This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json) Hash identifier: xEEiNTOBLQyu3n+b0ERCkvnIo1WF4U9kJuLNY+/0ehM= Subject key identifier: CB:1C:AC:39:77:3A:E4:E9:96:F2:3C:10:46:89:93:94:4E:AD:F7:59 Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9 Certificate serial: 019B661EDEF48CA8E3E9107B69DC2A5A8C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft Manifest number: 0B49 Signing time: Sun 28 Dec 2025 18:00:57 +0000 Manifest this update: Sun 28 Dec 2025 18:00:57 +0000 Manifest next update: Mon 29 Dec 2025 18:00:57 +0000 Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: IsOLO7Y7VoZcDrDtw4UaBsLKY29EeThbLJHUR8L0Rn4=) 2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=) 3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:de:f4:8c:a8:e3:e9:10:7b:69:dc:2a:5a:8c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9 Validity Not Before: Dec 28 18:00:57 2025 GMT Not After : Dec 29 18:00:57 2025 GMT Subject: CN=cb1cac39773ae4e996f23c10468993944eadf759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:ae:c5:00:0d:a4:ea:2b:84:47:6b:0f:df: 5d:fd:83:4b:2c:b6:94:ff:fa:f2:3f:d3:e8:99:aa: de:26:c0:3d:07:e0:50:95:f0:7f:47:da:d6:b2:a3: 15:b2:3f:6d:04:cb:44:4e:42:39:a2:cf:63:39:63: 2e:42:e2:0c:25:ad:56:33:97:36:a7:cd:8a:48:76: a8:c5:a6:6d:e4:e0:91:0c:2e:f6:e8:1e:83:16:57: c7:aa:ef:3b:c1:f4:27:48:84:70:52:7a:c2:9a:69: 4b:47:b3:4e:6a:42:44:e5:2c:46:c7:62:f2:68:b9: 67:11:37:97:44:91:6c:86:76:f6:b5:b0:dd:ec:62: 47:55:3a:c5:bc:36:7a:48:f1:19:90:c9:4b:84:d2: fe:ee:9b:a6:c0:a9:cb:bf:98:3e:8d:cf:29:4d:eb: c0:56:80:e9:61:c3:c5:5e:d7:bd:b8:c0:6f:93:de: 91:ef:f9:eb:be:57:b1:93:47:51:ab:d2:d5:86:d8: 9c:0f:88:f2:f7:ed:99:c2:0f:ff:01:c3:57:a9:fa: 4b:aa:12:40:33:5f:0c:c5:1d:2b:63:8a:78:c4:12: 04:62:cf:41:4d:52:15:de:6b:a7:a9:c0:58:41:13: 3c:b5:f7:b1:dd:25:15:c9:a4:9c:16:76:35:25:32: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1C:AC:39:77:3A:E4:E9:96:F2:3C:10:46:89:93:94:4E:AD:F7:59 X509v3 Authority Key Identifier: keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:20:b7:e1:0c:db:61:a1:82:ac:88:d9:39:71:ad:af:1f: 2b:90:e5:75:8e:f3:9d:cc:bf:41:b3:75:dc:92:0d:c9:b4:3f: 0a:54:c4:09:09:3e:28:ab:33:2a:e6:cd:83:1f:5d:1d:38:ab: 71:52:7e:b3:4b:9b:da:1c:63:e9:30:49:4d:98:03:ad:2d:f4: 54:e1:b6:6d:da:e0:57:da:e6:e9:ec:ed:39:9b:72:f5:da:ab: 16:c8:52:a2:bd:a8:1b:cd:6e:b9:92:99:12:84:84:a6:f2:7a: 18:00:65:ee:ce:73:a2:3e:da:66:55:04:4a:8c:fd:47:01:17: 4a:9a:98:d2:72:24:26:8a:f9:df:c2:76:95:f2:7b:b3:12:7b: 7d:4e:f1:6f:6e:16:93:b3:08:c5:60:de:31:ea:88:be:90:a1: bb:92:86:7a:72:fb:a2:b7:94:7d:4e:fb:27:49:7c:a6:05:76: 6b:b8:68:d0:fc:1d:ff:68:c1:54:7f:17:dd:06:9e:86:3d:cf: c5:3c:92:25:ad:f8:c9:01:f0:51:4b:77:fa:be:fa:33:33:0d: 8a:2b:0e:37:7f:da:1c:ba:83:81:9a:a8:d1:1b:a0:e6:cc:bc: 3a:1e:69:f2:a5:cb:9a:ae:17:5f:c0:1c:88:80:46:5b:81:28: 7c:08:9e:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHt70jKjj6RB7adwqWowyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy N2IwYzkwHhcNMjUxMjI4MTgwMDU3WhcNMjUxMjI5MTgwMDU3WjAzMTEwLwYDVQQD EyhjYjFjYWMzOTc3M2FlNGU5OTZmMjNjMTA0Njg5OTM5NDRlYWRmNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/+uxQANpOorhEdrD99d/YNLLLaU //ryP9PomareJsA9B+BQlfB/R9rWsqMVsj9tBMtETkI5os9jOWMuQuIMJa1WM5c2 p82KSHaoxaZt5OCRDC726B6DFlfHqu87wfQnSIRwUnrCmmlLR7NOakJE5SxGx2Ly aLlnETeXRJFshnb2tbDd7GJHVTrFvDZ6SPEZkMlLhNL+7pumwKnLv5g+jc8pTevA VoDpYcPFXte9uMBvk96R7/nrvlexk0dRq9LVhticD4jy9+2Zwg//AcNXqfpLqhJA M18MxR0rY4p4xBIEYs9BTVIV3munqcBYQRM8tfex3SUVyaScFnY1JTKYbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMscrDl3OuTplvI8EEaJk5ROrfdZMB8GA1UdIwQY MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt OWE4MDNmNzM2YzRhLzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG18gt+EM 22GhgqyI2Tlxra8fK5DldY7zncy/QbN13JINybQ/ClTECQk+KKszKubNgx9dHTir cVJ+s0ub2hxj6TBJTZgDrS30VOG2bdrgV9rm6eztOZty9dqrFshSor2oG81uuZKZ EoSEpvJ6GABl7s5zoj7aZlUESoz9RwEXSpqY0nIkJor538J2lfJ7sxJ7fU7xb24W k7MIxWDeMeqIvpChu5KGenL7oreUfU77J0l8pgV2a7ho0Pwd/2jBVH8X3Qaehj3P xTySJa34yQHwUUt3+r76MzMNiisON3/aHLqDgZqo0Rug5sy8Oh5p8qXLmq4XX8Ac iIBGW4EofAie+g== -----END CERTIFICATE-----Generated at Mon Dec 29 01:48:26 2025 by rpki-client