This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json) Hash identifier: DyndKwRz2J+F+aJ/zvwXecba8FuIV367PEUplTIZBAc= Subject key identifier: 7F:B3:71:50:9F:0A:86:19:FE:82:B8:6E:77:59:CB:61:1A:5F:C8:FF Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c Certificate serial: 019AF208F89DB7A1122CB50F89C4F0106F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft Manifest number: 069F Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: Ar6bBjyD6CG1iUF3+UDzpLw1wHiCpv5ma3ROQTMPnmM=) 2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f8:9d:b7:a1:12:2c:b5:0f:89:c4:f0:10:6f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f966238becd356df87d0c630248123f8f219e18c Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=7fb371509f0a8619fe82b86e7759cb611a5fc8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:ab:75:38:a4:f1:f6:51:76:8e:c3:f8:6a: f0:4b:26:a2:d4:8b:67:de:05:8e:c4:37:29:9a:9c: 51:c4:53:70:87:98:e3:d9:97:67:88:0c:14:4b:cd: 95:da:53:c9:d8:d4:46:ca:ec:4d:d3:52:7f:65:b8: 7e:5a:00:4e:b5:1f:6c:d7:c8:16:08:36:23:78:06: 8d:09:dc:20:f8:97:1d:ab:e9:b2:99:6a:ad:5e:77: 8f:3f:de:d5:55:39:8e:2b:f0:1b:87:b5:0d:d1:3e: cf:3d:c5:b6:d0:d3:78:66:57:cf:92:9a:87:7a:99: 69:e1:ef:62:e5:ac:03:26:8d:b8:70:cb:15:a9:1f: 8f:d1:e7:74:80:0e:53:c8:a8:ad:c8:3c:82:f6:81: 33:4d:fa:2b:a6:be:14:c4:1a:e0:7a:61:41:4e:72: 18:1d:70:e5:50:4e:d4:60:c0:cf:9a:3d:92:a9:57: 12:f4:4d:ee:10:4c:24:a6:55:7c:9c:a5:b9:9f:6e: b5:3f:fb:f8:35:e1:fb:89:f9:e2:23:50:05:95:3f: f3:7f:54:c4:01:ad:99:65:b4:01:ac:26:d8:b2:bd: a8:dd:2a:11:de:a9:ac:68:da:6d:5f:c5:b1:03:7a: 46:c6:54:18:61:5f:d1:6d:c5:bb:36:6c:09:75:f4: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:71:50:9F:0A:86:19:FE:82:B8:6E:77:59:CB:61:1A:5F:C8:FF X509v3 Authority Key Identifier: keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4b:69:6f:2f:87:99:8b:23:61:4d:15:df:32:40:9f:b6:3c: a5:fe:05:02:0c:8b:c3:90:1b:39:bb:c0:96:55:5e:ea:5d:03: 7e:8a:92:ae:a8:f9:10:56:09:cd:4c:c0:5d:12:b8:4a:9f:36: e8:dd:ff:0b:e3:a5:73:c1:1d:ae:96:c6:bb:65:ca:1a:86:04: 7d:41:a8:4d:e1:55:0c:b2:8b:87:62:80:68:9f:ee:53:63:d1: ee:5b:46:d2:54:7f:16:2e:6c:b2:6b:7b:ff:d5:ec:56:8d:6b: 4e:87:86:50:5a:27:24:0b:fc:e0:a8:bb:40:76:43:21:15:26: 00:8f:5f:4f:59:f0:09:a7:60:75:c4:59:17:d5:4c:50:a6:c8: 77:f4:a4:9a:b9:d7:47:77:c7:b7:5d:03:84:fc:4a:39:b3:7f: 62:09:36:e1:97:2f:a3:f3:09:2b:94:d2:8f:0b:8b:61:7b:81: 0c:07:d7:82:7c:2b:9a:3f:ea:34:bd:99:8f:ae:3b:7a:f3:f0: ba:f7:ec:09:bb:fd:08:d3:1f:7d:d4:44:e1:3a:5b:53:63:15: e4:6a:f1:4b:21:6c:2b:3c:76:92:bd:7b:39:2f:ca:ba:7f:85: 99:2b:64:65:f4:b4:ef:3f:89:0f:e9:2a:78:d2:c0:e9:39:e1: d4:68:51:b6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCPidt6ESLLUPicTwEG9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjYyMzhiZWNkMzU2ZGY4N2QwYzYzMDI0ODEyM2Y4ZjIx OWUxOGMwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD Eyg3ZmIzNzE1MDlmMGE4NjE5ZmU4MmI4NmU3NzU5Y2I2MTFhNWZjOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlWrdTik8fZRdo7D+GrwSyai1Itn 3gWOxDcpmpxRxFNwh5jj2ZdniAwUS82V2lPJ2NRGyuxN01J/Zbh+WgBOtR9s18gW CDYjeAaNCdwg+Jcdq+mymWqtXnePP97VVTmOK/Abh7UN0T7PPcW20NN4ZlfPkpqH eplp4e9i5awDJo24cMsVqR+P0ed0gA5TyKityDyC9oEzTforpr4UxBrgemFBTnIY HXDlUE7UYMDPmj2SqVcS9E3uEEwkplV8nKW5n261P/v4NeH7ifniI1AFlT/zf1TE Aa2ZZbQBrCbYsr2o3SoR3qmsaNptX8WxA3pGxlQYYV/RbcW7NmwJdfRX1QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH+zcVCfCoYZ/oK4bndZy2EaX8j/MB8GA1UdIwQY MBaAFPlmI4vs01bfh9DGMCSBI/jyGeGMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XWWppLXpUVnQtSDBNWXdKSUVqLVBJWjRZdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYThlY2U3LTJiNmMtNDQ1MS04YjNk LTMzMmRiZDlhNjBhZi8xLzEtV1lqaS16VFZ0LUgwTVl3SklFai1QSVo0WXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I3L2E4ZWNlNy0yYjZjLTQ0NTEtOGIzZC0zMzJkYmQ5YTYw YWYvMS8xLVdZamktelRWdC1IME1Zd0pJRWotUElaNFl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUtp by+HmYsjYU0V3zJAn7Y8pf4FAgyLw5AbObvAllVe6l0DfoqSrqj5EFYJzUzAXRK4 Sp826N3/C+Olc8EdrpbGu2XKGoYEfUGoTeFVDLKLh2KAaJ/uU2PR7ltG0lR/Fi5s smt7/9XsVo1rToeGUFonJAv84Ki7QHZDIRUmAI9fT1nwCadgdcRZF9VMUKbId/Sk mrnXR3fHt10DhPxKObN/Ygk24Zcvo/MJK5TSjwuLYXuBDAfXgnwrmj/qNL2Zj647 evPwuvfsCbv9CNMffdRE4TpbU2MV5GrxSyFsKzx2kr17OS/Kun+FmStkZfS07z+J D+kqeNLA6Tnh1GhRtg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:52 2025 by rpki-client