This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json) Hash identifier: gUqrPEx9eMUR98YGBodsyGXdkUkJxqyW6N5aqaJ8UMw= Subject key identifier: 95:DD:6F:99:66:2A:22:3B:2A:19:F8:3C:7F:64:85:3D:27:8E:63:1A Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c Certificate serial: 019B5A88518438174EC0A81CC7419FD10B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 12:00:41 +0000 Manifest this update: Fri 26 Dec 2025 12:00:41 +0000 Manifest next update: Sat 27 Dec 2025 12:00:41 +0000 Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: uuL2xXAwNsikabEnk9nXK5v1h8LrxwPyJJXKPK0/6pY=) 2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:51:84:38:17:4e:c0:a8:1c:c7:41:9f:d1:0b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c Validity Not Before: Dec 26 12:00:41 2025 GMT Not After : Dec 27 12:00:41 2025 GMT Subject: CN=95dd6f99662a223b2a19f83c7f64853d278e631a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:f9:1e:5d:05:8a:9c:5d:32:bd:1b:ab:18: c7:49:af:b4:b8:ef:e1:e1:58:70:46:80:53:75:c5: 40:00:37:c4:7f:3f:bc:5f:e3:1e:97:d4:fd:f3:a3: 4c:95:e4:01:5d:29:b0:77:d4:8c:4d:19:17:3a:cd: de:68:8f:78:6c:d0:1d:89:48:1e:d7:67:25:97:b4: a4:79:da:a3:99:b1:89:08:e0:0f:84:7e:b2:f5:bb: b9:b9:9f:3e:3b:0b:aa:c7:3d:ec:28:82:e5:dd:8b: c8:48:18:bd:78:0e:e5:3c:b7:3e:d4:f0:4f:5a:e1: d3:4e:a9:fb:c0:6c:7a:91:ef:fa:87:c0:c0:79:c1: e4:76:36:15:89:47:da:a1:c5:56:10:8a:2c:bf:90: bd:89:11:f9:45:b4:df:e6:94:06:1c:66:ce:76:ff: a8:c7:f4:94:60:d8:51:a2:76:15:67:91:2b:46:96: 26:a1:12:ec:93:39:8a:62:6e:f3:81:3a:df:ff:3e: a8:5a:bf:70:c6:7b:f3:d3:92:68:99:62:bb:b1:19: 0a:4c:1c:ae:0b:03:5f:e8:b2:44:7f:8c:11:4d:23: b1:b3:91:c6:72:41:5a:77:1c:99:41:63:7d:be:9a: a4:38:ba:ec:0a:8e:3d:45:03:e4:38:e9:18:8f:32: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:6F:99:66:2A:22:3B:2A:19:F8:3C:7F:64:85:3D:27:8E:63:1A X509v3 Authority Key Identifier: keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b3:20:fb:b1:36:25:94:05:5d:c3:c3:df:5a:89:c8:77:42: c2:50:df:90:49:f0:a0:d6:78:05:6a:98:6c:46:c2:c8:d4:24: 5e:3e:56:07:74:6b:1e:83:53:a5:87:24:69:24:b7:1b:fc:70: e0:46:4f:e3:66:9b:3f:de:af:c2:2f:a5:98:4e:c7:2d:b0:52: 76:d3:35:2b:e4:6b:b8:87:21:e3:e2:97:74:5e:c2:e6:ef:fc: 4f:5b:27:cb:c9:b5:f8:4e:e5:91:d3:33:94:22:97:f9:53:48: 36:10:aa:85:c3:ae:d4:76:8d:29:36:0e:c0:41:c5:e1:45:87: 32:4d:ea:8c:12:a7:6f:0f:06:26:81:e6:7e:a1:33:ba:93:07: 2c:25:2c:b6:41:fd:ed:3a:69:58:af:cc:76:5e:ed:f2:d9:be: 97:d9:8f:20:e6:9e:c8:ce:53:2d:da:1b:4b:63:22:08:f4:9d: 18:e3:3b:46:71:ea:96:89:24:9f:03:ed:de:0a:96:7c:e5:32: 45:7b:73:27:78:f3:c5:09:06:06:4b:93:f3:7d:17:08:ef:ba: 8c:06:11:fc:60:d6:99:86:38:2b:ff:f6:e0:97:dc:d7:cf:d4: 0f:1c:fb:33:b0:c2:18:23:18:e1:fb:cc:26:10:1b:cc:69:eb: 2a:b0:52:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiFGEOBdOwKgcx0Gf0QtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDJhMzU2YTU0NzgxNTViZWFhOGJjNjI1NmE4NmY2ZDVi M2Y3M2MwHhcNMjUxMjI2MTIwMDQxWhcNMjUxMjI3MTIwMDQxWjAzMTEwLwYDVQQD Eyg5NWRkNmY5OTY2MmEyMjNiMmExOWY4M2M3ZjY0ODUzZDI3OGU2MzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Oj5Hl0FipxdMr0bqxjHSa+0uO/h 4VhwRoBTdcVAADfEfz+8X+Mel9T986NMleQBXSmwd9SMTRkXOs3eaI94bNAdiUge 12cll7SkedqjmbGJCOAPhH6y9bu5uZ8+Owuqxz3sKILl3YvISBi9eA7lPLc+1PBP WuHTTqn7wGx6ke/6h8DAecHkdjYViUfaocVWEIosv5C9iRH5RbTf5pQGHGbOdv+o x/SUYNhRonYVZ5ErRpYmoRLskzmKYm7zgTrf/z6oWr9wxnvz05JomWK7sRkKTByu CwNf6LJEf4wRTSOxs5HGckFadxyZQWN9vpqkOLrsCo49RQPkOOkYjzIRawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXdb5lmKiI7Khn4PH9khT0njmMaMB8GA1UdIwQY MBaAFFjSo1alR4FVvqqLxiVqhvbVs/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQt OTA1MzA1NGE1Y2FiLzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQtOTA1MzA1NGE1Y2Fi LzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbMg+7E2 JZQFXcPD31qJyHdCwlDfkEnwoNZ4BWqYbEbCyNQkXj5WB3RrHoNTpYckaSS3G/xw 4EZP42abP96vwi+lmE7HLbBSdtM1K+RruIch4+KXdF7C5u/8T1sny8m1+E7lkdMz lCKX+VNINhCqhcOu1HaNKTYOwEHF4UWHMk3qjBKnbw8GJoHmfqEzupMHLCUstkH9 7TppWK/Mdl7t8tm+l9mPIOaeyM5TLdobS2MiCPSdGOM7RnHqlokknwPt3gqWfOUy RXtzJ3jzxQkGBkuT830XCO+6jAYR/GDWmYY4K//24Jfc18/UDxz7M7DCGCMY4fvM JhAbzGnrKrBSKg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:45 2025 by rpki-client