This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json) Hash identifier: 7O2b2naFEVZpOrscf0m0PrGFdGU60Tov4wCjXLyvhgY= Subject key identifier: FC:FC:B9:92:94:2C:BD:FF:8D:19:F3:CD:64:E6:CF:83:38:17:92:C3 Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba Certificate serial: 019B292EA47B854AE6F823D9328C57E4DC10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft Manifest number: 02B9 Signing time: Tue 16 Dec 2025 22:01:21 +0000 Manifest this update: Tue 16 Dec 2025 22:01:21 +0000 Manifest next update: Wed 17 Dec 2025 22:01:21 +0000 Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=) 2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: W+uhDpJwojo3Od3lejdS9j8pVsiS1OBjdB2C9S1clTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:a4:7b:85:4a:e6:f8:23:d9:32:8c:57:e4:dc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba Validity Not Before: Dec 16 22:01:21 2025 GMT Not After : Dec 17 22:01:21 2025 GMT Subject: CN=fcfcb992942cbdff8d19f3cd64e6cf83381792c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:b1:6c:43:68:9f:eb:8d:b0:0b:eb:94:c2: f0:6b:15:b7:db:2a:52:05:2f:8e:ce:53:fb:10:f4: a5:ea:b5:9f:a7:df:51:81:a2:8f:42:69:3b:78:f9: 95:2e:1f:6b:05:54:09:78:0c:f7:78:4e:10:85:85: 6b:82:d1:c0:e7:d2:d8:82:af:40:1a:c9:ac:6c:c2: 16:e0:40:f6:e7:f4:84:a9:0c:76:88:b3:2b:a5:84: 71:1c:30:89:ba:55:06:18:3e:9d:5a:1c:a2:54:aa: 7f:0d:ef:e4:7d:96:16:5b:51:b5:a4:7a:e0:6a:0b: 12:f8:ee:74:c9:4e:37:54:f9:a2:e9:16:26:95:c7: a5:85:28:a1:76:69:b1:3b:a9:7e:2b:90:a5:9d:55: 27:db:5e:da:39:8f:d5:6b:d1:39:35:7c:2b:da:e7: f2:0b:79:1e:1c:fc:43:26:fd:a1:1c:55:2f:b5:fe: fd:2e:5a:56:8c:8e:21:ea:58:dc:b5:4d:5d:00:d8: 08:8f:76:48:3c:9c:c8:ca:eb:bb:ba:51:ec:6d:cf: 63:c3:b8:bf:9e:ad:35:10:c9:b7:21:70:5b:cc:fa: 4f:63:c4:05:5b:56:c7:19:d4:8e:9a:2d:cb:4e:9d: 45:6c:5f:67:2f:84:15:29:d4:46:3e:04:fd:64:48: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:B9:92:94:2C:BD:FF:8D:19:F3:CD:64:E6:CF:83:38:17:92:C3 X509v3 Authority Key Identifier: keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:72:39:a0:68:35:ee:7e:18:9f:99:ac:a6:f7:ad:49:0d:1b: 87:9e:8d:bb:08:62:ea:ca:ff:0a:f3:97:be:23:92:ee:94:64: 67:55:81:27:fb:69:5e:c5:d0:89:62:4f:e0:bf:b1:3a:a3:bd: 4e:51:a7:a1:61:4a:0f:e0:cc:77:cc:03:91:af:40:4a:b6:ca: 31:ca:cd:0f:3e:8d:3a:4e:51:f5:d4:a1:c1:f0:66:7e:26:1b: 5f:9d:7c:e1:71:6c:0a:21:2a:5f:40:7e:5b:eb:20:a1:c2:d6: 40:37:a0:3a:52:db:fa:fa:1b:c0:db:a9:ec:6b:57:d8:8d:6c: cd:d5:4c:4b:5d:88:51:07:77:e8:ed:d2:dd:19:50:2d:12:eb: 23:9c:6e:36:39:4c:68:18:30:c4:13:1a:d5:12:d5:1c:25:64: 7c:0f:55:44:91:f6:da:56:13:ab:29:ab:cf:0c:9b:13:64:19: e5:c5:16:46:79:25:c5:13:6a:7f:0c:33:99:1e:7f:27:81:44: 28:17:5d:b0:96:92:87:52:9e:47:ff:3c:00:66:3e:68:c3:08: db:51:2a:e2:a6:e1:b7:fd:81:5b:1c:f6:13:ab:de:95:b9:84: fa:39:ed:64:30:a0:0f:d2:a1:e9:2d:98:83:a4:c9:e0:d5:da: fa:9e:74:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLqR7hUrm+CPZMoxX5NwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODViZDQxYTU5YTJkNDUxZTYyNzA4MzVkYTE0Mzk5ZmY2 MmJhYmEwHhcNMjUxMjE2MjIwMTIxWhcNMjUxMjE3MjIwMTIxWjAzMTEwLwYDVQQD EyhmY2ZjYjk5Mjk0MmNiZGZmOGQxOWYzY2Q2NGU2Y2Y4MzM4MTc5MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hKxbENon+uNsAvrlMLwaxW32ypS BS+OzlP7EPSl6rWfp99RgaKPQmk7ePmVLh9rBVQJeAz3eE4QhYVrgtHA59LYgq9A GsmsbMIW4ED25/SEqQx2iLMrpYRxHDCJulUGGD6dWhyiVKp/De/kfZYWW1G1pHrg agsS+O50yU43VPmi6RYmlcelhSihdmmxO6l+K5ClnVUn217aOY/Va9E5NXwr2ufy C3keHPxDJv2hHFUvtf79LlpWjI4h6ljctU1dANgIj3ZIPJzIyuu7ulHsbc9jw7i/ nq01EMm3IXBbzPpPY8QFW1bHGdSOmi3LTp1FbF9nL4QVKdRGPgT9ZEiecQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPz8uZKULL3/jRnzzWTmz4M4F5LDMB8GA1UdIwQY MBaAFFmFvUGlmi1FHmJwg12hQ5n/Yrq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hMDRjNDUtNjk0YS00Y2ExLWI1ZmIt OTNkY2ExOTlkODgwLzEvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hMDRjNDUtNjk0YS00Y2ExLWI1ZmItOTNkY2ExOTlkODgw LzEvV1lXOVFhV2FMVVVlWW5DRFhhRkRtZjlpdXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXI5oGg1 7n4Yn5mspvetSQ0bh56Nuwhi6sr/CvOXviOS7pRkZ1WBJ/tpXsXQiWJP4L+xOqO9 TlGnoWFKD+DMd8wDka9ASrbKMcrNDz6NOk5R9dShwfBmfiYbX5184XFsCiEqX0B+ W+sgocLWQDegOlLb+vobwNup7GtX2I1szdVMS12IUQd36O3S3RlQLRLrI5xuNjlM aBgwxBMa1RLVHCVkfA9VRJH22lYTqymrzwybE2QZ5cUWRnklxRNqfwwzmR5/J4FE KBddsJaSh1KeR/88AGY+aMMI21Eq4qbht/2BWxz2E6velbmE+jntZDCgD9Kh6S2Y g6TJ4NXa+p50ew== -----END CERTIFICATE-----Generated at Wed Dec 17 04:57:25 2025 by rpki-client