This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json) Hash identifier: c/71yqnvb+qI7xpMkRq+sp4H/U45hxeYmEzzXBiImyo= Subject key identifier: E3:DB:21:29:12:52:ED:31:9C:65:28:C0:17:19:8D:ED:7E:36:77:F2 Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Certificate serial: 019B43250DC0D8B3DF501428119739399E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 23:01:00 +0000 Manifest this update: Sun 21 Dec 2025 23:01:00 +0000 Manifest next update: Mon 22 Dec 2025 23:01:00 +0000 Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=) 2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: vNKV6jWjH4FOXWSRYI75eB26Qe99DMpkgmzVwoUJI2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:0d:c0:d8:b3:df:50:14:28:11:97:39:39:9e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Validity Not Before: Dec 21 23:01:00 2025 GMT Not After : Dec 22 23:01:00 2025 GMT Subject: CN=e3db21291252ed319c6528c017198ded7e3677f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:f5:14:f3:53:71:7f:1b:ac:9a:9c:f6:c6: 91:c9:01:a1:3c:6d:64:06:45:9c:02:5d:15:e5:29: 27:8d:8f:0c:5e:ea:c3:2a:96:f7:99:7a:ed:ce:59: 29:4a:6e:a0:bc:3a:40:a2:fd:de:85:54:b7:c6:32: 8f:d1:fb:df:74:37:eb:89:aa:51:16:a4:a9:91:92: d2:b2:80:06:2c:32:42:73:6d:24:86:77:3c:78:b7: 31:c4:a2:72:b5:44:d7:51:c4:da:2d:2a:6f:1a:1d: c9:53:fe:06:3e:22:68:bc:1e:3b:93:93:15:bc:8e: 1d:ec:5d:49:4e:c1:04:9d:fd:21:91:8f:51:71:27: 43:7c:cf:53:a4:03:3a:6c:f9:0e:4e:36:f1:e3:5b: 6a:6e:7f:89:70:39:26:39:8e:c5:97:e4:09:3c:51: 1f:bd:3d:01:31:78:b0:5e:64:54:d4:84:8f:4c:5a: a2:3a:03:6a:5c:04:62:02:19:46:94:05:d2:d8:a9: 1c:db:85:fb:63:88:9d:83:65:1b:f3:93:ae:de:6d: 80:75:63:7b:34:f9:f1:39:74:59:b0:00:d6:95:7a: d3:e7:85:ca:2b:b0:40:53:ea:08:4a:c7:e6:f3:fc: d6:10:15:2a:0a:3c:ba:38:4c:5d:24:1d:09:07:58: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:21:29:12:52:ED:31:9C:65:28:C0:17:19:8D:ED:7E:36:77:F2 X509v3 Authority Key Identifier: keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6d:aa:af:58:0b:c9:58:fb:d8:72:7c:5d:5a:fd:34:9f:53: 16:5b:4f:80:af:35:77:61:1f:86:41:e0:6d:da:0e:50:09:62: c8:a5:0b:5c:11:19:9a:54:b9:b5:03:30:5b:d5:73:a4:9d:37: 3e:06:f3:38:7d:20:12:54:9b:08:1e:18:fd:5b:52:dd:a9:82: 16:d4:68:66:84:4b:44:e2:ae:b8:3b:79:05:21:ca:9c:79:1b: 38:23:03:b2:b5:20:a5:fb:ba:1b:92:a1:18:a7:cf:82:33:ca: 15:74:ae:93:c2:13:b4:91:35:8e:45:3a:e1:b4:73:0e:14:80: 7e:04:51:05:ce:eb:42:99:10:54:0a:f8:b1:20:48:07:e4:e9: 94:38:5a:d4:82:d2:c8:35:e2:e5:99:ae:d8:e7:e4:49:e2:a0: 3d:be:86:30:db:a6:95:df:57:2b:33:71:4e:89:92:80:d7:40: 7a:7b:79:6d:b0:e5:53:81:fd:9e:9c:5b:fd:0f:a5:4c:e0:11: 28:f6:87:7c:75:a8:ae:35:e2:cf:5d:f9:78:8f:d6:24:99:f6: 3d:be:16:f6:00:0a:cb:92:9d:10:24:22:19:d8:3d:d2:b6:6a: 5f:43:91:9b:28:bb:b1:33:8f:4b:c6:e5:b3:cd:24:8f:a0:7d: 65:6f:a6:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQ3A2LPfUBQoEZc5OZ6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzk2NGFhYmY0MDRkZGEzZjVlMGVjYzFjNzA2YWIzMjdj NmY5MzEwHhcNMjUxMjIxMjMwMTAwWhcNMjUxMjIyMjMwMTAwWjAzMTEwLwYDVQQD EyhlM2RiMjEyOTEyNTJlZDMxOWM2NTI4YzAxNzE5OGRlZDdlMzY3N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDL1FPNTcX8brJqc9saRyQGhPG1k BkWcAl0V5SknjY8MXurDKpb3mXrtzlkpSm6gvDpAov3ehVS3xjKP0fvfdDfriapR FqSpkZLSsoAGLDJCc20khnc8eLcxxKJytUTXUcTaLSpvGh3JU/4GPiJovB47k5MV vI4d7F1JTsEEnf0hkY9RcSdDfM9TpAM6bPkOTjbx41tqbn+JcDkmOY7Fl+QJPFEf vT0BMXiwXmRU1ISPTFqiOgNqXARiAhlGlAXS2Kkc24X7Y4idg2Ub85Ou3m2AdWN7 NPnxOXRZsADWlXrT54XKK7BAU+oISsfm8/zWEBUqCjy6OExdJB0JB1ikJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPbISkSUu0xnGUowBcZje1+NnfyMB8GA1UdIwQY MBaAFMJ5ZKq/QE3aP14OzBxwarMnxvkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEt NWViZjJhNTRlYjZkLzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEtNWViZjJhNTRlYjZk LzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG22qr1gL yVj72HJ8XVr9NJ9TFltPgK81d2EfhkHgbdoOUAliyKULXBEZmlS5tQMwW9VzpJ03 PgbzOH0gElSbCB4Y/VtS3amCFtRoZoRLROKuuDt5BSHKnHkbOCMDsrUgpfu6G5Kh GKfPgjPKFXSuk8ITtJE1jkU64bRzDhSAfgRRBc7rQpkQVAr4sSBIB+TplDha1ILS yDXi5Zmu2OfkSeKgPb6GMNumld9XKzNxTomSgNdAent5bbDlU4H9npxb/Q+lTOAR KPaHfHWorjXiz135eI/WJJn2Pb4W9gAKy5KdECQiGdg90rZqX0ORmyi7sTOPS8bl s80kj6B9ZW+mxw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:36 2025 by rpki-client