This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft File: wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json) Hash identifier: SbIReZbAsyc5ZtOxzNIR32puVbnFDSLNj9kq2aWAjTY= Subject key identifier: 37:5A:22:B0:32:1D:D9:4D:5D:51:1A:0B:BC:5A:ED:D4:84:46:0E:80 Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019B0FA5F5958B95D1AA03F3082C6CFF36D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft Manifest number: 177D Signing time: Thu 11 Dec 2025 23:01:33 +0000 Manifest this update: Thu 11 Dec 2025 23:01:33 +0000 Manifest next update: Fri 12 Dec 2025 23:01:33 +0000 Files and hashes: 1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=) 2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=) 3: vDbo_30ceeyNlqD_8acZWIbMZyc.roa (hash: 9eXmKiYncACBhDXgUtCY1ZwBj6oSoFcnoMoGhd0j3iw=) 4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: bexoYf17c9rfq4ICwTXbhVTO6NCWW90Dcvhgr0KGVOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:f5:95:8b:95:d1:aa:03:f3:08:2c:6c:ff:36:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Dec 11 23:01:33 2025 GMT Not After : Dec 12 23:01:33 2025 GMT Subject: CN=375a22b0321dd94d5d511a0bbc5aedd484460e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:37:78:c4:68:77:65:40:bb:0a:2a:39:b5: 74:5c:c6:c5:cc:b2:ec:71:11:4d:17:ae:55:14:3f: 0b:38:2e:25:5e:eb:0d:15:b7:9a:53:09:b2:53:01: bc:6d:0f:8e:00:9d:bf:5b:a1:04:ef:35:db:ae:a6: df:03:f8:25:8a:21:1b:45:12:e7:29:bf:d7:2c:cb: 39:af:d9:7f:43:fb:d4:f0:b9:3c:3d:d3:ca:84:a4: 4c:10:b0:c3:b4:8e:f8:2b:91:20:43:76:62:fb:3d: ad:be:6c:81:db:55:e8:9b:82:e7:bc:0c:cd:c3:6b: 8f:71:9d:1a:42:4a:8d:3e:81:2c:d6:c5:c8:45:28: 43:7f:62:93:68:fd:62:bd:17:28:9d:6a:d3:0b:d6: 96:6a:4b:93:dd:f2:c9:83:3e:5d:63:67:e7:e9:9c: 03:01:e1:d3:5e:f2:2e:06:35:d9:f6:c7:9e:ef:e2: 18:af:9c:da:22:71:0b:44:19:50:cc:9a:26:a6:da: 89:63:de:19:a6:fa:ef:e9:59:84:cc:57:03:c4:72: ea:55:75:77:a7:3c:4d:66:eb:bc:3b:49:9b:49:50: bc:e1:cd:36:91:cd:fd:81:df:5b:97:81:e1:df:a6: 1a:90:b4:17:c7:93:3b:41:c2:5d:10:de:a2:a8:38: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5A:22:B0:32:1D:D9:4D:5D:51:1A:0B:BC:5A:ED:D4:84:46:0E:80 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e9:f4:d8:b5:16:ac:63:23:0c:d6:dd:49:be:f3:0c:24:bd: 42:c7:60:2c:a2:cc:2f:5a:f1:75:72:21:e0:1f:34:9d:c5:4d: 02:6a:7d:74:a5:1c:fd:22:c4:2d:33:86:3e:a4:94:d1:61:8f: b1:26:d5:41:14:1f:8d:d0:5e:ba:64:a3:f7:35:cd:1a:c6:4d: 33:c4:5d:c8:7b:34:5d:8b:2b:d7:53:0e:d7:8e:44:c7:cb:80: 43:cd:8f:43:fc:e4:70:1d:9a:9c:61:da:6e:e0:9b:22:77:b0: 08:7d:68:83:7f:aa:22:c1:d6:29:da:20:fc:33:9f:b2:39:80: 59:a4:d0:45:16:c7:37:79:fd:fe:50:f5:8b:4f:a2:b4:18:35: a3:fa:d2:e2:50:84:a7:d3:b7:fa:f3:6e:32:9c:c8:e7:0c:36: dd:08:5f:78:ef:00:27:9d:e5:9a:97:50:91:77:74:52:b8:77: 02:77:ed:71:b7:0d:8a:25:b6:72:30:77:c5:d4:c3:68:ea:39: 3f:6e:93:3e:45:89:cd:a3:e4:7a:28:35:6a:16:fe:80:5a:49: 2d:b8:1b:ef:92:10:ae:e3:c5:64:a5:26:01:f1:00:fb:d8:3c: 46:9f:87:18:b8:fd:f3:c7:99:ff:0d:eb:7f:d7:78:26:0f:85: 4a:82:22:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpfWVi5XRqgPzCCxs/zbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjUxMjExMjMwMTMzWhcNMjUxMjEyMjMwMTMzWjAzMTEwLwYDVQQD EygzNzVhMjJiMDMyMWRkOTRkNWQ1MTFhMGJiYzVhZWRkNDg0NDYwZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEA3eMRod2VAuwoqObV0XMbFzLLs cRFNF65VFD8LOC4lXusNFbeaUwmyUwG8bQ+OAJ2/W6EE7zXbrqbfA/gliiEbRRLn Kb/XLMs5r9l/Q/vU8Lk8PdPKhKRMELDDtI74K5EgQ3Zi+z2tvmyB21Xom4LnvAzN w2uPcZ0aQkqNPoEs1sXIRShDf2KTaP1ivRconWrTC9aWakuT3fLJgz5dY2fn6ZwD AeHTXvIuBjXZ9see7+IYr5zaInELRBlQzJomptqJY94Zpvrv6VmEzFcDxHLqVXV3 pzxNZuu8O0mbSVC84c02kc39gd9bl4Hh36YakLQXx5M7QcJdEN6iqDjFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdaIrAyHdlNXVEaC7xa7dSERg6AMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjun02LUW rGMjDNbdSb7zDCS9QsdgLKLML1rxdXIh4B80ncVNAmp9dKUc/SLELTOGPqSU0WGP sSbVQRQfjdBeumSj9zXNGsZNM8RdyHs0XYsr11MO145Ex8uAQ82PQ/zkcB2anGHa buCbInewCH1og3+qIsHWKdog/DOfsjmAWaTQRRbHN3n9/lD1i0+itBg1o/rS4lCE p9O3+vNuMpzI5ww23QhfeO8AJ53lmpdQkXd0Urh3AnftcbcNiiW2cjB3xdTDaOo5 P26TPkWJzaPkeig1ahb+gFpJLbgb75IQruPFZKUmAfEA+9g8Rp+HGLj988eZ/w3r f9d4Jg+FSoIikA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:09:52 2025 by rpki-client