This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json) Hash identifier: 3nrzQ5xtLoUEKNSQUxzhYZoGAE27zz6d3bfTdrvkoTU= Subject key identifier: 21:49:33:37:88:28:1F:9E:25:28:DB:FD:DB:E8:9A:30:E6:31:A0:AE Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Certificate serial: 019B23632256DC74FF4ACE3B4BEE6F22BAC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft Manifest number: 02E4 Signing time: Mon 15 Dec 2025 19:00:57 +0000 Manifest this update: Mon 15 Dec 2025 19:00:57 +0000 Manifest next update: Tue 16 Dec 2025 19:00:57 +0000 Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=) 2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: Q+NPUhXBmICc0WkQVpgkr1s4wVyr47eCNIkBR8TuBcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:22:56:dc:74:ff:4a:ce:3b:4b:ee:6f:22:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Validity Not Before: Dec 15 19:00:57 2025 GMT Not After : Dec 16 19:00:57 2025 GMT Subject: CN=2149333788281f9e2528dbfddbe89a30e631a0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:f5:fd:81:22:6f:7c:bf:bc:42:3f:82:80: 44:a6:e3:a3:52:17:7f:65:3d:1f:87:d4:63:fc:4c: b3:86:b0:3e:b3:26:a6:f8:84:4b:dc:49:80:d7:97: d4:04:f9:85:2f:1c:63:1a:d4:8b:ea:37:8a:02:d3: 37:c6:e1:86:c8:e6:e9:31:01:e6:77:3d:c1:de:24: 53:7c:d8:10:66:8e:73:14:59:09:49:4f:f2:59:09: 7a:bf:81:03:7e:8b:40:84:66:6a:fd:82:e7:e4:66: e5:0b:0a:fc:4a:f8:22:11:97:41:b6:76:3a:7d:c3: 13:d4:6a:0f:7f:ad:96:c6:ed:04:60:fc:99:23:62: 36:d9:8c:f4:fa:fa:bb:91:4e:e7:29:a9:d3:ab:d7: 6a:8d:2b:9e:15:21:36:46:2f:35:c3:5c:3e:b2:33: 7a:31:20:6c:d1:9d:b9:5e:45:7d:2f:da:e7:e1:7e: 1e:c3:51:2a:5c:6c:fc:ab:0a:5b:bc:ce:88:e0:d1: 81:b3:f4:c7:ae:b3:b2:b3:e2:2d:ba:2b:5d:97:07: c3:2d:f4:4a:35:1a:09:9e:36:21:97:74:ac:a5:3f: 86:6a:10:3e:46:63:7b:e0:f3:8a:a6:d8:a8:c7:f1: 09:5e:31:fe:24:e2:54:44:b6:3c:be:3e:25:83:52: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:49:33:37:88:28:1F:9E:25:28:DB:FD:DB:E8:9A:30:E6:31:A0:AE X509v3 Authority Key Identifier: keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b2:82:40:79:5a:c5:50:f5:bf:eb:86:9e:b2:fc:40:86:dc: 1b:8f:1c:24:f6:9b:e8:25:cd:ca:01:fb:fa:4a:9a:1e:91:b5: 9a:d7:bc:0e:e0:b9:46:fb:e5:b7:74:3b:8b:c8:de:87:a9:52: 9c:3b:48:18:ad:7f:39:8c:c2:ce:f1:29:03:70:46:bf:05:51: 2d:79:79:c4:b2:55:e0:80:05:0f:ed:48:9f:a7:01:e1:1a:57: ab:44:81:cf:f2:1c:b0:2a:fd:c7:de:7a:c0:58:98:8c:27:f6: e1:5d:4c:f8:45:9c:dd:67:00:dd:f7:c9:18:03:44:b0:15:0f: 75:70:bd:3d:cc:96:38:39:6a:d4:0e:24:8c:df:40:69:36:88: 78:ea:05:23:6a:b0:4e:dd:9d:46:94:03:b1:60:b1:80:d1:a0: 5f:45:64:d5:83:ef:b5:19:5b:82:3f:5b:e5:b1:12:c8:2c:fd: c8:b0:72:9b:51:f5:a2:e2:31:cd:10:5a:67:50:a5:bc:cc:43: 20:eb:34:62:32:73:4e:63:d6:cf:8a:24:d8:ef:3f:ce:d5:ae: 77:f7:6a:1f:24:2c:50:02:48:b3:b9:26:09:ed:46:11:1e:9e: da:96:21:0a:2d:d2:da:a7:63:ae:bc:0b:93:01:43:c3:f0:98: 7e:71:31:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYyJW3HT/Ss47S+5vIrrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw N2ExMjIwHhcNMjUxMjE1MTkwMDU3WhcNMjUxMjE2MTkwMDU3WjAzMTEwLwYDVQQD EygyMTQ5MzMzNzg4MjgxZjllMjUyOGRiZmRkYmU4OWEzMGU2MzFhMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjf1/YEib3y/vEI/goBEpuOjUhd/ ZT0fh9Rj/EyzhrA+syam+IRL3EmA15fUBPmFLxxjGtSL6jeKAtM3xuGGyObpMQHm dz3B3iRTfNgQZo5zFFkJSU/yWQl6v4EDfotAhGZq/YLn5GblCwr8SvgiEZdBtnY6 fcMT1GoPf62Wxu0EYPyZI2I22Yz0+vq7kU7nKanTq9dqjSueFSE2Ri81w1w+sjN6 MSBs0Z25XkV9L9rn4X4ew1EqXGz8qwpbvM6I4NGBs/THrrOys+ItuitdlwfDLfRK NRoJnjYhl3SspT+GahA+RmN74POKptiox/EJXjH+JOJURLY8vj4lg1JkQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFJMzeIKB+eJSjb/dvomjDmMaCuMB8GA1UdIwQY MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubKCQHla xVD1v+uGnrL8QIbcG48cJPab6CXNygH7+kqaHpG1mte8DuC5Rvvlt3Q7i8jeh6lS nDtIGK1/OYzCzvEpA3BGvwVRLXl5xLJV4IAFD+1In6cB4RpXq0SBz/IcsCr9x956 wFiYjCf24V1M+EWc3WcA3ffJGANEsBUPdXC9PcyWODlq1A4kjN9AaTaIeOoFI2qw Tt2dRpQDsWCxgNGgX0Vk1YPvtRlbgj9b5bESyCz9yLBym1H1ouIxzRBaZ1ClvMxD IOs0YjJzTmPWz4ok2O8/ztWud/dqHyQsUAJIs7kmCe1GER6e2pYhCi3S2qdjrrwL kwFDw/CYfnExMQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:56:04 2025 by rpki-client