This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json) Hash identifier: mHe32071kgVCgPSf0KY7A4C9+6hqaKDPkNcw3YmSejc= Subject key identifier: 0A:7B:8F:39:A9:F6:B3:BD:1F:6A:3E:18:0E:91:02:DC:1E:30:B2:FA Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9 Certificate serial: 019B416D8C7036DF68494CB6131A3020E5DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft Manifest number: 0B36 Signing time: Sun 21 Dec 2025 15:00:56 +0000 Manifest this update: Sun 21 Dec 2025 15:00:56 +0000 Manifest next update: Mon 22 Dec 2025 15:00:56 +0000 Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: Jdih26iL2uOw+3MZOHH2MSGiVOFnK7q6E2PgiQDD5/A=) 2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=) 3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:8c:70:36:df:68:49:4c:b6:13:1a:30:20:e5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9 Validity Not Before: Dec 21 15:00:56 2025 GMT Not After : Dec 22 15:00:56 2025 GMT Subject: CN=0a7b8f39a9f6b3bd1f6a3e180e9102dc1e30b2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:8f:94:f2:77:18:c7:4f:ec:d5:1e:c9:22: 57:8a:6e:8e:e0:ae:fa:81:5d:7b:22:cd:2d:89:06: d8:16:0d:8f:55:85:05:96:02:1a:31:22:90:1e:b2: b2:d6:59:96:11:9d:04:a1:2b:47:ed:1a:65:c6:1d: e9:af:fa:f4:ed:77:50:60:ec:83:75:4f:82:5a:31: 48:34:9e:80:44:c5:c6:bb:5e:d6:b4:72:22:7c:61: 61:2c:13:b3:91:d2:41:ef:6e:c3:5e:f9:93:08:9f: 8e:8b:21:b7:29:c5:12:d4:48:b0:70:38:f0:f0:a4: 36:f9:42:d6:77:37:56:6a:b4:1a:ff:58:fb:1e:60: ba:be:70:9a:be:f2:6d:df:c1:8a:99:dd:65:bc:2b: e1:02:d5:18:5a:7b:18:7e:ec:4d:a8:f1:75:49:2a: b4:f2:b6:76:41:19:14:bc:b5:d1:3f:cd:0e:32:4e: 71:57:f5:77:7e:df:a8:8b:68:31:d9:fa:52:a4:e7: d5:67:1e:af:a8:a2:50:49:0c:0e:15:05:ed:24:30: e4:4a:82:b1:f1:1c:17:7a:84:54:78:0d:29:4e:a4: b2:69:67:83:93:6a:16:7d:0f:e0:73:9a:15:44:d2: fd:75:31:74:72:a3:20:c1:37:bd:61:a6:a6:78:ea: eb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7B:8F:39:A9:F6:B3:BD:1F:6A:3E:18:0E:91:02:DC:1E:30:B2:FA X509v3 Authority Key Identifier: keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:79:b0:ff:bf:f0:8e:9e:17:f1:3f:b7:52:ca:bb:0f:c7:56: bf:0a:92:81:2f:72:67:fe:f1:42:4b:c1:d0:34:43:40:0a:5d: 8a:af:8e:cc:1b:ef:7f:d0:e0:62:0f:1a:a8:12:e2:80:e6:2a: 1d:da:01:e5:3c:eb:1b:a7:97:da:82:c5:be:79:69:1c:8f:98: 83:e9:99:cf:cb:b7:08:df:8d:e0:29:3e:fc:39:13:02:a9:bb: d3:3f:c8:cf:e9:4d:5f:46:ea:aa:fb:bd:9a:2e:45:6e:9f:22: 7e:a1:2d:87:e2:66:89:88:ed:e7:bf:88:38:ff:be:f6:4a:44: d5:e6:53:95:26:8c:ad:60:fd:1d:44:54:14:2b:b7:02:c4:ef: 64:a0:c0:56:e6:63:93:31:ca:aa:56:48:cc:1c:0d:72:84:ef: 33:71:80:ef:d0:d0:09:fa:bd:fa:e0:78:fe:d5:66:1f:03:06: 8e:d2:14:56:44:b6:eb:c3:b5:72:ae:ae:e5:ca:a2:a6:c5:a4: 9b:ce:43:c9:48:e9:18:39:8c:dd:c5:78:b9:9e:ae:c6:d6:8b: a2:af:b0:6f:14:03:4a:36:a9:b6:a6:5a:ec:67:54:0f:6d:c3: e8:a8:b6:bf:d2:d1:71:43:2f:2d:e5:7e:9d:ae:f0:c1:90:bb: 23:ae:ce:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbYxwNt9oSUy2ExowIOXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy N2IwYzkwHhcNMjUxMjIxMTUwMDU2WhcNMjUxMjIyMTUwMDU2WjAzMTEwLwYDVQQD EygwYTdiOGYzOWE5ZjZiM2JkMWY2YTNlMTgwZTkxMDJkYzFlMzBiMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnOPlPJ3GMdP7NUeySJXim6O4K76 gV17Is0tiQbYFg2PVYUFlgIaMSKQHrKy1lmWEZ0EoStH7Rplxh3pr/r07XdQYOyD dU+CWjFINJ6ARMXGu17WtHIifGFhLBOzkdJB727DXvmTCJ+OiyG3KcUS1EiwcDjw 8KQ2+ULWdzdWarQa/1j7HmC6vnCavvJt38GKmd1lvCvhAtUYWnsYfuxNqPF1SSq0 8rZ2QRkUvLXRP80OMk5xV/V3ft+oi2gx2fpSpOfVZx6vqKJQSQwOFQXtJDDkSoKx 8RwXeoRUeA0pTqSyaWeDk2oWfQ/gc5oVRNL9dTF0cqMgwTe9YaameOrrRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp7jzmp9rO9H2o+GA6RAtweMLL6MB8GA1UdIwQY MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt OWE4MDNmNzM2YzRhLzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHmw/7/w jp4X8T+3Usq7D8dWvwqSgS9yZ/7xQkvB0DRDQApdiq+OzBvvf9DgYg8aqBLigOYq HdoB5TzrG6eX2oLFvnlpHI+Yg+mZz8u3CN+N4Ck+/DkTAqm70z/Iz+lNX0bqqvu9 mi5Fbp8ifqEth+JmiYjt57+IOP++9kpE1eZTlSaMrWD9HURUFCu3AsTvZKDAVuZj kzHKqlZIzBwNcoTvM3GA79DQCfq9+uB4/tVmHwMGjtIUVkS268O1cq6u5cqipsWk m85DyUjpGDmM3cV4uZ6uxtaLoq+wbxQDSjaptqZa7GdUD23D6Ki2v9LRcUMvLeV+ na7wwZC7I67OMg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:29 2025 by rpki-client