This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json) Hash identifier: jS+mkxA6aZYAVzUzi6Hm+o6bRrse6XXbtq+4A8XWyAg= Subject key identifier: E5:05:CA:21:97:B1:82:BD:19:1A:63:46:F6:0C:87:00:C9:A6:BB:2C Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Certificate serial: 019B405B9C07D945376CEAF78A6AA68B19F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft Manifest number: 0739 Signing time: Sun 21 Dec 2025 10:01:44 +0000 Manifest this update: Sun 21 Dec 2025 10:01:44 +0000 Manifest next update: Mon 22 Dec 2025 10:01:44 +0000 Files and hashes: 1: TLgLKVaOUqUcy2aOeR6b7swW9-Q.roa (hash: C/2OykLDOSnCVBosN3ZMBK6gouI0wlKQDVzKIVuT/aw=) 2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: TCYqcTZTJ+W2fIx6f5GN1D5ZmzXhmXW5VZNPo41C8lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:9c:07:d9:45:37:6c:ea:f7:8a:6a:a6:8b:19:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Validity Not Before: Dec 21 10:01:44 2025 GMT Not After : Dec 22 10:01:44 2025 GMT Subject: CN=e505ca2197b182bd191a6346f60c8700c9a6bb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:3c:07:6a:ab:10:8e:79:59:52:a9:38:a5: 14:0d:7a:0c:56:7f:80:9a:31:67:d9:c4:98:60:18: fc:f5:d9:c1:d5:6f:18:85:2d:9e:90:7c:a3:f2:20: e2:47:ee:4f:0d:7b:0d:71:24:5a:dd:fd:45:00:ce: 76:17:ed:48:21:68:f6:f5:01:1e:c6:3c:cb:9b:f9: 45:66:71:2d:1a:d8:4a:4d:0d:36:d8:09:8f:4a:5c: dc:2d:67:4d:b6:2d:a3:55:87:69:e2:32:ab:b4:32: 0d:c3:49:e3:76:c1:75:c1:db:48:3b:47:12:ef:fc: 56:36:4e:6a:92:42:f8:46:b1:3a:71:ca:b9:d1:79: 1d:df:c4:f7:46:6a:ae:85:a3:1e:ff:8c:09:fd:06: 4c:cf:77:e6:e5:5e:01:c2:1c:4b:f1:97:ed:e2:37: 81:ce:6a:0c:e0:b1:03:1e:5b:b4:1d:11:b0:8e:ac: 36:6c:bc:05:09:9f:3e:69:49:8b:a1:18:e5:3d:af: 15:d7:f5:f5:89:09:88:b2:9e:06:21:a9:b0:70:ae: bf:d5:1f:bb:8a:55:c0:01:6c:45:0e:2e:85:75:20: 45:28:14:61:20:df:3b:63:80:9d:6f:30:50:da:01: 94:8d:58:5f:00:0a:5d:28:fb:7b:b5:91:11:22:b8: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:05:CA:21:97:B1:82:BD:19:1A:63:46:F6:0C:87:00:C9:A6:BB:2C X509v3 Authority Key Identifier: keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f7:04:fc:83:cc:93:b1:6e:18:21:31:15:49:fc:16:cc:14: 5c:67:21:fb:f6:54:e8:ca:dc:e5:48:04:2f:d8:c3:7e:7c:84: fa:3e:6f:0e:e0:aa:9f:60:b7:94:86:ab:81:d7:a4:9a:9a:4e: 93:65:3a:d4:c6:01:a7:36:1b:06:02:23:6b:15:4b:e5:73:75: e2:34:ec:fe:61:6f:17:85:fd:95:3e:26:ef:c8:89:8c:12:c8: 3c:32:5e:ff:2c:15:a6:3a:67:27:e4:94:2b:73:2a:a1:10:9c: 90:34:38:50:f5:24:35:97:b3:83:fe:a3:37:19:45:9b:78:47: 6b:ca:ff:99:84:eb:c3:0c:cc:75:72:6d:7e:ee:3e:77:a6:af: 5a:46:70:d2:18:88:81:1d:24:37:9b:50:3d:30:6f:d1:73:d4: ab:22:8d:d7:b8:7a:02:48:d2:e5:02:c1:9c:bd:06:37:81:1f: 54:fa:28:09:4a:f4:7d:b5:42:72:e4:e1:82:30:5e:45:ed:44: 14:43:05:ec:a5:f0:cf:b1:18:3c:78:9c:32:f4:f4:d9:54:f4: 9a:a9:be:cf:de:ff:2e:a3:49:cb:77:ac:2b:bb:80:49:37:93: 48:31:e4:0c:29:7f:f7:d8:2d:c6:1a:da:fd:61:6f:85:8b:cd: 72:1d:ca:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW5wH2UU3bOr3imqmixn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk ZTVjMGEwHhcNMjUxMjIxMTAwMTQ0WhcNMjUxMjIyMTAwMTQ0WjAzMTEwLwYDVQQD EyhlNTA1Y2EyMTk3YjE4MmJkMTkxYTYzNDZmNjBjODcwMGM5YTZiYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRI8B2qrEI55WVKpOKUUDXoMVn+A mjFn2cSYYBj89dnB1W8YhS2ekHyj8iDiR+5PDXsNcSRa3f1FAM52F+1IIWj29QEe xjzLm/lFZnEtGthKTQ022AmPSlzcLWdNti2jVYdp4jKrtDINw0njdsF1wdtIO0cS 7/xWNk5qkkL4RrE6ccq50Xkd38T3RmquhaMe/4wJ/QZMz3fm5V4BwhxL8Zft4jeB zmoM4LEDHlu0HRGwjqw2bLwFCZ8+aUmLoRjlPa8V1/X1iQmIsp4GIamwcK6/1R+7 ilXAAWxFDi6FdSBFKBRhIN87Y4CdbzBQ2gGUjVhfAApdKPt7tZERIrhBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUFyiGXsYK9GRpjRvYMhwDJprssMB8GA1UdIwQY MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5 LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvcE/IPM k7FuGCExFUn8FswUXGch+/ZU6Mrc5UgEL9jDfnyE+j5vDuCqn2C3lIargdekmppO k2U61MYBpzYbBgIjaxVL5XN14jTs/mFvF4X9lT4m78iJjBLIPDJe/ywVpjpnJ+SU K3MqoRCckDQ4UPUkNZezg/6jNxlFm3hHa8r/mYTrwwzMdXJtfu4+d6avWkZw0hiI gR0kN5tQPTBv0XPUqyKN17h6AkjS5QLBnL0GN4EfVPooCUr0fbVCcuThgjBeRe1E FEMF7KXwz7EYPHicMvT02VT0mqm+z97/LqNJy3esK7uASTeTSDHkDCl/99gtxhra /WFvhYvNch3KCA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:13:39 2025 by rpki-client