This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft File: wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json) Hash identifier: r3aBVtr1EqsaPnJMjIemERfvcp4EepB6JG62ejQ3ypE= Subject key identifier: 21:35:17:6B:4A:7E:AD:1A:C3:35:D3:3F:1C:A3:EC:ED:A2:E0:30:AD Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36 Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636 Certificate serial: 019AF5AE8EB14A8BF85A67EFE070AC9DB381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 22:00:48 +0000 Manifest this update: Sat 06 Dec 2025 22:00:48 +0000 Manifest next update: Sun 07 Dec 2025 22:00:48 +0000 Files and hashes: 1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=) 2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: yjxv7OK3nSz6rSXH9tpqMRYtBAGl+l4uWAyATJLfAOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:8e:b1:4a:8b:f8:5a:67:ef:e0:70:ac:9d:b3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636 Validity Not Before: Dec 6 22:00:48 2025 GMT Not After : Dec 7 22:00:48 2025 GMT Subject: CN=2135176b4a7ead1ac335d33f1ca3eceda2e030ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:7b:86:88:63:82:b4:68:f5:e0:5e:e6:88: e8:af:25:4c:5c:a2:af:2c:cb:fe:5a:4d:84:4e:65: 82:41:0d:34:bd:1b:f0:24:3b:45:85:8f:6a:4c:fe: 20:03:ed:9b:10:2f:1c:4b:d9:09:ef:cd:5f:cd:de: 4a:8b:56:0d:42:33:e4:32:1c:d3:6a:de:9d:32:50: 12:2d:05:0d:c5:fc:d7:31:14:c2:38:4e:61:99:7d: 22:72:78:f4:a4:f6:83:8b:f8:ba:07:e2:68:21:41: ae:a6:2c:0c:91:bb:5a:ad:6d:55:d7:e8:6a:11:1c: 98:f4:03:fc:a1:21:eb:d3:2d:0e:f6:a9:54:81:f5: e0:5d:8f:dc:b9:ba:20:cd:aa:cb:d9:d5:61:29:ae: 59:c6:31:8c:31:5f:be:3b:f1:c2:2c:16:42:94:03: a9:1b:35:7f:15:b3:dd:9e:8b:3e:79:8a:fd:80:3f: f6:e8:b4:32:30:7f:22:ab:2b:23:8e:6b:73:51:b8: 24:6d:2c:7a:37:0a:75:57:fe:ef:c5:74:cf:16:f2: bc:47:e0:98:4c:cf:41:5b:e0:7e:3a:5f:88:64:5b: 16:64:ac:dc:fa:2b:28:29:b3:01:0a:98:ce:73:6d: bd:50:86:58:ea:26:f6:01:cf:7f:bd:21:19:fc:c4: 74:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:35:17:6B:4A:7E:AD:1A:C3:35:D3:3F:1C:A3:EC:ED:A2:E0:30:AD X509v3 Authority Key Identifier: keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d3:e5:20:f6:b4:e1:5d:a2:ab:e4:24:ea:c7:c0:e2:05:1f: bc:b6:5c:bd:6a:e6:81:46:e4:e7:1c:71:ba:9b:f1:79:01:c5: e4:77:ca:44:27:b5:e4:bb:38:42:08:77:b4:2e:da:dd:e6:7d: 45:2e:58:e9:04:41:88:b2:80:f4:c2:ca:2a:39:17:5f:bc:36: e6:a0:1d:51:6c:22:98:f1:49:e8:2e:25:0a:fb:d8:d2:13:d2: 34:63:5b:7a:b9:4d:5f:1b:78:b7:0b:0c:25:9a:94:21:cf:41: 0c:93:2e:3a:de:c7:ba:0b:a5:c4:d6:c3:3f:2e:ac:b9:70:df: 83:ad:ed:40:3b:f6:07:88:b3:96:b8:d4:40:3d:02:b1:93:5b: 1b:73:14:12:0a:20:48:b8:76:70:22:5c:03:60:6b:95:13:85: 85:50:31:c7:eb:58:c3:22:e9:82:cb:3b:9e:a8:db:f1:a4:4b: 21:4f:8a:6b:dd:ee:08:3d:27:20:5d:4c:f5:ed:67:f0:5f:f0: d7:7d:af:11:7f:9d:09:4b:ba:68:0c:f3:4a:1d:fc:d9:33:a1: c8:60:08:48:5c:c0:88:f9:b0:a0:af:0d:2e:c1:76:7b:88:51: 27:60:18:5f:58:7e:1e:33:cf:10:dc:ba:15:8d:3d:bb:b3:86: f3:7f:7d:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ro6xSov4Wmfv4HCsnbOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmExNmIyMDdlM2I2ZjZmNzJkM2QwYWQ1ZmNlYmE4ZWEx MDM2MzYwHhcNMjUxMjA2MjIwMDQ4WhcNMjUxMjA3MjIwMDQ4WjAzMTEwLwYDVQQD EygyMTM1MTc2YjRhN2VhZDFhYzMzNWQzM2YxY2EzZWNlZGEyZTAzMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8V7hohjgrRo9eBe5ojoryVMXKKv LMv+Wk2ETmWCQQ00vRvwJDtFhY9qTP4gA+2bEC8cS9kJ781fzd5Ki1YNQjPkMhzT at6dMlASLQUNxfzXMRTCOE5hmX0icnj0pPaDi/i6B+JoIUGupiwMkbtarW1V1+hq ERyY9AP8oSHr0y0O9qlUgfXgXY/cubogzarL2dVhKa5ZxjGMMV++O/HCLBZClAOp GzV/FbPdnos+eYr9gD/26LQyMH8iqysjjmtzUbgkbSx6Nwp1V/7vxXTPFvK8R+CY TM9BW+B+Ol+IZFsWZKzc+isoKbMBCpjOc229UIZY6ib2Ac9/vSEZ/MR0BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE1F2tKfq0awzXTPxyj7O2i4DCtMB8GA1UdIwQY MBaAFMMqFrIH47b29y09CtX866jqEDY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2Ut NGRjMmY3OTNjM2NkLzEvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2UtNGRjMmY3OTNjM2Nk LzEvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9PlIPa0 4V2iq+Qk6sfA4gUfvLZcvWrmgUbk5xxxupvxeQHF5HfKRCe15Ls4Qgh3tC7a3eZ9 RS5Y6QRBiLKA9MLKKjkXX7w25qAdUWwimPFJ6C4lCvvY0hPSNGNberlNXxt4twsM JZqUIc9BDJMuOt7HugulxNbDPy6suXDfg63tQDv2B4izlrjUQD0CsZNbG3MUEgog SLh2cCJcA2BrlROFhVAxx+tYwyLpgss7nqjb8aRLIU+Ka93uCD0nIF1M9e1n8F/w 132vEX+dCUu6aAzzSh382TOhyGAISFzAiPmwoK8NLsF2e4hRJ2AYX1h+HjPPENy6 FY09u7OG83991A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:06 2025 by rpki-client