This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json) Hash identifier: bli82e8QFIdNwPMNFwYvfREA8i+KR0UwtZReVAq7ZWE= Subject key identifier: 87:C1:9D:73:CC:01:64:D0:CC:89:0E:32:B3:87:86:2C:09:41:D1:7A Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019AF1D267FD6D5C4725FCCCF6AF91F43908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft Manifest number: 0DFD Signing time: Sat 06 Dec 2025 04:01:29 +0000 Manifest this update: Sat 06 Dec 2025 04:01:29 +0000 Manifest next update: Sun 07 Dec 2025 04:01:29 +0000 Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=) 2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: AN3rmKosCecwjkYmMzI64Uwaax1J/1HFbJqftuX0BXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:67:fd:6d:5c:47:25:fc:cc:f6:af:91:f4:39:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Dec 6 04:01:29 2025 GMT Not After : Dec 7 04:01:29 2025 GMT Subject: CN=87c19d73cc0164d0cc890e32b387862c0941d17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:1d:8f:ba:90:4a:16:74:ea:2e:b6:a9:84: 84:ed:48:5a:9b:34:38:8d:43:25:94:25:8b:ff:93: 9f:19:5a:45:a4:ec:26:b5:18:bd:21:f8:d6:79:57: 04:09:8d:01:7e:37:15:36:b4:13:77:ae:ff:3c:4c: 3b:e4:0e:f8:19:37:56:07:06:24:9e:dc:ae:e4:fb: ae:21:9c:0c:fe:83:ff:c6:b1:4b:06:f3:f5:be:55: 04:57:5f:a8:53:6f:44:0a:a6:47:fb:b9:1d:79:50: a3:79:92:2d:8c:8c:07:9f:4c:3b:3c:bd:8c:95:27: c6:bc:e8:21:03:1d:a9:d7:95:08:81:bf:85:d5:5b: 60:f0:0b:42:e5:21:5f:23:c0:71:43:d6:41:f1:18: e5:1a:55:af:fb:44:df:26:8b:f2:a4:bd:d3:4e:1c: 7f:84:1e:95:2d:45:3b:e9:2c:24:d8:07:82:fd:24: d3:d9:50:f8:4c:4c:bf:8b:92:51:6f:0e:48:06:9c: 72:b9:45:58:8c:3e:af:4f:8f:cb:83:dc:f0:59:cd: 68:68:7c:9b:3f:ef:a0:75:37:26:74:bb:29:3c:a1: 77:ce:0f:b2:63:22:1a:bd:15:9e:d3:ac:61:fa:ba: 5e:b9:28:bc:7e:da:fe:f4:80:a4:87:cd:4b:67:62: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C1:9D:73:CC:01:64:D0:CC:89:0E:32:B3:87:86:2C:09:41:D1:7A X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a6:90:09:4f:2e:5d:96:11:ec:ef:eb:3e:d0:0e:06:60:00: 5d:23:71:bb:42:4d:ee:94:d7:8e:65:1b:f4:ee:bc:10:c2:09: 41:da:f6:e1:d2:03:a3:30:d3:5d:92:3f:fd:d3:31:a7:96:0a: a0:f3:a6:60:72:ad:7d:d1:38:c5:aa:3e:a6:d8:0a:71:11:58: 93:80:e6:6e:bb:00:1c:87:e8:72:f5:d3:7a:9b:50:46:f9:ce: 99:8c:01:ed:cf:5c:66:e4:3d:ef:07:6b:36:59:a5:ce:41:9f: 51:5a:76:74:77:d4:fb:02:6a:65:35:1d:73:84:28:7e:fe:b4: 41:5e:a8:ef:64:48:67:ff:f8:04:2c:88:7d:53:a1:52:65:df: 73:28:c8:ea:23:a6:c3:b0:c9:14:34:7c:cd:a0:81:5e:95:de: 94:e9:35:77:e7:01:e6:07:47:be:ab:8f:a9:e9:3c:bd:55:4b: 57:c0:54:00:b3:1b:99:28:1f:9c:8c:b2:ac:38:c0:10:31:b1: 91:bc:f3:0d:6f:26:23:9b:b3:9b:45:d9:ef:4e:52:e8:44:b9: d4:bd:09:90:9f:26:30:7c:42:06:c5:82:bc:82:07:fd:c6:d8: c9:a4:48:60:29:11:58:6e:bc:96:ae:ee:91:d0:1c:ae:43:3e: 3b:60:5d:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mf9bVxHJfzM9q+R9DkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjUxMjA2MDQwMTI5WhcNMjUxMjA3MDQwMTI5WjAzMTEwLwYDVQQD Eyg4N2MxOWQ3M2NjMDE2NGQwY2M4OTBlMzJiMzg3ODYyYzA5NDFkMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqIdj7qQShZ06i62qYSE7UhamzQ4 jUMllCWL/5OfGVpFpOwmtRi9IfjWeVcECY0BfjcVNrQTd67/PEw75A74GTdWBwYk ntyu5PuuIZwM/oP/xrFLBvP1vlUEV1+oU29ECqZH+7kdeVCjeZItjIwHn0w7PL2M lSfGvOghAx2p15UIgb+F1Vtg8AtC5SFfI8BxQ9ZB8RjlGlWv+0TfJovypL3TThx/ hB6VLUU76Swk2AeC/STT2VD4TEy/i5JRbw5IBpxyuUVYjD6vT4/Lg9zwWc1oaHyb P++gdTcmdLspPKF3zg+yYyIavRWe06xh+rpeuSi8ftr+9ICkh81LZ2INuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfBnXPMAWTQzIkOMrOHhiwJQdF6MB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqaQCU8u XZYR7O/rPtAOBmAAXSNxu0JN7pTXjmUb9O68EMIJQdr24dIDozDTXZI//dMxp5YK oPOmYHKtfdE4xao+ptgKcRFYk4DmbrsAHIfocvXTeptQRvnOmYwB7c9cZuQ97wdr NlmlzkGfUVp2dHfU+wJqZTUdc4Qofv60QV6o72RIZ//4BCyIfVOhUmXfcyjI6iOm w7DJFDR8zaCBXpXelOk1d+cB5gdHvquPqek8vVVLV8BUALMbmSgfnIyyrDjAEDGx kbzzDW8mI5uzm0XZ705S6ES51L0JkJ8mMHxCBsWCvIIH/cbYyaRIYCkRWG68lq7u kdAcrkM+O2BdtA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:45 2025 by rpki-client