This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json) Hash identifier: 5/9Fu2B9lLk8zgFt+a8J+KKDHpM84qt/nKBptTZKa5k= Subject key identifier: 9A:62:56:4F:7C:D8:81:45:53:2A:E2:BD:C4:B4:28:67:83:88:62:1C Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Certificate serial: 019B4ADECAD2EDDDF1B6D34519A9382370CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 11:01:13 +0000 Manifest this update: Tue 23 Dec 2025 11:01:13 +0000 Manifest next update: Wed 24 Dec 2025 11:01:13 +0000 Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=) 2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: uwlwnYW0AgGCwU3FMupRzmw7IMgQqPmUi5npqVSDFa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:ca:d2:ed:dd:f1:b6:d3:45:19:a9:38:23:70:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Validity Not Before: Dec 23 11:01:13 2025 GMT Not After : Dec 24 11:01:13 2025 GMT Subject: CN=9a62564f7cd88145532ae2bdc4b428678388621c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:d0:b2:30:8c:b2:f5:a5:fa:f6:0c:a7:d6: 5a:bc:48:18:8f:ac:f2:eb:fd:7c:45:7c:3f:76:1d: a1:ac:a8:5f:4b:2a:41:ae:09:6a:98:f3:c6:32:24: 9c:94:cc:30:b4:a9:a5:d1:39:95:9f:1f:1a:cd:b7: 61:2f:3b:a1:8a:1e:30:45:3b:74:f6:56:8a:8a:7e: 33:5c:d6:59:07:14:f1:0a:86:2a:75:67:2a:c5:99: 2b:e5:fa:bb:18:ec:8f:e6:fb:bd:c8:40:e0:3e:1d: 19:13:a3:67:c3:bc:40:bc:9c:6d:b6:2d:38:59:b6: 7c:8d:44:88:9d:d4:dd:42:98:f8:69:f2:df:ca:c5: cc:dc:90:d3:8e:48:68:cb:78:4c:63:a6:5d:01:af: d2:9e:9e:9d:3c:59:0c:08:f3:b5:e3:1f:4f:f5:f4: 27:8d:7a:b2:1f:14:30:67:fa:87:53:91:86:89:a2: 7e:59:9a:25:4e:48:24:e2:22:a5:58:95:47:b3:b4: ff:47:f2:ac:83:67:02:fe:28:d0:23:75:96:d1:bc: 7b:9f:72:06:04:6e:8b:b3:58:3d:ef:3c:56:a6:6c: 3d:18:79:08:16:e0:5b:63:4a:00:ec:8b:03:a7:90: 08:8c:49:47:f7:81:e8:7c:94:55:29:2e:d1:7c:0e: 19:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:62:56:4F:7C:D8:81:45:53:2A:E2:BD:C4:B4:28:67:83:88:62:1C X509v3 Authority Key Identifier: keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dc:ec:5b:5e:07:a8:9b:b5:41:25:22:b4:8b:f3:83:b4:e5: f9:25:5f:dc:7a:48:6c:c2:75:64:18:bb:b8:2b:e7:a9:ab:1c: 62:1a:85:bb:fc:65:1a:66:dd:d3:d9:93:15:d3:c9:40:60:ca: 3b:5d:08:ab:e7:a9:d4:09:4c:5b:80:1d:72:b1:51:9b:d9:2e: 46:ed:4d:b8:aa:22:a1:4e:9a:46:3a:ea:56:70:87:e3:a2:85: e9:7d:d2:ab:68:ac:11:67:43:55:bd:1e:5e:68:ef:7e:f6:93: 4a:29:59:1e:21:7d:c9:6a:67:02:6d:ca:ff:2d:bd:56:00:fd: 6a:3e:7c:cf:74:b6:b3:b5:d7:12:60:ac:37:e5:6e:93:ab:b1: f3:94:91:d3:28:62:70:3f:38:a5:a2:9c:53:b2:ee:d8:40:82: 58:3a:71:c5:d9:a8:b5:d6:b4:86:32:86:30:d4:dd:b6:25:22: ea:30:e6:8b:26:57:46:0a:54:3a:37:76:a7:d1:e6:61:b5:0e: 39:ca:0d:25:3d:37:71:bd:a3:e5:9a:08:20:c8:be:17:b9:ff: e7:6f:f6:c2:f0:6e:84:22:8d:66:83:1c:f4:2e:02:3a:55:f0: 4e:7a:1e:6d:a6:68:57:30:82:ef:c5:91:8c:b6:68:36:0d:5f: 9a:9e:2d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3srS7d3xttNFGak4I3DNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzk2NGFhYmY0MDRkZGEzZjVlMGVjYzFjNzA2YWIzMjdj NmY5MzEwHhcNMjUxMjIzMTEwMTEzWhcNMjUxMjI0MTEwMTEzWjAzMTEwLwYDVQQD Eyg5YTYyNTY0ZjdjZDg4MTQ1NTMyYWUyYmRjNGI0Mjg2NzgzODg2MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRLQsjCMsvWl+vYMp9ZavEgYj6zy 6/18RXw/dh2hrKhfSypBrglqmPPGMiSclMwwtKml0TmVnx8azbdhLzuhih4wRTt0 9laKin4zXNZZBxTxCoYqdWcqxZkr5fq7GOyP5vu9yEDgPh0ZE6Nnw7xAvJxtti04 WbZ8jUSIndTdQpj4afLfysXM3JDTjkhoy3hMY6ZdAa/Snp6dPFkMCPO14x9P9fQn jXqyHxQwZ/qHU5GGiaJ+WZolTkgk4iKlWJVHs7T/R/Ksg2cC/ijQI3WW0bx7n3IG BG6Ls1g97zxWpmw9GHkIFuBbY0oA7IsDp5AIjElH94HofJRVKS7RfA4ZaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpiVk982IFFUyrivcS0KGeDiGIcMB8GA1UdIwQY MBaAFMJ5ZKq/QE3aP14OzBxwarMnxvkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEt NWViZjJhNTRlYjZkLzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEtNWViZjJhNTRlYjZk LzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtzsW14H qJu1QSUitIvzg7Tl+SVf3HpIbMJ1ZBi7uCvnqascYhqFu/xlGmbd09mTFdPJQGDK O10Iq+ep1AlMW4AdcrFRm9kuRu1NuKoioU6aRjrqVnCH46KF6X3Sq2isEWdDVb0e XmjvfvaTSilZHiF9yWpnAm3K/y29VgD9aj58z3S2s7XXEmCsN+Vuk6ux85SR0yhi cD84paKcU7Lu2ECCWDpxxdmotda0hjKGMNTdtiUi6jDmiyZXRgpUOjd2p9HmYbUO OcoNJT03cb2j5ZoIIMi+F7n/52/2wvBuhCKNZoMc9C4COlXwTnoebaZoVzCC78WR jLZoNg1fmp4tRQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:51:30 2025 by rpki-client