This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json) Hash identifier: aEtbPXNZertmd3qfRIArSE4/ucA4Ob3Thhr5MTes+mE= Subject key identifier: 9A:77:D8:EA:B9:37:10:D4:21:BD:A2:EB:D7:5E:DC:CA:27:6C:14:21 Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72 Certificate serial: 019B42806E8C2352A020DD9AE14803A6487D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 20:01:11 +0000 Manifest this update: Sun 21 Dec 2025 20:01:11 +0000 Manifest next update: Mon 22 Dec 2025 20:01:11 +0000 Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=) 2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: eWPsFCoGJbEb6WTt0vGWX5wGRMqZVB3kntDfn9TMEG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:6e:8c:23:52:a0:20:dd:9a:e1:48:03:a6:48:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72 Validity Not Before: Dec 21 20:01:11 2025 GMT Not After : Dec 22 20:01:11 2025 GMT Subject: CN=9a77d8eab93710d421bda2ebd75edcca276c1421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:7e:cc:ef:ea:0b:00:6f:47:63:98:a0:18: 94:57:d3:21:2e:f5:cc:6b:6c:ff:b7:c3:47:bc:77: 54:42:0a:18:2c:b5:3f:67:a6:b1:d1:2e:cc:10:6d: e8:e1:60:14:31:09:12:62:21:46:48:4b:10:8d:e4: ba:45:71:5f:19:9d:43:d1:f2:7b:92:03:a1:d1:60: 36:fd:39:01:da:36:23:b0:99:2a:ed:2f:e5:16:36: 60:4d:9c:19:b2:26:ee:8d:e6:e3:a2:e5:58:1d:fa: 51:eb:99:39:1c:dd:65:08:66:3e:ff:2e:92:83:80: 4a:d2:1d:86:e6:96:eb:3d:cf:c7:df:ce:40:37:d6: 07:fc:b0:4c:81:84:3d:18:7f:b0:da:e0:28:54:a8: 94:47:86:0a:b8:81:e9:b1:fc:41:b6:64:53:88:fc: 8d:82:9b:23:d8:bb:72:4e:b1:e6:f7:75:c6:76:7c: 0b:e7:d2:1d:26:b8:6d:cf:fb:86:a2:0e:47:ba:6b: c3:5d:44:83:d3:2f:a3:4c:95:02:77:13:08:6b:6d: 4a:85:91:84:8b:5a:95:a7:1a:aa:97:59:4e:79:5f: 64:42:56:73:26:bf:79:9f:3a:ee:ed:a1:d4:58:3c: 0b:1a:d7:dc:83:cb:27:1b:0e:6a:50:e7:f7:93:3c: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:77:D8:EA:B9:37:10:D4:21:BD:A2:EB:D7:5E:DC:CA:27:6C:14:21 X509v3 Authority Key Identifier: keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:35:8d:f6:76:a5:be:cc:6c:b4:1f:41:6d:06:e3:8c:f8:92: ad:71:17:10:e6:4f:59:a2:48:8c:0b:4b:82:68:2f:61:a2:6e: 4c:69:5f:7e:40:6f:44:63:ef:a9:2f:47:ce:2d:1f:a5:d5:fd: c6:d1:6c:47:d8:84:ea:a9:63:1b:75:14:2d:9b:a7:80:f0:ef: 69:81:18:66:ec:41:d0:3e:98:c6:b4:d5:b2:4c:e0:ea:c6:1f: ca:d7:f0:3a:01:5c:65:b1:d4:2b:a9:e8:57:63:3c:8f:c7:19: 0a:95:7e:0e:e9:d2:0d:69:53:21:a2:fa:e5:3c:e2:e7:0e:72: cb:3d:dc:0d:7e:2f:db:74:a0:c4:01:67:00:e1:0f:2b:73:3b: 6c:88:a7:c4:71:23:03:75:58:a5:55:48:ed:70:93:4e:2c:46: fc:37:0e:6a:42:f2:c6:bb:97:db:f3:c4:6e:d0:86:1f:ba:50: f9:b7:47:2d:00:df:2e:16:37:5b:83:d1:8c:73:7d:d3:9b:16: f4:5f:7b:2c:92:3c:76:93:fb:1c:10:3a:6b:d6:26:a6:d2:d0: d4:2f:e6:9a:1d:48:de:2b:88:36:10:42:b3:7e:05:33:7d:5f: 8a:76:98:eb:8e:e0:82:59:4a:92:41:27:ca:4d:7c:6c:13:23: 1a:43:0f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgG6MI1KgIN2a4UgDpkh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5 MjVhNzIwHhcNMjUxMjIxMjAwMTExWhcNMjUxMjIyMjAwMTExWjAzMTEwLwYDVQQD Eyg5YTc3ZDhlYWI5MzcxMGQ0MjFiZGEyZWJkNzVlZGNjYTI3NmMxNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPV+zO/qCwBvR2OYoBiUV9MhLvXM a2z/t8NHvHdUQgoYLLU/Z6ax0S7MEG3o4WAUMQkSYiFGSEsQjeS6RXFfGZ1D0fJ7 kgOh0WA2/TkB2jYjsJkq7S/lFjZgTZwZsibujebjouVYHfpR65k5HN1lCGY+/y6S g4BK0h2G5pbrPc/H385AN9YH/LBMgYQ9GH+w2uAoVKiUR4YKuIHpsfxBtmRTiPyN gpsj2LtyTrHm93XGdnwL59IdJrhtz/uGog5HumvDXUSD0y+jTJUCdxMIa21KhZGE i1qVpxqql1lOeV9kQlZzJr95nzru7aHUWDwLGtfcg8snGw5qUOf3kzwd8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp32Oq5NxDUIb2i69de3MonbBQhMB8GA1UdIwQY MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3 LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzWN9nal vsxstB9BbQbjjPiSrXEXEOZPWaJIjAtLgmgvYaJuTGlffkBvRGPvqS9Hzi0fpdX9 xtFsR9iE6qljG3UULZungPDvaYEYZuxB0D6YxrTVskzg6sYfytfwOgFcZbHUK6no V2M8j8cZCpV+DunSDWlTIaL65Tzi5w5yyz3cDX4v23SgxAFnAOEPK3M7bIinxHEj A3VYpVVI7XCTTixG/DcOakLyxruX2/PEbtCGH7pQ+bdHLQDfLhY3W4PRjHN905sW 9F97LJI8dpP7HBA6a9YmptLQ1C/mmh1I3iuINhBCs34FM31finaY647ggllKkkEn yk18bBMjGkMPfA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:18:09 2025 by rpki-client