This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft File: WXIYySXnbh6YCYdfftGvqX72950.mft (raw, json) Hash identifier: LZSLq8xJxsqpPGv2NfxQLycqLoo2rtLNx9MQg1cCwAo= Subject key identifier: A8:F6:F4:D9:D1:7D:5B:1B:AA:BA:57:E5:CC:C5:D4:B3:B4:51:5B:ED Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d Certificate serial: 019B5A516DF6E63092889B791C481B7E9D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft Manifest number: 01C7 Signing time: Fri 26 Dec 2025 11:00:44 +0000 Manifest this update: Fri 26 Dec 2025 11:00:44 +0000 Manifest next update: Sat 27 Dec 2025 11:00:44 +0000 Files and hashes: 1: GYq7npqDI9nx5r20ZgfqjJ8jCBE.roa (hash: ohpsx6f/3RHy+wstuJFR07y68Swe9+64PHH/6mRDCMM=) 2: WXIYySXnbh6YCYdfftGvqX72950.crl (hash: 8SLRFNAxWJTA+kYBUsTkW5rK0OQ1A7ktUvG+nOe5A2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6d:f6:e6:30:92:88:9b:79:1c:48:1b:7e:9d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d Validity Not Before: Dec 26 11:00:44 2025 GMT Not After : Dec 27 11:00:44 2025 GMT Subject: CN=a8f6f4d9d17d5b1baaba57e5ccc5d4b3b4515bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a9:99:eb:57:00:07:e4:6f:95:cd:1b:d8:a5: 13:b7:71:08:06:e4:11:fd:e0:b4:ba:94:bf:a9:de: 01:6f:22:c0:4a:95:bb:11:9c:78:0a:57:88:76:97: 6d:95:dc:cb:db:77:8c:31:ba:96:39:43:93:4d:e9: 55:52:07:63:3f:c9:c8:92:92:d0:5d:38:74:3d:a1: 9e:b4:97:8f:4f:5f:01:67:07:6a:a9:43:4b:93:ac: fa:06:ac:4c:6f:50:6f:31:58:83:78:e8:c9:e2:e5: f0:2a:81:a9:14:8f:bc:6c:ec:f5:9b:42:dd:8a:d1: 7a:5b:74:cc:4d:c3:84:26:0b:6a:79:f3:ea:25:e4: 4b:57:65:ba:a3:0c:cc:46:42:23:e9:27:b3:8c:4e: 12:27:84:82:7f:bf:6f:59:b7:b2:a9:6d:c3:5b:6a: 37:01:4b:10:95:8e:85:2d:11:ee:51:56:e1:56:09: 31:6d:12:5e:f0:1e:2c:cb:74:ab:32:9f:3b:4b:34: 1e:62:eb:3b:1f:ee:3d:46:07:d4:53:9e:a5:b3:1e: 22:69:26:b9:9c:5d:87:80:7f:95:f0:3f:a2:2c:3b: 0e:7d:0e:8b:48:cc:da:7b:82:99:9d:6a:89:4b:ee: 68:1d:3e:76:b5:0c:46:b3:c7:a7:5e:1f:ed:5d:b1: f9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:F4:D9:D1:7D:5B:1B:AA:BA:57:E5:CC:C5:D4:B3:B4:51:5B:ED X509v3 Authority Key Identifier: keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:eb:7c:ba:cc:cb:73:66:cb:b9:34:fe:0d:28:7c:53:15: eb:67:df:d8:d4:23:31:b4:bd:56:fd:05:f6:64:18:4f:4c:21: 6f:52:00:9c:4a:0f:40:52:27:93:35:0c:7c:c2:42:4c:21:ed: c1:82:b7:44:6e:5c:b1:b5:92:60:c9:68:23:fd:93:0d:ea:6d: 25:7c:12:88:ed:5e:36:ae:f9:a2:12:b9:f0:53:76:07:db:b9: 4c:ec:3e:e4:ff:b4:de:3d:86:d5:a7:2c:f5:b1:70:6a:56:db: 2a:1a:d7:b0:22:f2:ef:1e:25:ac:7a:e9:a0:6f:1a:3f:28:b2: 80:ae:53:24:a9:85:74:fc:4a:99:4b:0d:82:eb:c5:3a:e2:ee: 27:9d:81:cc:7c:47:bf:8e:d5:f2:1d:a8:e8:99:cf:41:0e:92: 09:63:cc:d8:9f:3f:ff:16:71:5e:b3:67:bd:a6:af:74:2e:43: 2f:fc:b5:02:e0:37:57:06:cb:9a:84:c1:77:e0:69:fa:1e:0b: 89:e8:c8:57:21:69:23:1d:f2:29:01:13:0c:2b:c8:17:d9:1d: 90:5b:a9:b6:45:9b:25:df:ff:0b:ba:53:a7:94:d2:07:8d:0f: cc:6b:fa:24:b4:73:52:da:ad:0f:83:36:e7:d4:ba:3b:7d:79: 21:f1:5a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUW325jCSiJt5HEgbfp1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzIxOGM5MjVlNzZlMWU5ODA5ODc1ZjdlZDFhZmE5N2Vm NmY3OWQwHhcNMjUxMjI2MTEwMDQ0WhcNMjUxMjI3MTEwMDQ0WjAzMTEwLwYDVQQD EyhhOGY2ZjRkOWQxN2Q1YjFiYWFiYTU3ZTVjY2M1ZDRiM2I0NTE1YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqmZ61cAB+Rvlc0b2KUTt3EIBuQR /eC0upS/qd4BbyLASpW7EZx4CleIdpdtldzL23eMMbqWOUOTTelVUgdjP8nIkpLQ XTh0PaGetJePT18BZwdqqUNLk6z6BqxMb1BvMViDeOjJ4uXwKoGpFI+8bOz1m0Ld itF6W3TMTcOEJgtqefPqJeRLV2W6owzMRkIj6SezjE4SJ4SCf79vWbeyqW3DW2o3 AUsQlY6FLRHuUVbhVgkxbRJe8B4sy3SrMp87SzQeYus7H+49RgfUU56lsx4iaSa5 nF2HgH+V8D+iLDsOfQ6LSMzae4KZnWqJS+5oHT52tQxGs8enXh/tXbH5DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj29NnRfVsbqrpX5czF1LO0UVvtMB8GA1UdIwQY MBaAFFlyGMkl524emAmHX37Rr6l+9vedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMt YzQ0ZjlkN2ZmZGY2LzEvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC81Njg3MjgtNGM1Ni00YThmLWFmYjMtYzQ0ZjlkN2ZmZGY2 LzEvV1hJWXlTWG5iaDZZQ1lkZmZ0R3ZxWDcyOTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZerrfLrM y3Nmy7k0/g0ofFMV62ff2NQjMbS9Vv0F9mQYT0whb1IAnEoPQFInkzUMfMJCTCHt wYK3RG5csbWSYMloI/2TDeptJXwSiO1eNq75ohK58FN2B9u5TOw+5P+03j2G1acs 9bFwalbbKhrXsCLy7x4lrHrpoG8aPyiygK5TJKmFdPxKmUsNguvFOuLuJ52BzHxH v47V8h2o6JnPQQ6SCWPM2J8//xZxXrNnvaavdC5DL/y1AuA3VwbLmoTBd+Bp+h4L iejIVyFpIx3yKQETDCvIF9kdkFuptkWbJd//C7pTp5TSB40PzGv6JLRzUtqtD4M2 59S6O315IfFaog== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:41 2025 by rpki-client