This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json) Hash identifier: gR0jfDRFDXsugC/8J6rs4Nr2U9n+N310cunQEop7l9M= Subject key identifier: E5:12:B9:FA:B0:FF:1A:B6:B0:CD:EB:22:E2:0C:71:91:41:3D:3A:3E Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08 Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108 Certificate serial: 019B4513DA66CD45DC4504F75A8482B59AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft Manifest number: 13AB Signing time: Mon 22 Dec 2025 08:01:27 +0000 Manifest this update: Mon 22 Dec 2025 08:01:27 +0000 Manifest next update: Tue 23 Dec 2025 08:01:27 +0000 Files and hashes: 1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=) 2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: yrDFWmiej3BxsWJd/BlB5HhiotLLb+qhbv2CWhr71Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:da:66:cd:45:dc:45:04:f7:5a:84:82:b5:9a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108 Validity Not Before: Dec 22 08:01:27 2025 GMT Not After : Dec 23 08:01:27 2025 GMT Subject: CN=e512b9fab0ff1ab6b0cdeb22e20c7191413d3a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:19:de:b9:71:1c:48:e1:90:db:17:d9:a7: c7:39:04:5c:bd:59:6c:52:b6:2c:98:10:9d:56:48: f7:b5:17:75:97:c0:b8:e4:07:dd:45:fe:14:c8:96: 7c:45:6b:1c:36:9e:12:38:3d:2a:77:96:1f:90:51: 01:f0:77:f2:2d:1a:2e:08:ac:17:e4:40:51:78:65: c0:4e:14:fa:0f:ff:60:e3:12:23:1c:ba:d6:4f:2b: 84:e8:64:73:b9:01:cc:e7:a4:cd:88:b9:0a:58:26: 3a:0d:a1:92:a2:dc:c4:6a:3b:89:c2:4d:37:a3:2c: 67:7c:f6:bb:e7:ae:78:db:0c:35:83:df:e2:3c:a7: 91:32:2d:ee:9a:0c:8c:c1:ca:81:4d:ec:74:38:ca: c2:40:b2:8e:ca:3b:54:ee:01:a9:8d:36:68:03:2a: 28:a4:5b:0b:13:c2:10:44:9f:fe:44:59:27:20:c9: 91:d9:4b:4b:b1:54:80:ea:a6:97:a3:2d:73:f8:12: cc:9d:b1:89:54:ba:7d:47:65:83:e1:31:5c:08:bd: 01:a0:f6:de:a4:85:c0:0e:ec:ce:e6:8a:b0:7a:65: a3:ff:0c:4d:40:ab:bf:e4:1e:a7:56:85:ae:39:97: 8a:b8:48:af:ee:5a:b9:ba:56:00:64:ad:25:9a:12: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:12:B9:FA:B0:FF:1A:B6:B0:CD:EB:22:E2:0C:71:91:41:3D:3A:3E X509v3 Authority Key Identifier: keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8c:f5:04:ea:06:b2:6f:c5:7a:6f:df:95:0c:25:14:7a:8e: 0b:f5:33:92:6f:4e:4f:76:43:6d:75:fc:4a:fc:8d:3f:57:65: 16:7a:b0:13:53:c5:c9:89:53:33:5b:7a:91:f4:4b:ed:c8:5f: 09:c8:38:34:f9:39:2c:dd:1d:3b:80:bd:30:85:f0:29:d7:81: a1:f1:c6:f8:07:62:c3:cd:e9:0b:62:6b:6a:bf:62:05:c5:bb: 53:d6:80:20:2a:f8:7e:1c:5e:6d:77:5e:43:c3:f1:68:3d:19: 22:5f:30:0f:2a:2f:95:5c:b1:7a:46:28:0b:52:b0:11:9e:4a: c0:83:6e:ab:40:8c:3e:7e:1c:f4:dc:08:64:f9:12:63:d5:cc: fb:1c:07:17:79:3b:4c:99:fd:26:cd:80:07:80:c3:bc:15:fa: 0d:b4:5c:50:76:b2:fe:e0:4e:4c:29:19:5d:a2:b2:5b:40:a0: 33:98:67:0e:46:c8:40:cb:a9:75:4f:59:3d:4d:57:01:0d:32: 88:4f:a2:60:17:ab:5f:fe:b4:24:d0:6b:49:e2:8e:0a:c7:c9: 96:44:89:1b:eb:ea:39:64:f4:6d:0f:79:38:f9:9e:e2:2b:fa: cd:85:a9:fd:1f:4a:57:3e:99:56:80:f3:67:b7:fc:79:5f:80: e3:71:d7:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE9pmzUXcRQT3WoSCtZrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjYzMzYyZmVkZWUxYzg5MTM1ZDU0MzRkMzdiNzM3NWVk NWExMDgwHhcNMjUxMjIyMDgwMTI3WhcNMjUxMjIzMDgwMTI3WjAzMTEwLwYDVQQD EyhlNTEyYjlmYWIwZmYxYWI2YjBjZGViMjJlMjBjNzE5MTQxM2QzYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos0Z3rlxHEjhkNsX2afHOQRcvVls UrYsmBCdVkj3tRd1l8C45AfdRf4UyJZ8RWscNp4SOD0qd5YfkFEB8HfyLRouCKwX 5EBReGXAThT6D/9g4xIjHLrWTyuE6GRzuQHM56TNiLkKWCY6DaGSotzEajuJwk03 oyxnfPa756542ww1g9/iPKeRMi3umgyMwcqBTex0OMrCQLKOyjtU7gGpjTZoAyoo pFsLE8IQRJ/+RFknIMmR2UtLsVSA6qaXoy1z+BLMnbGJVLp9R2WD4TFcCL0BoPbe pIXADuzO5oqwemWj/wxNQKu/5B6nVoWuOZeKuEiv7lq5ulYAZK0lmhIIowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUSufqw/xq2sM3rIuIMcZFBPTo+MB8GA1UdIwQY MBaAFFv2M2L+3uHIkTXVQ003tzde1aEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMt NmFkMGI2OWIyMDhmLzEvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMtNmFkMGI2OWIyMDhm LzEvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4z1BOoG sm/Fem/flQwlFHqOC/Uzkm9OT3ZDbXX8SvyNP1dlFnqwE1PFyYlTM1t6kfRL7chf Ccg4NPk5LN0dO4C9MIXwKdeBofHG+Adiw83pC2Jrar9iBcW7U9aAICr4fhxebXde Q8PxaD0ZIl8wDyovlVyxekYoC1KwEZ5KwINuq0CMPn4c9NwIZPkSY9XM+xwHF3k7 TJn9Js2AB4DDvBX6DbRcUHay/uBOTCkZXaKyW0CgM5hnDkbIQMupdU9ZPU1XAQ0y iE+iYBerX/60JNBrSeKOCsfJlkSJG+vqOWT0bQ95OPme4iv6zYWp/R9KVz6ZVoDz Z7f8eV+A43HX5g== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:56 2025 by rpki-client