This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json) Hash identifier: QZ4UZJw/fan8KwDy5oGzQdBOurlX44XlKgdWRQ+fJUQ= Subject key identifier: 60:5E:16:34:72:10:BC:97:9F:1D:26:37:11:D9:50:5F:0C:25:C8:A0 Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802 Certificate serial: 019B390F5AA50D2C4A3703D4ABCABD3FB6CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft Manifest number: 11E6 Signing time: Sat 20 Dec 2025 00:01:06 +0000 Manifest this update: Sat 20 Dec 2025 00:01:06 +0000 Manifest next update: Sun 21 Dec 2025 00:01:06 +0000 Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=) 2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=) 3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: vsNXffIUB0xU45Kg8KGVV0BDZ6fUj9sdpeTDxyUJEIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:5a:a5:0d:2c:4a:37:03:d4:ab:ca:bd:3f:b6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59877720c014688494ea6910c83474de13e99802 Validity Not Before: Dec 20 00:01:06 2025 GMT Not After : Dec 21 00:01:06 2025 GMT Subject: CN=605e16347210bc979f1d263711d9505f0c25c8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:93:30:3c:13:ef:e2:6f:c9:a7:fe:6a:58: bd:da:6a:48:4e:14:5c:75:ed:f0:2e:dd:95:e6:af: c6:4f:bf:9d:46:1f:f6:d8:02:46:1c:cc:c1:46:d8: 00:aa:6a:45:ea:97:cf:16:8a:42:b0:e1:df:79:64: fa:d8:43:de:03:4c:65:65:8f:ee:15:15:6b:e6:c2: 87:06:2a:b9:c8:e9:44:32:65:2e:f5:9f:ad:98:2e: 9c:2b:ba:e5:f7:ba:33:5a:55:0b:54:86:90:cb:be: 88:72:5f:7a:af:a9:77:98:70:60:0b:df:c0:db:d8: 60:56:98:4f:9c:21:b6:6f:04:a3:e2:20:b2:12:bf: df:af:ed:99:51:3e:0a:57:2c:d0:e5:bd:2f:4f:de: 2d:eb:57:d3:fb:20:4a:79:8b:64:7f:60:77:c7:cf: d5:15:c0:ae:16:65:ab:18:45:0e:0c:4b:16:93:4b: 7e:ff:bc:ee:c1:9f:da:cc:2b:ae:4e:c6:27:44:25: 56:86:e1:b2:db:fa:55:b5:0e:69:ff:7a:e1:51:e9: 34:e7:a5:d0:4e:6f:7a:ea:68:c4:8f:31:a5:c4:37: b6:52:d9:81:30:ea:8c:db:86:e3:fa:4d:89:d8:bc: 84:14:91:bc:55:cb:05:68:2c:dc:2d:28:af:c3:37: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5E:16:34:72:10:BC:97:9F:1D:26:37:11:D9:50:5F:0C:25:C8:A0 X509v3 Authority Key Identifier: keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5a:49:2f:b8:15:ca:d3:17:ae:29:e2:b5:96:44:d1:41:c8: 9a:09:fd:6e:ed:17:e8:f4:4c:16:36:a8:b4:fb:2c:b4:63:29: bf:26:73:19:4e:1c:4f:39:fa:56:f6:e8:24:c8:44:7b:f4:7e: ec:70:35:ee:e5:c0:d7:fe:07:b6:1e:3b:c0:2c:d0:40:04:81: 11:a1:2b:d8:77:f7:ba:60:c6:e9:12:e2:26:44:6f:33:db:8c: 07:bf:3f:d2:9c:86:9a:77:82:af:e8:2e:e5:8d:8d:10:30:b7: 57:62:b2:c0:cd:12:9b:f9:c9:94:0c:40:f1:e7:e7:8f:07:26: a0:98:e6:bf:82:9c:ad:4d:f2:46:1d:35:d0:45:da:8b:e6:07: f6:b5:6f:27:d6:da:b9:d8:18:0d:b7:1f:d8:c8:69:7a:e2:a7: 27:d7:7f:7e:93:52:2d:f4:aa:2b:fd:c1:ee:1d:21:c0:01:3c: a3:ee:19:e3:e6:4f:94:a7:d5:74:d1:e5:f4:09:e2:b9:eb:9c: 7f:d0:57:1a:46:42:87:d2:ba:1c:27:c1:1d:dd:1b:ff:b9:ca: d5:12:84:3c:e6:b8:6a:b1:06:54:2e:1b:73:ce:ca:45:1e:7f: 02:db:a1:1f:ec:58:09:04:95:fb:69:65:f7:88:57:14:3d:65: 57:08:75:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1qlDSxKNwPUq8q9P7bLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl OTk4MDIwHhcNMjUxMjIwMDAwMTA2WhcNMjUxMjIxMDAwMTA2WjAzMTEwLwYDVQQD Eyg2MDVlMTYzNDcyMTBiYzk3OWYxZDI2MzcxMWQ5NTA1ZjBjMjVjOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpaTMDwT7+Jvyaf+ali92mpIThRc de3wLt2V5q/GT7+dRh/22AJGHMzBRtgAqmpF6pfPFopCsOHfeWT62EPeA0xlZY/u FRVr5sKHBiq5yOlEMmUu9Z+tmC6cK7rl97ozWlULVIaQy76Icl96r6l3mHBgC9/A 29hgVphPnCG2bwSj4iCyEr/fr+2ZUT4KVyzQ5b0vT94t61fT+yBKeYtkf2B3x8/V FcCuFmWrGEUODEsWk0t+/7zuwZ/azCuuTsYnRCVWhuGy2/pVtQ5p/3rhUek056XQ Tm966mjEjzGlxDe2UtmBMOqM24bj+k2J2LyEFJG8VcsFaCzcLSivwzc6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBeFjRyELyXnx0mNxHZUF8MJcigMB8GA1UdIwQY MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVpJL7gV ytMXrinitZZE0UHImgn9bu0X6PRMFjaotPsstGMpvyZzGU4cTzn6VvboJMhEe/R+ 7HA17uXA1/4Hth47wCzQQASBEaEr2Hf3umDG6RLiJkRvM9uMB78/0pyGmneCr+gu 5Y2NEDC3V2KywM0Sm/nJlAxA8efnjwcmoJjmv4KcrU3yRh010EXai+YH9rVvJ9ba udgYDbcf2MhpeuKnJ9d/fpNSLfSqK/3B7h0hwAE8o+4Z4+ZPlKfVdNHl9Aniueuc f9BXGkZCh9K6HCfBHd0b/7nK1RKEPOa4arEGVC4bc87KRR5/AtuhH+xYCQSV+2ll 94hXFD1lVwh1Mg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:51:43 2025 by rpki-client