This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft File: wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json) Hash identifier: Ih6KxkDccldoKiYf9bEUEOsy1LSMXDaLFO3iCRru2hM= Subject key identifier: FE:4C:81:AB:FF:0C:15:40:BC:BE:E2:8E:1A:28:B8:AC:E5:95:61:B1 Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Certificate serial: 019B804C6941F2F11B0F7812611EACC5A408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft Manifest number: 17AD Signing time: Fri 02 Jan 2026 20:00:49 +0000 Manifest this update: Fri 02 Jan 2026 20:00:49 +0000 Manifest next update: Sat 03 Jan 2026 20:00:49 +0000 Files and hashes: 1: QNKjsNYl40H8qS_OmmUbDRHp_R0.roa (hash: GhfQFXVRCo9fwAs1bLrZZyBrkFQV/H6WcDnsJN7q33o=) 2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: YkTxDznbdy/Amnx8s/Pi+zq8rHK4nqMD2jICt4JSH6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:4c:69:41:f2:f1:1b:0f:78:12:61:1e:ac:c5:a4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Validity Not Before: Jan 2 20:00:49 2026 GMT Not After : Jan 3 20:00:49 2026 GMT Subject: CN=fe4c81abff0c1540bcbee28e1a28b8ace59561b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:ff:85:3b:04:5c:03:a8:ac:b8:20:91:a0: f2:b6:f9:16:75:42:64:da:23:90:b7:f2:01:07:f3: a1:2c:5a:b5:36:43:7e:d5:5f:ae:88:10:24:d9:53: 54:8d:cb:fc:39:87:6c:24:12:46:55:3f:b8:03:6f: 57:1e:15:42:a3:4f:ca:a7:fd:f3:58:e4:89:68:dc: 35:6d:a9:f0:8a:90:93:b6:d9:ee:d6:35:12:2a:a6: 50:b9:72:f4:51:7c:c7:b4:5a:75:e7:ba:3d:36:cb: 06:b8:51:a7:2e:bf:4a:ad:80:ae:cd:56:c0:c4:89: a6:07:d9:c5:e8:df:71:df:bb:b1:a3:1b:87:e4:dc: ef:31:ad:9a:6e:0f:51:7c:cf:d4:66:72:37:77:56: df:02:1c:71:63:7a:cf:f5:0e:e6:dc:75:e2:a9:93: 99:12:2b:13:cf:d9:6c:a5:53:14:3e:d8:d1:46:73: 59:fe:14:aa:64:34:2d:e0:5e:64:69:29:9e:a4:17: d1:40:04:9c:e4:45:86:4c:d1:ed:62:87:c5:98:b2: 11:69:67:96:90:23:8f:05:71:0e:72:f5:0e:59:d2: d2:60:cc:bf:c8:c3:2d:bb:1d:5d:38:fe:e4:cc:f6: c8:62:ac:db:18:ab:08:19:58:dd:7e:a2:dc:67:70: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4C:81:AB:FF:0C:15:40:BC:BE:E2:8E:1A:28:B8:AC:E5:95:61:B1 X509v3 Authority Key Identifier: keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:81:2f:52:f7:2a:f3:1e:eb:60:06:0d:fc:e3:a6:8d:5a:ae: 9f:07:e3:98:64:63:20:c6:a4:f4:c4:31:1d:b7:97:bc:94:ef: 97:d2:ea:f7:61:de:9d:45:ef:c0:93:28:b9:b5:e2:7f:06:eb: 96:43:12:48:d5:6d:01:c0:f2:ff:79:a8:82:83:10:1f:30:9f: b7:48:73:2c:8f:84:a9:25:41:6d:7f:3c:67:91:21:12:f0:4f: 08:27:7c:bf:b3:a0:36:c8:91:a9:74:7a:7d:69:ea:63:8d:7b: 71:3f:c6:bc:13:52:b0:87:c2:ba:3c:37:c8:71:0b:32:75:da: a8:28:76:e7:d2:68:0f:d9:23:82:3e:df:9e:3b:b5:08:a8:74: b1:d0:a9:32:24:74:13:85:47:f0:c8:e4:61:b0:73:5f:bd:a8: 28:58:d2:79:8a:42:b3:bd:63:ca:2c:5d:d8:d5:f6:9d:d9:1d: 62:15:82:1c:a3:92:94:6a:3a:0a:dc:05:23:3e:22:da:28:2e: 84:4e:48:bd:8b:b4:f5:14:10:f7:fd:1f:b7:13:40:71:2a:1f: 0f:be:76:c9:fb:26:8a:27:a6:e6:0b:5f:03:b8:16:9c:6b:f9: 64:4e:ae:d2:11:c1:ac:d1:d4:e4:9d:2e:f5:a8:d9:86:75:b3: 15:1c:74:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuATGlB8vEbD3gSYR6sxaQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm YjBhYTcwHhcNMjYwMTAyMjAwMDQ5WhcNMjYwMTAzMjAwMDQ5WjAzMTEwLwYDVQQD EyhmZTRjODFhYmZmMGMxNTQwYmNiZWUyOGUxYTI4YjhhY2U1OTU2MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOb/hTsEXAOorLggkaDytvkWdUJk 2iOQt/IBB/OhLFq1NkN+1V+uiBAk2VNUjcv8OYdsJBJGVT+4A29XHhVCo0/Kp/3z WOSJaNw1banwipCTttnu1jUSKqZQuXL0UXzHtFp157o9NssGuFGnLr9KrYCuzVbA xImmB9nF6N9x37uxoxuH5NzvMa2abg9RfM/UZnI3d1bfAhxxY3rP9Q7m3HXiqZOZ EisTz9lspVMUPtjRRnNZ/hSqZDQt4F5kaSmepBfRQASc5EWGTNHtYofFmLIRaWeW kCOPBXEOcvUOWdLSYMy/yMMtux1dOP7kzPbIYqzbGKsIGVjdfqLcZ3Bd1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5Mgav/DBVAvL7ijhoouKzllWGxMB8GA1UdIwQY MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt YTY3MTkxNWVlOTlhLzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4EvUvcq 8x7rYAYN/OOmjVqunwfjmGRjIMak9MQxHbeXvJTvl9Lq92HenUXvwJMoubXifwbr lkMSSNVtAcDy/3mogoMQHzCft0hzLI+EqSVBbX88Z5EhEvBPCCd8v7OgNsiRqXR6 fWnqY417cT/GvBNSsIfCujw3yHELMnXaqCh259JoD9kjgj7fnju1CKh0sdCpMiR0 E4VH8MjkYbBzX72oKFjSeYpCs71jyixd2NX2ndkdYhWCHKOSlGo6CtwFIz4i2igu hE5IvYu09RQQ9/0ftxNAcSofD752yfsmiiem5gtfA7gWnGv5ZE6u0hHBrNHU5J0u 9ajZhnWzFRx0GQ== -----END CERTIFICATE-----Generated at Sat Jan 3 00:55:59 2026 by rpki-client