This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft File: WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json) Hash identifier: e0JYa4OL5/ezP7kaC1OIPep01hYXsGyFP7aXV5r0exQ= Subject key identifier: 49:57:E0:C8:A3:D3:C5:B0:7F:D7:D7:3D:4A:95:0F:67:0E:98:7A:CB Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d Certificate serial: 019B41A4BABA072ECD6A0818AC80ED68467D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 16:01:13 +0000 Manifest this update: Sun 21 Dec 2025 16:01:13 +0000 Manifest next update: Mon 22 Dec 2025 16:01:13 +0000 Files and hashes: 1: 21Z7HmrOxiobds8TxVCgw76jX2Q.roa (hash: Skfph10GmJAF2gm8sQyaNWU8Upk0+888zHd0gic3TYc=) 2: 6BYQ4By2tJL3cWm4L-BQSWyvJS0.roa (hash: 3sAvJeopcRq49xZNtMv2qbQCEldVQVML4/pl6Sm3s88=) 3: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: qTUykBIklhS8BeYzqqabrJhZPFKmUY3kLxgOIDgFIdE=) 4: k97CrjwrQPT8_y6vdIb8L8R85BY.roa (hash: +DDKSroEDnHlqdOq/UjhA3pHL4D5bJ4vsDTADTBgxwE=) 5: n6_io3-KaLYhuJtZiy1MeoUuNbk.roa (hash: nSbtIazJ2SXxi9u2NxxSLPcqXno/gu6gZmKKyNsxgLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:ba:ba:07:2e:cd:6a:08:18:ac:80:ed:68:46:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d Validity Not Before: Dec 21 16:01:13 2025 GMT Not After : Dec 22 16:01:13 2025 GMT Subject: CN=4957e0c8a3d3c5b07fd7d73d4a950f670e987acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:69:d3:e7:88:07:a6:c3:5b:2f:dc:9b:dd: 7b:bf:7e:ba:2c:75:e9:89:03:6e:dd:ed:52:b8:4d: 2c:8e:55:c1:1b:5a:a0:42:ea:fc:c8:55:22:c8:cd: 98:a6:a6:cc:88:8e:b5:eb:e7:bc:4f:c3:a5:4f:97: 9e:19:e4:2b:0c:fc:67:5a:94:08:0a:4c:98:a3:8c: 29:79:4f:fe:d0:1a:60:01:0b:fc:9e:74:b9:fa:c4: 5d:2f:05:1a:c6:8a:89:e5:f4:1d:1a:49:9d:71:82: 45:60:25:3b:ea:df:ab:0d:95:d1:4b:ea:83:55:26: 4b:f4:ec:fc:19:ea:30:23:7a:59:ee:1f:f4:6b:a2: a4:76:d7:70:99:c6:2c:b6:df:7e:05:97:79:4b:3b: 92:01:b4:3c:d9:cc:9b:8c:d3:83:06:16:0d:6b:03: a3:d3:47:89:c0:23:95:6d:f6:9d:bc:3c:f8:3f:2f: 4c:e8:fc:6b:8c:fc:c6:66:96:75:df:7a:45:0c:fb: b2:9b:7b:e6:01:5d:f8:aa:ee:ab:08:4b:31:c8:43: 79:7e:bc:8c:15:61:6a:bc:72:fb:28:eb:02:26:7b: 7f:eb:64:d6:77:1d:f2:f4:8d:71:0c:e3:10:5b:ad: 84:8a:17:19:58:c5:17:a2:04:97:41:21:9c:f2:a9: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:57:E0:C8:A3:D3:C5:B0:7F:D7:D7:3D:4A:95:0F:67:0E:98:7A:CB X509v3 Authority Key Identifier: keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6d:9c:08:3f:b8:e5:8d:30:33:3a:4b:3b:81:d8:ca:26:e0: 9f:91:bd:ae:ea:27:93:8b:f2:39:05:5f:e9:f7:4f:ab:3b:19: 72:c0:9c:95:b9:da:e3:c8:97:37:99:5d:7c:ad:bf:a2:f0:56: ff:c3:77:9a:d1:33:9f:53:d0:40:52:2e:52:b1:16:93:1d:30: b3:a7:1c:9f:2e:e6:b4:15:e2:24:69:40:e6:38:d5:1b:68:1f: f2:b7:95:ae:98:ba:1c:54:1b:26:e6:7d:f8:b6:2e:5c:8c:dc: ba:02:e9:3b:88:63:1e:82:7a:25:79:49:8e:67:c3:c4:2f:d0: 21:d0:d4:78:db:4f:84:90:9b:96:08:a2:c9:38:c9:7d:d4:9b: 02:0c:89:5c:99:f5:50:e5:11:39:25:0c:07:dc:bb:d3:ef:7c: 94:00:69:e3:b9:a7:67:ed:e7:46:1d:92:4d:9b:78:0c:6b:39: e7:2a:5f:6c:b7:0e:29:44:ab:da:d6:6e:e3:12:2b:82:9a:4c: 11:4e:35:1b:d7:07:03:30:5a:0d:b3:b3:8c:cc:a5:98:25:7e: b9:9b:b3:80:1c:65:34:02:7c:09:0a:c0:02:ea:43:83:0a:89: 35:e4:09:2c:62:fc:bd:6d:70:35:c7:86:32:48:77:a3:99:08: 3a:58:3a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpLq6By7NaggYrIDtaEZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3 MTRlMmQwHhcNMjUxMjIxMTYwMTEzWhcNMjUxMjIyMTYwMTEzWjAzMTEwLwYDVQQD Eyg0OTU3ZTBjOGEzZDNjNWIwN2ZkN2Q3M2Q0YTk1MGY2NzBlOTg3YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytVp0+eIB6bDWy/cm917v366LHXp iQNu3e1SuE0sjlXBG1qgQur8yFUiyM2YpqbMiI616+e8T8OlT5eeGeQrDPxnWpQI CkyYo4wpeU/+0BpgAQv8nnS5+sRdLwUaxoqJ5fQdGkmdcYJFYCU76t+rDZXRS+qD VSZL9Oz8GeowI3pZ7h/0a6KkdtdwmcYstt9+BZd5SzuSAbQ82cybjNODBhYNawOj 00eJwCOVbfadvDz4Py9M6PxrjPzGZpZ133pFDPuym3vmAV34qu6rCEsxyEN5fryM FWFqvHL7KOsCJnt/62TWdx3y9I1xDOMQW62EihcZWMUXogSXQSGc8qkuewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElX4Mij08Wwf9fXPUqVD2cOmHrLMB8GA1UdIwQY MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It NjY0YjhmMDNkMTgwLzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY22cCD+4 5Y0wMzpLO4HYyibgn5G9ruonk4vyOQVf6fdPqzsZcsCclbna48iXN5ldfK2/ovBW /8N3mtEzn1PQQFIuUrEWkx0ws6ccny7mtBXiJGlA5jjVG2gf8reVrpi6HFQbJuZ9 +LYuXIzcugLpO4hjHoJ6JXlJjmfDxC/QIdDUeNtPhJCblgiiyTjJfdSbAgyJXJn1 UOUROSUMB9y70+98lABp47mnZ+3nRh2STZt4DGs55ypfbLcOKUSr2tZu4xIrgppM EU41G9cHAzBaDbOzjMylmCV+uZuzgBxlNAJ8CQrAAupDgwqJNeQJLGL8vW1wNceG Mkh3o5kIOlg6vA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:49:44 2025 by rpki-client