: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EC:C7:8B:FD:87:3E:29:57:AE:5F:1A:AD:10:7D:8A:86:26:C4:AE X509v3 Authority Key Identifier: keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5c:ef:d9:3d:c3:64:b5:ad:c8:4a:a6:2e:a2:f5:3f:31:a7: ca:cc:40:fd:1a:d4:65:9f:fb:92:b3:fd:40:df:a1:5e:c3:88: c2:3a:2a:a0:be:ee:e6:05:5a:bc:44:e1:05:13:a8:2b:d5:08: d4:8e:ba:3e:61:04:37:d3:0f:bc:a2:89:3f:48:17:92:e0:d1: 04:e9:6d:95:b1:b6:8e:f3:09:a8:86:9a:95:d7:ff:68:d8:7b: 89:2e:94:b8:9f:71:83:24:5f:24:7f:f2:48:c7:73:8a:17:43: df:1a:df:61:20:30:5c:60:28:b8:da:69:59:13:29:c1:84:7c: 05:df:4e:12:d6:e1:f2:76:e5:c6:d8:12:c7:7f:ec:35:2f:bf: 4a:5e:a1:3c:88:bb:3d:b3:a1:43:5d:a2:97:cb:e1:f1:65:80: 0d:8a:56:44:de:77:c1:89:4d:bd:08:fc:8d:bd:2c:a6:d4:d7: 17:e6:c3:d8:69:08:ab:f6:06:b6:09:2f:ed:28:4a:dd:7d:26: 23:ca:ec:47:23:57:af:84:e8:25:70:91:22:e1:b4:56:aa:96: 46:2a:2f:f1:c7:b6:da:97:17:94:d5:a6:35:c2:e0:2f:52:d5: 7a:b7:cc:fc:ab:2b:eb:ab:06:27:2f:30:8e:41:bd:f3:93:fa: ad:98:e5:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWvSX1WDvbfsgBMMlM66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw YTg3YTQwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD EyhlZmVjYzc4YmZkODczZTI5NTdhZTVmMWFhZDEwN2Q4YTg2MjZjNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCsn5yjxh0F3KO/VskTzTfhO5muL /MhX/3TSSHHfPV3TShJbJsdM2BBfbZpii2q+vboO8082u7qARedV+waReiYFh2mA cGBYpWrL6khOGtmMyKh2Tjq18h7pZNhqHfMJbWqkYihdVPcsGKwknC4vXsq82W7O gqoXZSR4+M0mqsYunnCwmxhkabFQQezaqwdPxEpDO+QyLukqiWSffvpPJgDuMWye FCodK6wzbiO6Aymh+OM/fjO6hZpjyzgkpbHxEfwl7esSplC4P6v2LYAilK1OfBJI whsb5YE38MKYVTd98exvf4vd3jSGZ2CdyOrkGZy+csRZ8bg38u0vENYLzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/sx4v9hz4pV65fGq0QfYqGJsSuMB8GA1UdIwQY MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalzv2T3D ZLWtyEqmLqL1PzGnysxA/RrUZZ/7krP9QN+hXsOIwjoqoL7u5gVavEThBROoK9UI 1I66PmEEN9MPvKKJP0gXkuDRBOltlbG2jvMJqIaaldf/aNh7iS6UuJ9xgyRfJH/y SMdzihdD3xrfYSAwXGAouNppWRMpwYR8Bd9OEtbh8nblxtgSx3/sNS+/Sl6hPIi7 PbOhQ12il8vh8WWADYpWRN53wYlNvQj8jb0sptTXF+bD2GkIq/YGtgkv7ShK3X0m I8rsRyNXr4ToJXCRIuG0VqqWRiov8ce22pcXlNWmNcLgL1LVerfM/Ksr66sGJy8w jkG985P6rZjlKA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:53 2025 by rpki-client