This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json) Hash identifier: W4jGzZFExZUE5dWpl9WtNqdWAhWtD8WhkOJobPI759k= Subject key identifier: EA:BD:BE:98:01:95:6E:58:F7:AB:80:7B:D4:2E:76:F3:60:45:CB:6F Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802 Certificate serial: 019AEFACCB44D0380804B5376443EB43063E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft Manifest number: 11C0 Signing time: Fri 05 Dec 2025 18:01:10 +0000 Manifest this update: Fri 05 Dec 2025 18:01:10 +0000 Manifest next update: Sat 06 Dec 2025 18:01:10 +0000 Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=) 2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=) 3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: ph3tWqOpEqXBpLfUL68V2Yul1hNHlwaisMrPOHDhl+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ac:cb:44:d0:38:08:04:b5:37:64:43:eb:43:06:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59877720c014688494ea6910c83474de13e99802 Validity Not Before: Dec 5 18:01:10 2025 GMT Not After : Dec 6 18:01:10 2025 GMT Subject: CN=eabdbe9801956e58f7ab807bd42e76f36045cb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:20:42:fc:c7:61:30:a6:87:d5:c4:f2:48: 28:3e:10:e8:a0:9f:5e:c7:06:fa:de:6f:41:a8:99: 62:7c:63:5e:99:5d:ce:99:f1:8a:1b:e9:ab:4b:39: 30:9a:47:04:93:44:aa:74:e2:30:e7:bc:32:f7:d7: 11:3d:0a:b1:03:7b:27:a6:d1:00:dd:5f:54:d8:86: 64:d2:58:af:3f:6f:7b:6d:f0:7b:b4:35:f0:a1:63: f6:57:df:06:dd:b5:fc:cb:0b:65:7f:61:f0:4e:fe: 31:49:3c:33:67:71:83:5d:06:d0:8b:bf:a8:de:32: 19:57:68:c9:37:9a:41:5e:70:07:1c:57:c0:d2:dc: cd:92:a4:b9:f1:f6:28:53:68:ac:bd:93:6c:2b:42: 69:52:81:af:4e:71:21:30:95:b3:5a:62:38:6a:6e: 82:f5:1f:1b:d8:1f:92:6d:d9:fa:a5:52:16:d1:02: 22:76:a7:a1:90:49:de:ee:3b:54:39:af:ce:25:00: a3:df:55:da:25:b6:d6:77:0d:be:9e:b5:27:22:40: a3:2e:b6:fe:cf:9e:05:b9:05:d6:9c:68:3c:d7:45: 39:20:4b:d5:3e:7f:ee:18:ee:fa:48:2f:39:17:98: da:36:bf:61:85:7d:cb:aa:40:18:d1:68:a7:62:e4: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BD:BE:98:01:95:6E:58:F7:AB:80:7B:D4:2E:76:F3:60:45:CB:6F X509v3 Authority Key Identifier: keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:49:4c:2c:76:f8:c0:20:dd:3c:5e:24:8c:89:82:b7:b6:71: cd:4d:00:6b:c1:37:94:ba:f8:60:ba:f3:a9:dd:64:f2:d1:c1: b6:36:23:21:df:a2:70:ca:fa:6b:1f:80:72:10:f3:eb:06:37: 79:d4:05:9b:8e:88:a3:a2:f6:14:d7:58:97:95:13:20:12:55: 20:42:ef:d1:d1:a1:71:1f:ab:cc:da:21:c2:07:55:c7:1f:93: 2d:9d:44:58:1f:0b:7f:79:1e:c9:24:e7:7c:b4:e4:0f:89:37: 8f:c5:4b:ad:43:c3:cd:c0:23:4b:d2:d3:b9:59:04:c3:af:48: 18:1f:ce:11:05:e2:da:4c:e9:62:22:99:5f:c0:ac:db:fb:24: 30:5b:57:12:5b:3f:b1:58:93:f6:24:f8:c8:5b:bd:34:2b:61: 26:9d:6f:2d:cb:63:37:2d:9e:16:e8:2c:ce:e4:4d:42:2a:7a: cd:43:27:28:b7:fb:89:d0:4b:b2:ac:4f:20:8c:b0:19:18:ea: ce:62:c0:24:61:c0:0e:c0:99:d3:8f:01:e0:ee:91:0f:13:87: e9:65:4a:29:15:61:c2:17:0d:99:33:63:d0:13:aa:e4:df:d7: 7c:1f:63:ad:df:7d:3b:40:c4:a7:e8:58:a6:4c:33:fe:2c:cb: d2:22:15:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrMtE0DgIBLU3ZEPrQwY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl OTk4MDIwHhcNMjUxMjA1MTgwMTEwWhcNMjUxMjA2MTgwMTEwWjAzMTEwLwYDVQQD EyhlYWJkYmU5ODAxOTU2ZTU4ZjdhYjgwN2JkNDJlNzZmMzYwNDVjYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ4gQvzHYTCmh9XE8kgoPhDooJ9e xwb63m9BqJlifGNemV3OmfGKG+mrSzkwmkcEk0SqdOIw57wy99cRPQqxA3snptEA 3V9U2IZk0livP297bfB7tDXwoWP2V98G3bX8ywtlf2HwTv4xSTwzZ3GDXQbQi7+o 3jIZV2jJN5pBXnAHHFfA0tzNkqS58fYoU2isvZNsK0JpUoGvTnEhMJWzWmI4am6C 9R8b2B+Sbdn6pVIW0QIidqehkEne7jtUOa/OJQCj31XaJbbWdw2+nrUnIkCjLrb+ z54FuQXWnGg810U5IEvVPn/uGO76SC85F5jaNr9hhX3LqkAY0WinYuRmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq9vpgBlW5Y96uAe9QudvNgRctvMB8GA1UdIwQY MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOElMLHb4 wCDdPF4kjImCt7ZxzU0Aa8E3lLr4YLrzqd1k8tHBtjYjId+icMr6ax+AchDz6wY3 edQFm46Io6L2FNdYl5UTIBJVIELv0dGhcR+rzNohwgdVxx+TLZ1EWB8Lf3keySTn fLTkD4k3j8VLrUPDzcAjS9LTuVkEw69IGB/OEQXi2kzpYiKZX8Cs2/skMFtXEls/ sViT9iT4yFu9NCthJp1vLctjNy2eFugszuRNQip6zUMnKLf7idBLsqxPIIywGRjq zmLAJGHADsCZ048B4O6RDxOH6WVKKRVhwhcNmTNj0BOq5N/XfB9jrd99O0DEp+hY pkwz/izL0iIVyw== -----END CERTIFICATE-----Generated at Fri Dec 5 23:07:52 2025 by rpki-client