This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft File: wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json) Hash identifier: JSvRl91wlk8B8x+UbUnXuS+yqi6ZFFmnjFj9ldgI03A= Subject key identifier: E3:B4:FD:FF:3F:5B:39:DB:BB:43:E7:7A:F3:44:1F:01:18:FB:BA:59 Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44 Certificate issuer: /CN=c32cc7a964f4f370929291e19fff7de53f19be44 Certificate serial: 019AF3F78E475B9FF6D279087ED15221AACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft Manifest number: 1298 Signing time: Sat 06 Dec 2025 14:01:18 +0000 Manifest this update: Sat 06 Dec 2025 14:01:18 +0000 Manifest next update: Sun 07 Dec 2025 14:01:18 +0000 Files and hashes: 1: RPcZgGGV6x_O2v93PF_KdiXOCls.roa (hash: zudz6ArhADUJ+zH91d1CGuKo9XvGzdpHdTulI/kePX0=) 2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: fmmdllPv10Rnda8unk0yGH2Km+mdQvpY0jJTBepi9+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8e:47:5b:9f:f6:d2:79:08:7e:d1:52:21:aa:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44 Validity Not Before: Dec 6 14:01:18 2025 GMT Not After : Dec 7 14:01:18 2025 GMT Subject: CN=e3b4fdff3f5b39dbbb43e77af3441f0118fbba59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ae:32:7b:1d:43:bf:b2:0b:0f:24:c4:b7:5e: a9:b3:37:e4:d7:1a:03:4c:20:3a:e5:84:10:84:6d: aa:5b:e8:ea:88:f1:33:a1:04:ac:f4:8f:82:6f:c1: 9a:e2:da:56:e8:0b:47:09:8c:ed:d4:61:af:c2:4a: 9e:3d:34:5d:58:d7:2e:8d:57:88:89:42:e9:b6:fe: 8d:3e:94:3d:7c:22:35:ef:43:a8:cd:84:40:de:cf: ae:e1:95:42:18:a1:82:d7:2a:9b:5d:09:c8:4c:18: 92:a8:6c:b1:f6:7a:6e:62:95:8f:0b:d5:23:a0:d2: 1a:6e:24:29:78:c1:f7:9c:a7:2e:0a:64:91:d9:34: 97:6d:6e:62:a3:55:85:84:39:8c:2f:f2:68:af:b4: 78:d7:62:0d:ff:42:98:47:02:83:85:28:67:f0:49: 40:3d:b8:31:c5:28:a1:30:e0:b7:42:17:96:79:c5: 70:be:39:19:29:9f:5f:26:c9:6c:e6:32:0f:0f:4d: 3d:ed:a6:35:2b:99:8d:5d:e8:3f:07:e6:37:d8:9f: 66:51:43:01:14:fe:be:81:5d:7b:80:7f:10:29:4b: 3b:1a:50:02:4f:cc:32:9f:ac:5a:f6:00:a6:24:ac: 65:d0:32:5c:a1:3f:95:2a:61:e3:00:61:54:f1:40: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B4:FD:FF:3F:5B:39:DB:BB:43:E7:7A:F3:44:1F:01:18:FB:BA:59 X509v3 Authority Key Identifier: keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fd:9c:ac:e8:7a:f1:73:47:c4:3a:95:4e:1d:49:d3:99:bf: 68:44:43:4b:a6:83:dc:99:9f:29:a1:a3:ac:f2:b8:d4:50:5f: 17:53:73:b8:a6:6e:ce:77:f0:d5:98:19:c6:06:e0:2a:a8:3e: 16:77:ec:6a:33:c3:41:3b:7b:f2:50:cb:39:9e:9c:48:e5:a6: e3:c5:16:4b:b9:07:ed:11:ef:70:07:bd:74:da:55:7e:93:90: 9c:db:ac:f5:82:30:2a:cd:cc:15:19:cc:cd:1d:49:13:33:5e: fb:7f:01:2b:4f:9b:9f:47:24:b6:3a:34:4d:20:28:59:57:a6: 47:42:8f:01:1a:0a:ab:cf:e4:b3:ac:42:f7:cc:2c:5d:90:96: af:e5:e0:16:53:8d:f1:38:6c:28:a3:c9:09:b2:56:08:f5:f3: 60:2a:13:6b:33:40:01:db:19:b3:4b:f5:ba:d1:ce:b1:d3:60: 27:cd:f1:8e:05:8f:97:ce:2f:dd:d2:7b:49:7a:68:54:c7:2a: f9:55:41:cb:c7:57:8c:8e:a6:a4:33:9f:54:e6:70:1b:26:ad: 66:92:fa:18:63:b3:7a:94:6a:a3:a1:dc:39:36:4e:4b:3f:60: 22:61:4a:9a:70:e6:fc:f4:53:33:d9:05:3a:55:65:b8:7c:50: 9b:f1:7a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz945HW5/20nkIftFSIarOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmNjN2E5NjRmNGYzNzA5MjkyOTFlMTlmZmY3ZGU1M2Yx OWJlNDQwHhcNMjUxMjA2MTQwMTE4WhcNMjUxMjA3MTQwMTE4WjAzMTEwLwYDVQQD EyhlM2I0ZmRmZjNmNWIzOWRiYmI0M2U3N2FmMzQ0MWYwMTE4ZmJiYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA964yex1Dv7ILDyTEt16pszfk1xoD TCA65YQQhG2qW+jqiPEzoQSs9I+Cb8Ga4tpW6AtHCYzt1GGvwkqePTRdWNcujVeI iULptv6NPpQ9fCI170OozYRA3s+u4ZVCGKGC1yqbXQnITBiSqGyx9npuYpWPC9Uj oNIabiQpeMH3nKcuCmSR2TSXbW5io1WFhDmML/Jor7R412IN/0KYRwKDhShn8ElA PbgxxSihMOC3QheWecVwvjkZKZ9fJsls5jIPD0097aY1K5mNXeg/B+Y32J9mUUMB FP6+gV17gH8QKUs7GlACT8wyn6xa9gCmJKxl0DJcoT+VKmHjAGFU8UCy6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO0/f8/Wznbu0PnevNEHwEY+7pZMB8GA1UdIwQY MBaAFMMsx6lk9PNwkpKR4Z//feU/Gb5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lN2M3NjItZDc5ZS00NmRjLWFmMTkt ZDdmNzhhYzIwNzA3LzEvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lN2M3NjItZDc5ZS00NmRjLWFmMTktZDdmNzhhYzIwNzA3 LzEvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPv2crOh6 8XNHxDqVTh1J05m/aERDS6aD3JmfKaGjrPK41FBfF1NzuKZuznfw1ZgZxgbgKqg+ FnfsajPDQTt78lDLOZ6cSOWm48UWS7kH7RHvcAe9dNpVfpOQnNus9YIwKs3MFRnM zR1JEzNe+38BK0+bn0cktjo0TSAoWVemR0KPARoKq8/ks6xC98wsXZCWr+XgFlON 8ThsKKPJCbJWCPXzYCoTazNAAdsZs0v1utHOsdNgJ83xjgWPl84v3dJ7SXpoVMcq +VVBy8dXjI6mpDOfVOZwGyatZpL6GGOzepRqo6HcOTZOSz9gImFKmnDm/PRTM9kF OlVluHxQm/F6vg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:26:01 2025 by rpki-client