This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft File: WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json) Hash identifier: 2q93SPrbSG4XzQaNg3wM9B+gcf3r5aUpJ6zVoG3GVkc= Subject key identifier: 91:71:1F:2F:49:F4:84:DE:14:92:B6:21:A5:3D:B2:A1:A3:0B:12:C3 Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB Certificate issuer: /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb Certificate serial: 019B3DFEB6FE27506C3BB937AC7BE279A5A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft Manifest number: 028E Signing time: Sat 20 Dec 2025 23:01:01 +0000 Manifest this update: Sat 20 Dec 2025 23:01:01 +0000 Manifest next update: Sun 21 Dec 2025 23:01:01 +0000 Files and hashes: 1: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: uuwI8T+kLHuHJCKrxbNHCHb3lQTHtETU9yh5ZRLs7z0=) 2: yJQwQMARRrVe9vIkjsREE8o5TT8.roa (hash: eXLzlsDPHHeDqRfh3yuG7C5MD8Da8VfpIofRm28xfrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b6:fe:27:50:6c:3b:b9:37:ac:7b:e2:79:a5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb Validity Not Before: Dec 20 23:01:01 2025 GMT Not After : Dec 21 23:01:01 2025 GMT Subject: CN=91711f2f49f484de1492b621a53db2a1a30b12c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:58:52:f5:2e:dc:0e:c6:16:de:af:60:cb: f3:bf:03:2e:98:c3:03:9c:e6:82:c4:58:43:61:61: 6f:be:b3:d8:88:aa:6f:54:dd:d3:0f:9f:f8:cf:4e: 19:29:8f:7c:85:19:bf:1b:1b:d1:2a:f8:77:ac:6c: 98:ce:b0:e1:77:17:37:09:2b:7d:05:b4:3f:bb:e5: 85:4b:9c:33:bb:1d:e3:6f:4f:e3:db:5b:01:ea:fc: cc:da:ed:52:95:0c:70:f2:6b:d9:07:a9:83:28:7c: cc:e8:57:41:84:6d:78:62:c0:9f:90:da:19:d1:e9: db:c4:86:94:4c:30:b7:ad:f9:1d:44:10:60:13:8c: 73:fe:9a:2b:d8:24:2f:ba:ff:18:3e:7e:f9:1d:31: e5:b1:25:8c:ff:ed:20:b5:1a:e7:cb:73:ab:e4:3d: 89:17:83:77:7e:3d:b3:b9:8a:17:d3:bc:57:9e:d5: f8:ee:7b:f9:0e:56:a9:7c:07:98:69:16:8e:b2:f5: b7:d8:88:3b:1b:e0:f3:6f:ad:1c:53:2b:34:32:10: 10:07:10:25:d8:32:db:67:f6:74:61:a1:13:1a:ef: 3b:38:e5:0d:c1:f6:6f:9d:27:7d:22:1d:81:ae:15: 70:14:bc:14:5d:b1:eb:95:e3:6a:e4:eb:11:70:db: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:71:1F:2F:49:F4:84:DE:14:92:B6:21:A5:3D:B2:A1:A3:0B:12:C3 X509v3 Authority Key Identifier: keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f2:01:57:88:3f:ad:29:12:9d:d4:bc:db:f9:52:fb:67:8d: 7f:0d:08:2a:cf:92:82:45:95:15:dd:68:af:02:de:bc:6b:6c: ad:8f:6b:78:b0:da:9c:27:5c:92:38:a7:ee:df:93:46:51:e9: 5b:a2:44:30:59:69:71:74:a2:c4:08:52:db:dc:8c:1b:5c:6e: 1d:9b:2e:bd:8a:bb:e2:8f:30:47:48:76:59:56:da:50:d0:51: da:7f:21:3d:71:6d:db:47:8e:fd:cc:ad:df:99:d2:f8:79:93: f4:8d:b3:32:07:34:44:00:8a:84:56:18:67:cd:63:fd:ec:d7: 5c:2a:48:6d:63:fd:aa:e6:88:62:d4:61:e0:0e:56:d0:2a:6d: 4a:44:3a:3d:77:50:8d:11:75:a6:64:31:84:b5:e4:a1:c6:e8: ea:11:74:76:75:fb:e6:fe:e9:d0:56:7d:6f:42:0f:78:ec:f6: 89:6b:70:2b:e1:e3:06:b2:4c:e8:3d:f9:3f:99:f4:77:40:f3: f0:19:d9:31:8f:64:2a:8e:32:cc:ba:0a:8f:b2:24:51:4d:3d: 4d:85:09:2a:bb:5b:6e:cd:7c:49:a1:00:f8:81:da:54:38:3d: 64:0c:f7:a1:8a:b0:48:0e:60:27:41:cc:9a:c1:7b:09:f1:d3: 1e:08:f5:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rb+J1BsO7k3rHvieaWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMjUyOGRjMDc1ZDUxZTczZWUwZDA5MGUxZDJhMWY1Y2Zh ZThmZmIwHhcNMjUxMjIwMjMwMTAxWhcNMjUxMjIxMjMwMTAxWjAzMTEwLwYDVQQD Eyg5MTcxMWYyZjQ5ZjQ4NGRlMTQ5MmI2MjFhNTNkYjJhMWEzMGIxMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurtYUvUu3A7GFt6vYMvzvwMumMMD nOaCxFhDYWFvvrPYiKpvVN3TD5/4z04ZKY98hRm/GxvRKvh3rGyYzrDhdxc3CSt9 BbQ/u+WFS5wzux3jb0/j21sB6vzM2u1SlQxw8mvZB6mDKHzM6FdBhG14YsCfkNoZ 0enbxIaUTDC3rfkdRBBgE4xz/por2CQvuv8YPn75HTHlsSWM/+0gtRrny3Or5D2J F4N3fj2zuYoX07xXntX47nv5DlapfAeYaRaOsvW32Ig7G+Dzb60cUys0MhAQBxAl 2DLbZ/Z0YaETGu87OOUNwfZvnSd9Ih2BrhVwFLwUXbHrleNq5OsRcNuz7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFxHy9J9ITeFJK2IaU9sqGjCxLDMB8GA1UdIwQY MBaAFFslKNwHXVHnPuDQkOHSofXPro/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYt YzI5NDEyMTRjYjk2LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYtYzI5NDEyMTRjYjk2 LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvIBV4g/ rSkSndS82/lS+2eNfw0IKs+SgkWVFd1orwLevGtsrY9reLDanCdckjin7t+TRlHp W6JEMFlpcXSixAhS29yMG1xuHZsuvYq74o8wR0h2WVbaUNBR2n8hPXFt20eO/cyt 35nS+HmT9I2zMgc0RACKhFYYZ81j/ezXXCpIbWP9quaIYtRh4A5W0CptSkQ6PXdQ jRF1pmQxhLXkocbo6hF0dnX75v7p0FZ9b0IPeOz2iWtwK+HjBrJM6D35P5n0d0Dz 8BnZMY9kKo4yzLoKj7IkUU09TYUJKrtbbs18SaEA+IHaVDg9ZAz3oYqwSA5gJ0HM msF7CfHTHgj1ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:13:31 2025 by rpki-client