This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json) Hash identifier: gIo2445U1d4zzf7arz/Ygk4Qn4g1jUKm+uVV+ML1E5k= Subject key identifier: AA:EA:E8:7D:26:63:71:CC:9B:1F:EE:36:9D:14:0E:72:FE:CF:D5:AF Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24 Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24 Certificate serial: 019AF276DC450A2E8AA8979424242197AC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft Manifest number: 05AB Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: NnNUuq2ngRUPwmXQY/DG5YUi6tEb/3jifb1VoWvd9V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:dc:45:0a:2e:8a:a8:97:94:24:24:21:97:ac:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24 Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=aaeae87d266371cc9b1fee369d140e72fecfd5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:2f:1c:bd:01:6f:f9:46:47:76:4f:6d:bd: d9:95:4e:53:ed:d8:c9:b6:f8:74:d2:9c:ac:e9:35: d5:71:14:81:e6:e8:89:7c:22:93:e0:f9:8e:25:92: f9:46:d7:1d:ef:b5:fa:33:19:bb:7f:0f:33:54:58: b1:91:53:0e:12:47:0f:c2:70:a0:20:73:2e:dc:78: 66:a3:b4:b3:fd:73:ef:b9:7d:f3:03:ea:33:48:00: ba:4d:29:f5:dd:0d:0f:38:f8:f8:20:4f:e7:9d:50: 81:c6:9b:bc:88:73:0e:d5:cd:81:63:61:aa:0b:97: 7d:2a:56:69:58:ec:f1:a8:1d:67:c3:9e:86:f6:1e: 44:f5:26:f9:4d:c1:e0:e1:12:96:fe:d7:d3:bc:fa: 36:6e:83:ca:a9:35:4a:db:d6:5f:c1:df:90:f1:24: bf:cb:ae:0b:43:44:62:67:59:6b:cd:8e:f4:ad:2a: 06:5b:45:cc:11:b9:d9:c6:f8:43:3a:d4:fc:33:ad: cf:3d:dd:4d:d4:b4:ac:90:7d:07:53:64:e3:ed:ec: 2d:a1:e0:d5:ca:3e:ab:c0:8c:70:0d:3b:9e:83:9c: 13:a7:86:d4:e7:34:b1:f6:ee:fa:8f:68:df:3e:c8: 7e:f1:cc:ee:ae:42:1e:a3:1c:a9:7b:64:ac:03:9a: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:E8:7D:26:63:71:CC:9B:1F:EE:36:9D:14:0E:72:FE:CF:D5:AF X509v3 Authority Key Identifier: keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0b:81:83:1e:63:bf:2e:75:52:18:de:7f:ff:b4:43:56:53: 23:76:48:dc:f8:4e:46:1b:a8:0e:af:e1:8b:d7:02:56:5f:b1: 85:61:61:c5:2a:8e:0d:ea:f1:57:38:b5:0c:40:e2:80:04:0a: 06:b9:5c:09:d5:d7:c9:b1:65:2e:dd:d3:55:1f:a7:4f:78:53: 46:48:1c:f6:d3:09:5e:4e:3a:ec:f7:ad:1a:3d:46:19:ba:01: cc:a6:e6:2d:60:ab:ad:c1:2c:fc:b0:97:89:04:df:31:bb:79: de:b8:4d:ad:a2:5e:56:4e:cd:93:fa:11:39:a6:46:37:50:f5: 25:98:88:30:d0:4a:4e:58:20:ae:a5:4d:c1:2e:1b:20:b5:40: f4:9c:75:ef:47:91:3f:3c:38:27:4d:e2:cb:f5:a1:49:b3:83: 35:f1:91:f5:6f:3b:ff:f1:b6:42:fd:fa:bc:6a:4e:73:33:78: 05:56:4c:f3:ed:b9:d1:b8:0e:22:81:37:7c:ba:49:bc:94:8e: c5:53:b4:68:92:50:c1:c1:43:e8:04:03:42:7a:b3:43:46:fa: 6a:8c:47:92:dc:aa:dd:6e:39:20:b2:e1:e2:1e:db:0c:93:85: 5c:ae:6c:e8:02:a1:c3:d4:af:4d:05:94:a9:2e:70:54:df:d5: bb:1f:77:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtxFCi6KqJeUJCQhl6wIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNWI3N2Q2NDU4ZmZhZDk4NGU1MWRmMzM0ZjNlOGY5ODM4 MmFjMjQwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EyhhYWVhZTg3ZDI2NjM3MWNjOWIxZmVlMzY5ZDE0MGU3MmZlY2ZkNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W0vHL0Bb/lGR3ZPbb3ZlU5T7djJ tvh00pys6TXVcRSB5uiJfCKT4PmOJZL5Rtcd77X6Mxm7fw8zVFixkVMOEkcPwnCg IHMu3Hhmo7Sz/XPvuX3zA+ozSAC6TSn13Q0POPj4IE/nnVCBxpu8iHMO1c2BY2Gq C5d9KlZpWOzxqB1nw56G9h5E9Sb5TcHg4RKW/tfTvPo2boPKqTVK29Zfwd+Q8SS/ y64LQ0RiZ1lrzY70rSoGW0XMEbnZxvhDOtT8M63PPd1N1LSskH0HU2Tj7ewtoeDV yj6rwIxwDTueg5wTp4bU5zSx9u76j2jfPsh+8czurkIeoxype2SsA5p8ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrq6H0mY3HMmx/uNp0UDnL+z9WvMB8GA1UdIwQY MBaAFFtbd9ZFj/rZhOUd8zTz6PmDgqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWIt ZjNkOWY2M2Q1ZDk3LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWItZjNkOWY2M2Q1ZDk3 LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQuBgx5j vy51Uhjef/+0Q1ZTI3ZI3PhORhuoDq/hi9cCVl+xhWFhxSqODerxVzi1DEDigAQK BrlcCdXXybFlLt3TVR+nT3hTRkgc9tMJXk467PetGj1GGboBzKbmLWCrrcEs/LCX iQTfMbt53rhNraJeVk7Nk/oROaZGN1D1JZiIMNBKTlggrqVNwS4bILVA9Jx170eR Pzw4J03iy/WhSbODNfGR9W87//G2Qv36vGpOczN4BVZM8+250bgOIoE3fLpJvJSO xVO0aJJQwcFD6AQDQnqzQ0b6aoxHktyq3W45ILLh4h7bDJOFXK5s6AKhw9SvTQWU qS5wVN/Vux93ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:39 2025 by rpki-client