This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json) Hash identifier: F1ALD2VTOXZglgTpwInByIPrUen1N95y1YeBYhy0PUE= Subject key identifier: 0E:F8:F9:F4:DA:9E:66:FC:74:A9:73:32:51:FC:3B:67:AB:60:28:3B Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72 Certificate serial: 019AF352C7879976D0863025C58C376DFBA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:01:19 +0000 Manifest this update: Sat 06 Dec 2025 11:01:19 +0000 Manifest next update: Sun 07 Dec 2025 11:01:19 +0000 Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=) 2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: 95IL4Y/SCB5SpKNAtfCNX6PsQMeGioxBViZtYURbGE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c7:87:99:76:d0:86:30:25:c5:8c:37:6d:fb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72 Validity Not Before: Dec 6 11:01:19 2025 GMT Not After : Dec 7 11:01:19 2025 GMT Subject: CN=0ef8f9f4da9e66fc74a9733251fc3b67ab60283b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:54:0a:fd:a1:49:97:d5:57:01:bb:6f:3a: b5:5c:86:44:0f:46:98:6c:62:f4:90:f0:01:78:0b: ae:40:a7:4a:5d:b4:fe:c2:6b:fb:56:e2:e3:d2:5c: 73:66:54:92:fb:37:49:16:f5:37:de:18:0c:41:f9: bb:36:de:f8:3b:3b:81:7a:22:1f:4a:fc:42:0c:5d: 47:0d:ac:d6:7f:8a:e0:12:03:91:9e:85:9d:78:e9: 4f:63:52:9f:05:db:b7:f3:8a:f2:8c:a2:15:09:fe: 14:8a:8b:5a:c2:a5:c9:af:8a:38:bc:18:1e:f4:60: 77:e4:8b:ea:20:48:17:67:92:be:62:f3:a3:66:1f: e5:0b:c3:ca:a0:52:2b:f0:58:96:e2:e7:b6:7d:7f: bd:94:20:86:e7:8e:c1:a0:87:3b:46:55:55:ba:c7: 3b:79:0d:d8:38:61:5f:91:f7:76:ef:95:d6:50:8f: 2f:13:b1:5f:f0:5b:f9:1c:27:dd:85:c7:0b:20:6c: 91:47:86:c7:d3:d7:a7:b7:f8:5b:ec:87:ad:ef:61: 08:7d:3f:8c:ee:25:6d:ff:a8:5f:c5:8a:2b:d5:14: 74:b8:93:9e:18:7a:9e:fc:ed:43:ff:b5:10:6c:be: 2f:b2:4f:c5:08:14:86:53:00:2f:d3:77:f2:72:49: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:F9:F4:DA:9E:66:FC:74:A9:73:32:51:FC:3B:67:AB:60:28:3B X509v3 Authority Key Identifier: keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:00:99:39:43:69:17:93:30:4b:7a:dd:0f:22:da:1d:b8:bf: ce:6c:12:79:b0:e7:f8:13:bf:e4:da:2c:58:5a:37:f7:cf:b4: 73:60:f1:68:c4:a3:f0:2b:53:84:58:b7:d9:4c:5c:21:af:f9: a5:bf:86:8e:e0:31:d3:a4:48:61:c5:86:2a:b3:17:6e:22:df: 14:9a:43:0e:d5:a2:b0:0f:3e:09:d2:3a:44:d5:43:d8:db:d8: a3:a4:25:cc:19:91:43:f9:50:9e:d1:88:6f:aa:f7:e7:77:8a: 9c:aa:a3:b3:5d:4f:df:23:fd:a9:c2:7c:8b:c5:93:43:79:ac: 78:67:3b:5d:fe:7d:38:f2:65:b4:de:a5:88:2e:8d:21:85:b1: 0c:09:10:52:1e:84:f3:a6:a2:5b:a7:b0:70:72:92:75:da:1c: e3:42:19:33:e4:3c:07:37:8d:11:9d:b3:2c:06:de:41:95:96: 6a:6c:e4:75:61:a4:a1:72:de:93:58:52:9d:3b:84:30:c8:6f: 91:5a:0e:0f:64:c5:db:6e:81:99:c5:a7:3e:cf:77:76:bc:f7: 89:f8:8a:09:9d:cf:45:c6:a0:a1:a2:64:19:88:86:48:c6:fb: ad:0d:61:15:ab:04:65:6d:8a:35:e2:7d:8e:c7:5a:ab:70:81: 40:b8:0f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUseHmXbQhjAlxYw3bfumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzJkNDc2MTI0MDM1OWFjYmE4YTMzN2QzYWMzYTkzOTc5 MjVhNzIwHhcNMjUxMjA2MTEwMTE5WhcNMjUxMjA3MTEwMTE5WjAzMTEwLwYDVQQD EygwZWY4ZjlmNGRhOWU2NmZjNzRhOTczMzI1MWZjM2I2N2FiNjAyODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph5UCv2hSZfVVwG7bzq1XIZED0aY bGL0kPABeAuuQKdKXbT+wmv7VuLj0lxzZlSS+zdJFvU33hgMQfm7Nt74OzuBeiIf SvxCDF1HDazWf4rgEgORnoWdeOlPY1KfBdu384ryjKIVCf4UiotawqXJr4o4vBge 9GB35IvqIEgXZ5K+YvOjZh/lC8PKoFIr8FiW4ue2fX+9lCCG547BoIc7RlVVusc7 eQ3YOGFfkfd275XWUI8vE7Ff8Fv5HCfdhccLIGyRR4bH09ent/hb7Iet72EIfT+M 7iVt/6hfxYor1RR0uJOeGHqe/O1D/7UQbL4vsk/FCBSGUwAv03fyckleoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA74+fTanmb8dKlzMlH8O2erYCg7MB8GA1UdIwQY MBaAFMJy1HYSQDWay6ijN9OsOpOXklpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAt MTBkZTY3MTIxMTk3LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lZGU0YzctNjE1MC00ZWQwLTlkMzAtMTBkZTY3MTIxMTk3 LzEvd25MVWRoSkFOWnJMcUtNMzA2dzZrNWVTV25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUACZOUNp F5MwS3rdDyLaHbi/zmwSebDn+BO/5NosWFo398+0c2DxaMSj8CtThFi32UxcIa/5 pb+GjuAx06RIYcWGKrMXbiLfFJpDDtWisA8+CdI6RNVD2NvYo6QlzBmRQ/lQntGI b6r353eKnKqjs11P3yP9qcJ8i8WTQ3mseGc7Xf59OPJltN6liC6NIYWxDAkQUh6E 86aiW6ewcHKSddoc40IZM+Q8BzeNEZ2zLAbeQZWWamzkdWGkoXLek1hSnTuEMMhv kVoOD2TF226BmcWnPs93drz3ifiKCZ3PRcagoaJkGYiGSMb7rQ1hFasEZW2KNeJ9 jsdaq3CBQLgP7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:34 2025 by rpki-client