This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json) Hash identifier: X/T9ZIjvEZHsNCNbOUDuIbUOmFZbqQeZZ/wOl/fV6DI= Subject key identifier: FE:8E:E9:0E:A3:70:E3:B6:84:75:F9:14:D9:8B:6E:35:9F:01:BE:8A Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79 Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479 Certificate serial: 019AF12D605471B1AC25467D973F24854BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft Manifest number: 0F00 Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=) 2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: WnHwCNnIyYmLcdmaHPgVydULbDvSbmXgEbnkYYwW2DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:60:54:71:b1:ac:25:46:7d:97:3f:24:85:4b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479 Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=fe8ee90ea370e3b68475f914d98b6e359f01be8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:e9:93:cd:25:24:f1:76:d6:3a:7f:aa:51: e1:3b:e5:ba:ac:ae:fe:52:f3:8e:e3:78:88:7c:2a: f2:a6:62:7f:ca:1e:0d:ed:7a:51:a6:e5:35:fe:e4: 0b:51:7c:66:55:c3:3f:98:26:9a:d0:fb:98:cf:55: 4b:ea:43:f3:9f:98:a9:c9:29:4e:0c:72:af:7d:c2: fa:f0:df:5a:20:80:14:e9:42:db:0e:78:ab:17:66: 6e:e6:98:22:60:24:a0:87:73:24:55:58:29:25:39: 8a:7c:bc:66:fd:36:47:85:bc:b7:41:9d:db:b2:11: d4:1b:44:3b:52:db:4b:6a:a6:c6:3b:a0:d8:85:6a: 28:c0:64:08:8f:bb:8d:10:1c:1e:99:7e:27:d9:26: 85:eb:f8:8b:36:c4:ba:1a:fe:da:31:e0:52:03:95: d8:81:32:b6:ed:d2:6d:cb:56:1e:e5:b2:ec:e9:61: fc:17:fd:2d:eb:53:78:6a:9f:63:05:5b:2e:9e:5c: a8:36:d7:64:f3:2e:b8:07:2a:93:7c:c3:bb:b6:80: 1e:0a:f0:32:9f:12:b1:53:b7:47:7a:72:77:7d:23: fc:a6:0f:6e:38:de:8a:f4:9e:f4:59:84:93:d8:2e: a0:08:53:19:aa:32:86:e0:d5:95:a0:42:a9:f7:fe: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8E:E9:0E:A3:70:E3:B6:84:75:F9:14:D9:8B:6E:35:9F:01:BE:8A X509v3 Authority Key Identifier: keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:b0:bf:85:9b:38:3a:2f:31:86:0e:86:17:44:14:26:44:36: d5:3f:f0:4c:20:5d:5f:de:b5:ff:64:7e:aa:aa:7b:64:2a:fc: f6:4f:5f:90:4c:24:72:87:f4:69:49:c0:b4:67:26:db:66:2e: 5b:92:30:2a:09:aa:7c:ac:38:58:db:e5:84:85:6d:c3:e6:fd: ec:a7:b7:79:4e:f6:c8:4f:a5:a3:df:b5:75:38:a5:b3:9d:7e: 03:85:9c:49:a8:bb:ca:f4:65:1d:33:79:e0:8c:ed:20:28:ee: e0:7d:0e:83:ae:a4:c0:12:48:29:f7:1c:a7:9a:be:a2:d4:eb: bf:6d:b1:0b:f6:dd:49:30:e5:5f:e8:63:d2:4c:5e:51:c9:f5: 81:8c:fe:cd:71:48:cb:49:5b:cb:83:96:f6:ab:46:89:8e:04: 88:54:61:90:78:13:38:d1:71:31:55:6a:c6:8c:5d:95:cc:3e: 28:73:b0:28:2d:36:71:94:2f:19:8e:ba:27:29:b4:8a:34:a1: 42:2c:ea:8b:45:b1:b6:0d:11:eb:fb:35:cf:e0:2c:49:52:d8: 74:a2:05:af:22:b8:ae:57:46:14:85:fb:fc:0d:86:aa:5b:11: d5:b9:1c:b9:73:b1:19:71:10:5c:b8:99:e0:f1:46:74:48:c3: 6b:75:e9:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWBUcbGsJUZ9lz8khUvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMmM0NzBkYjI0NDM0ODJlMTk1MjM5NTNhNzhjMWVmMGEx Njk0NzkwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EyhmZThlZTkwZWEzNzBlM2I2ODQ3NWY5MTRkOThiNmUzNTlmMDFiZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVnpk80lJPF21jp/qlHhO+W6rK7+ UvOO43iIfCrypmJ/yh4N7XpRpuU1/uQLUXxmVcM/mCaa0PuYz1VL6kPzn5ipySlO DHKvfcL68N9aIIAU6ULbDnirF2Zu5pgiYCSgh3MkVVgpJTmKfLxm/TZHhby3QZ3b shHUG0Q7UttLaqbGO6DYhWoowGQIj7uNEBwemX4n2SaF6/iLNsS6Gv7aMeBSA5XY gTK27dJty1Ye5bLs6WH8F/0t61N4ap9jBVsunlyoNtdk8y64ByqTfMO7toAeCvAy nxKxU7dHenJ3fSP8pg9uON6K9J70WYST2C6gCFMZqjKG4NWVoEKp9/7c8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6O6Q6jcOO2hHX5FNmLbjWfAb6KMB8GA1UdIwQY MBaAFFssRw2yRDSC4ZUjlTp4we8KFpR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEt YzM3OWY4YzIzZmMxLzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEtYzM3OWY4YzIzZmMx LzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0rC/hZs4 Oi8xhg6GF0QUJkQ21T/wTCBdX961/2R+qqp7ZCr89k9fkEwkcof0aUnAtGcm22Yu W5IwKgmqfKw4WNvlhIVtw+b97Ke3eU72yE+lo9+1dTils51+A4WcSai7yvRlHTN5 4IztICju4H0Og66kwBJIKfccp5q+otTrv22xC/bdSTDlX+hj0kxeUcn1gYz+zXFI y0lby4OW9qtGiY4EiFRhkHgTONFxMVVqxoxdlcw+KHOwKC02cZQvGY66Jym0ijSh Qizqi0Wxtg0R6/s1z+AsSVLYdKIFryK4rldGFIX7/A2GqlsR1bkcuXOxGXEQXLiZ 4PFGdEjDa3Xpww== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:43 2025 by rpki-client