This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json) Hash identifier: Zrc7YPulK0hm8I0FTCuW+Gh+2Roe3ERC1aKVMEDd4PE= Subject key identifier: 31:2C:CF:B2:C7:C1:7A:EE:14:57:8A:73:EE:92:FE:8E:79:D2:61:33 Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba Certificate serial: 019B274039F4FB5E3693250ED8E7554B6063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft Manifest number: 02B8 Signing time: Tue 16 Dec 2025 13:01:19 +0000 Manifest this update: Tue 16 Dec 2025 13:01:19 +0000 Manifest next update: Wed 17 Dec 2025 13:01:19 +0000 Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=) 2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: 2gbRON/ymoKcHjt9cXQknWG0NhFrlhLqtY7mBl0jVq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:39:f4:fb:5e:36:93:25:0e:d8:e7:55:4b:60:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba Validity Not Before: Dec 16 13:01:19 2025 GMT Not After : Dec 17 13:01:19 2025 GMT Subject: CN=312ccfb2c7c17aee14578a73ee92fe8e79d26133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:dc:46:86:b7:3c:94:23:21:fb:96:fb:b7: 4a:87:07:7a:f9:7e:83:48:79:fe:3d:21:2b:bc:92: 36:9a:57:ca:dc:c1:e1:43:f8:78:71:16:a4:e4:6c: 2d:1f:5f:4f:11:d3:ce:94:fe:54:3d:01:57:53:9f: 82:44:4e:3a:4b:bb:e0:6a:88:c1:cc:bd:89:12:a9: 44:8c:56:b3:c9:2f:e3:56:df:ce:7c:0a:f6:ea:f4: 62:7c:98:d1:2e:3e:d6:33:f5:33:be:67:aa:6e:6a: ce:cc:1d:43:33:f1:9d:81:e2:ad:55:cd:39:69:db: f4:65:55:f3:7d:de:ef:f2:e0:51:57:c3:54:9e:5c: 79:cc:a5:3a:96:eb:45:56:3b:8b:b1:38:f2:63:a1: cd:7a:c9:dc:ea:e6:b9:fb:f0:16:1e:1a:c7:e3:58: cd:81:a4:62:88:c9:a2:72:f7:e9:40:96:ce:d2:d7: 13:b5:4b:27:1c:76:c8:b4:d4:00:80:f1:ca:3f:8b: ba:07:ea:b1:ec:54:4d:e7:13:d4:c8:a5:a3:3f:b4: 6d:43:14:c8:cb:06:d3:17:33:96:a3:cd:aa:20:88: 0e:d9:6c:68:32:21:10:c9:d6:7c:13:34:f6:a6:37: aa:0e:e8:78:f9:0a:14:56:1b:28:2e:b9:0e:9e:88: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2C:CF:B2:C7:C1:7A:EE:14:57:8A:73:EE:92:FE:8E:79:D2:61:33 X509v3 Authority Key Identifier: keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2f:c8:07:97:99:c6:57:07:80:cc:74:9e:40:42:00:99:80: d8:d3:a2:77:37:08:ce:cc:71:89:82:0a:13:86:e5:b9:5b:af: 5f:6e:83:a7:f0:44:e9:ce:dc:6f:0e:27:05:1a:9d:26:b6:72: ec:e7:e8:99:12:34:eb:2c:a6:af:4f:60:d5:b0:2c:90:bd:d1: 0e:c8:22:01:72:b2:cf:5f:d9:61:0a:12:34:25:34:74:f6:4c: 60:76:fb:d5:86:72:2f:98:c9:9e:4b:d5:fe:8e:b9:80:0d:36: e1:51:64:93:da:3f:15:5c:d3:ad:63:ce:45:51:35:ad:4a:e5: 30:77:13:43:28:ef:b0:c6:f6:d2:67:11:ac:78:06:c9:c4:f0: 91:56:3e:b5:2a:71:16:3e:7d:38:1d:83:21:8e:3b:00:6e:10: 0f:41:a1:cf:d0:49:e4:7b:28:22:9c:3c:c5:19:b6:37:0f:55: 76:ab:84:3f:1c:cc:4b:03:72:6d:a5:ef:82:7a:99:f3:8c:a6: 82:a5:40:67:cf:33:d2:0c:32:82:52:a7:0d:b5:b2:5c:78:6f: f7:83:7f:b3:ae:22:a6:f3:ca:73:4b:10:77:1a:59:7a:5d:3c: 80:3f:c4:1b:a9:8e:d6:94:cc:6c:94:f1:25:10:ea:3c:b9:5e: 85:33:3e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQDn0+142kyUO2OdVS2BjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODViZDQxYTU5YTJkNDUxZTYyNzA4MzVkYTE0Mzk5ZmY2 MmJhYmEwHhcNMjUxMjE2MTMwMTE5WhcNMjUxMjE3MTMwMTE5WjAzMTEwLwYDVQQD EygzMTJjY2ZiMmM3YzE3YWVlMTQ1NzhhNzNlZTkyZmU4ZTc5ZDI2MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrPcRoa3PJQjIfuW+7dKhwd6+X6D SHn+PSErvJI2mlfK3MHhQ/h4cRak5GwtH19PEdPOlP5UPQFXU5+CRE46S7vgaojB zL2JEqlEjFazyS/jVt/OfAr26vRifJjRLj7WM/UzvmeqbmrOzB1DM/GdgeKtVc05 adv0ZVXzfd7v8uBRV8NUnlx5zKU6lutFVjuLsTjyY6HNesnc6ua5+/AWHhrH41jN gaRiiMmicvfpQJbO0tcTtUsnHHbItNQAgPHKP4u6B+qx7FRN5xPUyKWjP7RtQxTI ywbTFzOWo82qIIgO2WxoMiEQydZ8EzT2pjeqDuh4+QoUVhsoLrkOnojLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEsz7LHwXruFFeKc+6S/o550mEzMB8GA1UdIwQY MBaAFFmFvUGlmi1FHmJwg12hQ5n/Yrq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hMDRjNDUtNjk0YS00Y2ExLWI1ZmIt OTNkY2ExOTlkODgwLzEvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hMDRjNDUtNjk0YS00Y2ExLWI1ZmItOTNkY2ExOTlkODgw LzEvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS/IB5eZ xlcHgMx0nkBCAJmA2NOidzcIzsxxiYIKE4bluVuvX26Dp/BE6c7cbw4nBRqdJrZy 7OfomRI06yymr09g1bAskL3RDsgiAXKyz1/ZYQoSNCU0dPZMYHb71YZyL5jJnkvV /o65gA024VFkk9o/FVzTrWPORVE1rUrlMHcTQyjvsMb20mcRrHgGycTwkVY+tSpx Fj59OB2DIY47AG4QD0Ghz9BJ5HsoIpw8xRm2Nw9VdquEPxzMSwNybaXvgnqZ84ym gqVAZ88z0gwyglKnDbWyXHhv94N/s64ipvPKc0sQdxpZel08gD/EG6mO1pTMbJTx JRDqPLlehTM+Mg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:33:32 2025 by rpki-client