This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft File: WXIYySXnbh6YCYdfftGvqX72950.mft (raw, json) Hash identifier: NhgCJswGBfZl8NpDaGNceAik4ybQeCnIyDbqF6Y3TOo= Subject key identifier: 9F:F7:B3:8E:7F:45:B8:ED:4B:B8:50:2A:A9:7E:C8:87:EA:13:E9:3E Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d Certificate serial: 019AF20955CB731A044AC75D11F27644DB76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft Manifest number: 0191 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa (hash: ohpsx6f/3RHy+wstuJFR07y68Swe9+64PHH/6mRDCMM=) 2: WXIYySXnbh6YCYdfftGvqX72950.crl (hash: EYcZyoE9AMFpsQgIr5ZyxqGn3/XD/IX3hXWhwGQ1tC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:55:cb:73:1a:04:4a:c7:5d:11:f2:76:44:db:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=9ff7b38e7f45b8ed4bb8502aa97ec887ea13e93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:75:3a:51:3f:04:a5:09:f2:01:e3:68:a6: 4a:1e:f4:9a:99:ba:5f:90:80:b3:1a:bf:d0:aa:07: a6:de:d8:38:07:31:95:4a:01:59:4a:08:60:bf:2a: c5:ae:b6:68:58:a4:12:9a:f2:ed:99:26:54:fb:b1: b5:11:ba:58:0d:51:bf:ef:7f:e4:82:a8:35:ad:0d: 78:79:4a:a4:ae:66:c7:2c:d5:98:be:94:4f:ff:8f: de:cf:a1:c5:b4:ee:68:1b:a6:f2:3b:33:a9:2f:d1: 39:dc:35:71:fe:42:28:dd:e6:96:5f:36:cb:a1:e7: de:ef:87:1c:6e:3a:64:db:37:c0:df:05:8e:c5:17: d0:35:7d:77:6f:04:df:ad:18:3f:fa:86:c5:cf:be: e9:94:e5:fd:0e:31:39:14:ae:b3:a8:db:bb:b1:54: 44:e1:5d:cd:fd:fe:97:29:64:e5:ce:2c:be:e8:00: 01:3b:10:0a:06:66:c2:86:c4:7a:26:c8:43:25:62: df:ae:81:9a:ad:39:a5:00:42:cd:ef:3d:b2:71:6f: d5:e9:e0:f7:f3:1f:b1:85:0a:79:ed:fb:03:76:8f: 5a:10:66:3a:d7:58:b3:a2:c2:ef:e5:dd:a1:31:c5: 77:f5:57:e4:0a:3f:e0:07:c4:b7:ad:43:fc:fd:2d: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F7:B3:8E:7F:45:B8:ED:4B:B8:50:2A:A9:7E:C8:87:EA:13:E9:3E X509v3 Authority Key Identifier: keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fb:c6:c4:f1:5b:23:2c:c6:84:22:a4:2e:b9:e0:f8:bf:1f: 28:67:70:ab:1d:92:e2:6d:7e:7a:00:b6:3c:bd:d6:91:af:db: 43:37:fe:bc:08:e8:cb:9b:a4:d7:bf:1f:7b:25:17:b6:2e:40: 2b:27:46:e0:c0:f7:92:5c:06:89:9b:eb:87:9f:55:d3:5e:55: 4c:06:a8:9a:28:75:45:8a:dc:fb:a8:7d:17:81:13:67:35:9b: aa:8f:d0:be:5d:b2:cd:88:b6:11:8d:a4:1c:7b:ee:b3:6d:c4: f5:f3:ef:af:ab:f1:0d:aa:c8:57:8a:21:21:8e:d3:75:10:d8: 49:7a:dc:86:32:0f:5a:33:3e:23:31:48:cf:9d:05:93:6e:2d: 4f:16:37:dd:0e:f2:2b:7f:57:70:11:2c:12:6a:be:7a:53:5e: 5b:f0:58:50:4c:36:bb:dd:73:f0:13:b9:43:63:f1:0c:d8:9f: f7:3f:d6:9b:ac:c9:9e:66:85:c6:bd:ea:8d:84:91:a0:1a:0a: cd:db:a0:17:a6:b3:1b:69:0f:76:b4:5b:76:97:08:eb:87:96: 70:4b:1e:0d:ce:e1:cd:4f:35:04:c4:8c:89:25:e9:fd:2e:24: 3a:df:55:97:45:28:72:ec:e7:46:97:3d:01:35:01:6f:7f:e7: 7e:41:a3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVXLcxoESsddEfJ2RNt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzIxOGM5MjVlNzZlMWU5ODA5ODc1ZjdlZDFhZmE5N2Vm NmY3OWQwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD Eyg5ZmY3YjM4ZTdmNDViOGVkNGJiODUwMmFhOTdlYzg4N2VhMTNlOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIl1OlE/BKUJ8gHjaKZKHvSambpf kICzGr/Qqgem3tg4BzGVSgFZSghgvyrFrrZoWKQSmvLtmSZU+7G1EbpYDVG/73/k gqg1rQ14eUqkrmbHLNWYvpRP/4/ez6HFtO5oG6byOzOpL9E53DVx/kIo3eaWXzbL oefe74ccbjpk2zfA3wWOxRfQNX13bwTfrRg/+obFz77plOX9DjE5FK6zqNu7sVRE 4V3N/f6XKWTlziy+6AABOxAKBmbChsR6JshDJWLfroGarTmlAELN7z2ycW/V6eD3 8x+xhQp57fsDdo9aEGY611izosLv5d2hMcV39VfkCj/gB8S3rUP8/S06GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/3s45/RbjtS7hQKql+yIfqE+k+MB8GA1UdIwQY MBaAFFlyGMkl524emAmHX37Rr6l+9vedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMt YzQ0ZjlkN2ZmZGY2LzEvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMtYzQ0ZjlkN2ZmZGY2 LzEvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/vGxPFb IyzGhCKkLrng+L8fKGdwqx2S4m1+egC2PL3Wka/bQzf+vAjoy5uk178feyUXti5A KydG4MD3klwGiZvrh59V015VTAaomih1RYrc+6h9F4ETZzWbqo/Qvl2yzYi2EY2k HHvus23E9fPvr6vxDarIV4ohIY7TdRDYSXrchjIPWjM+IzFIz50Fk24tTxY33Q7y K39XcBEsEmq+elNeW/BYUEw2u91z8BO5Q2PxDNif9z/Wm6zJnmaFxr3qjYSRoBoK zdugF6azG2kPdrRbdpcI64eWcEseDc7hzU81BMSMiSXp/S4kOt9Vl0UocuznRpc9 ATUBb3/nfkGj9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:54 2025 by rpki-client