This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json) Hash identifier: M5p2svbkYPF4mCgVPF8WORyZwQczNRUJhi4Lthp0H0w= Subject key identifier: 25:87:5F:1B:F6:C3:2C:8A:7E:10:81:3B:04:B8:9B:D3:97:F4:25:27 Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c Certificate serial: 019B79382836ACBB152E27889AF7EB334144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft Manifest number: 06E5 Signing time: Thu 01 Jan 2026 11:01:21 +0000 Manifest this update: Thu 01 Jan 2026 11:01:21 +0000 Manifest next update: Fri 02 Jan 2026 11:01:21 +0000 Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: Ir+HZvYiCGZezoAC5RbXYT91oirr3GxpD/ZyUutMkAY=) 2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:38:28:36:ac:bb:15:2e:27:88:9a:f7:eb:33:41:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f966238becd356df87d0c630248123f8f219e18c Validity Not Before: Jan 1 11:01:21 2026 GMT Not After : Jan 2 11:01:21 2026 GMT Subject: CN=25875f1bf6c32c8a7e10813b04b89bd397f42527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:aa:dc:46:aa:3c:4a:1f:2e:9a:a3:03:29: 2c:fb:31:d5:e3:de:84:26:a5:6a:82:7e:51:a5:44: 0f:e8:fb:9b:69:05:86:df:fa:5b:ac:14:f1:26:ad: 5d:02:fd:2a:fd:cb:2e:b0:99:7d:97:4f:22:a0:ef: a3:7a:d1:f5:b2:10:a0:79:3a:42:93:4c:0c:99:d9: 99:05:8b:7f:2f:cd:f8:e4:44:6e:73:76:8f:35:fb: a4:89:e0:aa:7f:e2:61:b1:46:ef:5e:7c:35:2b:ae: d5:7c:ec:7c:de:a8:a9:14:eb:ee:74:bf:3a:be:3e: 63:e2:a9:da:39:93:42:8d:9c:59:1d:7c:a8:f2:eb: 39:d4:c8:66:f9:0d:d4:33:d4:10:74:f9:ab:40:b1: aa:c3:12:83:2a:c4:c1:e0:9b:6f:0d:02:c4:c2:c1: e1:32:05:8e:a3:88:57:8c:6a:cf:78:94:2f:57:91: ba:37:1b:73:ea:47:82:e8:14:ad:55:d4:ac:bc:3d: c3:a2:60:1a:1a:87:7b:35:3c:12:83:b6:f3:50:97: d3:2e:0f:cb:4b:c0:2e:bd:e6:77:34:fb:f2:04:e4: 71:02:7d:67:b8:eb:76:d6:99:aa:88:21:1e:a0:dc: c8:0c:2a:9c:a1:93:df:ee:56:57:f8:7e:61:3c:0e: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:87:5F:1B:F6:C3:2C:8A:7E:10:81:3B:04:B8:9B:D3:97:F4:25:27 X509v3 Authority Key Identifier: keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5b:74:94:e8:89:06:13:cf:25:0e:38:9f:2d:aa:4a:7d:bc: d0:4c:62:fc:79:d9:39:b0:53:88:73:01:14:9e:83:7f:89:28: f8:bd:3f:ce:eb:c6:ab:e4:98:9f:51:6f:e4:0e:db:ef:77:07: b7:42:e8:ed:5a:76:d3:98:be:a4:d3:b6:bb:7b:c6:4e:5c:69: 5b:1a:51:f5:36:a1:5b:af:a8:63:ab:e5:25:72:1d:93:8e:c8: 89:84:05:39:64:24:61:2f:42:1f:2a:cc:c3:89:25:00:11:d6: 6d:ec:f5:4c:2f:3a:7b:d3:88:c8:20:55:22:07:4a:cd:38:6c: ba:09:03:8d:17:fd:e0:30:81:14:0e:5f:0a:91:cb:06:99:8a: c7:d2:18:44:e3:48:d1:ef:d7:75:0a:4e:97:9f:e5:e1:9f:40: b8:b0:54:c6:00:3c:e6:db:1d:2c:61:05:74:2e:26:21:6f:82: 35:e6:89:9f:88:a2:df:24:5f:04:87:e3:c0:c8:d3:54:bf:62: ef:11:c0:fe:c0:ac:f2:76:0f:50:d6:ee:64:16:20:d7:85:a5: 04:f0:ff:95:fc:f0:9b:7f:3b:cb:fe:24:1b:b3:fd:f7:2f:d2: 3f:59:0c:57:a1:ad:3e:b9:e0:cb:ac:69:90:fc:5b:6b:c6:16: a0:74:5b:cc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5OCg2rLsVLieImvfrM0FEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjYyMzhiZWNkMzU2ZGY4N2QwYzYzMDI0ODEyM2Y4ZjIx OWUxOGMwHhcNMjYwMTAxMTEwMTIxWhcNMjYwMTAyMTEwMTIxWjAzMTEwLwYDVQQD EygyNTg3NWYxYmY2YzMyYzhhN2UxMDgxM2IwNGI4OWJkMzk3ZjQyNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYmq3EaqPEofLpqjAyks+zHV496E JqVqgn5RpUQP6PubaQWG3/pbrBTxJq1dAv0q/csusJl9l08ioO+jetH1shCgeTpC k0wMmdmZBYt/L8345ERuc3aPNfukieCqf+JhsUbvXnw1K67VfOx83qipFOvudL86 vj5j4qnaOZNCjZxZHXyo8us51Mhm+Q3UM9QQdPmrQLGqwxKDKsTB4JtvDQLEwsHh MgWOo4hXjGrPeJQvV5G6Nxtz6keC6BStVdSsvD3DomAaGod7NTwSg7bzUJfTLg/L S8AuveZ3NPvyBORxAn1nuOt21pmqiCEeoNzIDCqcoZPf7lZX+H5hPA6xSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCWHXxv2wyyKfhCBOwS4m9OX9CUnMB8GA1UdIwQY MBaAFPlmI4vs01bfh9DGMCSBI/jyGeGMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XWWppLXpUVnQtSDBNWXdKSUVqLVBJWjRZdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYThlY2U3LTJiNmMtNDQ1MS04YjNk LTMzMmRiZDlhNjBhZi8xLzEtV1lqaS16VFZ0LUgwTVl3SklFai1QSVo0WXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I3L2E4ZWNlNy0yYjZjLTQ0NTEtOGIzZC0zMzJkYmQ5YTYw YWYvMS8xLVdZamktelRWdC1IME1Zd0pJRWotUElaNFl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1t0 lOiJBhPPJQ44ny2qSn280Exi/HnZObBTiHMBFJ6Df4ko+L0/zuvGq+SYn1Fv5A7b 73cHt0Lo7Vp205i+pNO2u3vGTlxpWxpR9TahW6+oY6vlJXIdk47IiYQFOWQkYS9C HyrMw4klABHWbez1TC86e9OIyCBVIgdKzThsugkDjRf94DCBFA5fCpHLBpmKx9IY RONI0e/XdQpOl5/l4Z9AuLBUxgA85tsdLGEFdC4mIW+CNeaJn4ii3yRfBIfjwMjT VL9i7xHA/sCs8nYPUNbuZBYg14WlBPD/lfzwm387y/4kG7P99y/SP1kMV6GtPrng y6xpkPxba8YWoHRbzA== -----END CERTIFICATE-----Generated at Thu Jan 1 19:52:39 2026 by rpki-client