This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft File: wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json) Hash identifier: 8RfYz3167DxKHAWkTftZSy6h2j0n9Qqu0cXMk5zZ/Kg= Subject key identifier: 55:52:C0:AA:43:D9:F1:79:73:68:33:BE:90:77:07:84:FD:EB:F3:4A Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78 Certificate issuer: /CN=c18de4f2af8c7050e6e70e08a152573edd42e678 Certificate serial: 019B59E3995D5E7199BB3F95A70D1C5382AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft Manifest number: 0AE0 Signing time: Fri 26 Dec 2025 09:00:46 +0000 Manifest this update: Fri 26 Dec 2025 09:00:46 +0000 Manifest next update: Sat 27 Dec 2025 09:00:46 +0000 Files and hashes: 1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=) 2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: BGd3zyRmrN86iBgLBnVX6YbgCDoDv+xTpKvPGO6ZPJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:99:5d:5e:71:99:bb:3f:95:a7:0d:1c:53:82:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678 Validity Not Before: Dec 26 09:00:46 2025 GMT Not After : Dec 27 09:00:46 2025 GMT Subject: CN=5552c0aa43d9f179736833be90770784fdebf34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:bf:fd:5b:20:f5:56:9f:8d:4a:31:bc:47: d3:af:66:71:40:34:98:aa:5b:16:98:70:90:6f:15: 84:e8:fa:ac:d6:2a:f5:25:5d:fc:b8:7f:76:84:59: 78:17:15:21:5b:fa:af:2e:0f:73:27:37:31:4b:45: 5e:7a:dd:f2:7f:2d:13:f5:73:c7:1b:9f:94:a2:14: 51:d1:4f:46:7d:7a:6c:cd:28:cb:8c:79:9e:41:f1: f3:71:a1:c8:f1:1c:d8:37:6a:4c:e5:54:14:bf:ca: dd:1d:d2:ef:11:35:ea:ec:11:22:57:38:79:9b:0e: 2d:00:f3:ad:7e:13:b7:99:8a:84:f8:81:f3:18:14: ba:b3:4c:c3:57:d8:57:91:9c:f4:78:d0:d0:27:7d: 70:ca:82:ef:42:c5:12:e7:75:9f:9a:d9:7a:ba:63: 2f:99:f1:d0:46:97:d3:6e:e8:41:09:0a:59:bc:09: a6:b3:9f:39:ad:e0:0e:01:3f:6c:27:cd:67:da:f7: 4c:76:41:95:cf:ab:07:da:0a:54:ea:ce:e3:e7:3a: 9c:9b:45:1d:a2:bb:d8:68:60:e5:2b:f3:26:72:e5: 0a:1e:0c:62:b5:f2:e4:84:db:03:65:7e:9d:06:92: f3:52:0b:cc:2f:8e:c5:9e:3b:e7:69:3a:fc:05:31: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:52:C0:AA:43:D9:F1:79:73:68:33:BE:90:77:07:84:FD:EB:F3:4A X509v3 Authority Key Identifier: keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d7:19:6f:fc:0e:12:57:54:b3:57:d6:fe:d2:a3:83:2a:72: dc:45:91:32:e3:6a:57:31:53:8e:6c:4f:9b:c1:5b:b1:aa:80: ef:df:31:39:0a:0b:19:91:5d:b2:a3:22:c9:d3:dd:5d:59:f8: b1:a1:ea:31:d0:a8:18:be:b3:7c:bd:cf:8f:4a:0c:c7:64:16: 0b:af:1d:f3:e9:18:1f:4b:2f:49:43:64:4b:17:91:35:06:c7: f4:53:7c:65:00:af:46:64:04:70:9c:e1:68:23:86:e3:92:a1: 4a:d6:9e:29:ce:fb:82:03:2f:d9:2b:0f:4f:69:eb:ea:3d:9e: 88:cb:2c:77:68:3d:7e:6e:97:11:48:0d:98:9b:c9:a9:8b:99: b4:e0:4f:29:5b:3f:dc:15:f9:99:82:2f:36:f4:be:c1:02:8a: 9a:b8:63:ab:72:cd:23:8e:52:c6:6a:81:1f:c0:b6:6a:09:62: f7:17:99:dc:91:34:a4:a9:3a:60:8a:21:f4:b7:29:6c:08:cc: 85:20:c7:67:c5:f0:16:89:48:af:a3:3d:4a:9d:90:d8:82:df: 49:6d:4f:34:ef:47:00:21:dc:0c:21:ce:1b:28:36:76:43:63: 9e:bb:8d:70:a6:d7:d1:dd:ec:51:fb:9e:18:cd:a6:94:ff:4f: 9f:2a:da:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45ldXnGZuz+Vpw0cU4KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOGRlNGYyYWY4YzcwNTBlNmU3MGUwOGExNTI1NzNlZGQ0 MmU2NzgwHhcNMjUxMjI2MDkwMDQ2WhcNMjUxMjI3MDkwMDQ2WjAzMTEwLwYDVQQD Eyg1NTUyYzBhYTQzZDlmMTc5NzM2ODMzYmU5MDc3MDc4NGZkZWJmMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC2//Vsg9VafjUoxvEfTr2ZxQDSY qlsWmHCQbxWE6Pqs1ir1JV38uH92hFl4FxUhW/qvLg9zJzcxS0Veet3yfy0T9XPH G5+UohRR0U9GfXpszSjLjHmeQfHzcaHI8RzYN2pM5VQUv8rdHdLvETXq7BEiVzh5 mw4tAPOtfhO3mYqE+IHzGBS6s0zDV9hXkZz0eNDQJ31wyoLvQsUS53Wfmtl6umMv mfHQRpfTbuhBCQpZvAmms585reAOAT9sJ81n2vdMdkGVz6sH2gpU6s7j5zqcm0Ud orvYaGDlK/MmcuUKHgxitfLkhNsDZX6dBpLzUgvML47FnjvnaTr8BTHJ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVSwKpD2fF5c2gzvpB3B4T96/NKMB8GA1UdIwQY MBaAFMGN5PKvjHBQ5ucOCKFSVz7dQuZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzct MDA3YjQ0N2Q0YjM5LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzctMDA3YjQ0N2Q0YjM5 LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdcZb/wO EldUs1fW/tKjgypy3EWRMuNqVzFTjmxPm8FbsaqA798xOQoLGZFdsqMiydPdXVn4 saHqMdCoGL6zfL3Pj0oMx2QWC68d8+kYH0svSUNkSxeRNQbH9FN8ZQCvRmQEcJzh aCOG45KhStaeKc77ggMv2SsPT2nr6j2eiMssd2g9fm6XEUgNmJvJqYuZtOBPKVs/ 3BX5mYIvNvS+wQKKmrhjq3LNI45SxmqBH8C2agli9xeZ3JE0pKk6YIoh9LcpbAjM hSDHZ8XwFolIr6M9Sp2Q2ILfSW1PNO9HACHcDCHOGyg2dkNjnruNcKbX0d3sUfue GM2mlP9Pnyraew== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:39 2025 by rpki-client