This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft File: wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json) Hash identifier: 8702rOMeqiKdFYOKZq2JKhayZ5+MTEzUzzIk3GsQ3yA= Subject key identifier: BD:8C:21:E9:71:9F:3F:F8:8B:88:20:80:E3:9C:CE:1C:53:4D:51:AB Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36 Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636 Certificate serial: 019B40FF7D42FD95FFC51A381D4CD6593347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 13:00:44 +0000 Manifest this update: Sun 21 Dec 2025 13:00:44 +0000 Manifest next update: Mon 22 Dec 2025 13:00:44 +0000 Files and hashes: 1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=) 2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: wrkpVqOaEWWGRXaTGkUK61DRvc8zZ6C/IUXVPeccHIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:7d:42:fd:95:ff:c5:1a:38:1d:4c:d6:59:33:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636 Validity Not Before: Dec 21 13:00:44 2025 GMT Not After : Dec 22 13:00:44 2025 GMT Subject: CN=bd8c21e9719f3ff88b882080e39cce1c534d51ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:29:09:fa:a5:81:32:57:f5:e0:06:af:6d: 66:04:83:81:a0:6d:0a:6f:e1:50:f7:d5:a4:10:5b: c9:70:a2:a1:56:10:a7:2d:44:b2:73:2c:bc:06:36: ff:43:f7:1e:b6:68:41:64:fa:d6:4c:fc:32:65:e9: 69:59:90:1c:e2:4d:4a:b3:f9:90:ca:4f:68:7e:43: 91:f4:99:32:80:c4:11:06:66:92:44:02:82:9a:b3: 52:67:a2:24:9a:7a:ad:a5:91:b6:80:29:89:1f:1d: ee:fc:d2:0d:14:ed:20:a2:a4:22:d7:2e:d2:f8:ea: d7:ef:bf:4d:60:3f:16:fc:c0:7a:9b:ea:02:92:d2: 0f:e1:04:11:5a:c9:f9:d3:60:0e:29:67:3a:3e:d9: a2:97:0b:8b:2d:fe:48:48:b3:ad:a5:d5:77:ef:eb: f5:b7:46:ce:88:17:35:d4:c0:d3:b1:04:ed:28:63: 64:c7:ab:62:43:8c:a7:ca:91:0f:74:68:b4:ac:0b: ba:74:99:19:a0:c7:9e:09:fc:32:db:ca:a9:57:a7: a5:ff:ea:56:31:67:eb:de:48:cd:e2:a8:f6:b2:9d: 56:5b:57:de:09:a7:e8:95:39:7b:87:0c:74:68:e8: f8:b0:0a:12:4e:7a:79:a1:08:37:0a:ea:ec:f4:a3: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8C:21:E9:71:9F:3F:F8:8B:88:20:80:E3:9C:CE:1C:53:4D:51:AB X509v3 Authority Key Identifier: keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b3:d6:aa:c9:bb:82:49:de:c9:90:4c:bd:5b:bd:a4:8e:57: 64:69:aa:1a:db:5a:0a:22:0e:44:28:87:1e:8e:07:dc:fc:a6: a2:02:f9:73:01:50:2c:78:bc:e9:1b:d3:53:6c:e2:10:b1:f9: 62:90:59:de:8e:41:80:39:40:02:ba:4f:74:38:cd:e0:82:37: fe:8a:a8:96:21:67:71:13:9c:ad:80:50:2c:aa:24:d7:d9:6a: 04:97:f2:d4:6d:e2:15:e9:d3:76:d3:06:12:da:15:95:93:de: b5:01:26:21:ec:39:4f:6a:74:4f:57:a5:ec:a7:c5:4b:62:e8: f7:a4:14:4b:27:9a:22:76:ba:df:0f:bf:c2:36:89:32:e4:a3: d0:7e:60:5c:ac:cf:f5:ea:f0:d9:8c:8e:b1:f8:9c:a8:57:89: 9b:4f:39:68:ee:97:46:d0:e6:e3:de:6a:af:c1:ea:31:93:d1: 74:9b:b1:07:9c:07:c5:50:29:0f:15:e8:0d:d8:e3:fa:92:8e: aa:a8:0a:35:e0:60:dd:e2:6d:b6:bf:04:bf:e6:10:74:df:2f: fc:c6:42:97:9d:47:ef:4e:8c:4a:46:1a:19:67:35:d3:b2:af: 4a:6e:a4:fb:10:c1:5d:76:37:2b:88:b5:52:11:79:ea:a7:9e: 44:ae:96:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/31C/ZX/xRo4HUzWWTNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmExNmIyMDdlM2I2ZjZmNzJkM2QwYWQ1ZmNlYmE4ZWEx MDM2MzYwHhcNMjUxMjIxMTMwMDQ0WhcNMjUxMjIyMTMwMDQ0WjAzMTEwLwYDVQQD EyhiZDhjMjFlOTcxOWYzZmY4OGI4ODIwODBlMzljY2UxYzUzNGQ1MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpYpCfqlgTJX9eAGr21mBIOBoG0K b+FQ99WkEFvJcKKhVhCnLUSycyy8Bjb/Q/cetmhBZPrWTPwyZelpWZAc4k1Ks/mQ yk9ofkOR9JkygMQRBmaSRAKCmrNSZ6IkmnqtpZG2gCmJHx3u/NINFO0goqQi1y7S +OrX779NYD8W/MB6m+oCktIP4QQRWsn502AOKWc6PtmilwuLLf5ISLOtpdV37+v1 t0bOiBc11MDTsQTtKGNkx6tiQ4ynypEPdGi0rAu6dJkZoMeeCfwy28qpV6el/+pW MWfr3kjN4qj2sp1WW1feCafolTl7hwx0aOj4sAoSTnp5oQg3Curs9KPdjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2MIelxnz/4i4gggOOczhxTTVGrMB8GA1UdIwQY MBaAFMMqFrIH47b29y09CtX866jqEDY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2Ut NGRjMmY3OTNjM2NkLzEvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YTY5NGItYzYxYi00MWIyLTkzY2UtNGRjMmY3OTNjM2Nk LzEvd3lvV3NnZmp0dmIzTFQwSzFmenJxT29RTmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbPWqsm7 gkneyZBMvVu9pI5XZGmqGttaCiIORCiHHo4H3PymogL5cwFQLHi86RvTU2ziELH5 YpBZ3o5BgDlAArpPdDjN4II3/oqoliFncROcrYBQLKok19lqBJfy1G3iFenTdtMG EtoVlZPetQEmIew5T2p0T1el7KfFS2Lo96QUSyeaIna63w+/wjaJMuSj0H5gXKzP 9erw2YyOsficqFeJm085aO6XRtDm495qr8HqMZPRdJuxB5wHxVApDxXoDdjj+pKO qqgKNeBg3eJttr8Ev+YQdN8v/MZCl51H706MSkYaGWc107KvSm6k+xDBXXY3K4i1 UhF56qeeRK6WoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 18:01:46 2025 by rpki-client