This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json) Hash identifier: zpa1hB5lLQ22RRh8iZuopbiaNpleyS0Jg75q8Wh7alA= Subject key identifier: CB:A2:7C:B8:72:74:00:18:F2:19:BF:B1:4E:EB:D9:44:E2:2A:81:7A Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb Certificate serial: 019B3C7E841DDE6AF6A0A6141B766E601EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft Manifest number: 046E Signing time: Sat 20 Dec 2025 16:01:22 +0000 Manifest this update: Sat 20 Dec 2025 16:01:22 +0000 Manifest next update: Sun 21 Dec 2025 16:01:22 +0000 Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=) 2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: Q+TCiTYgsKvhYRxR3KVoWQ5DRNLFZFkV7OPJHxFuYbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:84:1d:de:6a:f6:a0:a6:14:1b:76:6e:60:1e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb Validity Not Before: Dec 20 16:01:22 2025 GMT Not After : Dec 21 16:01:22 2025 GMT Subject: CN=cba27cb872740018f219bfb14eebd944e22a817a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f1:81:83:8c:c4:37:59:32:cc:86:9f:83:9f: 7a:e8:d3:dc:b2:c7:06:31:0d:ac:82:9c:36:8b:41: 9e:fb:be:a0:6a:ea:aa:c1:ad:1c:6e:5d:dc:c7:c5: 79:17:3b:60:c1:89:de:8b:1e:43:47:b6:44:45:f3: 52:d5:c6:3f:f6:5b:9b:a1:a7:65:43:96:8a:f6:e2: fc:a2:fa:48:eb:32:06:38:74:d4:fa:a5:60:d8:c2: 5d:9b:04:7a:9c:4a:07:6d:b4:83:68:4b:4e:07:24: 79:3e:3f:3e:cb:01:48:b4:14:08:3f:ed:4a:b5:0c: 04:f7:8d:b9:92:c8:e7:9a:60:97:e0:29:eb:65:9a: 87:b4:f1:7b:36:f3:12:4e:0f:b5:d4:6e:0c:b2:b6: 8c:cd:76:62:13:00:bb:57:7e:6f:c6:ad:5c:ed:11: a7:b5:73:b5:8c:92:9b:be:d4:15:44:11:f3:79:b8: d5:5a:28:97:8d:73:9b:a7:c5:ae:75:b5:67:de:ce: f4:b5:8b:de:d7:5c:8a:1e:9a:6b:ef:f3:9d:b8:c4: 96:8a:ae:75:e8:5d:3a:e7:af:6c:6d:69:4d:73:b7: 31:95:09:2c:14:67:d0:52:11:c2:1a:d5:16:29:66: 88:29:9e:8a:4b:43:db:9b:1a:91:fb:79:75:87:9d: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:7C:B8:72:74:00:18:F2:19:BF:B1:4E:EB:D9:44:E2:2A:81:7A X509v3 Authority Key Identifier: keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:18:49:d7:e9:25:a5:56:42:29:ed:61:7c:a4:12:e6:c5:32: c3:85:51:3f:bb:19:be:62:16:5a:76:45:b9:d6:de:f1:44:e4: 44:ba:3c:c6:90:53:5d:e8:7f:95:eb:32:12:50:27:19:87:4d: b8:e0:8b:a4:a4:ff:8f:b8:c8:a0:b8:32:81:e4:e3:2b:fa:33: ca:57:65:c2:44:12:22:99:00:d0:13:5d:ed:20:2e:b9:48:7f: 0c:76:98:f3:b1:25:5b:23:92:88:3a:d4:9d:62:4a:a9:ff:f6: 3a:27:6a:58:1c:7a:83:04:dd:23:c7:f5:6e:76:a9:65:b8:13: a4:b9:b2:70:b5:df:e1:d0:be:13:3b:94:9b:4b:7d:88:46:c4: bb:9f:d4:1b:30:2f:1e:ab:7f:f7:0c:fb:f0:7f:eb:4f:39:1f: 16:24:96:cd:a7:6e:fd:3d:f5:a1:df:b1:c9:97:66:24:66:a7: b3:fb:b6:80:05:44:cb:a7:28:81:a3:be:bd:45:cf:96:e7:aa: 35:03:b5:37:d9:63:c6:74:a1:f8:13:de:48:57:eb:25:4c:80: 4d:7f:4a:76:f0:39:fd:e1:78:98:0f:1c:45:27:47:76:89:8e: e1:cd:1a:cb:39:67:75:e0:11:17:a3:06:65:b4:f8:76:d2:85: fb:58:74:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8foQd3mr2oKYUG3ZuYB6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyN2NmNTU2MDIwN2VjZTg0ODJjMzJmY2I2OTk1Zjc3ZDdm NzMwY2IwHhcNMjUxMjIwMTYwMTIyWhcNMjUxMjIxMTYwMTIyWjAzMTEwLwYDVQQD EyhjYmEyN2NiODcyNzQwMDE4ZjIxOWJmYjE0ZWViZDk0NGUyMmE4MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/GBg4zEN1kyzIafg5966NPcsscG MQ2sgpw2i0Ge+76gauqqwa0cbl3cx8V5FztgwYneix5DR7ZERfNS1cY/9luboadl Q5aK9uL8ovpI6zIGOHTU+qVg2MJdmwR6nEoHbbSDaEtOByR5Pj8+ywFItBQIP+1K tQwE9425ksjnmmCX4CnrZZqHtPF7NvMSTg+11G4MsraMzXZiEwC7V35vxq1c7RGn tXO1jJKbvtQVRBHzebjVWiiXjXObp8WudbVn3s70tYve11yKHppr7/OduMSWiq51 6F06569sbWlNc7cxlQksFGfQUhHCGtUWKWaIKZ6KS0PbmxqR+3l1h521BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuifLhydAAY8hm/sU7r2UTiKoF6MB8GA1UdIwQY MBaAFMJ89VYCB+zoSCwy/LaZX3fX9zDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEt OTQxMjQ0ZjVkZGVkLzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEtOTQxMjQ0ZjVkZGVk LzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxhJ1+kl pVZCKe1hfKQS5sUyw4VRP7sZvmIWWnZFudbe8UTkRLo8xpBTXeh/lesyElAnGYdN uOCLpKT/j7jIoLgygeTjK/ozyldlwkQSIpkA0BNd7SAuuUh/DHaY87ElWyOSiDrU nWJKqf/2OidqWBx6gwTdI8f1bnapZbgTpLmycLXf4dC+EzuUm0t9iEbEu5/UGzAv Hqt/9wz78H/rTzkfFiSWzadu/T31od+xyZdmJGans/u2gAVEy6cogaO+vUXPlueq NQO1N9ljxnSh+BPeSFfrJUyATX9KdvA5/eF4mA8cRSdHdomO4c0ayzlndeARF6MG ZbT4dtKF+1h0yw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:14 2025 by rpki-client