This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json) Hash identifier: GKyMta5hSQzDymf0/mzZQVcETn0mWQ6QDZszFwo/lL8= Subject key identifier: EB:52:AF:9B:8B:13:58:75:6B:EE:2F:CA:86:71:85:86:09:8C:2B:A5 Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72 Certificate serial: 019B38D8B18C468DCB839381BDAE1FDD5F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 23:01:23 +0000 Manifest this update: Fri 19 Dec 2025 23:01:23 +0000 Manifest next update: Sat 20 Dec 2025 23:01:23 +0000 Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=) 2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: /6qriDkHTI7t1yPB6p3IfUdbdWck5bKph06kFIL8HQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:b1:8c:46:8d:cb:83:93:81:bd:ae:1f:dd:5f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72 Validity Not Before: Dec 19 23:01:23 2025 GMT Not After : Dec 20 23:01:23 2025 GMT Subject: CN=eb52af9b8b1358756bee2fca86718586098c2ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:d4:b4:44:76:64:be:a0:82:83:ec:1a:25: e8:99:bc:c1:c0:5f:c2:d5:2d:9d:a0:bc:c8:70:e4: d6:35:9f:b7:2f:e2:cf:fd:73:c0:b8:5b:5e:87:d4: 01:40:f9:b0:fd:06:34:03:1a:e4:3d:cd:a3:16:3c: c6:80:d5:3a:d2:15:58:1c:99:d9:dc:f0:cf:06:47: 9b:ed:e0:72:32:52:5d:b0:07:fe:9f:72:b1:a8:68: 59:97:64:eb:2c:8f:8d:ad:2a:6c:b4:f7:46:98:21: 5f:30:88:fa:9d:48:78:1e:32:6a:c8:96:d4:c7:92: 97:5d:74:6d:da:37:b0:3c:1e:72:64:cd:42:12:c9: 1b:57:43:04:a0:2c:00:37:5d:ee:ec:63:79:5c:bc: fd:3f:38:77:07:04:30:38:86:df:ec:ae:40:ce:1a: 69:58:1a:87:f8:c0:67:92:5d:80:d5:2d:eb:9a:99: f9:31:ae:b5:50:ee:3d:59:f4:e4:fa:26:09:16:23: 2e:e6:ca:19:e8:ca:9e:aa:01:1a:78:bd:c8:20:2c: 13:50:5a:4b:c6:b2:bd:1d:19:88:a5:a7:c3:1e:2f: 6f:ff:96:63:ec:b9:7d:50:a5:25:59:cf:31:4f:a7: 4a:d8:9e:b3:0f:66:60:d0:86:83:3d:0f:f2:b4:4e: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:52:AF:9B:8B:13:58:75:6B:EE:2F:CA:86:71:85:86:09:8C:2B:A5 X509v3 Authority Key Identifier: keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2b:01:5a:2f:dd:1b:f2:26:a0:e0:3b:73:5d:aa:0f:9e:0c: b3:7f:53:9d:df:73:b3:ba:df:4f:5e:5f:53:03:64:b1:a0:6f: eb:e2:42:b4:e9:2d:37:1b:8d:46:9c:9c:f9:76:67:57:1e:c3: 38:c1:e5:67:9d:7f:8a:eb:57:d6:7d:1f:25:ca:c0:98:d1:75: f2:78:0d:32:5e:58:63:9d:ae:65:18:09:e4:99:f1:68:b7:59: c1:71:15:59:27:7e:aa:d3:9e:35:bd:19:67:6e:67:c7:68:d0: b4:ce:eb:1a:e6:e5:77:cc:29:d6:10:3e:d2:4e:05:9a:c9:48: 41:70:39:15:95:ba:c9:5c:a3:16:82:52:34:ad:6e:e7:d2:85: ea:79:f8:b7:a7:da:ed:50:09:5f:2f:11:14:78:a4:14:f1:25: b8:e9:e5:57:bb:4a:9b:0d:7a:4b:b9:82:87:fe:ac:81:83:c3: 0b:2f:02:8f:b2:32:7e:51:db:09:38:da:53:e0:eb:ff:3a:b4: c0:ba:ef:87:b4:e0:7c:39:15:a1:e8:dd:3c:03:e8:d9:48:d6: e5:18:25:0a:0f:a5:4f:97:e3:20:99:70:22:5e:d0:31:20:3b: d1:43:23:6e:36:ad:ce:11:5d:17:a9:8b:a3:53:57:45:42:ef: b1:f5:70:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42LGMRo3Lg5OBva4f3V+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5 MjVhNzIwHhcNMjUxMjE5MjMwMTIzWhcNMjUxMjIwMjMwMTIzWjAzMTEwLwYDVQQD EyhlYjUyYWY5YjhiMTM1ODc1NmJlZTJmY2E4NjcxODU4NjA5OGMyYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPLUtER2ZL6ggoPsGiXombzBwF/C 1S2doLzIcOTWNZ+3L+LP/XPAuFteh9QBQPmw/QY0AxrkPc2jFjzGgNU60hVYHJnZ 3PDPBkeb7eByMlJdsAf+n3KxqGhZl2TrLI+NrSpstPdGmCFfMIj6nUh4HjJqyJbU x5KXXXRt2jewPB5yZM1CEskbV0MEoCwAN13u7GN5XLz9Pzh3BwQwOIbf7K5Azhpp WBqH+MBnkl2A1S3rmpn5Ma61UO49WfTk+iYJFiMu5soZ6MqeqgEaeL3IICwTUFpL xrK9HRmIpafDHi9v/5Zj7Ll9UKUlWc8xT6dK2J6zD2Zg0IaDPQ/ytE5wpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtSr5uLE1h1a+4vyoZxhYYJjCulMB8GA1UdIwQY MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3 LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSsBWi/d G/ImoOA7c12qD54Ms39Tnd9zs7rfT15fUwNksaBv6+JCtOktNxuNRpyc+XZnVx7D OMHlZ51/iutX1n0fJcrAmNF18ngNMl5YY52uZRgJ5JnxaLdZwXEVWSd+qtOeNb0Z Z25nx2jQtM7rGubld8wp1hA+0k4FmslIQXA5FZW6yVyjFoJSNK1u59KF6nn4t6fa 7VAJXy8RFHikFPEluOnlV7tKmw16S7mCh/6sgYPDCy8Cj7IyflHbCTjaU+Dr/zq0 wLrvh7TgfDkVoejdPAPo2UjW5RglCg+lT5fjIJlwIl7QMSA70UMjbjatzhFdF6mL o1NXRULvsfVwlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:58 2025 by rpki-client