This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json) Hash identifier: lsGp8EOcAXnkh5CaWHeaiRPBoonct/gVk/zVjMbCdig= Subject key identifier: 39:26:9B:7E:ED:34:D5:22:7D:89:44:37:5E:0F:62:93:2B:AE:D7:CC Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08 Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108 Certificate serial: 019AFBB0F38E660674D8D4CB8883182669D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft Manifest number: 1385 Signing time: Mon 08 Dec 2025 02:01:09 +0000 Manifest this update: Mon 08 Dec 2025 02:01:09 +0000 Manifest next update: Tue 09 Dec 2025 02:01:09 +0000 Files and hashes: 1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=) 2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: 4tB+r+ar4en9N65ogncGLm7bBKaZPfCM+gvnsUBBxAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:f3:8e:66:06:74:d8:d4:cb:88:83:18:26:69:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108 Validity Not Before: Dec 8 02:01:09 2025 GMT Not After : Dec 9 02:01:09 2025 GMT Subject: CN=39269b7eed34d5227d8944375e0f62932baed7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:62:14:20:8f:4f:f5:24:e0:b5:3e:bc:7e: d6:01:68:57:bd:17:71:91:8e:12:ff:09:34:76:30: f0:bf:61:d6:2c:07:92:1b:e8:75:65:d8:32:21:b5: d2:c9:f8:78:5b:87:83:00:ff:73:8a:26:e1:68:dc: f8:43:dc:55:5f:59:c1:47:74:a4:52:25:2c:ee:29: 2d:ac:dc:10:f2:6f:83:ee:2c:71:87:5b:a4:9e:c2: 3f:b6:91:aa:54:8e:87:7e:6a:3c:3f:ba:2d:27:e4: 34:b8:08:2c:dd:c3:1c:77:50:d2:24:ef:b2:d7:8d: 77:df:1e:56:a5:fb:05:fd:7c:f8:7b:b1:13:92:13: 82:f2:57:d3:2b:5f:97:6e:24:bf:5f:d7:c1:7b:81: 9a:49:04:c5:75:92:79:87:ca:90:4e:af:98:37:fd: e0:a9:a3:a0:2e:07:a2:ee:ac:fb:67:ec:5f:22:58: 87:10:95:9e:67:47:d2:d5:9d:91:f3:80:dd:bc:11: 79:6f:67:e6:09:3c:33:5a:5b:22:a1:d9:73:9d:23: 16:ec:8b:0c:c5:1f:aa:25:3e:b1:de:85:98:35:e7: f4:e2:8f:cc:c0:79:82:f4:cd:40:7a:7b:04:0e:c7: cc:96:3d:75:20:ae:50:45:7a:d9:23:1a:bb:b3:eb: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:26:9B:7E:ED:34:D5:22:7D:89:44:37:5E:0F:62:93:2B:AE:D7:CC X509v3 Authority Key Identifier: keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:61:3c:a6:d3:3f:f4:be:f5:8d:06:00:bc:0a:f3:af:c8:07: 7a:ac:7a:5c:69:4d:b2:da:7a:95:2b:c8:5c:5c:94:ac:51:e5: a1:9e:77:32:51:87:66:48:9f:45:97:72:66:23:f7:55:ce:5b: 82:d2:49:30:03:3d:b9:1c:f3:24:87:64:7c:35:eb:f4:c1:76: 56:a3:b8:34:fe:4a:dd:11:5a:94:c4:09:4f:2b:0f:aa:09:08: 22:3a:86:4e:0a:1e:50:f1:d5:71:24:8e:eb:21:2c:ce:b9:54: 6d:4f:a9:25:28:a3:1d:7f:d1:eb:26:db:9c:47:b6:21:ba:1a: c8:82:ec:9c:50:85:3d:8f:78:bd:d6:c7:95:64:17:9c:07:90: 41:2c:7d:0d:2d:6d:e3:ee:2d:85:90:84:f6:7e:19:8a:82:5d: 1b:45:a2:aa:02:e7:66:a5:ef:29:48:2e:e6:ef:99:da:a2:64: 8a:7d:e6:dd:42:bb:7f:f7:30:ab:ad:a4:df:85:80:8b:1b:f7: ad:d5:3b:37:28:52:c2:25:90:31:44:f8:f3:29:16:5b:e6:22: 83:5c:6c:92:03:71:40:56:0d:c5:2a:15:ff:89:f8:10:1e:2d: c9:a1:41:a3:6e:9d:e5:e8:e0:9b:29:63:e3:7b:2e:7d:7d:53: 56:dd:23:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sPOOZgZ02NTLiIMYJmnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjYzMzYyZmVkZWUxYzg5MTM1ZDU0MzRkMzdiNzM3NWVk NWExMDgwHhcNMjUxMjA4MDIwMTA5WhcNMjUxMjA5MDIwMTA5WjAzMTEwLwYDVQQD EygzOTI2OWI3ZWVkMzRkNTIyN2Q4OTQ0Mzc1ZTBmNjI5MzJiYWVkN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi9iFCCPT/Uk4LU+vH7WAWhXvRdx kY4S/wk0djDwv2HWLAeSG+h1ZdgyIbXSyfh4W4eDAP9ziibhaNz4Q9xVX1nBR3Sk UiUs7iktrNwQ8m+D7ixxh1uknsI/tpGqVI6Hfmo8P7otJ+Q0uAgs3cMcd1DSJO+y 14133x5WpfsF/Xz4e7ETkhOC8lfTK1+XbiS/X9fBe4GaSQTFdZJ5h8qQTq+YN/3g qaOgLgei7qz7Z+xfIliHEJWeZ0fS1Z2R84DdvBF5b2fmCTwzWlsiodlznSMW7IsM xR+qJT6x3oWYNef04o/MwHmC9M1AensEDsfMlj11IK5QRXrZIxq7s+usxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkmm37tNNUifYlEN14PYpMrrtfMMB8GA1UdIwQY MBaAFFv2M2L+3uHIkTXVQ003tzde1aEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMt NmFkMGI2OWIyMDhmLzEvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMtNmFkMGI2OWIyMDhm LzEvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWE8ptM/ 9L71jQYAvArzr8gHeqx6XGlNstp6lSvIXFyUrFHloZ53MlGHZkifRZdyZiP3Vc5b gtJJMAM9uRzzJIdkfDXr9MF2VqO4NP5K3RFalMQJTysPqgkIIjqGTgoeUPHVcSSO 6yEszrlUbU+pJSijHX/R6ybbnEe2IboayILsnFCFPY94vdbHlWQXnAeQQSx9DS1t 4+4thZCE9n4ZioJdG0WiqgLnZqXvKUgu5u+Z2qJkin3m3UK7f/cwq62k34WAixv3 rdU7NyhSwiWQMUT48ykWW+Yig1xskgNxQFYNxSoV/4n4EB4tyaFBo26d5ejgmylj 43sufX1TVt0jGg== -----END CERTIFICATE-----Generated at Mon Dec 8 10:22:06 2025 by rpki-client