This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json) Hash identifier: s6iHFR9O4KYBqYCNJjgacCmNMTkUz8LzQRYQTeTf4t8= Subject key identifier: A8:88:05:B1:9A:88:0A:09:8B:04:E3:18:7D:9F:2F:F6:F7:96:BD:0D Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44 Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44 Certificate serial: 019B3E6D2CA2998D846DE8D5D6722F88A662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:40 +0000 Manifest this update: Sun 21 Dec 2025 01:01:40 +0000 Manifest next update: Mon 22 Dec 2025 01:01:40 +0000 Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=) 2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=) 3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: EgN/WHhRCaRNTqmGln8zg2POr+zZbEYxX6uLuozVKgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:2c:a2:99:8d:84:6d:e8:d5:d6:72:2f:88:a6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44 Validity Not Before: Dec 21 01:01:40 2025 GMT Not After : Dec 22 01:01:40 2025 GMT Subject: CN=a88805b19a880a098b04e3187d9f2ff6f796bd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:35:64:db:48:97:05:7f:14:6d:54:9c:29: d2:6e:80:ce:2e:5b:f7:f6:2a:5f:ab:57:b8:20:9d: 9c:50:f1:0a:c8:78:11:88:f9:43:fb:7e:57:6c:4b: ae:c9:1b:54:ae:01:8d:12:5f:9e:0a:2e:db:3d:58: e7:b7:9f:d5:b2:ab:91:f0:85:e1:21:34:24:9b:8d: 2b:e8:60:94:b4:37:ad:66:90:77:66:81:66:b5:1a: b3:0e:89:c9:86:8f:3d:2d:e1:87:36:60:05:ec:3b: 7f:db:d1:6d:1e:f5:f5:50:0c:74:2b:9f:b5:ed:50: 37:c1:77:72:51:42:88:95:17:95:97:7e:22:ad:ee: c9:77:b5:82:51:32:d9:c1:0c:f6:b0:92:2f:55:73: a5:0d:2e:76:92:9e:8c:e9:41:40:e0:83:0f:ed:e2: 1a:c0:dc:63:0a:8d:72:59:78:e6:51:83:dd:2c:8f: 75:00:d8:be:86:74:cd:d6:61:43:a0:cd:ff:57:62: 9e:72:8a:4e:6e:1f:28:64:ec:dc:55:1c:cc:a4:cc: 0c:a4:fd:ec:dd:30:26:43:05:10:b8:2b:30:be:9d: c1:a3:28:44:60:b1:41:68:96:9d:7d:9a:e3:20:a2: 10:1e:85:0d:74:5f:ee:40:c3:6b:26:4f:dc:b4:1d: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:88:05:B1:9A:88:0A:09:8B:04:E3:18:7D:9F:2F:F6:F7:96:BD:0D X509v3 Authority Key Identifier: keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c8:1d:51:8f:e2:f9:a8:68:5f:f5:1d:7b:5d:46:62:1e:2e: 34:e4:7b:5f:e9:aa:a5:19:b0:9c:ed:aa:fa:77:5a:b9:8c:31: c4:97:29:c3:0f:ba:24:c0:8a:74:6a:b3:f1:7d:79:d3:1d:c9: 28:a7:d9:9c:8f:41:a1:6f:9c:57:74:ee:f5:72:d7:fa:2d:48: 02:d9:b1:4a:4f:43:53:f1:32:67:a6:f9:41:12:a3:2c:7d:5f: 66:77:ff:5e:55:6c:e3:58:b6:58:0c:20:6b:e0:8a:c2:1c:1d: 7e:35:1a:44:a6:f0:05:cb:89:59:74:36:8c:89:0e:04:6f:8b: d2:64:b1:95:03:3b:f1:a3:1e:e3:8f:ec:36:47:a0:08:55:7e: e5:3f:dd:20:a0:c3:ae:74:28:af:c6:0b:36:45:13:15:03:c1: e3:37:33:b5:1c:31:c3:d5:e9:7c:df:6d:07:68:46:b2:9f:31: ae:6e:0f:1d:f4:2a:8e:3e:1f:41:b6:42:ea:aa:df:1e:b6:01: 09:23:13:27:c0:83:c3:81:44:1e:26:ff:bc:36:67:c5:c2:80: b2:dc:c1:35:da:48:97:8d:35:92:14:d1:90:31:d9:81:4d:8d: 01:65:35:bf:70:da:c1:04:0c:08:b1:f5:fe:3e:5d:d2:bd:f9: 7d:3f:f6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bSyimY2EbejV1nIviKZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZDJhODg0NWNkZjY1NzZkZThlYjAxMTE4MDhhYmQ2NWZk OGJjNDQwHhcNMjUxMjIxMDEwMTQwWhcNMjUxMjIyMDEwMTQwWjAzMTEwLwYDVQQD EyhhODg4MDViMTlhODgwYTA5OGIwNGUzMTg3ZDlmMmZmNmY3OTZiZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31s1ZNtIlwV/FG1UnCnSboDOLlv3 9ipfq1e4IJ2cUPEKyHgRiPlD+35XbEuuyRtUrgGNEl+eCi7bPVjnt5/VsquR8IXh ITQkm40r6GCUtDetZpB3ZoFmtRqzDonJho89LeGHNmAF7Dt/29FtHvX1UAx0K5+1 7VA3wXdyUUKIlReVl34ire7Jd7WCUTLZwQz2sJIvVXOlDS52kp6M6UFA4IMP7eIa wNxjCo1yWXjmUYPdLI91ANi+hnTN1mFDoM3/V2KecopObh8oZOzcVRzMpMwMpP3s 3TAmQwUQuCswvp3BoyhEYLFBaJadfZrjIKIQHoUNdF/uQMNrJk/ctB0LBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiIBbGaiAoJiwTjGH2fL/b3lr0NMB8GA1UdIwQY MBaAFMDSqIRc32V23o6wERgIq9Zf2LxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMt NDg0NjA2MmY5YTczLzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83Njk3NDMtNGJhMS00M2NlLWFmMjMtNDg0NjA2MmY5YTcz LzEvd05Lb2hGemZaWGJlanJBUkdBaXIxbF9ZdkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsgdUY/i +ahoX/Ude11GYh4uNOR7X+mqpRmwnO2q+ndauYwxxJcpww+6JMCKdGqz8X150x3J KKfZnI9BoW+cV3Tu9XLX+i1IAtmxSk9DU/EyZ6b5QRKjLH1fZnf/XlVs41i2WAwg a+CKwhwdfjUaRKbwBcuJWXQ2jIkOBG+L0mSxlQM78aMe44/sNkegCFV+5T/dIKDD rnQor8YLNkUTFQPB4zcztRwxw9XpfN9tB2hGsp8xrm4PHfQqjj4fQbZC6qrfHrYB CSMTJ8CDw4FEHib/vDZnxcKAstzBNdpIl401khTRkDHZgU2NAWU1v3DawQQMCLH1 /j5d0r35fT/2ig== -----END CERTIFICATE-----Generated at Sun Dec 21 08:00:22 2025 by rpki-client