This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json) Hash identifier: NDp219bEZ/z61khlttJyuwfPVGlUxeM0kk7ijo8Yqbg= Subject key identifier: 19:17:11:A3:4B:BA:39:D7:DA:79:8E:EE:19:F4:71:D9:DD:9E:F9:95 Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Certificate serial: 019AF31BD5B545FFEBF7E6B982C5A7827871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft Manifest number: 16B8 Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=) 2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: 4c6n2lDaMpi1Zvnj6NGE+xl9tfnKnMUUMT9RH8T0Hq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d5:b5:45:ff:eb:f7:e6:b9:82:c5:a7:82:78:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=191711a34bba39d7da798eee19f471d9dd9ef995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:83:ee:e3:39:58:e1:7f:2b:a7:d1:ee:9a:c4: 29:ba:5b:51:3c:b5:0b:0d:a9:d3:6b:34:24:eb:c8: c2:dc:18:90:7a:55:5f:a0:fc:63:76:be:21:f8:8b: c6:a0:6b:ac:77:42:7f:95:1f:99:25:c5:59:16:b1: f8:1e:d6:b8:19:32:3a:f3:4c:01:1e:c5:84:14:76: ff:5c:72:0f:79:c3:9e:9e:3a:ce:1f:4c:5d:39:07: c5:2c:4e:41:42:79:04:cd:4b:4c:b5:78:cf:b5:ce: f5:fa:e9:d4:40:a7:a7:4b:5f:fa:dc:33:e8:0b:53: 06:6e:b9:af:50:6f:f5:a5:1e:9c:8e:1d:58:27:e9: 25:1b:45:fe:25:6e:9d:df:c4:5e:8f:09:76:a2:e3: 52:2c:fa:7d:76:cf:42:ca:03:5b:a5:e0:8a:61:33: 2b:32:b4:84:96:29:08:58:05:ff:78:db:d2:de:2d: 62:da:3b:3a:12:34:c0:cd:59:ed:4f:7d:20:3b:f6: a6:8b:7f:33:1b:4a:23:b9:61:e0:fc:6a:51:d5:b8: 4b:70:e6:2b:b2:27:7f:84:54:31:11:0d:a6:fe:d5: 3d:d9:b1:41:02:18:a5:68:ae:f3:da:95:b3:be:1d: 2f:40:35:cc:7e:8c:54:a5:11:8e:9a:ed:4c:8f:53: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:11:A3:4B:BA:39:D7:DA:79:8E:EE:19:F4:71:D9:DD:9E:F9:95 X509v3 Authority Key Identifier: keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:72:24:4a:61:eb:e2:99:5a:30:fb:1a:36:fd:4f:5e:68:3f: e2:ef:4b:49:85:22:2b:5b:56:ec:1f:20:77:79:3e:78:98:f2: 6c:a3:a9:1c:4b:dc:2f:7a:d6:70:55:ae:cc:b5:3a:62:77:d3: 4d:09:b9:d4:60:17:af:ce:1b:c6:54:94:40:01:f7:bb:2f:75: 7a:42:5f:76:cd:83:0d:e9:63:f1:f0:a8:e8:14:8b:28:36:e3: bd:7d:44:a0:4c:3d:5a:05:8c:13:22:03:06:b7:18:46:e7:64: 4e:e3:3b:e7:82:c2:51:13:c6:83:b0:ff:6d:7c:68:16:22:f8: d5:d2:61:70:fc:21:de:a4:30:80:ba:e8:a0:d0:83:db:ac:98: 3c:bb:7a:c1:c8:84:b9:75:01:1c:0b:6f:46:14:c7:db:d2:a6: 67:d6:cd:90:83:b1:e3:6a:8e:aa:22:6f:d8:c0:8f:2c:c9:4c: 49:2e:dc:1c:6e:85:4d:fb:64:a3:16:74:92:c2:53:77:e7:75: c4:04:3d:45:57:a2:be:df:7b:bd:25:a3:89:ad:23:98:6b:9e: 8e:09:81:ac:1e:b8:70:f6:40:fa:84:73:c8:ad:08:69:b9:33: 41:d2:ae:fe:1f:e8:1f:61:07:97:ca:c4:65:5e:fe:78:3a:4c: 53:48:20:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9W1Rf/r9+a5gsWngnhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxODVkNzI0M2FlOTg2Y2RlNDg0MTRlNmFkODFmMjIyOWMw YTU3ZDgwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD EygxOTE3MTFhMzRiYmEzOWQ3ZGE3OThlZWUxOWY0NzFkOWRkOWVmOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YPu4zlY4X8rp9HumsQpultRPLUL DanTazQk68jC3BiQelVfoPxjdr4h+IvGoGusd0J/lR+ZJcVZFrH4Hta4GTI680wB HsWEFHb/XHIPecOenjrOH0xdOQfFLE5BQnkEzUtMtXjPtc71+unUQKenS1/63DPo C1MGbrmvUG/1pR6cjh1YJ+klG0X+JW6d38Rejwl2ouNSLPp9ds9CygNbpeCKYTMr MrSElikIWAX/eNvS3i1i2js6EjTAzVntT30gO/ami38zG0ojuWHg/GpR1bhLcOYr sid/hFQxEQ2m/tU92bFBAhilaK7z2pWzvh0vQDXMfoxUpRGOmu1Mj1P5UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkXEaNLujnX2nmO7hn0cdndnvmVMB8GA1UdIwQY MBaAFMGF1yQ66YbN5IQU5q2B8iKcClfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt YTdlZGI3ZDNmNTM3LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3 LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHIkSmHr 4plaMPsaNv1PXmg/4u9LSYUiK1tW7B8gd3k+eJjybKOpHEvcL3rWcFWuzLU6YnfT TQm51GAXr84bxlSUQAH3uy91ekJfds2DDelj8fCo6BSLKDbjvX1EoEw9WgWMEyID BrcYRudkTuM754LCURPGg7D/bXxoFiL41dJhcPwh3qQwgLrooNCD26yYPLt6wciE uXUBHAtvRhTH29KmZ9bNkIOx42qOqiJv2MCPLMlMSS7cHG6FTftkoxZ0ksJTd+d1 xAQ9RVeivt97vSWjia0jmGuejgmBrB64cPZA+oRzyK0IabkzQdKu/h/oH2EHl8rE ZV7+eDpMU0gguQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:42 2025 by rpki-client