This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json) Hash identifier: ZwbvVqJhliTJ5QXo4s3UKC2un+glpm9IcxObDWqXWEY= Subject key identifier: 93:9F:F6:B2:47:F4:05:E6:5F:C9:8E:7A:0A:96:2A:A5:60:3D:6F:4B Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b Certificate serial: 019AF208B95BE7538641698B7C455F707897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft Manifest number: 02CE Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=) 2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: naKBttBqfBE16umrgQoQVVPxgtu9qVVfNVC6T80IutY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b9:5b:e7:53:86:41:69:8b:7c:45:5f:70:78:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=939ff6b247f405e65fc98e7a0a962aa5603d6f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:22:e1:d3:19:cd:83:3c:00:91:98:be:b3: 2c:9e:ed:af:dc:b7:0a:62:d8:40:96:21:92:47:1b: b7:ec:3a:53:28:ba:9c:3a:8b:75:1f:c7:8e:12:a0: 5b:8a:06:d5:ac:d5:27:28:0a:eb:a1:0e:de:3c:e7: 85:15:78:c1:0f:29:30:53:ed:ea:3d:29:9d:2c:a6: 9a:47:ad:4a:ee:ae:f3:f6:f3:02:1e:e8:93:35:66: 3f:13:a6:5a:63:3d:be:73:cb:3b:3c:95:c9:7c:4b: ca:44:b4:f0:f5:21:66:59:bf:f3:40:94:70:97:10: 97:6d:80:50:45:a2:89:d9:fb:9b:7f:72:b3:6c:98: 54:87:00:4b:bc:46:02:90:98:ef:88:0b:37:78:72: c6:88:ab:b0:13:0c:90:09:1a:36:d0:36:7c:7a:17: 47:c0:11:71:02:bb:5c:bf:2a:1f:73:f0:7b:05:c1: 92:5d:cf:b9:d2:f1:67:65:0a:7e:72:ff:29:9c:49: 2f:21:2b:4a:eb:78:b6:ba:dd:a5:be:7a:89:b6:ec: 29:61:39:8f:d5:cb:e9:b2:35:92:f5:63:6b:95:94: a2:c9:28:aa:5d:ef:5d:c0:a5:99:09:53:76:39:70: 05:a6:b1:34:d3:83:ff:1a:65:fe:7b:08:2c:03:31: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9F:F6:B2:47:F4:05:E6:5F:C9:8E:7A:0A:96:2A:A5:60:3D:6F:4B X509v3 Authority Key Identifier: keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:eb:88:94:65:1a:77:27:94:f4:2d:4e:6b:3c:0e:e5:6c:82: db:5c:36:05:12:0e:13:23:24:b5:5b:d7:ab:22:f1:93:3b:15: 43:71:83:ef:a7:0e:49:1f:36:fb:e5:90:c0:ce:3b:c5:45:91: 3f:bf:2a:9c:2b:04:64:43:e1:3c:c8:be:e1:24:db:e3:9e:75: c9:75:cb:b1:0a:5c:8a:91:4b:6f:57:74:e3:d6:5f:9d:ec:1f: 9c:3b:8d:0b:03:6b:8a:8d:bc:68:d2:e6:f7:76:e1:b4:a9:dc: 1c:05:3e:cc:48:18:f7:6e:f7:72:04:5a:34:d4:1a:6c:08:c2: e7:2c:19:7b:ad:89:57:b4:a4:9d:3d:c4:82:3e:42:fc:fa:6a: 25:03:a2:2b:76:e9:5c:2e:de:93:5e:73:9f:ab:b2:bb:e2:46: 45:6d:00:bf:86:65:1a:ca:fb:fd:61:5e:cc:97:1b:b9:0f:3f: 32:f2:5c:2b:8d:b9:1b:ed:b3:09:86:f4:ad:4a:f4:c2:6e:c7: 02:86:9d:e6:3d:91:ca:43:c3:26:d5:dd:5c:01:8b:49:48:f4: 7a:e4:cd:3b:4e:1a:6d:d4:96:99:2e:01:56:db:69:40:cb:ab: 60:2e:bb:46:4e:19:9c:8a:c4:1d:3a:0a:a5:ea:0c:09:df:06: 10:22:65:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLlb51OGQWmLfEVfcHiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNzk3ZmNkODQzM2IxZjQ4OWY4OTExOTQ4NjJmYzM2YmZi ZWY2NmIwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD Eyg5MzlmZjZiMjQ3ZjQwNWU2NWZjOThlN2EwYTk2MmFhNTYwM2Q2ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ4i4dMZzYM8AJGYvrMsnu2v3LcK YthAliGSRxu37DpTKLqcOot1H8eOEqBbigbVrNUnKArroQ7ePOeFFXjBDykwU+3q PSmdLKaaR61K7q7z9vMCHuiTNWY/E6ZaYz2+c8s7PJXJfEvKRLTw9SFmWb/zQJRw lxCXbYBQRaKJ2fubf3KzbJhUhwBLvEYCkJjviAs3eHLGiKuwEwyQCRo20DZ8ehdH wBFxArtcvyofc/B7BcGSXc+50vFnZQp+cv8pnEkvIStK63i2ut2lvnqJtuwpYTmP 1cvpsjWS9WNrlZSiySiqXe9dwKWZCVN2OXAFprE004P/GmX+ewgsAzHb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOf9rJH9AXmX8mOegqWKqVgPW9LMB8GA1UdIwQY MBaAFFt5f82EM7H0ifiRGUhi/Da/vvZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAt ZTU5NmU1MjRjYWJlLzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84ZmU0ZGItOGM1Yi00MGY1LTkzNjAtZTU5NmU1MjRjYWJl LzEvVzNsX3pZUXpzZlNKLUpFWlNHTDhOci0tOW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuuIlGUa dyeU9C1OazwO5WyC21w2BRIOEyMktVvXqyLxkzsVQ3GD76cOSR82++WQwM47xUWR P78qnCsEZEPhPMi+4STb4551yXXLsQpcipFLb1d049ZfnewfnDuNCwNrio28aNLm 93bhtKncHAU+zEgY9273cgRaNNQabAjC5ywZe62JV7SknT3Egj5C/PpqJQOiK3bp XC7ek15zn6uyu+JGRW0Av4ZlGsr7/WFezJcbuQ8/MvJcK425G+2zCYb0rUr0wm7H Aoad5j2RykPDJtXdXAGLSUj0euTNO04abdSWmS4BVttpQMurYC67Rk4ZnIrEHToK peoMCd8GECJlLw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:07 2025 by rpki-client