This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json) Hash identifier: 2fApb18zU/i/wgDXaKEXu2K5yl6kNCdQf8PEx97jadI= Subject key identifier: F0:61:07:D3:20:98:02:85:6E:BE:AA:3B:7A:2C:00:7A:28:FF:F5:C2 Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2 Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2 Certificate serial: 019B4F6019C026DA93C14301840083DB96F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft Manifest number: 1647 Signing time: Wed 24 Dec 2025 08:00:56 +0000 Manifest this update: Wed 24 Dec 2025 08:00:56 +0000 Manifest next update: Thu 25 Dec 2025 08:00:56 +0000 Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=) 2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: gesc0wz4jPVDB/4seh4w6EEG4sU2jWY/I2NYV5O+yjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:19:c0:26:da:93:c1:43:01:84:00:83:db:96:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2 Validity Not Before: Dec 24 08:00:56 2025 GMT Not After : Dec 25 08:00:56 2025 GMT Subject: CN=f06107d3209802856ebeaa3b7a2c007a28fff5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:d2:fc:08:8a:9f:7f:0a:51:1c:2c:62:7b: be:09:c2:47:ab:ad:52:91:0e:1b:9b:b5:e6:5a:5b: df:41:ad:15:0c:b1:43:d7:03:55:d6:b9:b3:41:d8: ed:0a:6a:34:91:14:ba:51:0f:d3:2a:dd:2c:df:0f: 02:aa:72:ab:42:6f:fb:f0:f1:46:a1:b0:ac:83:5c: 44:2a:b8:e2:73:46:72:b4:6d:1a:4a:0c:fa:a9:d3: 85:1e:ec:d4:7f:6e:34:9a:0b:5e:0d:6f:b3:9c:a6: c6:65:a0:c0:95:f1:12:b7:dd:16:cb:67:53:74:f0: fb:31:6d:37:02:64:af:c5:89:d9:e9:41:31:1a:98: 31:a6:e8:c9:cc:59:7e:ee:a5:29:06:b7:6f:cf:77: 91:43:bf:fd:da:66:23:b7:96:6a:88:d0:73:8a:5a: 54:d8:26:8c:1e:0d:56:0f:22:2c:c1:1c:85:75:6b: f5:c4:6b:0a:ba:37:3f:43:29:e8:94:bf:31:3e:3c: b6:ec:26:08:0f:68:c2:a6:02:87:9f:21:c1:fa:e4: d8:3c:08:d2:c3:b7:c3:bf:39:80:62:b8:18:fa:6b: be:8c:33:a4:9f:f2:5b:0d:cd:08:67:ac:22:84:10: c4:e2:9a:95:e0:83:8b:7e:1e:f3:9d:85:bc:43:e1: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:61:07:D3:20:98:02:85:6E:BE:AA:3B:7A:2C:00:7A:28:FF:F5:C2 X509v3 Authority Key Identifier: keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:34:8b:5a:bd:6b:93:4c:75:5a:2d:da:8e:88:2d:77:84:a8: 48:ac:54:04:98:8f:c4:5c:6c:3f:61:a6:8e:41:96:89:cc:d2: da:99:df:5c:2b:f6:2a:c1:21:a8:3c:91:c7:65:a1:2c:9b:f5: 3c:c5:c9:e3:b9:57:ef:1b:36:89:07:31:3d:f0:af:f7:b8:01: 93:b0:65:5c:62:b4:20:9e:e3:a3:ff:39:a5:41:21:23:c8:8e: d8:61:bf:35:ca:84:00:54:57:54:e1:8d:71:d2:f5:86:77:85: 6f:0c:9f:44:42:b6:a9:dd:f5:df:db:6f:30:58:39:31:da:23: e0:bc:b8:2c:89:78:85:71:d7:aa:c3:97:ec:17:5d:35:59:49: 17:b8:d2:4c:4c:68:3d:5a:7e:ec:eb:bf:ad:ea:35:de:1b:e3: ce:8c:fa:b4:17:1a:1d:96:93:11:b5:f7:7f:be:10:7e:5d:f8: 13:2f:1f:83:ab:1a:ab:35:61:5d:d8:8e:19:b3:5e:7c:f3:5d: f3:ff:de:02:8f:b7:68:a1:58:f9:bd:0e:98:df:1a:55:89:3d: 59:de:90:49:ce:31:c6:3e:1a:3f:8a:38:2e:44:b9:20:78:82: 15:75:61:b9:77:88:22:35:a3:43:2b:a7:36:67:77:73:d4:b6: 75:72:73:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYBnAJtqTwUMBhACD25b2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw ZDk2YjIwHhcNMjUxMjI0MDgwMDU2WhcNMjUxMjI1MDgwMDU2WjAzMTEwLwYDVQQD EyhmMDYxMDdkMzIwOTgwMjg1NmViZWFhM2I3YTJjMDA3YTI4ZmZmNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPzS/AiKn38KURwsYnu+CcJHq61S kQ4bm7XmWlvfQa0VDLFD1wNV1rmzQdjtCmo0kRS6UQ/TKt0s3w8CqnKrQm/78PFG obCsg1xEKrjic0ZytG0aSgz6qdOFHuzUf240mgteDW+znKbGZaDAlfESt90Wy2dT dPD7MW03AmSvxYnZ6UExGpgxpujJzFl+7qUpBrdvz3eRQ7/92mYjt5ZqiNBzilpU 2CaMHg1WDyIswRyFdWv1xGsKujc/QynolL8xPjy27CYID2jCpgKHnyHB+uTYPAjS w7fDvzmAYrgY+mu+jDOkn/JbDc0IZ6wihBDE4pqV4IOLfh7znYW8Q+HUMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBhB9MgmAKFbr6qO3osAHoo//XCMB8GA1UdIwQY MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt M2YxN2NiY2JhNWNhLzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTSLWr1r k0x1Wi3ajogtd4SoSKxUBJiPxFxsP2GmjkGWiczS2pnfXCv2KsEhqDyRx2WhLJv1 PMXJ47lX7xs2iQcxPfCv97gBk7BlXGK0IJ7jo/85pUEhI8iO2GG/NcqEAFRXVOGN cdL1hneFbwyfREK2qd3139tvMFg5Mdoj4Ly4LIl4hXHXqsOX7BddNVlJF7jSTExo PVp+7Ou/reo13hvjzoz6tBcaHZaTEbX3f74Qfl34Ey8fg6saqzVhXdiOGbNefPNd 8//eAo+3aKFY+b0OmN8aVYk9Wd6QSc4xxj4aP4o4LkS5IHiCFXVhuXeIIjWjQyun Nmd3c9S2dXJzPw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:36:48 2025 by rpki-client