This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft File: wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json) Hash identifier: yr5a5f/ZSNrWsVEWY6p2ie0rMC/Lv1lWJrb+0HQ6in8= Subject key identifier: 0B:65:C6:85:C1:B2:B7:F8:92:BE:43:B5:62:11:6B:57:C5:DD:B1:AE Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae Certificate serial: 019B45B87E7DB020000B00656BAE1530701B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft Manifest number: 18BD Signing time: Mon 22 Dec 2025 11:01:17 +0000 Manifest this update: Mon 22 Dec 2025 11:01:17 +0000 Manifest next update: Tue 23 Dec 2025 11:01:17 +0000 Files and hashes: 1: n40E_mpSUbDrPRin7wGLybLjxqo.roa (hash: n8pRkvwikyBf8VB7ZruFdea9HTihfe0isjxqpvjQRDY=) 2: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: Sgc1KaDtflEEzuLyGdnAirBjmu+8JXwiZ/kMVISrJzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:7e:7d:b0:20:00:0b:00:65:6b:ae:15:30:70:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae Validity Not Before: Dec 22 11:01:17 2025 GMT Not After : Dec 23 11:01:17 2025 GMT Subject: CN=0b65c685c1b2b7f892be43b562116b57c5ddb1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:7e:a9:b9:38:d8:31:62:7f:39:0c:be:4f: ea:45:9f:5e:e5:7b:22:4f:f2:c5:03:ce:ca:2b:84: bd:6f:8b:bf:6b:f1:d8:35:9c:e9:af:b7:f9:1a:2a: 35:23:c6:fd:52:72:cd:58:c1:68:98:3d:aa:ba:cd: 26:1b:a9:75:f8:c2:d9:d0:1a:f7:36:95:94:90:86: 2d:35:7b:0d:f0:67:a4:2b:e8:76:c0:97:a5:97:a2: 64:28:6f:22:b1:44:07:75:3f:08:12:30:45:ce:8f: de:f4:56:36:e2:dd:32:eb:87:4d:ac:7c:07:ab:a5: d9:46:69:58:c4:8c:d5:bb:9d:94:19:35:5b:88:94: c3:a0:8b:f8:8d:ed:37:d5:4b:ad:fb:a5:48:af:5c: df:ff:4f:de:f5:58:b7:c9:40:d1:7c:7d:15:fc:72: 3e:d1:78:de:e6:55:ec:5f:73:f0:b7:38:b2:00:27: ab:0a:12:dd:94:10:ae:3b:f6:6b:3b:f3:73:f9:5d: b4:8a:ef:a4:c0:4a:86:71:68:31:63:fe:5a:ab:48: e9:51:87:26:53:57:9e:86:b2:ba:72:20:b8:e2:38: fd:7b:d5:d5:4e:78:40:15:ae:31:0e:17:69:5f:7e: f2:b6:52:b5:31:a4:91:46:4d:84:fe:01:46:05:30: 99:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:65:C6:85:C1:B2:B7:F8:92:BE:43:B5:62:11:6B:57:C5:DD:B1:AE X509v3 Authority Key Identifier: keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:10:ff:e9:11:6c:85:a1:d0:ae:4b:b5:56:2f:33:e0:49:a4: 86:60:0b:e7:b9:54:ec:25:76:1f:7f:77:ae:c5:7b:13:b1:bb: 09:83:03:d2:11:cc:30:f9:e0:b7:c0:d8:45:11:2c:cc:34:3a: 11:2a:9d:e5:b7:f8:9c:a4:d2:eb:9c:52:b5:69:b3:75:48:f3: d8:f2:09:69:38:46:f5:cb:b6:3a:e6:dd:be:40:b3:26:b6:97: 20:af:8d:cc:79:57:d6:de:62:f1:0a:c8:1b:78:16:db:75:e9: 79:05:d5:d4:b7:9f:2b:19:13:86:27:1b:50:bc:e9:de:14:74: 06:8b:41:ad:18:f9:6f:23:bc:c8:ce:39:1a:cc:1f:85:6f:b4: 8b:b4:27:ed:a0:00:d5:3c:48:27:b6:28:0e:7e:9e:6d:e9:30: 4e:62:7f:dd:ab:96:4c:37:17:8a:ad:46:0d:f7:05:fc:37:9a: df:38:7e:67:a5:2d:10:be:38:29:a3:a9:d7:17:84:45:65:63: e7:06:64:10:98:36:89:34:d1:66:be:73:93:18:f9:12:c4:81: b9:fe:42:44:57:84:05:18:b8:79:5b:89:4c:c6:51:8b:15:09: b9:cd:cc:48:87:1f:c8:68:df:7f:f0:42:41:a2:54:68:d0:9e: e1:e4:7e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuH59sCAACwBla64VMHAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3 MmMyYWUwHhcNMjUxMjIyMTEwMTE3WhcNMjUxMjIzMTEwMTE3WjAzMTEwLwYDVQQD EygwYjY1YzY4NWMxYjJiN2Y4OTJiZTQzYjU2MjExNmI1N2M1ZGRiMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwud+qbk42DFifzkMvk/qRZ9e5Xsi T/LFA87KK4S9b4u/a/HYNZzpr7f5Gio1I8b9UnLNWMFomD2qus0mG6l1+MLZ0Br3 NpWUkIYtNXsN8GekK+h2wJell6JkKG8isUQHdT8IEjBFzo/e9FY24t0y64dNrHwH q6XZRmlYxIzVu52UGTVbiJTDoIv4je031Uut+6VIr1zf/0/e9Vi3yUDRfH0V/HI+ 0Xje5lXsX3PwtziyACerChLdlBCuO/ZrO/Nz+V20iu+kwEqGcWgxY/5aq0jpUYcm U1eehrK6ciC44jj9e9XVTnhAFa4xDhdpX37ytlK1MaSRRk2E/gFGBTCZUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtlxoXBsrf4kr5DtWIRa1fF3bGuMB8GA1UdIwQY MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt Zjk4ZGE1NGFmNDM0LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0 LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhD/6RFs haHQrku1Vi8z4EmkhmAL57lU7CV2H393rsV7E7G7CYMD0hHMMPngt8DYRREszDQ6 ESqd5bf4nKTS65xStWmzdUjz2PIJaThG9cu2OubdvkCzJraXIK+NzHlX1t5i8QrI G3gW23XpeQXV1LefKxkThicbULzp3hR0BotBrRj5byO8yM45GswfhW+0i7Qn7aAA 1TxIJ7YoDn6ebekwTmJ/3auWTDcXiq1GDfcF/Dea3zh+Z6UtEL44KaOp1xeERWVj 5wZkEJg2iTTRZr5zkxj5EsSBuf5CRFeEBRi4eVuJTMZRixUJuc3MSIcfyGjff/BC QaJUaNCe4eR+mQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:08:16 2025 by rpki-client