This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json) Hash identifier: bpElrxmLKQibF9BEnZZntWWr1OA/koPTwJ1IxRW6z1I= Subject key identifier: 12:01:A3:BA:9E:3A:D5:7B:44:94:CF:BF:14:20:99:A3:97:5F:00:A9 Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c Certificate serial: 019B5A518491F03B97FDDF125A6CD4320EF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft Manifest number: 06D5 Signing time: Fri 26 Dec 2025 11:00:50 +0000 Manifest this update: Fri 26 Dec 2025 11:00:50 +0000 Manifest next update: Sat 27 Dec 2025 11:00:50 +0000 Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: 4CmsgPuuvXmblTFCmDiL64Exj3a0NMXyAWI0S+gMhJE=) 2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:84:91:f0:3b:97:fd:df:12:5a:6c:d4:32:0e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f966238becd356df87d0c630248123f8f219e18c Validity Not Before: Dec 26 11:00:50 2025 GMT Not After : Dec 27 11:00:50 2025 GMT Subject: CN=1201a3ba9e3ad57b4494cfbf142099a3975f00a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:f1:06:8f:1e:22:a1:26:4b:4f:bc:a4:5b: 8f:e0:76:fe:21:a2:23:9b:5e:fe:eb:26:2a:14:20: a1:d2:96:97:96:4e:85:8c:69:f1:dd:f1:1c:fd:97: 34:5f:fd:35:15:72:61:56:ed:b2:19:d5:81:97:2b: dd:dd:90:14:b5:61:30:93:47:50:8f:af:a7:9d:8c: e7:78:b3:76:66:3a:73:28:7a:b2:10:27:42:96:4e: 26:ea:ef:7d:7d:aa:c6:32:ef:ff:2d:69:30:61:f8: 46:50:22:51:b1:1f:8e:6f:82:63:ae:ec:0a:4e:dc: a8:92:c5:bb:5d:78:f7:2d:a0:70:9e:ff:39:ff:57: dc:d3:88:91:22:41:14:b9:cd:5f:7c:90:99:88:a5: 55:51:0d:85:23:cd:89:5e:e7:13:c1:eb:0d:7e:6d: 8f:be:5d:24:35:8a:fc:d9:e9:0a:7a:21:52:7c:4d: fb:64:4b:18:7f:2d:0e:a0:92:9c:78:02:ce:30:8e: 54:ad:78:9b:b7:54:b6:88:52:d6:95:d5:30:db:3e: a5:fe:b9:43:fb:ee:48:cf:f0:d0:e5:2f:a7:89:2f: 9d:88:6f:87:ad:57:75:df:ab:da:db:03:3b:c5:17: 90:80:38:ca:98:1f:87:2a:ff:33:b8:7c:af:df:21: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:A3:BA:9E:3A:D5:7B:44:94:CF:BF:14:20:99:A3:97:5F:00:A9 X509v3 Authority Key Identifier: keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6a:1d:31:78:c3:94:c4:f3:c7:4c:e5:1d:49:42:52:1a:a4: 2c:c3:a8:ef:a7:6e:db:1a:52:83:c4:cc:6e:90:e5:5c:b3:82: 3f:02:ee:58:21:4d:28:ea:d3:b1:c9:17:64:ce:c8:b4:a0:a6: 42:0d:45:f1:b2:0d:ec:91:a6:16:93:af:1d:f0:01:46:79:2b: 75:1c:c8:5e:4e:36:dc:b5:a6:4d:f9:e3:9b:55:20:ec:92:d8: a7:c6:3e:04:6a:0a:66:c6:6a:a8:db:6e:07:f8:5b:df:c2:cd: 7a:56:6d:21:f0:df:72:39:c6:3c:7b:b3:1e:20:ad:80:23:7e: c4:d9:8b:71:7d:05:20:5e:17:4b:e7:d3:b3:51:c6:fd:bc:76: aa:21:2d:19:1f:3e:48:dc:e9:27:2f:fe:db:44:41:b3:78:dc: 61:83:07:1a:a6:54:89:48:56:6f:8c:eb:d6:9f:fa:09:68:59: 77:49:98:e8:83:28:a1:b2:42:3f:65:62:31:56:cb:0d:12:41: 68:fd:14:5e:8e:9a:5e:91:20:f9:e0:c9:41:0d:67:c2:25:d2: 97:c4:de:86:7c:3a:46:c3:98:f0:42:7c:b9:73:c4:48:f7:be: db:74:fd:3a:c1:7c:66:6f:40:78:75:aa:c3:aa:a7:a2:b0:3a: 94:50:b8:2b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaUYSR8DuX/d8SWmzUMg7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjYyMzhiZWNkMzU2ZGY4N2QwYzYzMDI0ODEyM2Y4ZjIx OWUxOGMwHhcNMjUxMjI2MTEwMDUwWhcNMjUxMjI3MTEwMDUwWjAzMTEwLwYDVQQD EygxMjAxYTNiYTllM2FkNTdiNDQ5NGNmYmYxNDIwOTlhMzk3NWYwMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gHxBo8eIqEmS0+8pFuP4Hb+IaIj m17+6yYqFCCh0paXlk6FjGnx3fEc/Zc0X/01FXJhVu2yGdWBlyvd3ZAUtWEwk0dQ j6+nnYzneLN2ZjpzKHqyECdClk4m6u99farGMu//LWkwYfhGUCJRsR+Ob4JjruwK TtyoksW7XXj3LaBwnv85/1fc04iRIkEUuc1ffJCZiKVVUQ2FI82JXucTwesNfm2P vl0kNYr82ekKeiFSfE37ZEsYfy0OoJKceALOMI5UrXibt1S2iFLWldUw2z6l/rlD ++5Iz/DQ5S+niS+diG+HrVd136va2wM7xReQgDjKmB+HKv8zuHyv3yEowwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBIBo7qeOtV7RJTPvxQgmaOXXwCpMB8GA1UdIwQY MBaAFPlmI4vs01bfh9DGMCSBI/jyGeGMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XWWppLXpUVnQtSDBNWXdKSUVqLVBJWjRZdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvYThlY2U3LTJiNmMtNDQ1MS04YjNk LTMzMmRiZDlhNjBhZi8xLzEtV1lqaS16VFZ0LUgwTVl3SklFai1QSVo0WXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I3L2E4ZWNlNy0yYjZjLTQ0NTEtOGIzZC0zMzJkYmQ5YTYw YWYvMS8xLVdZamktelRWdC1IME1Zd0pJRWotUElaNFl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmod MXjDlMTzx0zlHUlCUhqkLMOo76du2xpSg8TMbpDlXLOCPwLuWCFNKOrTsckXZM7I tKCmQg1F8bIN7JGmFpOvHfABRnkrdRzIXk423LWmTfnjm1Ug7JLYp8Y+BGoKZsZq qNtuB/hb38LNelZtIfDfcjnGPHuzHiCtgCN+xNmLcX0FIF4XS+fTs1HG/bx2qiEt GR8+SNzpJy/+20RBs3jcYYMHGqZUiUhWb4zr1p/6CWhZd0mY6IMoobJCP2ViMVbL DRJBaP0UXo6aXpEg+eDJQQ1nwiXSl8Tehnw6RsOY8EJ8uXPESPe+23T9OsF8Zm9A eHWqw6qnorA6lFC4Kw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:20 2025 by rpki-client