This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft File: wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft (raw, json) Hash identifier: +aMwo95EF2SGysAzXJlwrRTnVmXu7/2eiGuB7B7kGGE= Subject key identifier: B2:66:B4:DC:64:D4:D1:4F:B2:E6:54:13:97:1C:30:E4:B4:7D:2B:F0 Authority key identifier: C3:25:EF:8E:97:0C:C0:8B:8C:2A:DF:8F:63:C9:C1:ED:02:07:16:64 Certificate issuer: /CN=c325ef8e970cc08b8c2adf8f63c9c1ed02071664 Certificate serial: 019AF0BEFB91CC445D3084576E8BEAB48CE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft Manifest number: 0147 Signing time: Fri 05 Dec 2025 23:00:39 +0000 Manifest this update: Fri 05 Dec 2025 23:00:39 +0000 Manifest next update: Sat 06 Dec 2025 23:00:39 +0000 Files and hashes: 1: wyXvjpcMwIuMKt-PY8nB7QIHFmQ.crl (hash: pC/O74qx3F1OTkc5X4KB9chRgXRVcWE1s1G68q8jO0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:fb:91:cc:44:5d:30:84:57:6e:8b:ea:b4:8c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c325ef8e970cc08b8c2adf8f63c9c1ed02071664 Validity Not Before: Dec 5 23:00:39 2025 GMT Not After : Dec 6 23:00:39 2025 GMT Subject: CN=b266b4dc64d4d14fb2e65413971c30e4b47d2bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:2b:dc:b7:15:c1:48:4d:29:0a:f2:20:5f: 95:4f:0f:c7:25:44:70:2d:ff:c4:bd:66:3f:7b:d2: f0:e0:9a:da:b1:fa:4c:72:35:50:ea:b3:ac:a1:c7: 73:db:6a:bb:59:d6:96:c8:b9:18:31:be:ca:8b:b7: e0:28:29:a8:8a:c9:08:3a:2f:3e:18:88:4b:2b:d8: 76:33:6f:ee:f9:ea:59:64:de:90:ea:2c:dc:0f:1e: c5:5b:7d:75:7c:50:a1:7f:e2:fd:a6:e7:b0:e9:1b: e2:6b:e3:18:c7:80:5d:3b:88:35:04:8f:7e:de:fb: cc:49:8a:5a:46:77:bf:6d:b0:c2:f4:0e:09:23:d0: b6:32:2e:f1:03:1e:99:dc:1a:6c:ca:b2:53:37:bf: 22:e4:a1:75:a9:89:f5:c7:c6:4a:ca:56:90:0a:51: 0a:76:db:f5:18:bb:e5:f9:29:c2:ad:c1:ee:4f:1c: 3b:f6:10:8e:db:f5:9e:ff:db:87:67:7f:43:23:82: 64:05:26:12:4c:17:9e:66:8d:40:82:a1:ca:13:d4: 1f:06:3a:5d:38:53:0d:a0:1e:f6:b6:ac:67:30:4e: 39:eb:c9:3c:1b:af:6b:d5:42:be:f1:31:2c:f6:37: 7b:b4:20:42:d8:23:45:2e:3c:ac:ad:4b:d5:98:58: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:66:B4:DC:64:D4:D1:4F:B2:E6:54:13:97:1C:30:E4:B4:7D:2B:F0 X509v3 Authority Key Identifier: keyid:C3:25:EF:8E:97:0C:C0:8B:8C:2A:DF:8F:63:C9:C1:ED:02:07:16:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/787163-e36a-4d21-940e-daf288c935f2/1/wyXvjpcMwIuMKt-PY8nB7QIHFmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:96:c7:3f:d2:9c:8c:a0:83:12:d1:ed:2d:ca:13:72:ea:c8: cc:80:b9:e9:69:59:04:03:35:c1:69:9c:c5:c4:7a:b5:e5:73: 51:49:73:2e:35:96:0c:7d:76:8c:0d:54:28:cf:e9:83:03:6d: ab:2c:4d:48:b7:1c:5c:0e:cc:4a:2c:20:d9:db:6d:05:cb:e0: 76:2f:c9:da:24:f3:95:d2:51:9f:ea:c7:87:b8:d1:c9:49:94: 02:9b:a2:5b:ce:bb:58:0e:90:fb:ee:04:45:cc:8c:41:45:cd: d8:57:3d:9e:a9:c0:0a:6d:8a:c4:b2:ca:13:bb:db:ea:9d:fe: 1a:b4:de:59:47:04:4e:2c:c3:2f:6b:0d:87:c6:46:40:55:b7: 87:07:c5:fe:fc:29:4e:c0:0c:75:21:8f:29:3b:78:03:d8:cf: 33:ff:9f:ab:84:88:75:7f:bc:56:17:0e:80:65:39:96:45:8c: 68:7d:b4:9b:23:99:8e:fa:9c:c6:bf:aa:51:a7:7f:63:2d:3a: ad:9f:b3:db:4d:02:67:30:35:90:42:7e:3c:a0:de:d8:39:bf: e9:07:4c:ba:7f:51:db:d6:97:fb:5d:67:36:78:ed:f4:61:10: c8:a4:42:ba:54:cc:9a:a3:3a:8b:c4:c0:36:c0:09:ff:09:8a: 09:5f:35:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvuRzERdMIRXbovqtIzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMjVlZjhlOTcwY2MwOGI4YzJhZGY4ZjYzYzljMWVkMDIw NzE2NjQwHhcNMjUxMjA1MjMwMDM5WhcNMjUxMjA2MjMwMDM5WjAzMTEwLwYDVQQD EyhiMjY2YjRkYzY0ZDRkMTRmYjJlNjU0MTM5NzFjMzBlNGI0N2QyYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIwr3LcVwUhNKQryIF+VTw/HJURw Lf/EvWY/e9Lw4JrasfpMcjVQ6rOsocdz22q7WdaWyLkYMb7Ki7fgKCmoiskIOi8+ GIhLK9h2M2/u+epZZN6Q6izcDx7FW311fFChf+L9puew6Rvia+MYx4BdO4g1BI9+ 3vvMSYpaRne/bbDC9A4JI9C2Mi7xAx6Z3BpsyrJTN78i5KF1qYn1x8ZKylaQClEK dtv1GLvl+SnCrcHuTxw79hCO2/We/9uHZ39DI4JkBSYSTBeeZo1AgqHKE9QfBjpd OFMNoB72tqxnME4568k8G69r1UK+8TEs9jd7tCBC2CNFLjysrUvVmFhRKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJmtNxk1NFPsuZUE5ccMOS0fSvwMB8GA1UdIwQY MBaAFMMl746XDMCLjCrfj2PJwe0CBxZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lYdmpwY013SXVNS3QtUFk4bkI3UUlIRm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODcxNjMtZTM2YS00ZDIxLTk0MGUt ZGFmMjg4YzkzNWYyLzEvd3lYdmpwY013SXVNS3QtUFk4bkI3UUlIRm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODcxNjMtZTM2YS00ZDIxLTk0MGUtZGFmMjg4YzkzNWYy LzEvd3lYdmpwY013SXVNS3QtUFk4bkI3UUlIRm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5bHP9Kc jKCDEtHtLcoTcurIzIC56WlZBAM1wWmcxcR6teVzUUlzLjWWDH12jA1UKM/pgwNt qyxNSLccXA7MSiwg2dttBcvgdi/J2iTzldJRn+rHh7jRyUmUApuiW867WA6Q++4E RcyMQUXN2Fc9nqnACm2KxLLKE7vb6p3+GrTeWUcETizDL2sNh8ZGQFW3hwfF/vwp TsAMdSGPKTt4A9jPM/+fq4SIdX+8VhcOgGU5lkWMaH20myOZjvqcxr+qUad/Yy06 rZ+z200CZzA1kEJ+PKDe2Dm/6QdMun9R29aX+11nNnjt9GEQyKRCulTMmqM6i8TA NsAJ/wmKCV81uA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:12 2025 by rpki-client