This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft File: Wy17v8Kblv03I3vOZ4bFO604D70.mft (raw, json) Hash identifier: S2ASs34LnnjDzkaW2faxIZ/AyJmrRUeXBTvo9vfFaW8= Subject key identifier: 8E:A6:8F:D3:DF:F7:D0:B0:B3:78:FA:12:21:45:D7:A8:F1:59:39:81 Authority key identifier: 5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD Certificate issuer: /CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd Certificate serial: 019B65E7DC7CF2B082DF70DA73C4B0D8D9A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft Manifest number: 036F Signing time: Sun 28 Dec 2025 17:00:52 +0000 Manifest this update: Sun 28 Dec 2025 17:00:52 +0000 Manifest next update: Mon 29 Dec 2025 17:00:52 +0000 Files and hashes: 1: Wy17v8Kblv03I3vOZ4bFO604D70.crl (hash: R2j1IuiFeJjqwNN7AMFlhYHkQQ6fXykvzMorh41B09U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:dc:7c:f2:b0:82:df:70:da:73:c4:b0:d8:d9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd Validity Not Before: Dec 28 17:00:52 2025 GMT Not After : Dec 29 17:00:52 2025 GMT Subject: CN=8ea68fd3dff7d0b0b378fa122145d7a8f1593981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:fa:da:7a:d9:05:e5:d0:d0:dd:3f:14:b1: 0b:94:bd:56:e1:7e:21:50:4f:70:f5:f8:e6:63:c0: c5:33:f6:39:89:e4:dc:e8:89:e6:f3:b4:a8:74:ed: df:4d:e9:23:6e:c2:d5:d9:15:59:1a:f2:f0:ad:df: eb:e4:9a:97:19:bd:b7:3d:1f:6e:81:7f:c8:e3:a4: ff:e7:eb:c7:31:b5:e8:60:4d:e7:ad:71:a7:fe:4f: 7c:e9:82:b2:c3:8e:54:db:6d:88:41:48:70:91:f6: 18:b6:5e:09:c9:be:39:08:05:7b:44:26:b5:46:26: aa:66:bb:49:e8:0d:ef:25:6c:d8:41:f4:af:36:67: c4:30:80:1e:6a:57:93:5b:a7:dc:26:ef:32:cf:47: 92:5a:79:31:46:61:74:07:50:dd:10:21:de:f3:29: db:db:3c:e5:3e:00:d0:ab:72:8f:26:52:f5:ff:1e: a2:f6:08:0a:d3:fc:47:22:bc:fb:c7:22:d0:f5:a6: ed:52:e7:3d:e9:c6:9a:a7:78:a6:5d:7f:d3:a2:9e: fa:1b:17:ed:8b:46:46:4e:03:cd:f0:ab:58:fb:9a: de:ab:2c:0a:48:97:de:d2:1d:b0:93:99:bd:88:a4: 6f:af:59:cc:31:c5:6a:a1:8d:ac:13:fa:79:ec:78: 46:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:8F:D3:DF:F7:D0:B0:B3:78:FA:12:21:45:D7:A8:F1:59:39:81 X509v3 Authority Key Identifier: keyid:5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c7:ee:2c:c0:06:f4:24:ac:8a:56:7f:09:1c:65:69:48:63: 20:45:a8:f9:02:13:27:cb:70:7a:61:fe:6b:d5:10:97:29:e3: a3:82:13:13:b8:18:59:90:05:44:36:c1:09:52:a5:34:df:a9: a4:88:7c:d3:3e:4c:aa:32:30:9b:e6:3c:d9:94:2a:c0:b9:c0: d1:c1:b9:61:60:9f:17:d8:87:b1:56:8a:fa:8d:03:b0:e4:1a: 46:e0:b4:f7:b6:6f:1c:0d:38:dd:ea:6a:e5:d4:69:4c:9d:33: fc:d2:0d:8f:b4:e3:1a:c6:cb:20:06:d9:f2:28:c6:3b:d7:48: 3f:6c:6c:e3:9c:b4:43:00:f4:60:e4:68:91:c4:96:14:b6:ea: a3:61:38:a9:5d:a5:fc:24:0f:b0:bc:7a:b5:b9:c6:0a:0b:66: 19:ff:34:95:c2:b4:0c:32:56:2b:be:6a:67:79:a0:28:2a:bb: 56:4e:52:af:9d:9f:17:4e:1a:5a:c1:50:16:3c:e7:cb:ce:ce: ac:15:2c:d7:59:aa:88:31:8a:0c:75:7d:8d:fc:37:70:99:d9: 9c:f2:f9:ca:d8:88:72:88:03:0c:3e:07:bc:a7:f5:07:87:da: 13:ca:df:a5:99:99:ec:c6:45:9d:74:7e:e4:b7:47:60:8e:9e: 4e:9e:92:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl59x88rCC33Dac8Sw2NmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMmQ3YmJmYzI5Yjk2ZmQzNzIzN2JjZTY3ODZjNTNiYWQz ODBmYmQwHhcNMjUxMjI4MTcwMDUyWhcNMjUxMjI5MTcwMDUyWjAzMTEwLwYDVQQD Eyg4ZWE2OGZkM2RmZjdkMGIwYjM3OGZhMTIyMTQ1ZDdhOGYxNTkzOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZH62nrZBeXQ0N0/FLELlL1W4X4h UE9w9fjmY8DFM/Y5ieTc6Inm87SodO3fTekjbsLV2RVZGvLwrd/r5JqXGb23PR9u gX/I46T/5+vHMbXoYE3nrXGn/k986YKyw45U222IQUhwkfYYtl4Jyb45CAV7RCa1 RiaqZrtJ6A3vJWzYQfSvNmfEMIAealeTW6fcJu8yz0eSWnkxRmF0B1DdECHe8ynb 2zzlPgDQq3KPJlL1/x6i9ggK0/xHIrz7xyLQ9abtUuc96caap3imXX/Top76Gxft i0ZGTgPN8KtY+5reqywKSJfe0h2wk5m9iKRvr1nMMcVqoY2sE/p57HhGewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6mj9Pf99Cws3j6EiFF16jxWTmBMB8GA1UdIwQY MBaAFFste7/Cm5b9NyN7zmeGxTutOA+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNTc4MDUtYTk3Zi00NDYyLWFlMzgt ZDg2MTU2ZTYxYzQ3LzEvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNTc4MDUtYTk3Zi00NDYyLWFlMzgtZDg2MTU2ZTYxYzQ3 LzEvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8fuLMAG 9CSsilZ/CRxlaUhjIEWo+QITJ8twemH+a9UQlynjo4ITE7gYWZAFRDbBCVKlNN+p pIh80z5MqjIwm+Y82ZQqwLnA0cG5YWCfF9iHsVaK+o0DsOQaRuC097ZvHA043epq 5dRpTJ0z/NINj7TjGsbLIAbZ8ijGO9dIP2xs45y0QwD0YORokcSWFLbqo2E4qV2l /CQPsLx6tbnGCgtmGf80lcK0DDJWK75qZ3mgKCq7Vk5Sr52fF04aWsFQFjzny87O rBUs11mqiDGKDHV9jfw3cJnZnPL5ytiIcogDDD4HvKf1B4faE8rfpZmZ7MZFnXR+ 5LdHYI6eTp6SBg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:27:41 2025 by rpki-client