This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft File: WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json) Hash identifier: eoWL8PGyBoLpyYWggaW1aDh2WbHXHl8TuEVmjgw0vi4= Subject key identifier: E8:DC:C9:9B:BD:98:31:3B:0F:B6:64:E3:5D:DF:4B:A1:94:17:F8:98 Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65 Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465 Certificate serial: 019B2A40F67048E257F8A809944F7534D584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft Manifest number: 0CA6 Signing time: Wed 17 Dec 2025 03:00:59 +0000 Manifest this update: Wed 17 Dec 2025 03:00:59 +0000 Manifest next update: Thu 18 Dec 2025 03:00:59 +0000 Files and hashes: 1: B8UFPGQw9x1qghEKWHyh34dW9Oc.roa (hash: ywFYtvx0NroO2K3FRCIUWY9DywW+W/YxpiNCO/8quMc=) 2: FdWV2F8xywrkJr_ZVSWY8qWRv_A.roa (hash: X0QnMJo/L6uBm6V2nWu9aN26xqXlZf++2BNldb6DVIg=) 3: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: qHRA1+7/7IADBUVeYV5/2aw0AsWAZ5rUM4i9fU8DcLI=) 4: b2nv7c16taiMY7lqlyo1vW0yars.roa (hash: cEulSKA26PCcgT5q7VJTUwPAnJnY+2U0A9I6b42tRhY=) 5: tizL6qWbIsOeypyIPPPfmLusGE0.roa (hash: sAyubtv15VYxRHUf9fkBNCBE+xwZmyTEiVd/Zqvt42M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:40:f6:70:48:e2:57:f8:a8:09:94:4f:75:34:d5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465 Validity Not Before: Dec 17 03:00:59 2025 GMT Not After : Dec 18 03:00:59 2025 GMT Subject: CN=e8dcc99bbd98313b0fb664e35ddf4ba19417f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:3f:11:09:b9:39:c5:e4:8f:b0:5a:c2:b8: 2e:a3:fc:62:dc:11:cb:07:d7:f6:fe:8f:c8:7b:1a: b2:c1:cc:c3:50:e1:64:11:90:96:85:0c:5f:5c:8a: 42:14:1e:bb:77:29:cb:77:eb:3e:42:dc:c3:69:0f: 81:57:85:f9:ff:c5:9c:26:3b:ab:67:5a:78:06:2b: dc:d2:14:86:43:35:01:7d:8f:16:a3:1c:8d:23:e4: bd:e5:9c:85:82:40:fb:92:31:b4:89:8e:a9:9a:3e: 8b:a9:94:26:1c:c9:aa:6c:f0:0c:d9:b0:69:c1:6a: b9:14:0c:0b:9e:6a:e2:cc:48:21:f2:06:ce:97:c3: ed:06:38:5f:1b:b5:80:8b:5c:56:16:a9:62:f7:6c: 62:4a:e0:1f:cc:5a:02:6d:95:b5:4f:de:6d:f1:b3: 31:60:3c:72:11:ae:69:b1:df:ec:39:99:02:eb:e6: ec:73:e7:0a:53:d6:fe:46:22:3d:e8:be:be:76:9e: 32:35:d9:36:07:a9:ba:e6:b0:88:d8:38:79:bf:d3: 99:14:56:44:e3:9e:21:fd:11:fb:ad:0d:1b:5b:ea: 1b:c5:fd:4f:df:94:d2:ae:5a:d8:05:6e:e8:13:9f: ca:77:45:fb:00:3e:6a:d3:95:e4:2f:f0:2d:3a:51: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DC:C9:9B:BD:98:31:3B:0F:B6:64:E3:5D:DF:4B:A1:94:17:F8:98 X509v3 Authority Key Identifier: keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:41:64:0f:8c:fd:42:d8:6a:a6:c0:da:c0:43:fb:9f:05:4b: 7d:67:4c:47:30:94:a7:53:5f:d5:9d:3e:1c:d9:31:98:53:d6: 8e:a5:e5:de:ee:a0:13:21:78:75:6b:0c:36:f2:d1:64:06:a2: 0b:7e:7e:33:ff:f9:81:e8:b8:99:c2:0e:91:25:cb:f9:0e:0e: 96:87:ff:83:87:c7:06:73:ca:33:32:31:df:36:14:8f:ff:c2: 21:9a:81:27:94:14:43:f7:f6:74:64:de:bf:bc:a9:4d:b4:43: 59:fb:88:92:c9:02:9d:98:d4:ad:09:1d:dd:fd:02:b7:a0:dc: 6f:02:30:28:24:bd:87:e7:70:63:6e:9a:da:57:5e:9d:26:e1: 3e:e6:42:23:2a:96:ee:8c:0b:c3:fc:5b:f5:83:56:39:8a:8d: 18:29:30:19:df:c9:6a:bb:31:8e:e9:5f:aa:ab:c5:ed:06:cd: 12:c5:14:93:ea:a4:32:87:4b:e2:9f:e4:61:2d:0f:70:52:1a: 13:d1:a9:33:63:da:e9:a8:15:76:f0:d8:b9:40:7a:d8:e0:ec: 4d:a1:0b:ab:ca:58:6a:12:c5:fd:69:e4:2b:69:b2:10:62:eb: 31:86:e7:e7:77:06:f5:02:85:51:7e:6b:fd:bd:73:f0:ae:c9: 9e:f5:7b:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqQPZwSOJX+KgJlE91NNWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGNhYmY2ZjUyM2YyNmUyNjdkYjAzYjUyNDM0Nzg0MWFh YWE0NjUwHhcNMjUxMjE3MDMwMDU5WhcNMjUxMjE4MDMwMDU5WjAzMTEwLwYDVQQD EyhlOGRjYzk5YmJkOTgzMTNiMGZiNjY0ZTM1ZGRmNGJhMTk0MTdmODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptg/EQm5OcXkj7Bawrguo/xi3BHL B9f2/o/IexqywczDUOFkEZCWhQxfXIpCFB67dynLd+s+QtzDaQ+BV4X5/8WcJjur Z1p4Bivc0hSGQzUBfY8WoxyNI+S95ZyFgkD7kjG0iY6pmj6LqZQmHMmqbPAM2bBp wWq5FAwLnmrizEgh8gbOl8PtBjhfG7WAi1xWFqli92xiSuAfzFoCbZW1T95t8bMx YDxyEa5psd/sOZkC6+bsc+cKU9b+RiI96L6+dp4yNdk2B6m65rCI2Dh5v9OZFFZE 454h/RH7rQ0bW+obxf1P35TSrlrYBW7oE5/Kd0X7AD5q05XkL/AtOlHszQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjcyZu9mDE7D7Zk413fS6GUF/iYMB8GA1UdIwQY MBaAFFiMq/b1I/JuJn2wO1JDR4QaqqRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQt NmFkMzI1MmExNDI3LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQtNmFkMzI1MmExNDI3 LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAykFkD4z9 QthqpsDawEP7nwVLfWdMRzCUp1Nf1Z0+HNkxmFPWjqXl3u6gEyF4dWsMNvLRZAai C35+M//5gei4mcIOkSXL+Q4Olof/g4fHBnPKMzIx3zYUj//CIZqBJ5QUQ/f2dGTe v7ypTbRDWfuIkskCnZjUrQkd3f0Ct6DcbwIwKCS9h+dwY26a2ldenSbhPuZCIyqW 7owLw/xb9YNWOYqNGCkwGd/JarsxjulfqqvF7QbNEsUUk+qkModL4p/kYS0PcFIa E9GpM2Pa6agVdvDYuUB62ODsTaELq8pYahLF/WnkK2myEGLrMYbn53cG9QKFUX5r /b1z8K7JnvV7GA== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:25 2025 by rpki-client