This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json) Hash identifier: yReOCOxa3aNYs+5p9Vgph0VGhnJ07OESUOsZN4o2/RE= Subject key identifier: B9:A5:AA:AF:4E:2F:A1:1F:1F:4D:47:53:E3:49:D1:09:19:9E:58:BF Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91 Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91 Certificate serial: 019B378EA097C4CBCFC0DDEFC4F112410633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft Manifest number: 14AA Signing time: Fri 19 Dec 2025 17:00:52 +0000 Manifest this update: Fri 19 Dec 2025 17:00:52 +0000 Manifest next update: Sat 20 Dec 2025 17:00:52 +0000 Files and hashes: 1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: /xW++76I1zeRWwrdumg+iS92zVs2MK2Q+GmIvGIuFQs=) 2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:a0:97:c4:cb:cf:c0:dd:ef:c4:f1:12:41:06:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91 Validity Not Before: Dec 19 17:00:52 2025 GMT Not After : Dec 20 17:00:52 2025 GMT Subject: CN=b9a5aaaf4e2fa11f1f4d4753e349d109199e58bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:3b:02:27:ee:24:19:3a:bd:b9:33:4f:56: 02:58:43:ff:b1:04:17:e3:5e:17:0b:b4:16:5f:15: 59:e0:ab:eb:c2:de:59:10:e2:4e:54:4f:bf:d9:ec: f0:5b:59:c3:1c:aa:e0:60:fd:72:45:79:fb:74:fa: 02:a9:11:1d:f0:47:82:88:f8:5b:5b:95:2e:4c:3b: 5d:91:bc:2d:ad:59:2e:97:e5:92:10:8b:3a:bd:ae: 36:27:83:1e:b4:fb:d5:f7:04:7c:d3:a7:4c:f1:3f: f4:07:14:e6:c0:6f:35:f4:aa:02:a2:ae:bc:9f:eb: c4:0c:3e:b5:31:3c:78:d6:d2:8b:01:fa:8a:9b:c1: a3:c4:c5:15:2b:4d:be:b3:52:82:39:6c:87:27:b6: c1:03:15:8e:3d:5e:82:0f:e8:4e:f7:c4:fb:1c:55: c0:09:a3:dc:a3:68:32:bd:17:2a:71:9d:ef:8a:fc: 06:ad:6f:e9:2b:9e:c9:af:02:14:ef:04:7f:59:80: a4:af:84:fe:ba:af:e6:db:d1:2a:9d:50:41:76:2c: 3b:59:67:48:d0:3b:19:99:3e:38:2d:8f:5c:13:d9: ef:16:00:8e:99:78:e4:7b:0e:0d:d7:7f:36:de:90: 4e:21:ef:89:cd:f5:0c:f0:5d:73:f2:1f:62:17:48: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:AA:AF:4E:2F:A1:1F:1F:4D:47:53:E3:49:D1:09:19:9E:58:BF X509v3 Authority Key Identifier: keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:46:61:66:ee:d4:65:aa:e1:0f:ad:f3:ed:68:43:65:fa:be: de:ed:b2:5d:f4:ec:86:be:4d:7f:2b:e2:6a:29:91:17:8f:f5: 22:59:99:e2:d0:7a:ed:7d:2a:c0:b8:87:41:06:51:b4:e9:1b: ee:3f:14:c5:42:7a:ef:bf:e8:f7:aa:57:6c:a3:0e:b3:8a:3c: f0:6d:d8:9d:05:e5:cc:a2:dd:b2:40:f8:03:6f:b7:b3:b1:ce: 62:1d:e9:0c:e6:c5:af:ca:66:36:4f:76:33:23:b3:22:c4:03: 63:b6:be:82:93:27:5f:9c:bc:23:9c:ff:6b:4d:4b:e8:d4:1b: 93:78:87:09:d9:d5:48:c4:08:05:7d:0b:c6:21:2b:62:0d:82: 79:e4:88:79:a8:2b:cc:8f:b6:de:ba:53:8e:7c:02:44:ee:e5: e9:35:6d:d7:8d:54:3d:cb:5c:e8:25:54:53:0a:6f:91:01:15: 91:44:b1:4c:dd:0d:09:a5:58:57:2b:b8:75:76:bb:fc:d0:b4: ee:56:5d:0b:e5:7f:f8:aa:d1:74:aa:5e:80:1d:ba:9a:08:12: 12:36:5f:9e:6c:2e:48:d1:bc:c1:5b:15:a6:e1:66:c9:bc:09: 5d:83:b0:f5:b8:6c:34:63:c9:55:f1:b1:26:10:69:9d:e2:f0: e3:74:36:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jqCXxMvPwN3vxPESQQYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGQ0MmFiMzQ2MDI3OTcwOWMxMzRiNTcwZjc2ZTM0ZTRk OTViOTEwHhcNMjUxMjE5MTcwMDUyWhcNMjUxMjIwMTcwMDUyWjAzMTEwLwYDVQQD EyhiOWE1YWFhZjRlMmZhMTFmMWY0ZDQ3NTNlMzQ5ZDEwOTE5OWU1OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rE7AifuJBk6vbkzT1YCWEP/sQQX 414XC7QWXxVZ4Kvrwt5ZEOJOVE+/2ezwW1nDHKrgYP1yRXn7dPoCqREd8EeCiPhb W5UuTDtdkbwtrVkul+WSEIs6va42J4MetPvV9wR806dM8T/0BxTmwG819KoCoq68 n+vEDD61MTx41tKLAfqKm8GjxMUVK02+s1KCOWyHJ7bBAxWOPV6CD+hO98T7HFXA CaPco2gyvRcqcZ3vivwGrW/pK57JrwIU7wR/WYCkr4T+uq/m29EqnVBBdiw7WWdI 0DsZmT44LY9cE9nvFgCOmXjkew4N13823pBOIe+JzfUM8F1z8h9iF0i3fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmlqq9OL6EfH01HU+NJ0QkZnli/MB8GA1UdIwQY MBaAFFjdQqs0YCeXCcE0tXD3bjTk2VuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgt NmUzMTM0N2QwNGQ5LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgtNmUzMTM0N2QwNGQ5 LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUZhZu7U ZarhD63z7WhDZfq+3u2yXfTshr5NfyviaimRF4/1IlmZ4tB67X0qwLiHQQZRtOkb 7j8UxUJ677/o96pXbKMOs4o88G3YnQXlzKLdskD4A2+3s7HOYh3pDObFr8pmNk92 MyOzIsQDY7a+gpMnX5y8I5z/a01L6NQbk3iHCdnVSMQIBX0LxiErYg2CeeSIeagr zI+23rpTjnwCRO7l6TVt141UPctc6CVUUwpvkQEVkUSxTN0NCaVYVyu4dXa7/NC0 7lZdC+V/+KrRdKpegB26mggSEjZfnmwuSNG8wVsVpuFmybwJXYOw9bhsNGPJVfGx JhBpneLw43Q2Xg== -----END CERTIFICATE-----Generated at Sat Dec 20 02:38:28 2025 by rpki-client