This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft File: wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json) Hash identifier: u/itqa9MOaIRjaVuV6H1F7fHW9zqXeN5xSOueQm5Id4= Subject key identifier: CF:A4:0B:CF:99:EC:3E:73:6B:AE:C7:E2:A6:94:31:92:17:35:EC:D1 Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78 Certificate issuer: /CN=c18de4f2af8c7050e6e70e08a152573edd42e678 Certificate serial: 019B3EDAA153B4B6207BB0C41D69D9F8F924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft Manifest number: 0AD2 Signing time: Sun 21 Dec 2025 03:01:14 +0000 Manifest this update: Sun 21 Dec 2025 03:01:14 +0000 Manifest next update: Mon 22 Dec 2025 03:01:14 +0000 Files and hashes: 1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=) 2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: 3be3lpv9//GpS+1zA/C5cRW8bHJOPDo2DSKcYjUKHf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a1:53:b4:b6:20:7b:b0:c4:1d:69:d9:f8:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678 Validity Not Before: Dec 21 03:01:14 2025 GMT Not After : Dec 22 03:01:14 2025 GMT Subject: CN=cfa40bcf99ec3e736baec7e2a69431921735ecd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:05:30:8b:33:e7:59:96:d7:b3:9f:69:11: 67:34:46:58:17:c9:ac:da:5b:fe:30:7d:b0:32:a3: 3c:9b:43:45:f5:61:8a:9e:93:2a:1c:80:7d:2f:a7: fe:ef:82:29:4b:01:ba:9d:ed:01:99:73:77:ca:40: dc:7f:ac:70:5d:32:7e:14:96:6f:12:6c:d6:6a:0d: 41:23:06:0e:ef:65:51:76:88:13:72:98:db:19:ad: bc:88:8e:f3:d3:54:3b:16:fb:92:78:d6:3f:46:3d: 42:ab:76:e1:c3:06:4b:07:fa:f7:aa:f3:b8:30:57: b9:6e:f1:97:ce:4b:d9:0d:88:80:ce:26:24:18:f6: ee:46:35:09:2d:c2:05:a0:15:70:fe:70:da:e9:a2: c7:7f:6e:cc:5f:2f:d0:cf:87:69:e8:6b:9f:f0:de: a1:25:6e:a2:a7:22:c1:0b:ea:22:00:2a:bb:05:55: 91:38:64:62:64:d6:80:51:c7:6c:fd:87:c2:ea:18: 05:55:12:75:a7:24:c2:40:e7:39:a1:f1:55:aa:b9: 1a:9d:3d:6b:96:63:58:e0:ff:71:b9:f6:ef:12:91: 29:ab:1d:4e:eb:8e:8c:04:a8:05:a4:5a:fb:08:ef: d8:f7:da:8a:d5:25:51:7b:5a:a3:b6:94:48:75:84: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A4:0B:CF:99:EC:3E:73:6B:AE:C7:E2:A6:94:31:92:17:35:EC:D1 X509v3 Authority Key Identifier: keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:38:d0:36:56:df:a8:2d:ae:b1:fc:44:2b:fa:9e:52:8b:04: 1c:76:4f:d3:1d:e7:cf:90:72:5e:1d:0f:59:87:75:26:96:a0: cd:ba:88:19:3b:f6:7a:7d:16:4e:e3:1c:ff:30:66:5b:42:5a: 1c:cb:50:e5:af:6d:97:e3:91:b1:d8:45:49:fa:e4:2e:7c:09: 37:c8:6e:76:9c:ba:f9:fc:90:d3:71:5f:7a:8c:ad:a5:40:fe: 49:b5:61:54:f2:29:ec:d1:b8:f3:d5:50:c0:d7:b8:47:9c:c6: 49:46:32:20:88:b6:67:52:3e:80:89:0a:9a:0f:94:72:e7:92: d0:e8:a4:b7:a1:b8:7a:e2:0f:80:f6:59:52:ac:91:df:d0:2b: 9b:40:3e:fe:4f:d3:3c:88:26:82:15:df:90:4f:b6:e2:5f:1c: f3:b2:5f:f5:25:86:79:d2:44:60:ff:fe:03:c3:2f:59:13:44: 76:d5:3f:de:21:97:53:e9:e7:6c:09:c9:0e:b0:e0:fa:fe:e1: 3e:d1:9b:86:b9:0d:d3:b5:1c:ca:60:38:29:92:ac:67:32:63: 82:60:ea:99:3b:34:81:3a:5e:ea:24:28:a9:a6:93:b8:b7:72: 35:28:78:87:28:b5:0d:54:b4:a2:94:55:35:f7:fb:d6:b6:9a: a3:51:75:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qFTtLYge7DEHWnZ+PkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOGRlNGYyYWY4YzcwNTBlNmU3MGUwOGExNTI1NzNlZGQ0 MmU2NzgwHhcNMjUxMjIxMDMwMTE0WhcNMjUxMjIyMDMwMTE0WjAzMTEwLwYDVQQD EyhjZmE0MGJjZjk5ZWMzZTczNmJhZWM3ZTJhNjk0MzE5MjE3MzVlY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6sFMIsz51mW17OfaRFnNEZYF8ms 2lv+MH2wMqM8m0NF9WGKnpMqHIB9L6f+74IpSwG6ne0BmXN3ykDcf6xwXTJ+FJZv EmzWag1BIwYO72VRdogTcpjbGa28iI7z01Q7FvuSeNY/Rj1Cq3bhwwZLB/r3qvO4 MFe5bvGXzkvZDYiAziYkGPbuRjUJLcIFoBVw/nDa6aLHf27MXy/Qz4dp6Guf8N6h JW6ipyLBC+oiACq7BVWROGRiZNaAUcds/YfC6hgFVRJ1pyTCQOc5ofFVqrkanT1r lmNY4P9xufbvEpEpqx1O646MBKgFpFr7CO/Y99qK1SVRe1qjtpRIdYTRgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+kC8+Z7D5za67H4qaUMZIXNezRMB8GA1UdIwQY MBaAFMGN5PKvjHBQ5ucOCKFSVz7dQuZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzct MDA3YjQ0N2Q0YjM5LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzctMDA3YjQ0N2Q0YjM5 LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazjQNlbf qC2usfxEK/qeUosEHHZP0x3nz5ByXh0PWYd1JpagzbqIGTv2en0WTuMc/zBmW0Ja HMtQ5a9tl+ORsdhFSfrkLnwJN8hudpy6+fyQ03FfeoytpUD+SbVhVPIp7NG489VQ wNe4R5zGSUYyIIi2Z1I+gIkKmg+UcueS0Oikt6G4euIPgPZZUqyR39Arm0A+/k/T PIgmghXfkE+24l8c87Jf9SWGedJEYP/+A8MvWRNEdtU/3iGXU+nnbAnJDrDg+v7h PtGbhrkN07UcymA4KZKsZzJjgmDqmTs0gTpe6iQoqaaTuLdyNSh4hyi1DVS0opRV Nff71raao1F1ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:40 2025 by rpki-client