This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json) Hash identifier: EFOGEjj37Z/zwe4zYaWVDlqLWDrSKSzLayKm+tA8UMU= Subject key identifier: 7F:B5:E5:35:50:F6:0E:50:85:88:F2:6F:43:57:59:33:82:73:10:60 Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Certificate serial: 019B4814777C6CADCE20EB04126E702C77BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft Manifest number: 0E44 Signing time: Mon 22 Dec 2025 22:00:59 +0000 Manifest this update: Mon 22 Dec 2025 22:00:59 +0000 Manifest next update: Tue 23 Dec 2025 22:00:59 +0000 Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: 868xhD4cERr2//vRQo6BoqWxhcnKXFp63KfMjQLgzNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:77:7c:6c:ad:ce:20:eb:04:12:6e:70:2c:77:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Validity Not Before: Dec 22 22:00:59 2025 GMT Not After : Dec 23 22:00:59 2025 GMT Subject: CN=7fb5e53550f60e508588f26f4357593382731060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:59:45:12:81:d8:79:be:2f:20:d6:0b:91: a0:a9:36:1e:65:61:33:7e:c1:df:72:76:93:45:5f: bc:6a:dd:47:f3:bc:57:bf:9f:36:d5:b0:a6:4e:76: e1:35:5f:2c:a0:fc:ea:5c:51:fe:98:13:63:97:10: 3f:f6:de:8f:68:c3:4c:87:c5:56:4e:62:f5:fe:e4: 11:8e:eb:ee:aa:2a:77:74:1c:02:fa:99:71:3b:25: 31:b3:f7:92:37:5f:e5:c5:ae:9a:99:e7:f9:ee:da: 0e:95:af:a0:c5:38:ce:ca:81:21:b6:68:a0:9a:d5: 07:08:07:d0:dd:a6:42:86:55:9e:06:90:8d:0e:e0: 2e:7a:43:c4:3a:86:7b:5b:5f:80:69:4a:2b:39:eb: 7c:e5:d2:3d:87:55:1a:13:4d:35:10:39:bd:f5:19: bd:b3:d0:ea:b9:eb:ec:7e:db:1a:24:5e:68:3d:92: ba:a2:eb:2b:1d:56:50:6d:e6:28:3b:66:11:de:b8: ae:66:84:f6:41:35:10:70:f2:36:a5:f2:f8:7a:c1: 58:70:a1:f9:8f:7e:f2:61:dc:1f:58:57:21:05:7f: 1e:e3:8b:cc:e2:00:2a:49:d3:ec:a6:f4:be:e9:c3: d8:4d:3c:74:83:fe:4e:59:2e:53:16:b4:2a:42:53: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B5:E5:35:50:F6:0E:50:85:88:F2:6F:43:57:59:33:82:73:10:60 X509v3 Authority Key Identifier: keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e9:4b:3e:4c:a9:3c:65:4a:e9:32:ca:25:52:4e:eb:7a:d9: 21:1b:c2:ec:c6:87:0c:69:ba:27:61:59:c5:67:59:17:86:12: 0b:28:13:9b:8f:ab:fc:d1:e9:c6:ae:31:35:70:80:67:6f:12: 50:a5:a8:7c:97:96:f8:27:88:e6:c4:66:a2:4b:bd:46:d5:a7: 08:fb:5f:2a:e2:fb:4a:31:06:f1:70:80:38:6a:ee:89:d1:51: c8:ea:24:c1:8f:9f:36:c6:fa:39:d5:49:bd:7e:38:3a:63:3e: f4:d4:e3:36:d2:d8:bc:4f:77:77:b0:37:72:e3:4c:34:09:32: 81:94:8c:11:e1:0f:76:dd:a8:be:b9:d1:dd:1d:96:c2:37:5e: f3:38:fe:86:40:69:1d:ad:2c:c5:4d:45:09:4e:6f:85:39:2d: 03:2f:48:db:61:47:15:f6:0f:50:2b:ea:98:ee:9e:36:15:25: 39:b8:d7:43:0e:c0:7d:9d:79:8f:f6:05:51:49:73:a1:b5:d4: 83:55:a1:c9:29:7f:e8:57:4f:2b:e8:1c:a3:96:d3:26:79:f9: fd:f8:11:88:41:c5:9f:fd:be:eb:db:11:33:85:47:c6:02:80: 2b:e6:ee:16:1d:7d:0a:db:f1:25:da:5c:c1:ba:a7:83:42:86: 4c:8a:65:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFHd8bK3OIOsEEm5wLHe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODhmMDg1NWM0NDc4ZDFiOTRhYjhhOGQ2ZDlkOWM1MTFm MzE0MjYwHhcNMjUxMjIyMjIwMDU5WhcNMjUxMjIzMjIwMDU5WjAzMTEwLwYDVQQD Eyg3ZmI1ZTUzNTUwZjYwZTUwODU4OGYyNmY0MzU3NTkzMzgyNzMxMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroVZRRKB2Hm+LyDWC5GgqTYeZWEz fsHfcnaTRV+8at1H87xXv5821bCmTnbhNV8soPzqXFH+mBNjlxA/9t6PaMNMh8VW TmL1/uQRjuvuqip3dBwC+plxOyUxs/eSN1/lxa6amef57toOla+gxTjOyoEhtmig mtUHCAfQ3aZChlWeBpCNDuAuekPEOoZ7W1+AaUorOet85dI9h1UaE001EDm99Rm9 s9DquevsftsaJF5oPZK6ousrHVZQbeYoO2YR3riuZoT2QTUQcPI2pfL4esFYcKH5 j37yYdwfWFchBX8e44vM4gAqSdPspvS+6cPYTTx0g/5OWS5TFrQqQlOW5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+15TVQ9g5QhYjyb0NXWTOCcxBgMB8GA1UdIwQY MBaAFFmI8IVcRHjRuUq4qNbZ2cUR8xQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDkt ODcxMjJiNTE0ZTY5LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDktODcxMjJiNTE0ZTY5 LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+lLPkyp PGVK6TLKJVJO63rZIRvC7MaHDGm6J2FZxWdZF4YSCygTm4+r/NHpxq4xNXCAZ28S UKWofJeW+CeI5sRmoku9RtWnCPtfKuL7SjEG8XCAOGruidFRyOokwY+fNsb6OdVJ vX44OmM+9NTjNtLYvE93d7A3cuNMNAkygZSMEeEPdt2ovrnR3R2Wwjde8zj+hkBp Ha0sxU1FCU5vhTktAy9I22FHFfYPUCvqmO6eNhUlObjXQw7AfZ15j/YFUUlzobXU g1WhySl/6FdPK+gco5bTJnn5/fgRiEHFn/2+69sRM4VHxgKAK+buFh19CtvxJdpc wbqng0KGTIplgw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:06:49 2025 by rpki-client