This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft File: W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json) Hash identifier: JGYYW7rewTMlS6Wkjt8eCe05lL9/pRyhcG2vhnERxUE= Subject key identifier: ED:CB:80:34:04:1B:03:C8:59:82:A1:77:B5:58:FC:C5:50:81:96:2C Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B Certificate issuer: /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b Certificate serial: 019AF12D95F5FDC769435D196FE20B81B726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft Manifest number: 030A Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: cpMNuD/xCfIFT48+eOWzBRIJ2Vkc/+9EP8un94yXw4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:95:f5:fd:c7:69:43:5d:19:6f:e2:0b:81:b7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=edcb8034041b03c85982a177b558fcc55081962c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:13:6c:d4:17:98:f3:71:54:2c:c2:9d:68: 6a:90:c2:cd:a1:a4:09:32:f6:5c:05:92:3d:7c:c6: 6a:94:cd:8a:36:21:77:c0:49:39:c0:99:a5:58:68: 54:64:05:84:c6:51:4b:29:bc:9d:14:20:76:f8:35: b2:4b:1e:87:a3:18:f6:5b:0a:02:cb:17:11:c4:10: 80:f7:f2:c3:62:61:ce:a5:a1:0e:7d:dd:6d:26:8c: 09:94:42:61:b5:fe:ae:73:dd:e1:10:23:bc:64:65: d8:42:77:9c:d0:7d:9b:df:71:5c:47:76:e1:ed:57: c2:60:13:fe:84:22:fe:ef:51:af:08:d8:e5:2d:83: aa:e4:b3:3b:e0:f4:84:a7:af:d9:6c:8e:13:a2:2a: 61:46:7e:fa:e1:e3:d2:19:07:86:83:24:c2:3e:99: 71:67:74:85:3e:be:b2:f0:98:8a:c7:87:d6:ef:ad: 58:e6:e2:a5:fb:1b:f6:cd:51:5e:bf:d3:9e:5f:a7: dd:75:58:e1:f4:f2:de:06:a1:08:d8:30:5b:a4:fe: f8:1c:59:f2:4f:8d:18:ca:cb:8d:52:a2:6c:8c:64: ce:9c:e0:61:c2:f7:c5:81:a6:40:3e:6f:d7:6d:f3: e1:b9:ae:af:73:d9:83:36:42:ca:d0:f3:20:68:15: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:80:34:04:1B:03:C8:59:82:A1:77:B5:58:FC:C5:50:81:96:2C X509v3 Authority Key Identifier: keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ab:e3:b8:0d:b3:fe:88:eb:3d:27:6a:fb:d8:89:51:c8:f3: f5:d3:60:ed:b4:f5:b5:da:d1:f5:1b:75:3c:2a:d3:fc:8d:d7: 95:63:3e:2b:18:e0:d4:e2:22:42:7f:7a:ee:50:65:d6:a6:be: 97:2a:f2:dc:fd:6b:2a:15:db:c7:0b:53:35:ee:8c:9c:80:37: 59:ee:0d:e5:df:82:9f:c6:e1:fc:8d:ec:24:ae:7f:b0:96:a4: 8e:00:f6:3c:73:80:b4:08:df:61:b2:85:06:18:a1:46:be:a0: bc:17:ab:ae:26:32:29:5f:9b:0b:2d:5d:14:34:73:95:e2:4c: 8d:57:23:7c:19:62:e0:d8:51:3f:f4:da:67:b9:c1:ec:ff:36: db:03:ef:e3:69:b0:34:e4:92:41:35:68:2e:a6:ed:60:be:69: 7a:ec:8c:c1:35:5e:ec:94:b8:98:2d:e1:56:43:35:b6:8f:8f: e4:bd:ac:45:4c:63:3e:71:3f:87:9f:ad:e5:3a:06:13:84:e4: 82:56:94:df:2c:bb:d8:e1:e2:bb:6b:e4:19:1b:b4:c9:dc:3c: 73:6f:54:a9:36:49:22:d3:23:c9:c8:59:08:63:79:dc:54:8d: 76:92:0b:83:9f:e0:4b:dd:0b:35:6b:53:5a:0e:1b:ae:80:f7: 85:8b:a5:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZX1/cdpQ10Zb+ILgbcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTk5NmQ3YzQ0NGQ2NmE1MmJjYTEwMWIwNmNhNzM4YTdm Y2FhOWIwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EyhlZGNiODAzNDA0MWIwM2M4NTk4MmExNzdiNTU4ZmNjNTUwODE5NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu34TbNQXmPNxVCzCnWhqkMLNoaQJ MvZcBZI9fMZqlM2KNiF3wEk5wJmlWGhUZAWExlFLKbydFCB2+DWySx6Hoxj2WwoC yxcRxBCA9/LDYmHOpaEOfd1tJowJlEJhtf6uc93hECO8ZGXYQnec0H2b33FcR3bh 7VfCYBP+hCL+71GvCNjlLYOq5LM74PSEp6/ZbI4ToiphRn764ePSGQeGgyTCPplx Z3SFPr6y8JiKx4fW761Y5uKl+xv2zVFev9OeX6fddVjh9PLeBqEI2DBbpP74HFny T40YysuNUqJsjGTOnOBhwvfFgaZAPm/XbfPhua6vc9mDNkLK0PMgaBU4aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3LgDQEGwPIWYKhd7VY/MVQgZYsMB8GA1UdIwQY MBaAFFtZltfERNZqUryhAbBspzin/KqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMmU0YmYtMTdhYy00NjkwLTg2Yzct YTQwZWE0N2I2OWNjLzEvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iMmU0YmYtMTdhYy00NjkwLTg2YzctYTQwZWE0N2I2OWNj LzEvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjavjuA2z /ojrPSdq+9iJUcjz9dNg7bT1tdrR9Rt1PCrT/I3XlWM+Kxjg1OIiQn967lBl1qa+ lyry3P1rKhXbxwtTNe6MnIA3We4N5d+Cn8bh/I3sJK5/sJakjgD2PHOAtAjfYbKF BhihRr6gvBerriYyKV+bCy1dFDRzleJMjVcjfBli4NhRP/TaZ7nB7P822wPv42mw NOSSQTVoLqbtYL5peuyMwTVe7JS4mC3hVkM1to+P5L2sRUxjPnE/h5+t5ToGE4Tk glaU3yy72OHiu2vkGRu0ydw8c29UqTZJItMjychZCGN53FSNdpILg5/gS90LNWtT Wg4broD3hYulmw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:41 2025 by rpki-client