This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft File: wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json) Hash identifier: zV3max+1Hjpfd8mf4qLwrzYOwQLeLp/q/U+KdQuR24Y= Subject key identifier: 20:5C:F6:4F:DF:28:FE:A8:B8:AF:10:19:00:C8:D4:12:92:14:68:DE Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58 Certificate issuer: /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258 Certificate serial: 019B7F032683686F4FB337D5077C9E83DAB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft Manifest number: 173A Signing time: Fri 02 Jan 2026 14:01:11 +0000 Manifest this update: Fri 02 Jan 2026 14:01:11 +0000 Manifest next update: Sat 03 Jan 2026 14:01:11 +0000 Files and hashes: 1: LJ5gZJSPzwjdTVggDFY4W_1l4w4.roa (hash: ik1OvlzeTsw4mzKCrPXBw8FurNhNyxucfV+IOGhqUhU=) 2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: IFxdoW2n09gonMu8Brhy2oOBkMSHSeawp0JSEkMxL14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:03:26:83:68:6f:4f:b3:37:d5:07:7c:9e:83:da:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258 Validity Not Before: Jan 2 14:01:11 2026 GMT Not After : Jan 3 14:01:11 2026 GMT Subject: CN=205cf64fdf28fea8b8af101900c8d412921468de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:29:c1:ec:0c:e3:03:5e:f4:a5:13:23:a0: cf:2c:ef:c6:07:62:fe:39:8e:26:9a:9e:0b:a3:5d: ea:85:a6:d3:36:40:b0:bc:4b:39:b6:57:98:d3:af: 34:ba:db:c0:8d:cc:b6:3b:27:81:85:1b:87:c2:12: ea:5a:3f:4a:89:fe:da:28:55:f7:9c:c3:af:a9:63: 5f:6a:4a:54:de:27:a7:86:76:f9:b8:c2:9c:3d:99: a0:b5:39:94:8f:3f:da:42:d4:75:9e:d5:e1:ae:86: 15:a8:f2:db:5c:a6:43:43:05:a2:ff:8c:da:2a:5d: 6a:4b:ad:f2:58:39:50:88:db:ed:b9:0e:a4:ca:79: 40:f6:e0:a7:90:8f:a1:ed:20:c4:43:d8:b4:69:34: 30:f6:9a:38:c8:ec:9f:6a:b5:df:ae:67:47:66:f1: 1a:0b:52:6f:bc:e5:9c:57:d0:b6:e4:31:3b:c3:02: aa:ad:30:d4:5a:e0:37:96:76:aa:c9:c7:81:82:f0: fa:5f:c5:fb:f8:76:7e:40:5c:da:66:f7:0b:90:26: 40:9f:fd:63:28:1a:52:13:18:4b:86:c1:7f:09:33: 80:c6:30:21:d9:6e:94:d7:35:e1:87:3f:1b:b9:59: 86:70:b2:8d:ae:b5:d4:83:fd:dd:13:fc:3e:12:56: f0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5C:F6:4F:DF:28:FE:A8:B8:AF:10:19:00:C8:D4:12:92:14:68:DE X509v3 Authority Key Identifier: keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:43:70:1a:98:02:f7:56:bd:1f:32:48:c1:79:7c:1a:34:5c: 5f:59:ae:fa:65:a2:41:6f:09:03:1a:d2:c8:6f:0c:22:ac:4a: 4b:0f:0e:bf:b4:4a:f3:ac:33:48:0e:72:9e:33:4a:86:d5:65: 5e:f3:83:53:5b:65:f7:d2:15:a8:5b:82:1d:9f:c0:81:60:54: 58:0d:df:a3:38:47:b2:de:01:dc:20:1d:46:bb:93:11:25:22: 08:eb:0e:7d:74:99:d9:0b:f4:66:a7:1a:07:fe:ce:da:ef:8a: ad:c7:19:8f:06:64:5f:fb:0a:74:81:d2:1a:85:82:63:75:df: 72:27:c8:5e:86:71:5f:d6:f0:bc:37:78:64:5c:de:15:53:14: 76:15:47:46:0a:18:ee:2e:69:a2:0c:c5:c3:f6:4a:58:f1:03: 86:45:a5:98:1d:ff:2b:66:71:a8:26:aa:32:c7:d5:cd:8b:79: a3:f3:3a:12:a1:6f:d0:e9:6b:c4:b7:f1:a4:8b:68:f2:13:c9: 77:99:e4:07:11:bb:86:ad:31:58:29:47:c3:38:b2:3e:b6:8e: f6:4a:4c:ad:fb:93:14:3f:11:5e:80:fa:25:bb:56:f7:05:a7: 61:b3:e3:b7:89:a5:14:ac:a2:93:4f:de:5f:c4:c1:97:51:a2: 3e:70:ef:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/AyaDaG9PszfVB3yeg9qxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTI0YTlkYTZiZTA3NTRlZGRjMTQ3OGQ2OTRlNmRhOWUx NWEyNTgwHhcNMjYwMTAyMTQwMTExWhcNMjYwMTAzMTQwMTExWjAzMTEwLwYDVQQD EygyMDVjZjY0ZmRmMjhmZWE4YjhhZjEwMTkwMGM4ZDQxMjkyMTQ2OGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsMpwewM4wNe9KUTI6DPLO/GB2L+ OY4mmp4Lo13qhabTNkCwvEs5tleY0680utvAjcy2OyeBhRuHwhLqWj9Kif7aKFX3 nMOvqWNfakpU3ienhnb5uMKcPZmgtTmUjz/aQtR1ntXhroYVqPLbXKZDQwWi/4za Kl1qS63yWDlQiNvtuQ6kynlA9uCnkI+h7SDEQ9i0aTQw9po4yOyfarXfrmdHZvEa C1JvvOWcV9C25DE7wwKqrTDUWuA3lnaqyceBgvD6X8X7+HZ+QFzaZvcLkCZAn/1j KBpSExhLhsF/CTOAxjAh2W6U1zXhhz8buVmGcLKNrrXUg/3dE/w+Elbw3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBc9k/fKP6ouK8QGQDI1BKSFGjeMB8GA1UdIwQY MBaAFMLiSp2mvgdU7dwUeNaU5tqeFaJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAt NTBlMjUzM2ZjZDRlLzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAtNTBlMjUzM2ZjZDRl LzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUNwGpgC 91a9HzJIwXl8GjRcX1mu+mWiQW8JAxrSyG8MIqxKSw8Ov7RK86wzSA5ynjNKhtVl XvODU1tl99IVqFuCHZ/AgWBUWA3fozhHst4B3CAdRruTESUiCOsOfXSZ2Qv0Zqca B/7O2u+KrccZjwZkX/sKdIHSGoWCY3XfcifIXoZxX9bwvDd4ZFzeFVMUdhVHRgoY 7i5pogzFw/ZKWPEDhkWlmB3/K2ZxqCaqMsfVzYt5o/M6EqFv0OlrxLfxpIto8hPJ d5nkBxG7hq0xWClHwziyPraO9kpMrfuTFD8RXoD6JbtW9wWnYbPjt4mlFKyik0/e X8TBl1GiPnDvzw== -----END CERTIFICATE-----Generated at Fri Jan 2 21:17:44 2026 by rpki-client