This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft File: wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json) Hash identifier: VEU3h1mDnEF7kAMVbvXAd7QnbLQtWTI0VpZT5H0i+LU= Subject key identifier: F9:21:36:0A:D8:C2:87:79:7B:08:24:7D:5D:BD:B9:4C:4B:50:91:0A Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Certificate serial: 019B3BA2AA2AE255E9AECE28A82192C9E8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:01:14 +0000 Manifest this update: Sat 20 Dec 2025 12:01:14 +0000 Manifest next update: Sun 21 Dec 2025 12:01:14 +0000 Files and hashes: 1: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (hash: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=) 2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: SjEq+zXUqYusCrB8syrNhMLu1v6GNL+crXX9pzqAGGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:aa:2a:e2:55:e9:ae:ce:28:a8:21:92:c9:e8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Validity Not Before: Dec 20 12:01:14 2025 GMT Not After : Dec 21 12:01:14 2025 GMT Subject: CN=f921360ad8c287797b08247d5dbdb94c4b50910a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:36:ce:7b:d7:7b:c7:0d:4a:f7:be:bf:9f: 92:6f:ae:34:0a:b0:21:7b:9f:47:9c:f0:bc:4b:f2: 2f:b5:fc:90:bb:8c:f8:c7:ca:e0:5f:d3:ad:5c:c5: 92:f4:8e:43:5d:aa:6c:de:8e:0e:a5:7c:c2:93:47: eb:fe:95:79:8d:e4:8a:05:a9:55:76:20:8e:b2:fd: 53:03:b3:1f:6a:a7:25:52:ce:30:a9:86:2a:de:53: 48:72:90:03:d1:4b:d2:f4:e4:81:31:67:5a:75:03: 11:17:67:8a:59:8e:67:ea:ae:2d:59:a0:20:4e:56: 06:83:81:05:84:76:4f:0d:4c:2a:a8:9f:24:8a:cb: f3:de:50:58:0f:5a:97:86:91:0b:b7:88:4f:ff:f4: 0c:10:b3:2d:17:16:d0:30:f2:01:0c:09:d6:0d:0a: 0e:42:21:69:91:01:25:30:bb:96:87:1a:ba:c2:bf: 33:c2:8f:f9:b5:48:b2:98:b1:56:95:6a:7c:d5:f5: 4e:a5:50:64:ba:1e:3b:48:1e:53:b7:32:dd:85:52: 18:9d:48:95:96:33:c7:c1:30:3f:17:8f:c4:70:d7: 76:6a:f8:a8:5a:67:1b:98:40:51:27:80:f5:9a:43: 9a:64:7e:98:ad:41:27:66:4c:3c:23:b1:70:2e:f4: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:21:36:0A:D8:C2:87:79:7B:08:24:7D:5D:BD:B9:4C:4B:50:91:0A X509v3 Authority Key Identifier: keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:52:b3:a8:c2:f9:53:4c:5f:ee:04:1c:f2:4b:5c:50:9a:de: 9f:9d:53:0c:56:03:fe:df:d6:6b:f0:67:92:f6:be:b4:25:59: 12:95:51:6f:6e:c4:43:88:b0:01:69:1f:61:48:0b:5c:50:4c: 12:59:9c:7b:4e:b9:58:96:97:4c:5f:8b:69:1c:f9:5f:15:e0: c1:10:0b:a8:cd:8b:9d:a7:2e:93:1c:67:44:d0:e0:ca:bb:dd: 33:56:21:f6:83:d6:fc:70:7a:3d:b1:3d:fe:6a:3a:db:d0:41: d4:b7:0d:c9:1b:a9:82:86:c1:be:ab:9e:bd:a9:86:b2:8c:18: a9:24:4e:4b:9f:6c:72:33:e6:b0:f9:c0:fa:33:3c:04:87:b0: 6e:65:fc:b1:bb:c2:9e:81:ce:61:3b:bd:45:cb:31:5d:1d:bc: 0b:40:57:ca:40:7d:f6:a2:9e:da:ca:9b:5f:57:0d:05:fc:26: 29:81:95:c9:33:15:7d:a0:ac:78:7d:70:24:d1:d4:e8:15:1f: 53:75:7f:70:9a:32:04:2f:9c:ce:44:89:44:2e:d4:d5:9a:e6: ee:b4:1b:76:f0:de:d0:73:da:f1:7d:f2:65:34:62:9f:a7:c4: ac:94:0a:7d:9f:80:59:6a:ff:f1:90:cd:66:49:04:72:a6:a9: 7a:b8:99:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqoq4lXprs4oqCGSyei8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm YjBhYTcwHhcNMjUxMjIwMTIwMTE0WhcNMjUxMjIxMTIwMTE0WjAzMTEwLwYDVQQD EyhmOTIxMzYwYWQ4YzI4Nzc5N2IwODI0N2Q1ZGJkYjk0YzRiNTA5MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowA2znvXe8cNSve+v5+Sb640CrAh e59HnPC8S/IvtfyQu4z4x8rgX9OtXMWS9I5DXaps3o4OpXzCk0fr/pV5jeSKBalV diCOsv1TA7MfaqclUs4wqYYq3lNIcpAD0UvS9OSBMWdadQMRF2eKWY5n6q4tWaAg TlYGg4EFhHZPDUwqqJ8kisvz3lBYD1qXhpELt4hP//QMELMtFxbQMPIBDAnWDQoO QiFpkQElMLuWhxq6wr8zwo/5tUiymLFWlWp81fVOpVBkuh47SB5TtzLdhVIYnUiV ljPHwTA/F4/EcNd2avioWmcbmEBRJ4D1mkOaZH6YrUEnZkw8I7FwLvROwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkhNgrYwod5ewgkfV29uUxLUJEKMB8GA1UdIwQY MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt YTY3MTkxNWVlOTlhLzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVKzqML5 U0xf7gQc8ktcUJren51TDFYD/t/Wa/Bnkva+tCVZEpVRb27EQ4iwAWkfYUgLXFBM Elmce065WJaXTF+LaRz5XxXgwRALqM2LnacukxxnRNDgyrvdM1Yh9oPW/HB6PbE9 /mo629BB1LcNyRupgobBvquevamGsowYqSROS59scjPmsPnA+jM8BIewbmX8sbvC noHOYTu9RcsxXR28C0BXykB99qKe2sqbX1cNBfwmKYGVyTMVfaCseH1wJNHU6BUf U3V/cJoyBC+czkSJRC7U1Zrm7rQbdvDe0HPa8X3yZTRin6fErJQKfZ+AWWr/8ZDN ZkkEcqaperiZ0A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:16 2025 by rpki-client