This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json) Hash identifier: uInMSnc9y51E/Zso6RKuGxmAq43ZKdj4o75tWkroMfI= Subject key identifier: 91:0C:71:C1:03:FA:31:BE:7D:36:1E:30:B8:FC:64:83:21:18:95:9F Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17 Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917 Certificate serial: 019AF12DEE2C4E756C59C2FE2DFF436AC73B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft Manifest number: 11E5 Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=) 2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: Q093V7H8FyUhTcTshpdq9CZ+FOdMq0mytWf5s9T44zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ee:2c:4e:75:6c:59:c2:fe:2d:ff:43:6a:c7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917 Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=910c71c103fa31be7d361e30b8fc64832118959f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:80:18:83:0e:7c:8a:3b:1b:1c:62:b2:28:56: 57:83:20:fa:53:fc:8e:04:e5:b1:00:48:06:f6:f7: 89:db:d1:f5:42:e8:80:ae:dd:e4:e1:77:a1:73:f4: ee:7a:ca:55:cb:a9:62:77:6f:8a:42:0e:4a:37:7d: 84:77:65:24:1d:85:dc:11:24:a1:05:69:a8:fc:e1: 79:c6:5a:9c:0f:ce:93:4c:f8:09:02:ea:c6:4f:72: 56:7c:9a:66:7b:bd:2f:ed:d5:f6:85:48:52:30:b6: 42:0f:2f:8f:a3:9a:c1:e0:be:d4:a6:cd:3c:a9:5c: 0c:1c:52:76:9e:4b:e5:ef:e8:fa:9c:2c:c2:d3:38: f8:f8:80:26:36:9a:e1:2d:d3:ca:37:52:cd:7f:77: b5:84:0e:7f:46:36:27:3d:db:5e:ee:c7:9c:5b:96: f9:65:19:47:b9:c4:d4:00:b9:47:d6:4e:a7:97:0e: 1a:9a:3b:27:dc:a9:8c:5f:9c:3b:11:bb:97:33:c5: e1:ad:d3:e9:a5:65:75:63:77:ec:67:d3:3e:01:c7: c6:76:0a:d1:c4:81:82:ac:e0:4e:e8:e5:0e:53:50: 3c:17:ae:36:a3:c7:d1:77:15:32:13:1b:00:f3:73: 59:7d:7b:04:57:ce:d4:c7:70:0b:a1:a1:06:d9:a7: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0C:71:C1:03:FA:31:BE:7D:36:1E:30:B8:FC:64:83:21:18:95:9F X509v3 Authority Key Identifier: keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:21:87:1a:6c:1b:36:84:fc:54:6c:f6:51:9d:56:d6:8d:10: fc:9f:da:d1:b0:d6:13:d6:e5:7f:60:5f:f0:14:58:89:b4:d0: 83:93:11:0e:2b:aa:77:ca:bc:58:9c:e8:94:9e:75:33:d0:97: f1:bd:39:c9:0c:4e:37:ec:33:ee:25:fa:4c:52:94:7e:f0:36: 7a:12:73:2b:97:89:e2:fd:a0:25:16:c1:e4:35:03:e3:db:2f: 69:11:6c:c9:f6:4a:88:93:76:66:c1:5c:92:2a:90:74:36:ea: cd:28:a0:2f:de:34:0a:ae:de:fe:c6:f0:81:5d:cd:c2:0c:91: 2c:79:a2:50:db:b7:26:82:03:e8:9d:31:8a:fe:83:a0:c1:55: dd:4d:03:52:eb:a7:c0:6a:8a:5f:6c:2d:a0:3a:5d:4d:76:7d: f9:32:16:f5:a6:19:1b:56:c0:8f:ed:3f:2a:67:ae:75:99:ab: 95:94:f9:13:bd:3e:90:9f:26:da:c4:3e:30:77:bf:96:7f:9c: fc:b8:84:b3:fb:0e:b9:68:ad:6f:a2:d5:c7:37:cb:60:4c:1e: e6:56:b1:90:e1:b2:27:e5:09:3c:ec:5d:17:6e:f0:ec:1a:b0: 1d:24:57:ab:86:73:c1:e8:da:04:76:97:26:51:b2:ab:90:e9: e8:5c:5c:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe4sTnVsWcL+Lf9Dasc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2U1OWQxYWY4MzBjOTRiYThlYTExY2Y4ZmVjNmRkOWMw M2I5MTcwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD Eyg5MTBjNzFjMTAzZmEzMWJlN2QzNjFlMzBiOGZjNjQ4MzIxMTg5NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YAYgw58ijsbHGKyKFZXgyD6U/yO BOWxAEgG9veJ29H1QuiArt3k4Xehc/TuespVy6lid2+KQg5KN32Ed2UkHYXcESSh BWmo/OF5xlqcD86TTPgJAurGT3JWfJpme70v7dX2hUhSMLZCDy+Po5rB4L7Ups08 qVwMHFJ2nkvl7+j6nCzC0zj4+IAmNprhLdPKN1LNf3e1hA5/RjYnPdte7secW5b5 ZRlHucTUALlH1k6nlw4amjsn3KmMX5w7EbuXM8XhrdPppWV1Y3fsZ9M+AcfGdgrR xIGCrOBO6OUOU1A8F642o8fRdxUyExsA83NZfXsEV87Ux3ALoaEG2afLXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEMccED+jG+fTYeMLj8ZIMhGJWfMB8GA1UdIwQY MBaAFMLOWdGvgwyUuo6hHPj+xt2cA7kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80NDIyMmUtNTY4ZS00YzQzLThkYzgt YTU0YmJjMzRjY2U5LzEvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80NDIyMmUtNTY4ZS00YzQzLThkYzgtYTU0YmJjMzRjY2U5 LzEvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCGHGmwb NoT8VGz2UZ1W1o0Q/J/a0bDWE9blf2Bf8BRYibTQg5MRDiuqd8q8WJzolJ51M9CX 8b05yQxON+wz7iX6TFKUfvA2ehJzK5eJ4v2gJRbB5DUD49svaRFsyfZKiJN2ZsFc kiqQdDbqzSigL940Cq7e/sbwgV3NwgyRLHmiUNu3JoID6J0xiv6DoMFV3U0DUuun wGqKX2wtoDpdTXZ9+TIW9aYZG1bAj+0/KmeudZmrlZT5E70+kJ8m2sQ+MHe/ln+c /LiEs/sOuWitb6LVxzfLYEwe5laxkOGyJ+UJPOxdF27w7BqwHSRXq4ZzwejaBHaX JlGyq5Dp6Fxcaw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:19 2025 by rpki-client