This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json) Hash identifier: P39Kc5J0uLpEAGsP95nn1dr6TQeLkO0s0odp8XEtfV0= Subject key identifier: F9:3F:8E:87:81:57:0C:55:6C:A4:0B:75:57:45:41:0C:CB:B2:58:AB Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72 Certificate serial: 019B7759FB20ADEB6225A893A817A3A8FDA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 02:19:04 +0000 Manifest this update: Thu 01 Jan 2026 02:19:04 +0000 Manifest next update: Fri 02 Jan 2026 02:19:04 +0000 Files and hashes: 1: AaoD9e1Rc9A7OLbVCIZcDp6j6JM.roa (hash: ytSdeQxHuy+yxjmnJ8gqjABXw5mRmre0ka6vBBpW/Mk=) 2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: /YDZQ1i0TrCDH1xg3aPjW+cmwvVciDy+QcQ2VQek39k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 02:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:fb:20:ad:eb:62:25:a8:93:a8:17:a3:a8:fd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72 Validity Not Before: Jan 1 02:19:04 2026 GMT Not After : Jan 2 02:19:04 2026 GMT Subject: CN=f93f8e8781570c556ca40b755745410ccbb258ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:96:28:a2:d7:b5:c8:d0:99:dd:05:35:05:e0: ca:2f:98:f7:7f:18:92:9c:1d:74:57:6a:47:84:c6: 46:b1:ac:23:2e:b7:33:32:f8:b5:cc:6f:3f:29:ec: a5:41:03:70:ba:a6:90:c2:b2:07:21:43:73:c8:9b: 44:7b:0b:74:4a:92:1d:33:c7:c5:a1:7b:6c:13:88: ad:f1:fd:25:ec:df:cb:39:23:82:74:b1:00:d9:08: bb:b9:56:11:6e:eb:96:b0:1a:1e:50:d8:40:a3:e8: fd:a7:e8:e6:2e:ca:fb:54:d1:3d:a6:bb:59:79:88: 96:e1:bc:17:d5:73:53:6b:3f:82:39:f0:e5:38:a9: 30:de:fc:95:db:54:0f:44:d0:57:c8:02:45:20:d7: 06:7e:81:1e:26:70:17:65:cc:25:15:77:20:db:ab: 59:50:f2:b0:38:8d:8d:7a:bb:6d:3a:77:b0:26:0b: 9e:7c:d6:6c:9b:5b:ba:5e:ce:fc:4b:76:db:05:3c: 37:fb:44:23:f2:f0:c6:72:46:4f:72:73:22:ff:af: c7:f8:6c:fd:f6:11:01:5d:53:9f:1f:3b:fc:77:80: 25:6c:95:a3:3d:7f:ee:64:f7:01:3d:c4:45:8d:8f: ac:d4:30:1b:a0:08:84:e9:fd:4c:b3:ef:70:a9:a0: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3F:8E:87:81:57:0C:55:6C:A4:0B:75:57:45:41:0C:CB:B2:58:AB X509v3 Authority Key Identifier: keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5b:12:a2:a9:49:f1:79:2f:e9:91:83:2e:8d:c5:d6:0d:26: a0:cc:45:fd:33:f7:2f:7e:b4:56:e6:34:ef:a0:88:95:bb:70: 40:c3:71:95:4e:bb:a9:22:b3:1e:bb:76:dc:1a:8f:1b:76:98: a9:33:92:e3:23:5b:87:57:04:09:fb:5b:a6:d7:64:44:99:4b: 52:4d:7b:ed:03:c6:c0:e9:80:8c:74:19:f7:53:57:ab:af:61: a6:61:21:0f:bf:61:a3:52:6c:26:05:50:8f:f0:cf:98:a6:ae: 7f:e8:f4:dc:ac:ce:48:75:6f:5d:0c:89:65:0a:96:a7:fe:d3: c9:8f:ef:42:c8:d9:e8:a5:57:65:68:07:40:cf:8b:38:5a:dd: 04:ed:44:69:e7:13:99:11:e7:ac:73:08:39:33:4b:67:42:b3: d7:22:4b:37:96:49:17:66:7a:51:ca:b8:53:7e:3e:95:1f:14: 55:f1:02:3f:62:12:94:e6:c5:ca:35:01:cc:b4:15:04:56:26: 4a:d1:70:04:bc:b1:8e:76:3d:f2:24:77:fb:75:1b:88:01:e9: 63:cd:18:bb:43:27:db:80:5e:46:73:7f:2d:cf:bb:09:dc:5d: 3a:04:ef:d6:be:6c:e1:a7:fe:89:19:70:52:bb:6b:d2:4d:81: 9b:73:4b:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3WfsgretiJaiTqBejqP2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5 MjVhNzIwHhcNMjYwMTAxMDIxOTA0WhcNMjYwMTAyMDIxOTA0WjAzMTEwLwYDVQQD EyhmOTNmOGU4NzgxNTcwYzU1NmNhNDBiNzU1NzQ1NDEwY2NiYjI1OGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JYoote1yNCZ3QU1BeDKL5j3fxiS nB10V2pHhMZGsawjLrczMvi1zG8/KeylQQNwuqaQwrIHIUNzyJtEewt0SpIdM8fF oXtsE4it8f0l7N/LOSOCdLEA2Qi7uVYRbuuWsBoeUNhAo+j9p+jmLsr7VNE9prtZ eYiW4bwX1XNTaz+COfDlOKkw3vyV21QPRNBXyAJFINcGfoEeJnAXZcwlFXcg26tZ UPKwOI2NerttOnewJguefNZsm1u6Xs78S3bbBTw3+0Qj8vDGckZPcnMi/6/H+Gz9 9hEBXVOfHzv8d4AlbJWjPX/uZPcBPcRFjY+s1DAboAiE6f1Ms+9wqaDgfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk/joeBVwxVbKQLdVdFQQzLslirMB8GA1UdIwQY MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3 LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVsSoqlJ 8Xkv6ZGDLo3F1g0moMxF/TP3L360VuY076CIlbtwQMNxlU67qSKzHrt23BqPG3aY qTOS4yNbh1cECftbptdkRJlLUk177QPGwOmAjHQZ91NXq69hpmEhD79ho1JsJgVQ j/DPmKauf+j03KzOSHVvXQyJZQqWp/7TyY/vQsjZ6KVXZWgHQM+LOFrdBO1EaecT mRHnrHMIOTNLZ0Kz1yJLN5ZJF2Z6Ucq4U34+lR8UVfECP2ISlObFyjUBzLQVBFYm StFwBLyxjnY98iR3+3UbiAHpY80Yu0Mn24BeRnN/Lc+7CdxdOgTv1r5s4af+iRlw Urtr0k2Bm3NLbg== -----END CERTIFICATE-----Generated at Thu Jan 1 12:33:28 2026 by rpki-client