This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft File: Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft (raw, json) Hash identifier: gvATBQt9FcXR4CG/8bYQg8E8aU6LcCrXBX7BzIW+ogM= Subject key identifier: 20:D5:53:AE:6F:0D:0E:95:A5:03:83:7B:67:BC:2D:3F:82:15:F7:48 Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE Certificate issuer: /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee Certificate serial: 019B42498854F50029AE2C3AE6420976745D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft Manifest number: 0F41 Signing time: Sun 21 Dec 2025 19:01:13 +0000 Manifest this update: Sun 21 Dec 2025 19:01:13 +0000 Manifest next update: Mon 22 Dec 2025 19:01:13 +0000 Files and hashes: 1: EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa (hash: QTASo2dR9S0FHaEMTzsEAOKw6oKeRRFkI+5ogAhRzoY=) 2: Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl (hash: Q9wPS6kKC5eQuHJ2hrQ+KW14xxGItKVW+oXj+M9U33g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:88:54:f5:00:29:ae:2c:3a:e6:42:09:76:74:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee Validity Not Before: Dec 21 19:01:13 2025 GMT Not After : Dec 22 19:01:13 2025 GMT Subject: CN=20d553ae6f0d0e95a503837b67bc2d3f8215f748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:14:39:8d:d5:ee:cf:39:62:75:52:33:be: a1:b4:99:c2:95:45:4c:d5:20:b9:31:2f:c9:ce:2d: e9:19:dd:aa:5d:e0:c3:92:6e:16:74:cb:9f:af:50: 84:2c:7e:4d:54:c4:72:e4:03:fd:36:05:43:79:ef: 21:47:19:66:6d:5c:f8:60:a1:0f:f7:e1:b5:d8:99: a0:64:b0:19:2f:83:3e:63:05:61:7c:3f:a8:48:28: a6:a0:3c:db:27:0f:02:8d:36:40:75:e7:31:a1:d4: c7:51:d0:61:5d:80:be:cb:71:11:a7:6b:ae:0a:66: ef:ad:c3:97:f4:0c:17:1b:82:e0:90:c5:95:f7:c3: 65:6c:01:40:1f:63:3a:3f:cb:66:b3:4f:4b:d0:cc: 81:19:4c:03:dc:17:d5:ea:58:a3:54:26:cc:9b:fe: 7e:f5:27:84:bf:c5:6d:ff:31:6f:bc:93:60:0f:cb: e1:25:1d:78:f9:ca:aa:c5:25:03:92:d6:f6:24:ad: d6:83:b8:ba:6a:46:ba:43:5b:89:35:b1:e7:4c:01: 06:35:a5:de:c6:dd:8d:ca:25:40:08:3c:a2:76:d2: a9:40:a3:a5:1a:3c:4b:dc:dd:3f:1f:22:8c:93:c1: 5d:d6:60:75:3a:47:34:35:8b:9a:df:55:7f:b8:0e: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:53:AE:6F:0D:0E:95:A5:03:83:7B:67:BC:2D:3F:82:15:F7:48 X509v3 Authority Key Identifier: keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fe:2a:62:ff:3b:50:f8:e3:16:56:0f:df:54:11:72:ca:40: d2:64:94:59:fa:1d:6d:2b:14:b8:92:fa:05:15:0b:b6:4f:b5: f8:da:f7:70:ca:79:e4:26:14:36:46:aa:71:a7:56:3a:21:a8: e4:19:53:e5:cb:cf:e4:e9:1c:6d:0f:78:f1:32:cb:f9:51:b5: 15:bb:9a:74:ec:8d:05:34:8e:6e:01:c8:c0:ff:50:47:63:28: 89:fd:3e:ea:4d:9d:ca:fa:4e:6c:39:b5:28:10:0d:22:d0:c6: 96:01:f4:de:17:6f:8c:34:75:78:ac:15:3e:29:5d:38:7e:b8: 76:84:8a:39:be:75:96:c6:d0:57:5e:67:98:de:1c:4f:20:14: 88:16:49:3e:e9:45:f5:a7:b8:a6:c4:fc:90:3c:e9:9d:ae:5c: a0:14:06:4b:39:17:a9:6a:e5:4e:b7:54:a3:d6:a9:68:fe:99: 03:5d:6c:3e:52:2b:07:0d:ca:79:d2:a2:3a:b6:bf:bd:f4:04: a0:4a:ac:ad:a4:7c:77:5b:84:d3:05:74:d6:fc:22:68:0f:a5: 1f:96:68:56:8b:f7:50:b0:4d:2a:c6:f7:fd:ea:27:b1:a2:49: aa:75:5a:e8:57:ec:0f:d7:49:6c:40:20:fa:8d:d5:ab:e5:f1: 07:88:f9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSYhU9QApriw65kIJdnRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YTllOWY4ZWE0NzQ4NmQ4MGM5ZDZkY2ZkNTY4ZjY1NGQ0 ZjA3ZWUwHhcNMjUxMjIxMTkwMTEzWhcNMjUxMjIyMTkwMTEzWjAzMTEwLwYDVQQD EygyMGQ1NTNhZTZmMGQwZTk1YTUwMzgzN2I2N2JjMmQzZjgyMTVmNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNkUOY3V7s85YnVSM76htJnClUVM 1SC5MS/Jzi3pGd2qXeDDkm4WdMufr1CELH5NVMRy5AP9NgVDee8hRxlmbVz4YKEP 9+G12JmgZLAZL4M+YwVhfD+oSCimoDzbJw8CjTZAdecxodTHUdBhXYC+y3ERp2uu CmbvrcOX9AwXG4LgkMWV98NlbAFAH2M6P8tms09L0MyBGUwD3BfV6lijVCbMm/5+ 9SeEv8Vt/zFvvJNgD8vhJR14+cqqxSUDktb2JK3Wg7i6aka6Q1uJNbHnTAEGNaXe xt2NyiVACDyidtKpQKOlGjxL3N0/HyKMk8Fd1mB1Okc0NYua31V/uA6y/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDVU65vDQ6VpQODe2e8LT+CFfdIMB8GA1UdIwQY MBaAFFmp6fjqR0htgMnW3P1Wj2VNTwfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWIt YWZlODRlMThkNTZmLzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWItYWZlODRlMThkNTZm LzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALf4qYv87 UPjjFlYP31QRcspA0mSUWfodbSsUuJL6BRULtk+1+Nr3cMp55CYUNkaqcadWOiGo 5BlT5cvP5OkcbQ948TLL+VG1FbuadOyNBTSObgHIwP9QR2Moif0+6k2dyvpObDm1 KBANItDGlgH03hdvjDR1eKwVPildOH64doSKOb51lsbQV15nmN4cTyAUiBZJPulF 9ae4psT8kDzpna5coBQGSzkXqWrlTrdUo9apaP6ZA11sPlIrBw3KedKiOra/vfQE oEqsraR8d1uE0wV01vwiaA+lH5ZoVov3ULBNKsb3/eonsaJJqnVa6FfsD9dJbEAg +o3Vq+XxB4j57g== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:25 2025 by rpki-client