This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft File: WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json) Hash identifier: C1gpDgj7hbowJeP3Dy++pn87PKd2ILT/adwEFuuwW10= Subject key identifier: A7:E0:3F:A6:84:D5:66:77:CB:EC:95:2E:0D:9C:90:DD:72:64:BE:68 Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB Certificate issuer: /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb Certificate serial: 019AF2ADACCFFF6879075ECD9B95D79073F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft Manifest number: 0267 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: 8JpTC9bs77r30V6XDEwGXyqY4dEdjyqsgadpzE/FdlY=) 2: yJQwQMARRrVe9vIkjsREE8o5TT8.roa (hash: eXLzlsDPHHeDqRfh3yuG7C5MD8Da8VfpIofRm28xfrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ac:cf:ff:68:79:07:5e:cd:9b:95:d7:90:73:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=a7e03fa684d56677cbec952e0d9c90dd7264be68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:43:95:7f:7e:62:f2:c8:58:be:de:5a:f2: 0b:d4:17:f3:9a:8c:88:f5:f7:b7:be:dc:e6:da:3e: c8:31:64:aa:09:a8:8b:46:c4:3d:01:21:07:c5:90: a9:69:f7:99:13:03:0d:6a:2e:29:64:07:02:26:c2: d1:96:8c:21:bc:19:00:c0:0c:07:4f:b3:76:0b:4a: 11:94:6d:b7:4f:f8:45:30:08:35:b7:d0:ba:65:99: 36:17:2d:41:a4:8b:c0:db:fe:ae:6d:a7:74:24:cf: d2:9f:5b:1a:8a:f4:3f:1c:81:54:72:fc:11:cf:56: ab:0a:ae:7c:50:30:ff:87:8f:69:73:fe:bd:b6:fd: 72:bb:ac:df:17:82:52:8d:79:2f:ac:fe:8d:7d:3a: fa:2b:39:10:ec:8a:b8:a2:bb:5b:80:f8:f5:dc:86: 51:a1:14:b6:f3:26:95:11:63:b2:e3:ad:d8:8a:34: d6:bd:6d:74:d8:4a:50:72:46:f1:7b:64:9c:8f:1a: 97:d0:19:17:ce:ca:95:10:9c:09:b9:e3:a4:3d:e7: a9:b0:63:16:fb:d0:a9:5d:6e:da:21:66:93:fd:a5: c2:c8:05:da:31:ba:77:f6:df:5e:67:a4:90:42:01: f1:61:1d:ba:9d:5b:c8:01:8a:5f:2b:77:06:15:8f: fb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E0:3F:A6:84:D5:66:77:CB:EC:95:2E:0D:9C:90:DD:72:64:BE:68 X509v3 Authority Key Identifier: keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9f:4a:c8:35:3f:47:26:ca:6c:1b:52:49:89:37:52:0a:6e: 87:da:7e:ea:35:5e:b2:b6:9c:25:6a:1a:3b:cc:c9:a1:3f:d4: 7a:6f:dd:ea:03:2c:93:d5:58:7a:cb:01:31:23:d3:85:58:3d: 57:d7:8b:fe:b7:1f:0e:5f:03:9d:1c:9a:6f:9e:b4:3d:e4:43: 9b:e5:33:56:d9:e2:42:50:f9:4d:29:45:55:aa:ef:d9:41:2e: e2:23:17:e8:05:2c:77:85:c7:84:88:20:c6:03:f5:e9:29:a6: a3:d8:af:ca:26:bf:c9:96:fa:81:69:4a:37:5b:84:71:a9:f9: 72:82:62:8e:70:03:68:f0:e3:74:9e:a6:8a:2a:62:c6:d7:50: 25:08:45:ef:9b:f9:4f:cb:08:44:ac:ed:4e:e1:3c:38:ac:f2: fd:56:5f:ed:e6:12:d9:cb:c8:7a:c8:14:1d:b5:ec:42:79:f9: b8:62:4a:6f:e0:ca:7e:82:25:18:7d:f1:16:33:f2:0f:ac:59: 73:f3:7b:c3:b6:c7:fb:5d:86:2b:53:b8:69:5f:4e:9a:f9:66: 58:b2:eb:7c:13:c2:0f:a8:03:9c:96:a4:1e:79:ce:28:3c:cd: 49:e5:ca:92:24:f1:62:0d:81:a4:b6:a9:59:47:ad:e1:bb:e2: 86:e4:1a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrazP/2h5B17Nm5XXkHP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMjUyOGRjMDc1ZDUxZTczZWUwZDA5MGUxZDJhMWY1Y2Zh ZThmZmIwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EyhhN2UwM2ZhNjg0ZDU2Njc3Y2JlYzk1MmUwZDljOTBkZDcyNjRiZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhDlX9+YvLIWL7eWvIL1BfzmoyI 9fe3vtzm2j7IMWSqCaiLRsQ9ASEHxZCpafeZEwMNai4pZAcCJsLRlowhvBkAwAwH T7N2C0oRlG23T/hFMAg1t9C6ZZk2Fy1BpIvA2/6ubad0JM/Sn1saivQ/HIFUcvwR z1arCq58UDD/h49pc/69tv1yu6zfF4JSjXkvrP6NfTr6KzkQ7Iq4ortbgPj13IZR oRS28yaVEWOy463YijTWvW102EpQckbxe2ScjxqX0BkXzsqVEJwJueOkPeepsGMW +9CpXW7aIWaT/aXCyAXaMbp39t9eZ6SQQgHxYR26nVvIAYpfK3cGFY/7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfgP6aE1WZ3y+yVLg2ckN1yZL5oMB8GA1UdIwQY MBaAFFslKNwHXVHnPuDQkOHSofXPro/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYt YzI5NDEyMTRjYjk2LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYtYzI5NDEyMTRjYjk2 LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf59KyDU/ RybKbBtSSYk3Ugpuh9p+6jVesracJWoaO8zJoT/Uem/d6gMsk9VYessBMSPThVg9 V9eL/rcfDl8DnRyab560PeRDm+UzVtniQlD5TSlFVarv2UEu4iMX6AUsd4XHhIgg xgP16Smmo9ivyia/yZb6gWlKN1uEcan5coJijnADaPDjdJ6miipixtdQJQhF75v5 T8sIRKztTuE8OKzy/VZf7eYS2cvIesgUHbXsQnn5uGJKb+DKfoIlGH3xFjPyD6xZ c/N7w7bH+12GK1O4aV9OmvlmWLLrfBPCD6gDnJakHnnOKDzNSeXKkiTxYg2BpLap WUet4bvihuQaQA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:57 2025 by rpki-client