This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json) Hash identifier: KyipAxF8UCLnqxKyyukXVHRrpDgPqEc7f1R2oJKFvnE= Subject key identifier: 0D:54:23:E6:8A:28:A9:76:1A:E4:7E:83:7C:29:21:0B:F7:25:8F:8D Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Certificate serial: 019B378EC09054BD35DA0B736DBA97853673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 17:01:00 +0000 Manifest this update: Fri 19 Dec 2025 17:01:00 +0000 Manifest next update: Sat 20 Dec 2025 17:01:00 +0000 Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=) 2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: 05XWmgiAfOzJFNlyV9TDKGx5ZSuGUgGfozopt38TZeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:c0:90:54:bd:35:da:0b:73:6d:ba:97:85:36:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Validity Not Before: Dec 19 17:01:00 2025 GMT Not After : Dec 20 17:01:00 2025 GMT Subject: CN=0d5423e68a28a9761ae47e837c29210bf7258f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:b0:5f:69:a5:3a:43:3c:d4:32:cc:c9:7d: 82:e5:d5:4a:f8:52:70:7b:31:34:c3:39:8f:92:cc: 1b:74:b6:2c:09:f7:7c:22:58:ba:a9:e8:f2:f3:8f: 37:ce:fb:94:20:e8:0e:cd:28:3b:86:cd:ae:99:79: d7:e6:df:66:17:59:4f:98:d7:06:d6:08:6b:b5:fe: e9:9e:64:71:cd:fd:11:9d:1c:b0:33:16:41:4b:c1: e1:da:ae:32:7f:80:5e:df:e4:88:61:e5:3a:d9:5d: 67:dc:c4:9c:4d:17:45:b8:e9:b9:6a:f8:10:49:77: e7:1f:75:bf:67:e2:57:ab:21:c2:80:3a:1e:8b:08: 35:0a:6f:4f:2a:26:f0:3e:f2:9f:a9:7f:20:3b:73: 61:f0:01:e2:68:79:a7:24:53:40:1d:50:a4:86:cb: 3a:2b:8c:9c:fd:38:f8:94:c7:27:d5:56:46:d4:bf: 1a:31:02:87:35:2f:f6:43:49:1f:c0:00:93:63:a0: a6:93:ce:bd:d3:15:99:9b:ad:a2:d2:8c:ff:c6:42: 6f:1d:97:17:9c:74:73:42:52:27:5d:3b:7b:c2:34: 71:df:10:a4:0a:88:29:58:82:6d:d5:ec:09:2e:09: 19:e1:c4:45:e9:99:61:d8:a0:92:19:7f:4b:01:45: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:54:23:E6:8A:28:A9:76:1A:E4:7E:83:7C:29:21:0B:F7:25:8F:8D X509v3 Authority Key Identifier: keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3f:a5:da:a0:e9:41:2e:59:b9:b2:68:13:1a:89:63:45:23: 9e:ab:0d:0a:d2:fc:c1:5d:f4:fb:c6:38:a9:6c:97:1d:9c:f4: 7b:36:99:0f:5c:aa:cf:9d:93:41:fb:92:dc:21:93:72:49:b6: d5:0f:53:90:f6:20:92:dd:c9:b8:55:4c:36:ee:ed:94:22:b2: 97:f0:c9:c4:53:68:9e:d4:06:a5:67:39:69:f4:df:0d:31:bf: 8a:b4:7c:95:b3:a4:22:2a:7b:78:1b:ee:00:a6:cf:da:f8:96: af:87:19:df:5f:a6:fc:26:0e:95:ab:52:45:03:65:4b:a9:66: ba:91:b0:bd:91:60:c3:c6:a0:07:8e:2e:a3:ce:16:dc:9f:12: b1:e4:8e:cd:e8:ca:43:96:3c:2d:a1:32:4e:f1:f3:4e:a8:6a: 07:55:69:74:12:39:8a:9d:92:99:8d:e2:12:3f:6b:9a:6f:10: 30:16:df:74:60:93:43:5a:80:d8:5f:93:57:54:a6:ca:04:62: 88:ec:12:ad:7a:8e:3d:ba:00:3e:ce:de:c5:f6:1b:d3:56:06: a6:cc:76:2a:e6:92:75:ca:bc:da:47:4e:5d:26:5c:a9:b1:d3: f1:59:3d:51:a9:bd:01:6a:21:74:83:d8:0f:70:9b:51:79:66: e0:15:98:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jsCQVL012gtzbbqXhTZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzk2NGFhYmY0MDRkZGEzZjVlMGVjYzFjNzA2YWIzMjdj NmY5MzEwHhcNMjUxMjE5MTcwMTAwWhcNMjUxMjIwMTcwMTAwWjAzMTEwLwYDVQQD EygwZDU0MjNlNjhhMjhhOTc2MWFlNDdlODM3YzI5MjEwYmY3MjU4ZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsewX2mlOkM81DLMyX2C5dVK+FJw ezE0wzmPkswbdLYsCfd8Ili6qejy8483zvuUIOgOzSg7hs2umXnX5t9mF1lPmNcG 1ghrtf7pnmRxzf0RnRywMxZBS8Hh2q4yf4Be3+SIYeU62V1n3MScTRdFuOm5avgQ SXfnH3W/Z+JXqyHCgDoeiwg1Cm9PKibwPvKfqX8gO3Nh8AHiaHmnJFNAHVCkhss6 K4yc/Tj4lMcn1VZG1L8aMQKHNS/2Q0kfwACTY6Cmk8690xWZm62i0oz/xkJvHZcX nHRzQlInXTt7wjRx3xCkCogpWIJt1ewJLgkZ4cRF6Zlh2KCSGX9LAUVvtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1UI+aKKKl2GuR+g3wpIQv3JY+NMB8GA1UdIwQY MBaAFMJ5ZKq/QE3aP14OzBxwarMnxvkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEt NWViZjJhNTRlYjZkLzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEtNWViZjJhNTRlYjZk LzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD+l2qDp QS5ZubJoExqJY0UjnqsNCtL8wV30+8Y4qWyXHZz0ezaZD1yqz52TQfuS3CGTckm2 1Q9TkPYgkt3JuFVMNu7tlCKyl/DJxFNontQGpWc5afTfDTG/irR8lbOkIip7eBvu AKbP2viWr4cZ31+m/CYOlatSRQNlS6lmupGwvZFgw8agB44uo84W3J8SseSOzejK Q5Y8LaEyTvHzTqhqB1VpdBI5ip2SmY3iEj9rmm8QMBbfdGCTQ1qA2F+TV1SmygRi iOwSrXqOPboAPs7exfYb01YGpsx2KuaSdcq82kdOXSZcqbHT8Vk9Uam9AWohdIPY D3CbUXlm4BWY8g== -----END CERTIFICATE-----Generated at Fri Dec 19 22:55:29 2025 by rpki-client