This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft File: wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json) Hash identifier: qLKGQiAwASePgeOk5Cb9gwl+R6eu0p7mtOpdxZN8ywE= Subject key identifier: F4:B5:B6:6A:37:65:D4:0F:31:31:AD:E7:D4:A9:32:2E:FF:85:09:CC Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Certificate serial: 019B0F37C735FC8654A77020B4428A6B6DE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 21:01:12 +0000 Manifest this update: Thu 11 Dec 2025 21:01:12 +0000 Manifest next update: Fri 12 Dec 2025 21:01:12 +0000 Files and hashes: 1: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (hash: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=) 2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: ALRTfP5X1rd5eaMoG3Ke0qr4KO2X788vH2TH0gC9rQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:c7:35:fc:86:54:a7:70:20:b4:42:8a:6b:6d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Validity Not Before: Dec 11 21:01:12 2025 GMT Not After : Dec 12 21:01:12 2025 GMT Subject: CN=f4b5b66a3765d40f3131ade7d4a9322eff8509cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:af:d8:e7:b9:eb:0e:98:43:a6:cf:b3:e9:f0: 09:49:f4:97:d5:98:56:69:fd:1b:72:ee:f7:79:6b: 4f:ef:ce:b7:fa:a0:ce:35:13:80:a7:27:f9:f7:57: 3f:f4:cf:d0:e3:83:02:a0:b2:4b:ba:30:d2:e3:85: f9:4b:eb:49:62:cc:73:20:73:92:d3:58:30:3a:0d: 23:f2:2f:58:f6:c8:e2:84:34:3e:43:b5:33:04:9a: dc:e7:32:54:92:b8:75:a2:77:37:b6:8c:63:14:23: 67:e0:7f:39:02:97:aa:4b:74:33:24:2a:70:01:62: 35:de:12:fc:5b:cd:bf:87:11:8b:85:51:ce:ec:b8: 37:cf:93:75:b9:11:60:9e:7d:50:41:60:e6:d4:8e: 0c:16:9c:ed:4a:b8:f8:14:64:3d:89:05:86:20:56: e3:90:0a:ae:e0:26:d7:bb:9b:0b:c5:99:7c:78:d6: e7:4a:8a:94:a2:b2:00:ec:3c:b5:ee:eb:99:10:25: 86:58:3f:9f:47:aa:7e:f8:e6:b3:ab:a6:e6:5c:a8: b4:bb:9b:d5:f3:c2:c0:ae:46:1d:86:9f:9e:1b:69: da:21:82:9a:3f:9d:43:63:59:db:20:bd:89:75:e4: 8d:81:a4:43:8a:2e:5e:e5:f7:3b:91:60:ec:78:d5: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B5:B6:6A:37:65:D4:0F:31:31:AD:E7:D4:A9:32:2E:FF:85:09:CC X509v3 Authority Key Identifier: keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:6d:53:ea:51:24:66:09:b6:d8:26:63:21:75:79:30:a0:31: ea:d5:c6:2c:b1:7c:86:a7:18:6e:ef:e9:02:83:72:3f:73:e0: 98:5e:53:29:7b:68:33:f8:ab:51:9d:92:1d:f5:fd:3f:6e:72: f5:cd:5e:9f:63:dd:8a:e0:5d:27:41:82:73:c2:d5:53:33:ff: 69:4c:c9:e4:b3:f4:d7:1d:92:5c:88:53:db:b3:24:e1:ff:40: a9:f7:a2:7d:5f:df:fa:0f:f8:5d:79:1a:72:8a:a3:9e:52:a2: 84:e4:94:a7:63:a7:bb:34:aa:92:6a:49:ee:8f:b5:d7:48:f2: 62:dc:d7:d9:c4:71:70:88:7e:21:c1:c1:d0:1b:c9:7a:6d:94: 85:04:a3:69:67:22:38:35:b6:df:26:86:0b:b3:28:bf:14:02: f6:dc:ff:62:f3:fb:89:0e:9f:32:88:80:f0:05:98:5d:bf:e2: 1a:9b:7c:02:84:16:2a:79:7e:7a:de:42:a7:3d:20:1e:28:d0: 7a:15:90:fa:74:07:40:1d:af:4b:c0:5b:ca:ca:03:98:da:b1: 69:11:64:87:96:f7:61:c4:69:a2:31:e8:c4:66:5d:c5:a3:69: a1:5e:c2:28:07:e1:5d:68:a0:76:ca:2c:2c:c9:7d:b8:af:5c: ae:fd:09:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN8c1/IZUp3AgtEKKa23lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm YjBhYTcwHhcNMjUxMjExMjEwMTEyWhcNMjUxMjEyMjEwMTEyWjAzMTEwLwYDVQQD EyhmNGI1YjY2YTM3NjVkNDBmMzEzMWFkZTdkNGE5MzIyZWZmODUwOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9q/Y57nrDphDps+z6fAJSfSX1ZhW af0bcu73eWtP7863+qDONROApyf591c/9M/Q44MCoLJLujDS44X5S+tJYsxzIHOS 01gwOg0j8i9Y9sjihDQ+Q7UzBJrc5zJUkrh1onc3toxjFCNn4H85ApeqS3QzJCpw AWI13hL8W82/hxGLhVHO7Lg3z5N1uRFgnn1QQWDm1I4MFpztSrj4FGQ9iQWGIFbj kAqu4CbXu5sLxZl8eNbnSoqUorIA7Dy17uuZECWGWD+fR6p++Oazq6bmXKi0u5vV 88LArkYdhp+eG2naIYKaP51DY1nbIL2JdeSNgaRDii5e5fc7kWDseNWPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS1tmo3ZdQPMTGt59SpMi7/hQnMMB8GA1UdIwQY MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt YTY3MTkxNWVlOTlhLzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV21T6lEk Zgm22CZjIXV5MKAx6tXGLLF8hqcYbu/pAoNyP3PgmF5TKXtoM/irUZ2SHfX9P25y 9c1en2PdiuBdJ0GCc8LVUzP/aUzJ5LP01x2SXIhT27Mk4f9AqfeifV/f+g/4XXka coqjnlKihOSUp2OnuzSqkmpJ7o+110jyYtzX2cRxcIh+IcHB0BvJem2UhQSjaWci ODW23yaGC7MovxQC9tz/YvP7iQ6fMoiA8AWYXb/iGpt8AoQWKnl+et5Cpz0gHijQ ehWQ+nQHQB2vS8BbysoDmNqxaRFkh5b3YcRpojHoxGZdxaNpoV7CKAfhXWigdsos LMl9uK9crv0JRA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:28:55 2025 by rpki-client