This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json) Hash identifier: 2d9AQPyNb0tdeYjOyl7dSfCgQLHTUXdMkUy80/A8feU= Subject key identifier: 77:72:79:9F:E1:3C:0C:DE:99:4D:34:AD:4B:62:AE:FA:40:15:2B:04 Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd Certificate serial: 019AF540F8F1C8EDBB67B51BB67039D36723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft Manifest number: 164D Signing time: Sat 06 Dec 2025 20:01:07 +0000 Manifest this update: Sat 06 Dec 2025 20:01:07 +0000 Manifest next update: Sun 07 Dec 2025 20:01:07 +0000 Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=) 2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: 9LBeqNp6Lzi4OkJt7aU1c2llT2P47QHCsEGgpeG2ewk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f8:f1:c8:ed:bb:67:b5:1b:b6:70:39:d3:67:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd Validity Not Before: Dec 6 20:01:07 2025 GMT Not After : Dec 7 20:01:07 2025 GMT Subject: CN=7772799fe13c0cde994d34ad4b62aefa40152b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:18:95:29:7e:4e:32:8d:b2:bd:9e:86:cd: 52:72:ff:93:0c:5c:49:e8:bc:34:1e:3c:2c:5c:3a: 1f:78:68:9d:d9:da:17:8c:87:9a:48:45:2e:ff:fe: c9:fe:94:25:4c:3b:13:92:1c:d9:80:cd:06:e7:5e: 9b:2c:11:83:92:67:a0:68:9b:2d:2b:3e:7d:aa:58: 11:45:ea:a4:7b:f3:47:6c:a7:5b:88:99:fc:5b:50: e8:cc:ca:dd:63:a4:be:f8:1d:94:f5:a0:4c:89:61: 9d:7c:ce:f5:8b:68:95:11:96:a6:10:b4:93:fd:30: 61:b3:fc:8e:8b:22:f9:20:ea:75:bc:b9:95:4a:61: 15:24:e8:9b:ae:98:f0:c9:9e:1a:0c:52:8c:5c:1f: ea:8e:33:82:e4:96:c8:1c:8f:4b:65:a9:d2:fa:53: d5:1d:a6:e6:20:4c:0d:bc:24:2a:4b:7b:78:8f:49: 4c:45:ec:d9:be:aa:79:8e:93:ef:2e:28:05:32:18: 3c:6e:b4:84:d0:ce:92:85:f1:95:58:2d:b7:95:40: c1:b2:33:3d:34:99:4c:fa:17:71:7d:82:df:18:d2: 4e:59:71:d7:e5:8c:bf:a5:97:64:2a:4c:b6:9b:2f: f2:9b:55:a8:a7:d5:ac:d4:fa:18:e5:7d:de:85:4c: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:79:9F:E1:3C:0C:DE:99:4D:34:AD:4B:62:AE:FA:40:15:2B:04 X509v3 Authority Key Identifier: keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c8:62:b6:18:e3:e2:f2:48:54:63:2c:8f:8c:6c:2a:01:a9: 66:ab:7b:89:9d:83:2b:08:56:43:2e:ed:56:f5:60:cd:75:94: 14:62:93:07:30:fc:4e:e3:33:be:6e:a6:0d:81:61:d5:7c:19: 70:94:a2:a6:3a:36:01:50:eb:03:23:5a:6b:50:69:07:2a:55: 42:e0:c5:51:75:e8:2c:35:5a:c9:62:28:61:6e:02:99:8a:5d: b9:ee:7c:f5:ef:de:ca:de:ef:dc:59:cc:7a:e1:d7:ea:3e:36: 17:af:05:f5:9d:0e:62:3e:ae:47:00:6f:41:c6:38:1d:c2:81: 0d:6d:56:fa:c6:b8:d3:2b:62:a3:6a:22:f6:9d:81:71:2d:7b: 6e:f6:40:ac:cc:e7:e0:83:b9:b7:41:6f:ac:22:9b:ee:d2:cd: 86:9a:3b:5f:a8:f6:53:2b:7c:82:6e:48:bc:f3:63:e4:22:1f: 80:bf:bc:fb:57:d3:eb:36:40:06:c0:12:67:2c:73:7f:6c:e1: 27:f8:4b:31:1c:77:4b:bd:db:1d:76:77:f7:ab:09:ed:25:03: 86:b7:10:f2:f6:90:f4:38:7f:fa:eb:75:17:52:e5:1a:9a:b6: 81:b7:2a:58:76:78:3a:5d:2f:e5:ba:52:c0:f8:45:ba:0c:27: 57:a8:99:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPjxyO27Z7UbtnA502cjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWEwNDZiNDk5NzgwYWVjN2Q2MTgyZDJkNTZhNzVlYjA4 OTY4Y2QwHhcNMjUxMjA2MjAwMTA3WhcNMjUxMjA3MjAwMTA3WjAzMTEwLwYDVQQD Eyg3NzcyNzk5ZmUxM2MwY2RlOTk0ZDM0YWQ0YjYyYWVmYTQwMTUyYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zEYlSl+TjKNsr2ehs1Scv+TDFxJ 6Lw0HjwsXDofeGid2doXjIeaSEUu//7J/pQlTDsTkhzZgM0G516bLBGDkmegaJst Kz59qlgRReqke/NHbKdbiJn8W1DozMrdY6S++B2U9aBMiWGdfM71i2iVEZamELST /TBhs/yOiyL5IOp1vLmVSmEVJOibrpjwyZ4aDFKMXB/qjjOC5JbIHI9LZanS+lPV HabmIEwNvCQqS3t4j0lMRezZvqp5jpPvLigFMhg8brSE0M6ShfGVWC23lUDBsjM9 NJlM+hdxfYLfGNJOWXHX5Yy/pZdkKky2my/ym1Wop9Ws1PoY5X3ehUxApQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdyeZ/hPAzemU00rUtirvpAFSsEMB8GA1UdIwQY MBaAFFvqBGtJl4Cux9YYLS1Wp16wiWjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEt Mjk2MDIyMTVhZGQwLzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEtMjk2MDIyMTVhZGQw LzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWshithjj 4vJIVGMsj4xsKgGpZqt7iZ2DKwhWQy7tVvVgzXWUFGKTBzD8TuMzvm6mDYFh1XwZ cJSipjo2AVDrAyNaa1BpBypVQuDFUXXoLDVayWIoYW4CmYpdue589e/eyt7v3FnM euHX6j42F68F9Z0OYj6uRwBvQcY4HcKBDW1W+sa40ytio2oi9p2BcS17bvZArMzn 4IO5t0FvrCKb7tLNhpo7X6j2Uyt8gm5IvPNj5CIfgL+8+1fT6zZABsASZyxzf2zh J/hLMRx3S73bHXZ396sJ7SUDhrcQ8vaQ9Dh/+ut1F1LlGpq2gbcqWHZ4Ol0v5bpS wPhFugwnV6iZyA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:14 2025 by rpki-client