This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft File: WNLScV9D90e-p2Lc4Wa8pLjpZes.mft (raw, json) Hash identifier: zGrtropV6ikOB9PDx3pScFpU/lD662iYGlX0zunFOV0= Subject key identifier: CA:8A:3C:DE:01:1F:73:78:54:4D:0F:37:5A:22:CB:3D:C9:B2:72:A5 Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb Certificate serial: 019B0E5B88E54B6763F6996E3E482614239F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft Manifest number: 177F Signing time: Thu 11 Dec 2025 17:00:38 +0000 Manifest this update: Thu 11 Dec 2025 17:00:38 +0000 Manifest next update: Fri 12 Dec 2025 17:00:38 +0000 Files and hashes: 1: PT2usVUEKXyY3Pyrt6bhLZq6Hk0.roa (hash: KueB/N6Tv5XPwuQenNpNyFxyBekEQxh3qYZTCa9pVBg=) 2: WNLScV9D90e-p2Lc4Wa8pLjpZes.crl (hash: CwzB1b/kvpnoZpngN5VKhfGARVF4IG1MddHks+ZI9GI=) 3: Z17YRi9mYaQRV70cYdKNkHS2BT8.roa (hash: XclzZEx6yvB+VuFruQwlqlWve82bQq4L6RiJRruQ7hc=) 4: hSVOEYR3wkiN21Km9noHByidNkc.roa (hash: gmgGps7iqZqgn7KgXcruM+0aV/wQZu+D+yKypERbLL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:88:e5:4b:67:63:f6:99:6e:3e:48:26:14:23:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb Validity Not Before: Dec 11 17:00:38 2025 GMT Not After : Dec 12 17:00:38 2025 GMT Subject: CN=ca8a3cde011f7378544d0f375a22cb3dc9b272a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:ba:f9:02:2b:b3:3c:4e:4a:08:07:5f:d5: 61:96:3b:5f:0c:ba:f1:bd:36:7a:32:52:fa:65:16: b0:b3:87:4f:df:52:63:7f:35:2c:65:09:16:5f:37: a1:8d:bd:a1:ef:b1:8f:90:77:e3:68:77:bf:45:b0: 37:f9:fd:dc:10:79:30:33:18:90:e9:7a:7d:53:8f: df:03:11:f2:07:33:61:6e:11:ad:cf:4c:07:9b:f7: 26:84:be:20:ec:5e:bf:a8:5c:1c:82:1d:4b:35:50: 62:17:19:d3:f4:a4:a6:46:3c:95:58:6d:6b:cd:b2: 7f:14:c1:e6:5c:5e:ff:ca:1c:b2:db:02:e3:36:b1: 52:d4:21:c1:90:a3:28:9f:ea:b4:f1:d6:92:22:34: 04:cb:06:c8:2b:77:01:03:4f:a8:6b:c0:ba:26:5a: 21:48:06:c0:e8:fa:5e:23:e9:10:f7:55:d1:e0:52: 66:cf:e9:3d:34:f0:47:85:e3:e9:dd:5d:41:ba:03: a2:c9:5e:f0:76:c4:05:e8:ff:ae:0d:0c:bf:8c:30: 22:bd:ae:74:22:af:66:b0:ac:56:d3:15:f9:fd:5b: d7:c6:d9:6e:2b:9b:ae:64:3f:2c:11:dc:17:ff:fd: 59:78:2b:35:99:79:d5:ae:0d:56:09:6d:af:29:15: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:3C:DE:01:1F:73:78:54:4D:0F:37:5A:22:CB:3D:C9:B2:72:A5 X509v3 Authority Key Identifier: keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:26:1b:9e:fe:0f:b7:df:2b:d0:a9:0f:79:a1:04:a4:82: 2e:c1:bc:a2:b0:ea:ee:c7:a9:08:9b:39:51:37:b1:57:7d:7e: 93:05:4e:25:08:a3:73:1b:bf:c9:d0:e4:d0:26:c5:b4:e4:f4: d3:b6:6d:71:fe:68:73:5b:e4:07:d9:a4:72:0d:16:ef:2b:37: 9f:5c:ef:fc:22:e2:db:53:b9:1a:e2:89:47:c0:0e:9e:da:58: ea:55:e9:ee:e1:73:85:3b:50:21:96:07:aa:0b:9e:8d:d7:22: 5b:cb:ef:98:40:ed:54:5e:aa:44:f0:75:49:38:3e:8b:3d:8b: 0c:8d:91:b2:dd:47:4a:c8:d6:d7:76:30:e3:0d:e3:48:1d:8f: 86:f0:c8:4b:2e:b4:63:e6:2b:ac:52:1a:fc:99:10:af:58:8f: 0b:4a:ec:33:fc:be:74:dc:e8:ba:c6:81:fa:ca:d7:96:69:16: dc:44:5b:25:4e:54:65:77:ed:fb:0c:09:13:bc:e3:15:88:ec: ee:a7:63:3d:1b:0d:11:e0:12:0b:54:cb:de:06:cf:68:db:e3: a9:3b:24:c4:7c:0f:c9:da:46:d3:67:16:69:e7:b7:ab:68:c4: 0e:7b:4d:1f:b8:6c:40:10:2b:59:94:14:2e:de:c1:58:87:5c: 7a:96:22:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW4jlS2dj9pluPkgmFCOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDJkMjcxNWY0M2Y3NDdiZWE3NjJkY2UxNjZiY2E0Yjhl OTY1ZWIwHhcNMjUxMjExMTcwMDM4WhcNMjUxMjEyMTcwMDM4WjAzMTEwLwYDVQQD EyhjYThhM2NkZTAxMWY3Mzc4NTQ0ZDBmMzc1YTIyY2IzZGM5YjI3MmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWG6+QIrszxOSggHX9VhljtfDLrx vTZ6MlL6ZRaws4dP31JjfzUsZQkWXzehjb2h77GPkHfjaHe/RbA3+f3cEHkwMxiQ 6Xp9U4/fAxHyBzNhbhGtz0wHm/cmhL4g7F6/qFwcgh1LNVBiFxnT9KSmRjyVWG1r zbJ/FMHmXF7/yhyy2wLjNrFS1CHBkKMon+q08daSIjQEywbIK3cBA0+oa8C6Jloh SAbA6PpeI+kQ91XR4FJmz+k9NPBHhePp3V1BugOiyV7wdsQF6P+uDQy/jDAiva50 Iq9msKxW0xX5/VvXxtluK5uuZD8sEdwX//1ZeCs1mXnVrg1WCW2vKRVDDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqKPN4BH3N4VE0PN1oiyz3JsnKlMB8GA1UdIwQY MBaAFFjS0nFfQ/dHvqdi3OFmvKS46WXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjkt ZTM4MzQ1MTZmYzA4LzEvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjktZTM4MzQ1MTZmYzA4 LzEvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBQmG57+ D7ffK9CpD3mhBKSCLsG8orDq7sepCJs5UTexV31+kwVOJQijcxu/ydDk0CbFtOT0 07Ztcf5oc1vkB9mkcg0W7ys3n1zv/CLi21O5GuKJR8AOntpY6lXp7uFzhTtQIZYH qguejdciW8vvmEDtVF6qRPB1STg+iz2LDI2Rst1HSsjW13Yw4w3jSB2PhvDISy60 Y+YrrFIa/JkQr1iPC0rsM/y+dNzousaB+srXlmkW3ERbJU5UZXft+wwJE7zjFYjs 7qdjPRsNEeASC1TL3gbPaNvjqTskxHwPydpG02cWaee3q2jEDntNH7hsQBArWZQU Lt7BWIdcepYi1Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:03 2025 by rpki-client