This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft File: W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json) Hash identifier: tkYldpQDINSzjSGItf9mt1SiTn35onmmRqGQ/XLEC2c= Subject key identifier: 50:11:57:71:D6:59:AC:E0:40:3A:CA:63:D5:89:C8:80:CC:F1:69:87 Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B Certificate issuer: /CN=5b998e184d4fc4affa20509099d919a31a07947b Certificate serial: 019AF12E948327E33CFBB6A9ECE79488A6E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:32 +0000 Manifest this update: Sat 06 Dec 2025 01:02:32 +0000 Manifest next update: Sun 07 Dec 2025 01:02:32 +0000 Files and hashes: 1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: 0PRKdNT3CyyQyoTKr5YyLp+aRNdyD5hTuwzOFC0vNFc=) 2: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (hash: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:94:83:27:e3:3c:fb:b6:a9:ec:e7:94:88:a6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b Validity Not Before: Dec 6 01:02:32 2025 GMT Not After : Dec 7 01:02:32 2025 GMT Subject: CN=50115771d659ace0403aca63d589c880ccf16987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:ab:3b:77:0d:b3:42:01:53:11:e8:c8:3e: eb:1c:5e:0a:35:d9:2a:7f:80:18:d6:48:33:e9:59: 58:45:14:7f:69:54:69:44:31:00:43:5d:6e:31:60: 30:cd:4c:b5:07:d4:2f:3f:63:ba:94:43:18:93:98: 27:c6:41:65:8d:9a:8d:ab:d2:ae:27:38:1b:49:a7: 94:a2:9c:5f:b2:6a:90:d9:c8:7d:00:0e:07:62:66: 35:d7:88:d5:e3:3b:1c:ba:29:69:d0:ea:dd:3e:88: aa:b9:cd:f4:f6:9a:0c:20:21:86:3f:b4:19:ff:36: 0a:48:bb:b6:fe:7e:3e:7b:fe:26:8f:6d:16:ef:16: 45:27:d1:ee:36:be:2e:f3:f2:c5:51:92:a1:4c:9a: 7b:d3:86:2b:f6:e1:47:c5:ef:87:36:87:3d:69:97: 3d:1e:76:ed:39:68:cd:07:94:20:24:7e:ef:53:d9: 49:98:96:b7:7f:af:ec:4e:48:90:d8:8d:9f:93:d9: e7:25:e2:e0:6b:97:a7:c6:ea:0b:c2:70:47:0c:78: 26:23:4b:b2:a6:54:76:01:71:51:02:d2:06:fc:8c: 6b:7e:00:1a:74:cd:b7:42:9f:7a:f5:93:aa:68:ce: 28:e2:93:38:25:6f:47:29:d9:9d:ad:f3:5b:22:1f: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:57:71:D6:59:AC:E0:40:3A:CA:63:D5:89:C8:80:CC:F1:69:87 X509v3 Authority Key Identifier: keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:11:9b:1d:15:a0:92:02:b5:92:9e:2d:70:e9:ec:2c:8b:c7: cc:10:3d:2f:ae:e2:9a:28:e7:05:1e:3b:07:7f:2b:e4:d8:fb: 43:03:31:f6:67:d7:78:c0:fc:a7:00:2c:9d:6b:47:37:f6:10: 45:1b:4c:33:26:ba:8f:aa:36:0a:1a:37:19:ef:fc:74:f2:c6: df:df:20:54:c5:bf:8b:d1:a7:97:a8:f0:e0:02:2a:d2:7f:79: f8:fd:70:41:b1:eb:88:88:63:fe:c3:10:37:57:95:df:25:d6: ff:5f:ec:1b:df:d1:b1:d9:d7:97:5c:1d:31:e1:18:59:6e:93: cd:71:17:fb:95:17:f7:85:d5:e0:3f:99:b3:a8:1a:2c:bd:79: 75:f5:b3:af:54:6f:33:8f:12:21:cf:6e:ca:ca:96:65:0c:70: 6a:66:47:c3:57:e9:c1:17:43:0a:4f:1b:63:db:37:95:a4:6c: 52:c2:0c:42:4d:52:da:d0:3a:83:c6:14:ab:c5:17:44:c8:d7: 59:6b:d4:2f:3f:b5:01:99:1d:0e:88:9f:ed:fd:4c:07:a1:90: e3:02:95:9d:3c:48:dd:79:a0:02:d1:d1:01:f4:7a:fa:4a:6b: 0a:8f:69:ca:06:a5:98:73:95:da:06:d0:6f:0d:85:7f:b7:6b: 75:e1:57:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpSDJ+M8+7ap7OeUiKbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOTk4ZTE4NGQ0ZmM0YWZmYTIwNTA5MDk5ZDkxOWEzMWEw Nzk0N2IwHhcNMjUxMjA2MDEwMjMyWhcNMjUxMjA3MDEwMjMyWjAzMTEwLwYDVQQD Eyg1MDExNTc3MWQ2NTlhY2UwNDAzYWNhNjNkNTg5Yzg4MGNjZjE2OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+WrO3cNs0IBUxHoyD7rHF4KNdkq f4AY1kgz6VlYRRR/aVRpRDEAQ11uMWAwzUy1B9QvP2O6lEMYk5gnxkFljZqNq9Ku JzgbSaeUopxfsmqQ2ch9AA4HYmY114jV4zscuilp0OrdPoiquc309poMICGGP7QZ /zYKSLu2/n4+e/4mj20W7xZFJ9HuNr4u8/LFUZKhTJp704Yr9uFHxe+HNoc9aZc9 HnbtOWjNB5QgJH7vU9lJmJa3f6/sTkiQ2I2fk9nnJeLga5enxuoLwnBHDHgmI0uy plR2AXFRAtIG/IxrfgAadM23Qp969ZOqaM4o4pM4JW9HKdmdrfNbIh8SowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFARV3HWWazgQDrKY9WJyIDM8WmHMB8GA1UdIwQY MBaAFFuZjhhNT8Sv+iBQkJnZGaMaB5R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTIt MmZmOGU5ZDIzZjk3LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTItMmZmOGU5ZDIzZjk3 LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxGbHRWg kgK1kp4tcOnsLIvHzBA9L67imijnBR47B38r5Nj7QwMx9mfXeMD8pwAsnWtHN/YQ RRtMMya6j6o2Cho3Ge/8dPLG398gVMW/i9Gnl6jw4AIq0n95+P1wQbHriIhj/sMQ N1eV3yXW/1/sG9/RsdnXl1wdMeEYWW6TzXEX+5UX94XV4D+Zs6gaLL15dfWzr1Rv M48SIc9uysqWZQxwamZHw1fpwRdDCk8bY9s3laRsUsIMQk1S2tA6g8YUq8UXRMjX WWvULz+1AZkdDoif7f1MB6GQ4wKVnTxI3XmgAtHRAfR6+kprCo9pygalmHOV2gbQ bw2Ff7drdeFXyw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:54 2025 by rpki-client