This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft File: wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json) Hash identifier: ehg3f5iLyDxQ0e12GqvEP6qT0MGizWpK4CW9tr7R3rI= Subject key identifier: 35:AC:2F:D5:35:59:05:61:12:A1:7F:DC:69:DB:53:37:1B:D2:29:E4 Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Certificate serial: 019B3F1198A7042AC36FD3EC36A5A6ADE795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft Manifest number: 0986 Signing time: Sun 21 Dec 2025 04:01:16 +0000 Manifest this update: Sun 21 Dec 2025 04:01:16 +0000 Manifest next update: Mon 22 Dec 2025 04:01:16 +0000 Files and hashes: 1: 0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa (hash: rrGUPdLm/yz0jAaBzRKBfGiiUHE1bJZVAlwYqWnvc2g=) 2: Mr7THJO68NohwknMfTQKnqHV-vc.roa (hash: knt9VF7cf9YizkNpPo4OGyLEE0z8MhXR+E+kt4mIdVA=) 3: TB6H5V1Ni-tKp6BX2r-SHLcytb4.roa (hash: 0fhq54aZgsVM/k0+CX/b9ZvdCc1x5cY4r3GXAZAMq6M=) 4: qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa (hash: woIS65FxXCdUB0qPb1Sk66filHI9SQzJMbXAm2PrCSk=) 5: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: 5m4tJoQjKVMpys/e3ZNq31v/uie+PXDWNAQjXqkirnI=) 6: zSfZVih6hBceUixRgoQRbTOqrPs.roa (hash: azI0MEflNFx/avYXf2xzg+zXEruqyuhKpmbLg+R7a0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:98:a7:04:2a:c3:6f:d3:ec:36:a5:a6:ad:e7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Validity Not Before: Dec 21 04:01:16 2025 GMT Not After : Dec 22 04:01:16 2025 GMT Subject: CN=35ac2fd53559056112a17fdc69db53371bd229e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:a9:94:2a:42:b0:f3:eb:5a:a6:85:02:e8: 1e:e8:54:30:16:4d:41:39:0d:87:a0:44:9d:ab:ad: 95:b3:ee:9f:87:52:1a:ae:6d:db:99:03:35:d9:95: f4:71:33:52:b6:03:f5:ac:d9:43:a6:58:3b:d7:53: 6d:84:f8:50:38:5b:93:d1:5c:14:e3:3d:b5:1c:b1: fa:03:ff:1f:2e:54:10:a3:37:d7:a8:f7:20:7b:cd: 97:ee:ac:23:4c:60:4b:b5:66:52:8d:be:ca:4e:69: 12:d1:bc:6f:af:26:9b:f6:a7:96:39:c2:2f:e2:f8: be:40:6e:65:1b:5e:d4:06:72:31:d9:ec:6d:de:af: 59:0f:af:97:1e:48:e0:38:c4:79:97:1b:62:03:af: b7:72:1b:d7:6f:5e:9b:7b:93:23:5d:26:77:56:d8: 4c:34:b7:fe:31:0e:90:42:52:04:4a:0e:e3:22:5b: 23:f0:90:f2:50:9c:55:7e:8d:2f:6e:73:4d:68:14: e7:ad:0a:7e:40:59:50:95:67:28:14:06:39:d4:36: c1:cf:48:0f:26:e5:d2:02:aa:65:cc:a0:cf:e7:36: 20:6c:7b:50:35:99:5f:0b:2c:74:7f:1f:d9:36:45: 2a:a6:95:c5:13:3e:63:ec:d1:4d:6e:e0:28:ea:7c: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:2F:D5:35:59:05:61:12:A1:7F:DC:69:DB:53:37:1B:D2:29:E4 X509v3 Authority Key Identifier: keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:97:fd:c4:11:48:4a:99:1c:ef:f6:ec:e0:bb:e3:1f:50:5e: f8:81:16:65:c6:70:85:90:e6:47:e6:02:84:81:a2:ee:59:bb: 29:3a:19:52:d5:3a:3a:ce:d1:52:8e:35:73:ad:45:7e:ab:ea: 19:23:f1:6d:72:d0:7a:07:77:25:18:e1:38:be:04:a0:79:4c: a2:61:94:a1:34:70:e8:3b:e8:7c:b8:e6:59:51:f3:bc:f8:74: eb:6f:a8:e5:aa:b8:e4:fe:48:5b:44:12:22:51:ca:64:35:f7: 0b:3d:97:6e:b3:14:da:2b:19:50:af:7c:1c:85:d8:70:aa:9b: be:5b:0c:b3:b2:8d:39:37:0e:8d:5c:d9:e4:45:07:c4:48:b3: 94:11:d4:0c:43:80:cc:6f:99:40:a1:a6:13:97:aa:1e:04:19: 02:36:b7:97:e7:e3:66:d9:63:30:22:0a:ff:b1:69:4d:b4:a2: c8:9c:ab:af:7e:22:5a:6f:51:24:d4:73:ba:41:60:ef:50:18: 04:1c:5c:ab:2c:a5:e0:b6:60:67:ff:0e:d0:df:d1:92:e0:3c: 80:98:ac:4d:21:51:c8:a9:3c:aa:3c:4a:c2:bc:e0:8f:ba:b3: 46:4e:6a:1b:46:38:47:36:5b:61:77:3e:d2:7a:b9:78:ee:aa: 2e:3c:ce:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZinBCrDb9PsNqWmreeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi MjBmNTcwHhcNMjUxMjIxMDQwMTE2WhcNMjUxMjIyMDQwMTE2WjAzMTEwLwYDVQQD EygzNWFjMmZkNTM1NTkwNTYxMTJhMTdmZGM2OWRiNTMzNzFiZDIyOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHqplCpCsPPrWqaFAuge6FQwFk1B OQ2HoESdq62Vs+6fh1Iarm3bmQM12ZX0cTNStgP1rNlDplg711NthPhQOFuT0VwU 4z21HLH6A/8fLlQQozfXqPcge82X7qwjTGBLtWZSjb7KTmkS0bxvryab9qeWOcIv 4vi+QG5lG17UBnIx2ext3q9ZD6+XHkjgOMR5lxtiA6+3chvXb16be5MjXSZ3VthM NLf+MQ6QQlIESg7jIlsj8JDyUJxVfo0vbnNNaBTnrQp+QFlQlWcoFAY51DbBz0gP JuXSAqplzKDP5zYgbHtQNZlfCyx0fx/ZNkUqppXFEz5j7NFNbuAo6nxnTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWsL9U1WQVhEqF/3GnbUzcb0inkMB8GA1UdIwQY MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt NDlkNDBhMTNjYmMyLzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZf9xBFI Spkc7/bs4LvjH1Be+IEWZcZwhZDmR+YChIGi7lm7KToZUtU6Os7RUo41c61Ffqvq GSPxbXLQegd3JRjhOL4EoHlMomGUoTRw6DvofLjmWVHzvPh062+o5aq45P5IW0QS IlHKZDX3Cz2XbrMU2isZUK98HIXYcKqbvlsMs7KNOTcOjVzZ5EUHxEizlBHUDEOA zG+ZQKGmE5eqHgQZAja3l+fjZtljMCIK/7FpTbSiyJyrr34iWm9RJNRzukFg71AY BBxcqyyl4LZgZ/8O0N/RkuA8gJisTSFRyKk8qjxKwrzgj7qzRk5qG0Y4RzZbYXc+ 0nq5eO6qLjzOHA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:43 2025 by rpki-client