This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json) Hash identifier: IafHFE2nIDAw+Qme5xnFOQTy9CGMmZ5ufYFOP3XkvUY= Subject key identifier: 03:4F:65:49:DF:D7:ED:68:0C:3E:08:1A:41:06:9C:BD:D3:1D:B8:87 Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Certificate serial: 019AF50A753BE0F9532B8FCF9DE2BF02B669 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft Manifest number: 0E19 Signing time: Sat 06 Dec 2025 19:01:34 +0000 Manifest this update: Sat 06 Dec 2025 19:01:34 +0000 Manifest next update: Sun 07 Dec 2025 19:01:34 +0000 Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: FKA9go04Nphdj+FumgT/fzaV8tsCkuawa7mTTChgcAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:75:3b:e0:f9:53:2b:8f:cf:9d:e2:bf:02:b6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Validity Not Before: Dec 6 19:01:34 2025 GMT Not After : Dec 7 19:01:34 2025 GMT Subject: CN=034f6549dfd7ed680c3e081a41069cbdd31db887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:23:f3:92:03:70:ad:dc:59:88:74:b7:6a: c0:b6:f6:62:25:38:7f:a6:d7:27:31:01:e5:cd:ba: a9:2e:80:05:4a:ca:72:35:aa:aa:7a:36:4d:99:3c: e9:3e:f7:a1:bf:9c:a0:6c:a3:32:6b:b6:d1:21:32: 57:1d:79:e9:e2:83:49:5e:3f:61:f1:05:a1:c2:0f: 4a:d9:aa:2b:1a:c8:12:1a:55:45:ca:ba:55:85:f5: 85:90:e5:96:ca:82:85:55:bb:f7:32:4d:e4:b2:a9: cf:2b:8a:30:50:0e:7a:c9:ee:b4:4f:d8:a6:30:d6: a4:06:d6:dd:1d:00:54:f6:5c:55:07:d5:8a:d2:a1: 29:fc:e9:04:18:66:0f:14:4c:fc:f7:39:90:5d:27: ae:ef:3a:0c:ee:a9:43:49:a1:f2:3f:56:92:fb:0b: 14:97:e4:0e:b9:f7:ec:8b:ed:36:03:b4:d5:00:08: d5:45:20:9e:03:99:b8:c4:a2:9d:d7:d2:5c:6e:b2: be:63:39:40:42:db:b6:74:b2:94:67:9c:d1:18:a7: 35:05:a7:9a:66:7c:d5:e2:05:10:14:b5:e5:f7:8d: c3:2a:fa:9a:2a:d1:93:17:a5:96:5d:6f:ef:1b:0e: ff:5a:2e:eb:a1:36:c5:43:63:6c:a5:60:e5:0b:bd: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4F:65:49:DF:D7:ED:68:0C:3E:08:1A:41:06:9C:BD:D3:1D:B8:87 X509v3 Authority Key Identifier: keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:29:0e:90:01:de:7c:67:1c:9f:e2:f5:96:66:66:da:df:ba: dd:fa:0a:24:86:2e:b9:92:53:a4:6c:40:49:a4:ea:22:47:54: d4:ef:97:48:ac:84:22:23:01:25:b5:68:30:8f:92:95:ae:59: 9b:b7:7c:2c:10:ed:74:5a:e2:d4:16:10:bc:21:75:f0:66:ae: c7:df:37:25:ae:1b:1e:3f:ed:32:19:e2:a0:21:46:4c:af:46: 1f:3a:0c:e3:cd:b0:9f:df:13:40:ab:cd:33:5f:6b:a0:8c:0e: 6e:93:0d:37:b4:06:55:10:bd:47:a7:d2:8d:6f:f1:ff:73:8b: 50:86:2d:21:44:70:e5:8b:d4:12:e9:cc:c6:87:21:04:03:da: 4a:a3:af:35:2b:80:e8:54:aa:89:ce:99:84:9b:74:28:33:ba: 2f:ef:d7:8b:7a:d1:fc:6f:1d:c2:e9:58:8a:b2:c3:8d:f2:69: b6:de:25:10:50:8c:ca:4c:11:52:1b:e2:dc:6e:06:74:86:9e: 9b:99:57:51:a9:08:1f:84:65:13:0b:57:a8:2c:f6:91:a4:b8: 6e:12:51:f2:7b:8f:f7:04:a6:c2:36:e7:85:0d:26:3c:67:f2: a0:9d:17:9c:dc:76:4a:25:a7:4d:82:86:b8:b0:12:ca:2e:7d: 40:95:ed:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CnU74PlTK4/PneK/ArZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODhmMDg1NWM0NDc4ZDFiOTRhYjhhOGQ2ZDlkOWM1MTFm MzE0MjYwHhcNMjUxMjA2MTkwMTM0WhcNMjUxMjA3MTkwMTM0WjAzMTEwLwYDVQQD EygwMzRmNjU0OWRmZDdlZDY4MGMzZTA4MWE0MTA2OWNiZGQzMWRiODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MMj85IDcK3cWYh0t2rAtvZiJTh/ ptcnMQHlzbqpLoAFSspyNaqqejZNmTzpPvehv5ygbKMya7bRITJXHXnp4oNJXj9h 8QWhwg9K2aorGsgSGlVFyrpVhfWFkOWWyoKFVbv3Mk3ksqnPK4owUA56ye60T9im MNakBtbdHQBU9lxVB9WK0qEp/OkEGGYPFEz89zmQXSeu7zoM7qlDSaHyP1aS+wsU l+QOuffsi+02A7TVAAjVRSCeA5m4xKKd19JcbrK+YzlAQtu2dLKUZ5zRGKc1Baea ZnzV4gUQFLXl943DKvqaKtGTF6WWXW/vGw7/Wi7roTbFQ2NspWDlC71tDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANPZUnf1+1oDD4IGkEGnL3THbiHMB8GA1UdIwQY MBaAFFmI8IVcRHjRuUq4qNbZ2cUR8xQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDkt ODcxMjJiNTE0ZTY5LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDktODcxMjJiNTE0ZTY5 LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqikOkAHe fGccn+L1lmZm2t+63foKJIYuuZJTpGxASaTqIkdU1O+XSKyEIiMBJbVoMI+Sla5Z m7d8LBDtdFri1BYQvCF18Gaux983Ja4bHj/tMhnioCFGTK9GHzoM482wn98TQKvN M19roIwObpMNN7QGVRC9R6fSjW/x/3OLUIYtIURw5YvUEunMxochBAPaSqOvNSuA 6FSqic6ZhJt0KDO6L+/Xi3rR/G8dwulYirLDjfJptt4lEFCMykwRUhvi3G4GdIae m5lXUakIH4RlEwtXqCz2kaS4bhJR8nuP9wSmwjbnhQ0mPGfyoJ0XnNx2SiWnTYKG uLASyi59QJXt9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:38 2025 by rpki-client