This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json) Hash identifier: IQ9y7y7bXIPAoj2qzTYO5f3+v8yqa3EbrXHZQ73hu5k= Subject key identifier: 93:92:BE:A8:DB:4B:1A:EB:84:74:56:FD:6B:D7:61:E2:5E:A2:77:BB Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Certificate serial: 019B3C7E0604C025CA759FD15C8188B57C69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft Manifest number: 02F1 Signing time: Sat 20 Dec 2025 16:00:50 +0000 Manifest this update: Sat 20 Dec 2025 16:00:50 +0000 Manifest next update: Sun 21 Dec 2025 16:00:50 +0000 Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=) 2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: MFA1+Obr7R76EqGkY9rfPYFadi4kHM1EWj5akEhqLvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:06:04:c0:25:ca:75:9f:d1:5c:81:88:b5:7c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Validity Not Before: Dec 20 16:00:50 2025 GMT Not After : Dec 21 16:00:50 2025 GMT Subject: CN=9392bea8db4b1aeb847456fd6bd761e25ea277bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:75:d1:00:ec:6c:72:81:98:3c:97:3d:01: 18:6b:34:a5:7b:c0:cf:3b:17:00:47:9b:de:77:e8: c3:93:10:c7:5a:24:44:8f:bb:4f:dc:68:ac:69:6e: d6:0f:99:53:3d:95:aa:e7:3f:11:56:33:4a:ba:d6: 93:5f:84:f2:17:59:ea:94:b1:02:22:11:a2:a0:5b: 80:fb:f8:7c:7e:83:01:4d:46:20:c2:0a:63:89:bd: 25:e0:d7:26:4d:4f:78:94:aa:1d:c1:e7:e7:0e:b0: f2:6c:97:58:25:a3:b0:80:06:75:86:bc:c9:44:33: 3d:23:b8:fa:71:41:79:6c:dd:e3:44:61:c3:ea:42: 7d:2e:b1:7a:7b:c2:49:24:f0:0c:0a:ff:13:59:43: 95:9b:8b:27:4b:91:85:b1:3c:0d:90:d7:b3:a4:ce: 32:66:86:5c:91:f1:2d:dc:ff:72:50:0e:9f:4e:26: 1e:5a:72:9c:2a:ee:3e:16:fc:02:ad:f1:3f:62:d6: b8:20:0d:49:89:5d:b5:21:15:be:15:46:2c:91:43: ed:59:ba:37:75:34:ce:a2:2c:fc:4d:ad:94:2c:fc: 44:e8:c3:c5:49:e0:2e:24:2d:c1:b0:0c:23:d8:21: a7:1f:bc:24:55:e2:02:e6:89:cd:ae:a6:5f:08:e4: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:92:BE:A8:DB:4B:1A:EB:84:74:56:FD:6B:D7:61:E2:5E:A2:77:BB X509v3 Authority Key Identifier: keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:05:47:63:74:89:11:2d:1d:18:36:e0:4b:7f:48:d3:63:c1: ba:6c:42:4e:ee:63:5a:e7:cf:f9:ed:86:be:c9:3c:b5:5f:b0: e4:2e:0b:07:be:f4:e4:7b:c3:f7:79:56:f0:0c:ce:dc:97:b6: d0:79:17:8b:09:5a:11:22:7f:b3:9f:85:76:54:f5:3e:db:6a: 76:85:b2:61:ec:7a:16:61:52:b4:5a:38:20:92:8d:6b:cf:e0: d1:90:c0:a2:ff:90:09:97:6f:17:0e:c7:44:50:05:cb:3d:a7: 50:42:e7:4d:c8:ba:e4:ae:e2:e0:f7:55:8c:90:92:d8:83:5c: 49:38:08:0b:65:00:ba:9c:fa:14:55:14:ba:ad:d9:ce:b5:aa: c9:e4:26:12:ab:db:84:c0:a1:29:8c:39:66:ed:71:a8:ba:4a: 87:73:ee:65:91:20:1d:69:79:a5:63:cd:c2:ec:14:1c:f5:e8: cd:f1:1a:ac:e2:51:35:c7:09:c0:e0:bc:6a:7c:42:93:5f:c4: 49:f6:4b:d7:a3:4b:bc:2a:b5:b0:56:55:33:e0:00:cc:46:ed: df:46:1c:89:79:c8:1e:6d:74:7a:1f:41:a3:29:7b:4e:30:34: 41:2d:7d:e1:62:85:54:35:9e:eb:ba:25:e4:84:72:18:d1:74: a3:49:66:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgYEwCXKdZ/RXIGItXxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw N2ExMjIwHhcNMjUxMjIwMTYwMDUwWhcNMjUxMjIxMTYwMDUwWjAzMTEwLwYDVQQD Eyg5MzkyYmVhOGRiNGIxYWViODQ3NDU2ZmQ2YmQ3NjFlMjVlYTI3N2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMN10QDsbHKBmDyXPQEYazSle8DP OxcAR5ved+jDkxDHWiREj7tP3GisaW7WD5lTPZWq5z8RVjNKutaTX4TyF1nqlLEC IhGioFuA+/h8foMBTUYgwgpjib0l4NcmTU94lKodwefnDrDybJdYJaOwgAZ1hrzJ RDM9I7j6cUF5bN3jRGHD6kJ9LrF6e8JJJPAMCv8TWUOVm4snS5GFsTwNkNezpM4y ZoZckfEt3P9yUA6fTiYeWnKcKu4+FvwCrfE/Yta4IA1JiV21IRW+FUYskUPtWbo3 dTTOoiz8Ta2ULPxE6MPFSeAuJC3BsAwj2CGnH7wkVeIC5onNrqZfCORVLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOSvqjbSxrrhHRW/WvXYeJeone7MB8GA1UdIwQY MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAVHY3SJ ES0dGDbgS39I02PBumxCTu5jWufP+e2Gvsk8tV+w5C4LB7705HvD93lW8AzO3Je2 0HkXiwlaESJ/s5+FdlT1PttqdoWyYex6FmFStFo4IJKNa8/g0ZDAov+QCZdvFw7H RFAFyz2nUELnTci65K7i4PdVjJCS2INcSTgIC2UAupz6FFUUuq3ZzrWqyeQmEqvb hMChKYw5Zu1xqLpKh3PuZZEgHWl5pWPNwuwUHPXozfEarOJRNccJwOC8anxCk1/E SfZL16NLvCq1sFZVM+AAzEbt30YciXnIHm10eh9Boyl7TjA0QS194WKFVDWe67ol 5IRyGNF0o0lm6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:06 2025 by rpki-client