This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json) Hash identifier: wPioj0A+sVSatcTfylU/iJUI76DtFwU7B338yggcpyY= Subject key identifier: BE:16:0C:93:A3:E1:C9:8A:7B:B4:A2:7F:F3:6F:65:C8:2C:91:2D:F5 Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Certificate serial: 019B0E26409B2061DA954F6EB7A550C7AC4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft Manifest number: 16C6 Signing time: Thu 11 Dec 2025 16:02:26 +0000 Manifest this update: Thu 11 Dec 2025 16:02:26 +0000 Manifest next update: Fri 12 Dec 2025 16:02:26 +0000 Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=) 2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: k33n6X/bfjpYTD98fWKJWANuV3VI+xJ4Oj/9BcrQxJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:40:9b:20:61:da:95:4f:6e:b7:a5:50:c7:ac:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Validity Not Before: Dec 11 16:02:26 2025 GMT Not After : Dec 12 16:02:26 2025 GMT Subject: CN=be160c93a3e1c98a7bb4a27ff36f65c82c912df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:66:48:8d:61:0d:db:7b:d0:cb:9e:21:04: 34:06:e0:0f:fb:a0:aa:f9:b4:e7:eb:94:7b:bf:ed: 89:f7:10:b0:4d:ba:b3:a1:0c:2a:12:ef:6d:1c:5e: 37:58:79:fe:ed:b9:ab:38:b6:68:51:82:f8:e1:fa: ff:3d:1f:c7:d2:38:1c:f1:bd:e2:5c:7e:fc:18:4f: 14:13:bb:b6:1c:3d:ce:b5:f2:bb:65:a6:0d:b3:67: c1:09:fe:8b:1e:ad:c4:2b:91:1d:9c:d5:60:04:89: 25:e9:58:0e:f9:28:06:a6:67:d3:42:b9:ef:47:a4: 50:38:1f:f4:bd:11:3c:a9:c7:56:15:90:a6:79:75: 11:6d:d0:d4:fa:89:72:59:0d:bb:c6:49:31:db:7f: 89:4a:3e:02:61:49:03:2c:1c:15:dd:e8:57:c4:70: 8a:8b:3b:4e:82:12:38:a7:88:23:80:2a:34:70:e0: 66:00:74:d7:b8:bf:bf:f3:a7:59:17:2b:84:a9:30: 38:0c:e1:60:c7:b7:41:00:51:64:d8:3e:43:1a:d5: 89:2d:b1:bc:45:ca:22:c5:4f:62:d0:70:46:50:9c: 9b:9f:2d:ba:f1:72:92:cb:51:27:d6:fb:be:98:c2: 8f:fb:4e:f8:6b:cf:f5:d3:42:8a:a0:be:16:6e:cd: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:0C:93:A3:E1:C9:8A:7B:B4:A2:7F:F3:6F:65:C8:2C:91:2D:F5 X509v3 Authority Key Identifier: keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:82:32:f0:af:ef:43:2c:28:db:b9:3d:bb:bb:98:8a:10:9e: af:49:c7:44:a0:a7:50:e1:08:82:c8:41:c8:69:1f:5a:15:82: 6f:44:f9:57:cc:0c:07:8c:80:e7:bd:a5:8c:f8:e7:9c:3b:22: e9:c0:b3:3b:03:a9:ec:24:7e:d5:a9:d2:d3:b0:19:54:97:6d: a6:f9:b7:33:e3:ca:57:8d:63:d3:59:35:d5:0a:31:63:4a:70: fa:4d:81:e1:4d:28:63:05:c0:c6:5d:11:82:fa:6b:0f:9a:ee: f0:10:21:58:05:9e:f5:ae:4f:69:9f:43:8d:52:73:80:b8:18: f2:80:32:c3:64:68:1d:e1:22:a2:2f:92:9e:52:62:f9:a1:28: 3b:e4:c8:a3:c9:33:d7:9a:82:db:4b:b7:d2:ce:d1:c9:2b:8d: 03:ec:c3:83:1a:ce:d8:8e:41:1e:72:54:e0:c7:7e:12:bc:e1: bb:e3:3b:ba:1e:70:b8:5a:54:77:98:29:75:2e:9c:08:51:e0: 9f:d2:a2:b0:f9:83:d9:07:d0:cf:0c:9c:16:ed:19:13:b7:a2: 87:ec:7a:b4:d8:b5:87:9a:05:a9:8e:17:06:99:e4:15:05:2c: 94:a1:8d:24:e7:4d:a5:59:4f:cd:85:04:dc:7d:1f:c1:ef:b6: 28:d0:b8:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJkCbIGHalU9ut6VQx6xLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxODVkNzI0M2FlOTg2Y2RlNDg0MTRlNmFkODFmMjIyOWMw YTU3ZDgwHhcNMjUxMjExMTYwMjI2WhcNMjUxMjEyMTYwMjI2WjAzMTEwLwYDVQQD EyhiZTE2MGM5M2EzZTFjOThhN2JiNGEyN2ZmMzZmNjVjODJjOTEyZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0lmSI1hDdt70MueIQQ0BuAP+6Cq +bTn65R7v+2J9xCwTbqzoQwqEu9tHF43WHn+7bmrOLZoUYL44fr/PR/H0jgc8b3i XH78GE8UE7u2HD3OtfK7ZaYNs2fBCf6LHq3EK5EdnNVgBIkl6VgO+SgGpmfTQrnv R6RQOB/0vRE8qcdWFZCmeXURbdDU+olyWQ27xkkx23+JSj4CYUkDLBwV3ehXxHCK iztOghI4p4gjgCo0cOBmAHTXuL+/86dZFyuEqTA4DOFgx7dBAFFk2D5DGtWJLbG8 RcoixU9i0HBGUJybny268XKSy1En1vu+mMKP+074a8/100KKoL4Wbs2qyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4WDJOj4cmKe7Sif/NvZcgskS31MB8GA1UdIwQY MBaAFMGF1yQ66YbN5IQU5q2B8iKcClfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt YTdlZGI3ZDNmNTM3LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3 LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4Iy8K/v Qywo27k9u7uYihCer0nHRKCnUOEIgshByGkfWhWCb0T5V8wMB4yA572ljPjnnDsi 6cCzOwOp7CR+1anS07AZVJdtpvm3M+PKV41j01k11QoxY0pw+k2B4U0oYwXAxl0R gvprD5ru8BAhWAWe9a5PaZ9DjVJzgLgY8oAyw2RoHeEioi+SnlJi+aEoO+TIo8kz 15qC20u30s7RySuNA+zDgxrO2I5BHnJU4Md+Erzhu+M7uh5wuFpUd5gpdS6cCFHg n9KisPmD2QfQzwycFu0ZE7eih+x6tNi1h5oFqY4XBpnkFQUslKGNJOdNpVlPzYUE 3H0fwe+2KNC4iQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:12 2025 by rpki-client