This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json) Hash identifier: GGuRxzJp0JOWYrmJJ67443ik5PCdjDQXM5Ku3I+czfA= Subject key identifier: 53:00:A6:6B:2C:B4:AC:68:4D:96:53:53:FE:1A:C0:7F:3F:A0:26:B1 Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c Certificate serial: 019B79EDB6D5E659EBE7E7E04663B48899AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 14:19:40 +0000 Manifest this update: Thu 01 Jan 2026 14:19:40 +0000 Manifest next update: Fri 02 Jan 2026 14:19:40 +0000 Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: JEY9v2xcNKLIbMecNcC6qXBudmq/PgizdFDdgB7tupk=) 2: o1zjZNlBpE66dvhTYzI4pj6m9jM.roa (hash: wVl4rNHZWCUbMyCjP/aG6EY9BIdfaxUELJ3NnDLrmak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 14:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:b6:d5:e6:59:eb:e7:e7:e0:46:63:b4:88:99:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c Validity Not Before: Jan 1 14:19:40 2026 GMT Not After : Jan 2 14:19:40 2026 GMT Subject: CN=5300a66b2cb4ac684d965353fe1ac07f3fa026b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:77:79:4f:6f:66:70:d6:23:ca:ea:c1:bc: b2:de:16:c9:d8:b0:fa:11:61:e2:6d:eb:34:7f:98: 8b:7f:bf:4f:aa:83:c8:55:8c:76:d9:b5:a4:45:96: 23:1b:7b:0d:1a:b4:da:70:02:b8:d3:ee:fd:7b:4d: 4f:0e:5a:52:30:d5:05:f7:99:a7:4c:ec:4a:04:05: 5d:ba:3a:7d:96:53:50:ff:35:b4:4a:ff:d7:22:0e: f8:2b:7f:6f:48:76:ef:ec:39:5f:28:bc:9e:53:11: 3b:79:bf:a1:dd:e9:b1:cd:a0:65:87:19:bb:61:f9: 73:ed:a3:34:79:30:b4:9d:b9:fe:20:43:bf:37:13: de:9e:c7:9f:5b:79:9d:16:3a:a8:ff:e8:cc:c3:b1: e2:ab:89:3e:b7:33:3b:6d:01:d9:51:e2:dd:dd:b0: 3f:d9:5b:80:60:11:69:7d:e4:4f:fa:7d:11:ea:ea: c2:9a:5b:ad:1e:d1:1d:da:ed:f6:a5:a8:ac:b0:c2: 71:df:7c:66:ab:19:be:e8:5e:a6:2a:e8:f9:55:e8: ee:53:2f:44:89:e1:1a:48:fd:5f:b4:37:65:6d:a0: b0:97:9f:76:09:cc:c6:7d:09:3b:ca:e1:9a:6e:51: 20:12:73:76:a6:6a:4d:16:4d:ec:4a:f8:73:15:5f: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:00:A6:6B:2C:B4:AC:68:4D:96:53:53:FE:1A:C0:7F:3F:A0:26:B1 X509v3 Authority Key Identifier: keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:35:bd:a9:fd:0f:5a:be:eb:6b:86:c2:03:88:1b:29:46:a5: c1:a5:3d:34:52:5c:38:08:0a:36:60:72:0e:bb:86:20:70:d8: 1f:76:6c:a8:17:d5:69:35:7e:1f:7c:02:ce:b3:15:cf:8b:71: c5:9d:28:2f:3b:ea:05:32:24:dd:42:cb:61:c3:5a:bd:73:53: 33:b3:6d:77:56:9d:8e:11:f8:3c:03:64:7e:a3:f4:db:01:39: 22:af:88:9c:b8:c4:bd:d3:e0:d6:91:3d:2e:d1:49:3f:9b:02: 49:df:75:b2:a9:35:3e:b6:cb:d6:a5:52:0d:7e:7b:56:7b:d7: b6:f7:3a:ef:37:ec:ab:71:80:5b:f7:12:63:8b:7c:c9:b6:70: 10:df:d7:e3:b0:58:61:61:ee:34:02:27:af:a1:f0:2f:26:0d: 41:3a:9b:52:63:c7:c4:10:34:9c:69:b7:ec:aa:48:b9:df:d1: 3d:8a:ad:e5:a3:ad:34:d4:ec:90:f2:2a:a8:b7:1d:de:cd:f4: 3b:c3:a0:52:c0:b1:00:5b:e9:ad:81:2f:c5:fe:44:9f:94:19: 13:21:ab:22:f6:d8:a1:e3:96:52:1c:76:d0:be:9a:e0:38:2c: 99:5d:ac:9e:94:eb:a5:7e:2a:1c:22:cf:53:35:a0:23:36:35: cd:95:3f:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt57bbV5lnr5+fgRmO0iJmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDJhMzU2YTU0NzgxNTViZWFhOGJjNjI1NmE4NmY2ZDVi M2Y3M2MwHhcNMjYwMTAxMTQxOTQwWhcNMjYwMTAyMTQxOTQwWjAzMTEwLwYDVQQD Eyg1MzAwYTY2YjJjYjRhYzY4NGQ5NjUzNTNmZTFhYzA3ZjNmYTAyNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3J3eU9vZnDWI8rqwbyy3hbJ2LD6 EWHibes0f5iLf79PqoPIVYx22bWkRZYjG3sNGrTacAK40+79e01PDlpSMNUF95mn TOxKBAVdujp9llNQ/zW0Sv/XIg74K39vSHbv7DlfKLyeUxE7eb+h3emxzaBlhxm7 Yflz7aM0eTC0nbn+IEO/NxPensefW3mdFjqo/+jMw7Hiq4k+tzM7bQHZUeLd3bA/ 2VuAYBFpfeRP+n0R6urCmlutHtEd2u32paissMJx33xmqxm+6F6mKuj5VejuUy9E ieEaSP1ftDdlbaCwl592CczGfQk7yuGablEgEnN2pmpNFk3sSvhzFV+A1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMApmsstKxoTZZTU/4awH8/oCaxMB8GA1UdIwQY MBaAFFjSo1alR4FVvqqLxiVqhvbVs/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQt OTA1MzA1NGE1Y2FiLzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQtOTA1MzA1NGE1Y2Fi LzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjW9qf0P Wr7ra4bCA4gbKUalwaU9NFJcOAgKNmByDruGIHDYH3ZsqBfVaTV+H3wCzrMVz4tx xZ0oLzvqBTIk3ULLYcNavXNTM7Ntd1adjhH4PANkfqP02wE5Iq+InLjEvdPg1pE9 LtFJP5sCSd91sqk1PrbL1qVSDX57VnvXtvc67zfsq3GAW/cSY4t8ybZwEN/X47BY YWHuNAInr6HwLyYNQTqbUmPHxBA0nGm37KpIud/RPYqt5aOtNNTskPIqqLcd3s30 O8OgUsCxAFvprYEvxf5En5QZEyGrIvbYoeOWUhx20L6a4DgsmV2snpTrpX4qHCLP UzWgIzY1zZU/ig== -----END CERTIFICATE-----Generated at Thu Jan 1 19:54:46 2026 by rpki-client