This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft File: wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json) Hash identifier: oBMdeLn7CpXh1rW2VjDjfvrwernTlpET1LcZRRN3xh4= Subject key identifier: 6C:12:12:14:92:B0:84:B2:DE:D7:48:A4:79:F5:E0:2C:21:CE:79:FF Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44 Certificate issuer: /CN=c32cc7a964f4f370929291e19fff7de53f19be44 Certificate serial: 019B5A5209B755621C924EC3AFDB39F3679A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft Manifest number: 12CD Signing time: Fri 26 Dec 2025 11:01:24 +0000 Manifest this update: Fri 26 Dec 2025 11:01:24 +0000 Manifest next update: Sat 27 Dec 2025 11:01:24 +0000 Files and hashes: 1: RPcZgGGV6x_O2v93PF_KdiXOCls.roa (hash: zudz6ArhADUJ+zH91d1CGuKo9XvGzdpHdTulI/kePX0=) 2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: 7cwxIcZU8otCu4HR/Uhrku3z7vnR1xpdMbpaE6tjUI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:09:b7:55:62:1c:92:4e:c3:af:db:39:f3:67:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44 Validity Not Before: Dec 26 11:01:24 2025 GMT Not After : Dec 27 11:01:24 2025 GMT Subject: CN=6c12121492b084b2ded748a479f5e02c21ce79ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:2b:b7:64:34:cd:69:fb:1d:89:f3:40:fc: 6d:e7:4f:67:c1:a0:99:ca:e4:12:25:e7:82:90:3a: b4:75:50:0f:d1:54:10:c0:c1:52:69:14:2d:45:c1: cb:f9:c0:97:ff:fa:e8:a3:58:ba:38:e3:9e:13:d0: 19:66:49:aa:9d:ec:f5:ce:8d:52:eb:31:85:f7:97: c4:d1:11:35:11:65:75:48:6b:50:eb:27:bc:1d:39: cc:96:47:2d:25:35:26:18:cd:a4:7f:8d:ef:a2:f6: e9:4e:fc:8b:ab:98:fa:8e:84:1d:50:fb:e7:01:fd: dd:8c:9b:88:b7:94:85:ad:e9:68:d2:04:34:df:12: bb:5b:2f:69:a0:7c:bd:c7:35:a5:94:40:4e:85:f2: 94:5e:b0:b3:39:08:a9:6a:c3:49:a1:41:f8:8f:7d: 75:00:0c:4d:e2:57:a7:27:66:03:a1:be:6a:a0:15: 32:40:0a:2a:3d:7b:13:60:5f:6e:29:87:44:5b:d5: 32:68:a6:4c:97:da:d8:c8:84:78:1f:0c:c2:e5:4e: 9a:e5:f1:e3:5d:ab:38:f4:9c:4f:00:c2:71:f4:c9: ff:b7:04:78:3b:cf:df:f8:59:5f:13:a5:f7:ac:cd: ff:bc:a3:3b:b1:5b:d0:ff:c9:b8:92:b9:a9:2d:66: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:12:12:14:92:B0:84:B2:DE:D7:48:A4:79:F5:E0:2C:21:CE:79:FF X509v3 Authority Key Identifier: keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8e:df:9b:34:01:2d:18:43:96:05:64:b4:5f:7c:65:0e:65: 39:fe:e7:76:fe:3e:16:0d:76:d9:ab:95:ca:de:41:1d:85:35: 59:3d:41:37:05:aa:62:cc:80:dc:d3:96:19:26:3d:63:b1:40: 81:46:91:2b:93:e2:44:7e:6a:af:c4:10:0c:80:cf:bf:59:c5: 98:b3:0c:a3:60:20:4b:50:17:6e:06:60:84:04:e2:b4:62:dd: 8b:44:88:e9:34:b6:9d:c4:61:c3:9d:f8:8b:ef:ca:77:0c:bf: fe:dd:ff:0a:94:67:38:bc:58:39:5f:70:59:22:f2:72:10:d3: a1:6a:f1:33:5b:39:22:03:75:1b:08:e1:96:dd:4b:48:0c:18: ce:d3:5b:d8:a4:42:95:23:4f:20:94:c4:85:6c:5a:02:db:7f: eb:c5:cb:04:63:67:d7:60:50:91:e1:fd:2d:de:e2:8d:f3:55: 77:20:47:46:3a:af:19:84:7e:19:4a:57:0d:df:74:2b:8e:2a: 57:3d:97:b5:cc:27:7a:4c:27:8d:e8:f2:e5:79:d2:94:8d:ea: 1e:bb:71:c2:f7:48:0e:2c:c3:ce:8b:13:fb:2e:46:a4:b9:16: 20:a9:61:b4:ed:64:64:b6:63:cb:56:2b:d7:37:a5:3a:c2:8e: 39:f5:f6:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgm3VWIckk7Dr9s582eaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmNjN2E5NjRmNGYzNzA5MjkyOTFlMTlmZmY3ZGU1M2Yx OWJlNDQwHhcNMjUxMjI2MTEwMTI0WhcNMjUxMjI3MTEwMTI0WjAzMTEwLwYDVQQD Eyg2YzEyMTIxNDkyYjA4NGIyZGVkNzQ4YTQ3OWY1ZTAyYzIxY2U3OWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIUrt2Q0zWn7HYnzQPxt509nwaCZ yuQSJeeCkDq0dVAP0VQQwMFSaRQtRcHL+cCX//roo1i6OOOeE9AZZkmqnez1zo1S 6zGF95fE0RE1EWV1SGtQ6ye8HTnMlkctJTUmGM2kf43vovbpTvyLq5j6joQdUPvn Af3djJuIt5SFrelo0gQ03xK7Wy9poHy9xzWllEBOhfKUXrCzOQipasNJoUH4j311 AAxN4lenJ2YDob5qoBUyQAoqPXsTYF9uKYdEW9UyaKZMl9rYyIR4HwzC5U6a5fHj Xas49JxPAMJx9Mn/twR4O8/f+FlfE6X3rM3/vKM7sVvQ/8m4krmpLWbtewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwSEhSSsISy3tdIpHn14Cwhznn/MB8GA1UdIwQY MBaAFMMsx6lk9PNwkpKR4Z//feU/Gb5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lN2M3NjItZDc5ZS00NmRjLWFmMTkt ZDdmNzhhYzIwNzA3LzEvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lN2M3NjItZDc5ZS00NmRjLWFmMTktZDdmNzhhYzIwNzA3 LzEvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY7fmzQB LRhDlgVktF98ZQ5lOf7ndv4+Fg122auVyt5BHYU1WT1BNwWqYsyA3NOWGSY9Y7FA gUaRK5PiRH5qr8QQDIDPv1nFmLMMo2AgS1AXbgZghATitGLdi0SI6TS2ncRhw534 i+/Kdwy//t3/CpRnOLxYOV9wWSLychDToWrxM1s5IgN1Gwjhlt1LSAwYztNb2KRC lSNPIJTEhWxaAtt/68XLBGNn12BQkeH9Ld7ijfNVdyBHRjqvGYR+GUpXDd90K44q Vz2Xtcwnekwnjejy5XnSlI3qHrtxwvdIDizDzosT+y5GpLkWIKlhtO1kZLZjy1Yr 1zelOsKOOfX22A== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:23 2025 by rpki-client