This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json) Hash identifier: 4sccBM24JFxFrqnRqHyTrAs2rIPfmTexZqYyVM3cD2o= Subject key identifier: FE:DD:1F:52:B8:94:DC:3F:F2:A2:E8:FB:52:13:6A:A3:18:2D:D0:F0 Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba Certificate serial: 019AF12D5147DEF08AF6F2F378346340B4D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft Manifest number: 029C Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=) 2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: 8xSX6X5K8zp/Qgzf/+Y0yh6jwcamRuq2QmltEa1E77w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:51:47:de:f0:8a:f6:f2:f3:78:34:63:40:b4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=fedd1f52b894dc3ff2a2e8fb52136aa3182dd0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:22:b4:d2:cd:2b:27:7d:6b:2b:c2:73:23:d5: 3e:46:68:6c:55:4b:a7:0d:6b:bd:34:a5:d9:11:f5: fe:c6:7d:af:b8:b7:54:40:3c:61:e1:1c:91:92:d7: f4:08:5e:85:11:60:1d:12:47:54:ff:ed:40:6e:65: 2b:cc:eb:1a:49:9b:a5:34:a1:8d:43:f0:92:82:53: 40:c9:66:c0:83:47:83:f0:04:bd:25:ab:f1:f7:1b: 41:73:23:cd:72:e8:64:59:97:cd:52:8b:d5:c8:a6: 17:54:f3:3c:0a:4c:16:a6:a2:17:8b:c4:4c:cc:bb: b1:11:e2:86:9d:65:87:e7:d3:47:9b:42:f6:b6:32: 56:b0:d4:a6:52:1b:ca:b5:b5:34:ae:73:3a:41:43: 74:0e:91:b5:f1:f6:77:33:fa:ef:39:85:d7:58:13: 1c:1b:aa:73:67:61:15:6c:eb:77:95:d5:f1:5c:b9: aa:a1:20:a5:54:4d:1b:dc:9b:ab:9f:c1:f8:35:c9: 3d:0f:6b:21:73:dc:d4:1a:2c:86:da:4b:9b:3f:ec: d1:e5:9d:bf:36:55:0c:f5:3f:eb:df:19:7f:c2:e5: f4:77:e0:29:aa:db:a4:bb:7b:73:5b:af:3a:94:95: 6f:a6:af:d0:48:fa:09:91:05:e0:e3:ee:ee:33:e7: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:1F:52:B8:94:DC:3F:F2:A2:E8:FB:52:13:6A:A3:18:2D:D0:F0 X509v3 Authority Key Identifier: keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:6a:0a:ac:63:86:b7:9b:ad:d5:1b:e8:58:fe:cd:a0:f1:4d: 63:a7:22:20:bb:3c:3f:3f:5f:d7:ee:99:10:2a:41:a9:b4:4b: 86:ed:cd:30:b1:a0:e6:1c:bb:ab:41:65:70:b1:72:55:c4:fa: a9:48:ca:42:de:c5:f1:6c:b7:48:04:3d:28:70:27:a6:92:bb: 93:d7:c7:c8:74:95:91:fc:a5:34:c6:4d:b1:3a:d0:79:e6:be: 28:8d:dc:e1:9c:53:ce:78:19:bf:ae:ab:5a:ef:41:08:b4:f4: 23:ff:c5:85:61:16:30:ca:a3:5a:3d:84:97:27:02:ea:39:f2: 2b:a3:7c:e4:35:5b:cb:c3:8a:e8:73:0a:18:d9:2c:41:0d:29: a4:01:5c:d4:84:05:3b:65:3a:4a:0a:ce:c4:53:30:bb:fb:b0: c9:56:63:a2:75:2e:9b:1b:5b:e2:2b:e5:b5:82:b7:0c:34:ec: 54:fe:42:c1:73:4f:fc:59:22:67:cf:39:96:3f:cb:95:65:2c: 76:e2:24:cd:a6:5a:da:01:b1:71:9b:eb:9a:b9:26:db:0b:f6: 1c:e8:20:de:e6:d8:69:c0:0e:64:a9:36:49:b3:78:45:bd:47: f3:b5:5a:de:89:e4:78:7d:c6:b4:4d:41:6f:2f:6a:8f:5d:12: 47:81:c6:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVFH3vCK9vLzeDRjQLTRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODViZDQxYTU5YTJkNDUxZTYyNzA4MzVkYTE0Mzk5ZmY2 MmJhYmEwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EyhmZWRkMWY1MmI4OTRkYzNmZjJhMmU4ZmI1MjEzNmFhMzE4MmRkMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yK00s0rJ31rK8JzI9U+RmhsVUun DWu9NKXZEfX+xn2vuLdUQDxh4RyRktf0CF6FEWAdEkdU/+1AbmUrzOsaSZulNKGN Q/CSglNAyWbAg0eD8AS9Javx9xtBcyPNcuhkWZfNUovVyKYXVPM8CkwWpqIXi8RM zLuxEeKGnWWH59NHm0L2tjJWsNSmUhvKtbU0rnM6QUN0DpG18fZ3M/rvOYXXWBMc G6pzZ2EVbOt3ldXxXLmqoSClVE0b3Jurn8H4Nck9D2shc9zUGiyG2kubP+zR5Z2/ NlUM9T/r3xl/wuX0d+Apqtuku3tzW686lJVvpq/QSPoJkQXg4+7uM+c9uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7dH1K4lNw/8qLo+1ITaqMYLdDwMB8GA1UdIwQY MBaAFFmFvUGlmi1FHmJwg12hQ5n/Yrq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hMDRjNDUtNjk0YS00Y2ExLWI1ZmIt OTNkY2ExOTlkODgwLzEvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hMDRjNDUtNjk0YS00Y2ExLWI1ZmItOTNkY2ExOTlkODgw LzEvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGoKrGOG t5ut1RvoWP7NoPFNY6ciILs8Pz9f1+6ZECpBqbRLhu3NMLGg5hy7q0FlcLFyVcT6 qUjKQt7F8Wy3SAQ9KHAnppK7k9fHyHSVkfylNMZNsTrQeea+KI3c4ZxTzngZv66r Wu9BCLT0I//FhWEWMMqjWj2ElycC6jnyK6N85DVby8OK6HMKGNksQQ0ppAFc1IQF O2U6SgrOxFMwu/uwyVZjonUumxtb4ivltYK3DDTsVP5CwXNP/FkiZ885lj/LlWUs duIkzaZa2gGxcZvrmrkm2wv2HOgg3ubYacAOZKk2SbN4Rb1H87Va3onkeH3GtE1B by9qj10SR4HG5g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:44 2025 by rpki-client