This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft File: wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json) Hash identifier: FMuX6kCHIylNVJw9N6ophjYnYXWEEEiblL0Q6h8gVfc= Subject key identifier: C7:22:57:C0:83:F8:C4:C2:23:02:76:4A:A2:1C:B1:C5:DA:89:0F:94 Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019AF49C0394C79FB368767E0CADCD2132F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 17:00:56 +0000 Manifest this update: Sat 06 Dec 2025 17:00:56 +0000 Manifest next update: Sun 07 Dec 2025 17:00:56 +0000 Files and hashes: 1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=) 2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=) 3: vDbo_30ceeyNlqD_8acZWIbMZyc.roa (hash: 9eXmKiYncACBhDXgUtCY1ZwBj6oSoFcnoMoGhd0j3iw=) 4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: X2ngSe/xGahDR94g8o7tufYWggBksi8y9ShUnVnpnPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:03:94:c7:9f:b3:68:76:7e:0c:ad:cd:21:32:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Dec 6 17:00:56 2025 GMT Not After : Dec 7 17:00:56 2025 GMT Subject: CN=c72257c083f8c4c22302764aa21cb1c5da890f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:18:33:01:55:95:b8:66:d8:30:09:fb:06: 5c:9d:c3:c6:d0:7f:8a:b7:e7:bf:e1:22:38:55:14: d5:2b:31:4b:8c:42:a8:aa:4f:ca:99:f8:e9:a3:b0: 36:8f:29:07:a7:55:65:b9:a4:50:fe:88:1f:3f:97: 2a:56:64:4a:18:9b:4f:43:13:eb:61:1c:47:d5:58: 6c:45:a8:f8:1d:0c:fb:02:23:96:88:d9:6b:be:4e: 53:d3:a2:7b:95:55:78:39:5f:de:f5:7c:55:8f:a2: 71:4d:be:e1:e0:a8:d6:1d:6f:76:e1:99:ff:3c:2b: fd:f5:9a:9f:a3:07:90:45:c1:89:40:4f:0b:7d:7f: fd:85:ec:11:e2:4d:bc:ba:05:06:e9:1d:51:ca:65: 1d:29:7b:f4:40:6f:af:3e:02:77:6e:21:10:09:79: 65:d3:e3:c8:a0:b6:dc:5c:aa:c0:2c:33:7c:3d:05: f9:52:22:f3:0d:22:c1:f8:33:eb:0b:a2:fd:ad:46: 0f:de:5f:ad:a3:4f:16:7c:5e:9c:4e:82:14:e3:6b: 7c:bf:49:8d:8e:b7:fa:35:58:f4:5f:ee:5a:04:20: 35:8d:0a:25:3d:6c:16:ea:67:ef:a1:92:eb:57:65: dd:da:5a:4c:36:96:71:72:07:86:38:19:ac:b2:7c: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:57:C0:83:F8:C4:C2:23:02:76:4A:A2:1C:B1:C5:DA:89:0F:94 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:93:66:22:83:48:5a:25:29:d2:8a:d9:93:bd:a9:ab:96:67: aa:ed:da:c8:4d:07:7f:ca:3a:3a:57:a4:85:26:55:81:f4:a0: 74:bf:d1:e0:ae:5f:38:77:de:42:f2:fa:74:ef:fe:d7:c1:80: 0d:14:f1:5f:2b:39:1f:97:f6:23:ae:97:33:63:f1:3d:a3:dc: 07:10:a6:8f:9c:f9:b9:f6:e2:24:63:9a:9f:de:99:b3:ec:5d: 8c:95:9f:fc:e7:8d:ef:0d:08:fc:ed:b8:b3:ce:4b:6b:e1:a8: 50:61:f9:fe:f4:2f:b2:84:aa:44:6b:d4:d6:cc:fd:f3:9b:34: 17:9a:b2:5d:2f:88:33:f2:ac:ed:ef:0c:b5:6a:85:2d:4e:cf: e9:89:58:50:cd:c1:bd:40:c7:31:91:77:47:b2:8b:ea:9e:77: 8d:26:67:ce:3f:cb:7d:8b:5e:f4:21:6d:f5:48:95:e9:d2:88: 7b:3e:a7:b3:bd:bc:3a:1c:03:95:65:b6:b2:2d:0a:81:36:0f: 4b:a7:a9:eb:bb:be:fe:b2:e8:5c:57:13:ce:01:4f:aa:be:46: 82:42:89:a6:fe:cd:15:62:7d:e5:a7:ec:88:6a:8b:6f:fb:c5: e0:ba:96:2a:f3:58:99:03:51:bf:3b:6b:ce:84:79:3b:21:70: e8:41:45:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAOUx5+zaHZ+DK3NITLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjUxMjA2MTcwMDU2WhcNMjUxMjA3MTcwMDU2WjAzMTEwLwYDVQQD EyhjNzIyNTdjMDgzZjhjNGMyMjMwMjc2NGFhMjFjYjFjNWRhODkwZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmQYMwFVlbhm2DAJ+wZcncPG0H+K t+e/4SI4VRTVKzFLjEKoqk/Kmfjpo7A2jykHp1VluaRQ/ogfP5cqVmRKGJtPQxPr YRxH1VhsRaj4HQz7AiOWiNlrvk5T06J7lVV4OV/e9XxVj6JxTb7h4KjWHW924Zn/ PCv99ZqfoweQRcGJQE8LfX/9hewR4k28ugUG6R1RymUdKXv0QG+vPgJ3biEQCXll 0+PIoLbcXKrALDN8PQX5UiLzDSLB+DPrC6L9rUYP3l+to08WfF6cToIU42t8v0mN jrf6NVj0X+5aBCA1jQolPWwW6mfvoZLrV2Xd2lpMNpZxcgeGOBmssnycVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMciV8CD+MTCIwJ2SqIcscXaiQ+UMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5NmIoNI WiUp0orZk72pq5Znqu3ayE0Hf8o6OlekhSZVgfSgdL/R4K5fOHfeQvL6dO/+18GA DRTxXys5H5f2I66XM2PxPaPcBxCmj5z5ufbiJGOan96Zs+xdjJWf/OeN7w0I/O24 s85La+GoUGH5/vQvsoSqRGvU1sz985s0F5qyXS+IM/Ks7e8MtWqFLU7P6YlYUM3B vUDHMZF3R7KL6p53jSZnzj/LfYte9CFt9UiV6dKIez6ns728OhwDlWW2si0KgTYP S6ep67u+/rLoXFcTzgFPqr5GgkKJpv7NFWJ95afsiGqLb/vF4LqWKvNYmQNRvztr zoR5OyFw6EFFRg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:53 2025 by rpki-client