This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json) Hash identifier: gs1LCyIR8Wq7B3Ax66O1X96hPKQNXVBmvZev9xZVbnw= Subject key identifier: 99:5D:1E:BF:36:1A:C1:B9:E9:FD:AE:A8:C5:5C:39:EB:58:EC:D0:FF Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb Certificate serial: 019B4249C1330149D3FB9767D11F16991EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft Manifest number: 0471 Signing time: Sun 21 Dec 2025 19:01:28 +0000 Manifest this update: Sun 21 Dec 2025 19:01:28 +0000 Manifest next update: Mon 22 Dec 2025 19:01:28 +0000 Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=) 2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: 6khPT1rZ8g9UKoi5a4ITO/PJIA11kF+66dC0PXHDxtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:c1:33:01:49:d3:fb:97:67:d1:1f:16:99:1e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb Validity Not Before: Dec 21 19:01:28 2025 GMT Not After : Dec 22 19:01:28 2025 GMT Subject: CN=995d1ebf361ac1b9e9fdaea8c55c39eb58ecd0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:5f:28:00:2d:07:bb:1a:b8:35:13:c3:03: 41:38:a7:cf:2c:dd:f0:b6:26:c2:28:41:32:70:4e: 67:d2:d3:21:14:08:6a:c2:6c:20:08:30:b6:73:36: 7d:79:b6:7e:45:ff:46:5e:35:24:2a:a5:cc:61:b3: 1b:00:38:33:32:95:6b:df:2c:17:98:b4:20:11:17: b2:a3:61:3a:ef:56:b3:20:a7:42:da:13:6f:f4:da: f0:d4:d5:98:c0:2b:4d:ef:b9:c2:46:27:78:b2:96: 7d:f0:67:e6:fb:db:a8:0f:39:d7:6a:cf:6f:f7:14: 25:30:89:c9:76:48:03:b2:0b:91:ae:b8:18:92:b0: 8c:83:5c:51:cc:3c:89:8d:27:e8:e6:32:3b:a9:80: 1b:53:2d:5e:aa:32:41:ae:90:e6:7e:cf:c2:90:69: a6:a4:8a:fd:8a:ca:21:4b:b1:c3:2b:15:62:0b:bc: fe:d3:86:9f:a8:2b:eb:a2:da:27:77:13:81:34:1e: 51:e7:21:94:70:26:42:88:fe:76:23:81:7a:7f:af: af:3e:19:05:ac:22:33:52:57:6d:9f:56:4d:63:54: 48:d7:d4:ff:ba:6b:67:74:17:3c:d3:1c:80:8f:6a: 84:e6:c6:8d:78:38:63:78:42:92:d0:16:6a:30:0e: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:1E:BF:36:1A:C1:B9:E9:FD:AE:A8:C5:5C:39:EB:58:EC:D0:FF X509v3 Authority Key Identifier: keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:95:04:df:50:2c:a8:7a:5b:70:7a:6e:41:1f:24:73:a8:91: 68:a1:33:f9:0f:33:1d:33:a6:ea:e5:13:96:60:2a:13:7c:97: 09:ef:bd:9a:54:bc:4a:51:47:89:bc:f0:2b:d2:08:5d:88:61: f8:c0:4d:46:1e:ea:75:c0:02:02:a7:4d:4c:55:75:74:c4:c4: 5a:9d:35:71:23:9a:47:f9:fc:c8:db:9b:e6:af:76:9f:b0:35: 4c:0d:f2:af:b3:99:cc:5f:d9:79:10:a2:63:d9:46:b3:66:6f: 5e:f0:33:66:47:e0:a7:ae:82:86:b2:37:bb:17:84:15:e9:ea: 6b:d4:b8:9e:82:9b:52:10:71:6c:c6:4b:3b:88:41:b1:8f:2e: 32:92:a5:24:c6:80:fb:32:4a:76:3c:bc:80:b1:51:c5:9d:3a: 67:2d:db:f0:81:94:f0:e1:42:73:bf:d2:db:0d:0f:b1:4f:f4: 6c:35:73:7f:52:5b:08:b5:ab:26:fe:6f:99:d9:39:b4:f0:38: 41:a0:6f:fe:54:a5:6a:22:6c:b9:d8:e4:7a:9d:9a:70:ee:9c: ef:78:21:f3:59:a4:b2:66:5a:0e:48:f6:13:92:ce:6e:f5:b3: ae:cb:e1:c3:9f:88:01:5e:fa:cd:4d:9f:2d:04:df:65:78:85: 50:72:c7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCScEzAUnT+5dn0R8WmR69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyN2NmNTU2MDIwN2VjZTg0ODJjMzJmY2I2OTk1Zjc3ZDdm NzMwY2IwHhcNMjUxMjIxMTkwMTI4WhcNMjUxMjIyMTkwMTI4WjAzMTEwLwYDVQQD Eyg5OTVkMWViZjM2MWFjMWI5ZTlmZGFlYThjNTVjMzllYjU4ZWNkMGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ5fKAAtB7sauDUTwwNBOKfPLN3w tibCKEEycE5n0tMhFAhqwmwgCDC2czZ9ebZ+Rf9GXjUkKqXMYbMbADgzMpVr3ywX mLQgEReyo2E671azIKdC2hNv9Nrw1NWYwCtN77nCRid4spZ98Gfm+9uoDznXas9v 9xQlMInJdkgDsguRrrgYkrCMg1xRzDyJjSfo5jI7qYAbUy1eqjJBrpDmfs/CkGmm pIr9isohS7HDKxViC7z+04afqCvrotondxOBNB5R5yGUcCZCiP52I4F6f6+vPhkF rCIzUldtn1ZNY1RI19T/umtndBc80xyAj2qE5saNeDhjeEKS0BZqMA5RcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJldHr82GsG56f2uqMVcOetY7ND/MB8GA1UdIwQY MBaAFMJ89VYCB+zoSCwy/LaZX3fX9zDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEt OTQxMjQ0ZjVkZGVkLzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEtOTQxMjQ0ZjVkZGVk LzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJUE31As qHpbcHpuQR8kc6iRaKEz+Q8zHTOm6uUTlmAqE3yXCe+9mlS8SlFHibzwK9IIXYhh +MBNRh7qdcACAqdNTFV1dMTEWp01cSOaR/n8yNub5q92n7A1TA3yr7OZzF/ZeRCi Y9lGs2ZvXvAzZkfgp66ChrI3uxeEFenqa9S4noKbUhBxbMZLO4hBsY8uMpKlJMaA +zJKdjy8gLFRxZ06Zy3b8IGU8OFCc7/S2w0PsU/0bDVzf1JbCLWrJv5vmdk5tPA4 QaBv/lSlaiJsudjkep2acO6c73gh81mksmZaDkj2E5LObvWzrsvhw5+IAV76zU2f LQTfZXiFUHLHmA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:00:58 2025 by rpki-client