This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft File: wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json) Hash identifier: zGGxxAckHr2OVVL2uc4EnWmOu1QB2zspbtowAi20dvg= Subject key identifier: F7:82:6F:12:18:EC:4D:A6:12:46:4E:D4:E8:7B:95:A7:BF:79:C7:50 Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019B360E2AE3C4D0798C7364F6A2B576534C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft Manifest number: 1792 Signing time: Fri 19 Dec 2025 10:00:56 +0000 Manifest this update: Fri 19 Dec 2025 10:00:56 +0000 Manifest next update: Sat 20 Dec 2025 10:00:56 +0000 Files and hashes: 1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=) 2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=) 3: wdTz_L-Ns0n2oilnNWzN-qaV4wg.roa (hash: vrfieyiP8lp9anbLqcqHzfWXXsW7ByydVU5LiPr5H6U=) 4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: GOoNmx0wGFizRvSaTdqpZDX9TUnRa3JuvMB8M1GJP68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:2a:e3:c4:d0:79:8c:73:64:f6:a2:b5:76:53:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Dec 19 10:00:56 2025 GMT Not After : Dec 20 10:00:56 2025 GMT Subject: CN=f7826f1218ec4da612464ed4e87b95a7bf79c750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:4b:88:0e:32:70:9c:14:5d:49:03:9e:6a: ae:83:60:9e:1e:83:5a:c0:3d:de:cf:25:cf:ce:f1: 95:93:ca:60:26:77:c9:0b:79:24:39:6d:48:ae:8d: 4e:30:95:1b:80:c6:16:b6:e4:bf:34:de:fe:58:5f: 95:df:a4:9f:0f:ce:ae:88:aa:81:95:01:2a:1c:6f: 9d:a4:97:e5:6e:03:9d:89:12:c6:6d:93:65:10:47: b9:6a:fe:b3:e6:b9:c3:85:7d:80:f1:85:21:3c:26: b9:c7:aa:ce:b6:cf:d9:32:b8:a5:73:ca:80:d2:69: 98:89:8f:db:7e:f5:6a:99:f8:a6:5c:d9:a3:71:9a: 1b:ff:21:b5:ad:cb:cd:d4:45:77:f4:f3:7c:86:c1: 67:f2:42:69:43:c0:13:02:10:3e:fe:03:69:58:25: 46:c5:5f:14:ec:af:14:85:03:66:c5:42:4f:ce:54: da:a5:44:d5:ac:7f:b3:be:1f:53:4f:b0:ee:e9:c3: 12:be:31:32:62:87:ec:69:f9:64:4a:02:2f:8b:da: 75:66:22:db:98:77:ba:28:07:3e:35:6b:2f:32:c5: fc:a0:d3:62:39:e1:23:66:05:42:e0:1b:57:33:f4: 2b:af:e7:a4:1c:3a:3a:41:62:93:67:5e:8a:18:0c: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:82:6F:12:18:EC:4D:A6:12:46:4E:D4:E8:7B:95:A7:BF:79:C7:50 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:98:cb:91:ef:bc:95:3b:38:c5:64:37:bc:a8:12:d9:1d:fb: 62:84:2d:1c:18:3c:07:50:08:bb:b2:6a:ec:0a:5d:21:d4:f6: 16:c8:d9:ed:63:8d:f0:4c:39:61:a0:4a:51:f4:36:50:b2:4c: e3:d6:62:ea:51:de:77:be:42:fd:a6:c6:11:6a:85:a4:c3:9d: a1:01:64:75:61:db:af:cd:f4:7d:9c:24:0c:9d:79:43:88:fd: 58:53:78:0c:8e:a3:f0:78:82:b6:c3:69:83:a4:26:77:60:ec: af:dd:3c:09:17:7c:00:92:23:53:12:27:33:45:46:37:fc:04: 8d:6a:ab:64:fb:4a:b6:6a:17:ce:3e:bf:a2:1f:a4:7c:84:00: b5:ae:a8:a7:21:71:bc:c6:0b:3e:da:b9:a2:13:7a:25:71:4d: 42:b4:b3:d4:4a:e4:1a:d2:81:b3:53:2c:e1:d0:5f:f8:3d:73: 3b:04:30:5c:52:1b:51:2a:58:2a:dc:ca:a4:d9:15:6f:df:cd: 90:6b:c0:d9:0c:81:45:90:25:4f:3c:41:fc:c5:13:69:9d:b7: a1:a8:24:9c:1f:74:1c:08:77:db:7a:d9:94:4b:1f:e9:ea:49: 7d:31:44:cf:52:77:04:8e:50:9d:82:de:cf:1b:9b:db:c5:dd: ed:89:ca:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DirjxNB5jHNk9qK1dlNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjUxMjE5MTAwMDU2WhcNMjUxMjIwMTAwMDU2WjAzMTEwLwYDVQQD EyhmNzgyNmYxMjE4ZWM0ZGE2MTI0NjRlZDRlODdiOTVhN2JmNzljNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfZLiA4ycJwUXUkDnmqug2CeHoNa wD3ezyXPzvGVk8pgJnfJC3kkOW1Iro1OMJUbgMYWtuS/NN7+WF+V36SfD86uiKqB lQEqHG+dpJflbgOdiRLGbZNlEEe5av6z5rnDhX2A8YUhPCa5x6rOts/ZMrilc8qA 0mmYiY/bfvVqmfimXNmjcZob/yG1rcvN1EV39PN8hsFn8kJpQ8ATAhA+/gNpWCVG xV8U7K8UhQNmxUJPzlTapUTVrH+zvh9TT7Du6cMSvjEyYofsaflkSgIvi9p1ZiLb mHe6KAc+NWsvMsX8oNNiOeEjZgVC4BtXM/Qrr+ekHDo6QWKTZ16KGAxLMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeCbxIY7E2mEkZO1Oh7lae/ecdQMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5jLke+8 lTs4xWQ3vKgS2R37YoQtHBg8B1AIu7Jq7ApdIdT2FsjZ7WON8Ew5YaBKUfQ2ULJM 49Zi6lHed75C/abGEWqFpMOdoQFkdWHbr830fZwkDJ15Q4j9WFN4DI6j8HiCtsNp g6Qmd2Dsr908CRd8AJIjUxInM0VGN/wEjWqrZPtKtmoXzj6/oh+kfIQAta6opyFx vMYLPtq5ohN6JXFNQrSz1ErkGtKBs1Ms4dBf+D1zOwQwXFIbUSpYKtzKpNkVb9/N kGvA2QyBRZAlTzxB/MUTaZ23oagknB90HAh323rZlEsf6epJfTFEz1J3BI5QnYLe zxub28Xd7YnK0g== -----END CERTIFICATE-----Generated at Fri Dec 19 13:35:44 2025 by rpki-client