This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json) Hash identifier: f7zaWTw7rSUcXeOxxSCztsR65WuWJrxZueQSxny9H8Y= Subject key identifier: 84:44:94:9B:27:92:9C:2B:D3:C4:40:49:69:AF:50:6A:47:5F:39:17 Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Certificate serial: 019AF5E5DAC5F5F2C7C2317D4783929AEFDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 23:01:12 +0000 Manifest this update: Sat 06 Dec 2025 23:01:12 +0000 Manifest next update: Sun 07 Dec 2025 23:01:12 +0000 Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=) 2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: RZOcbHrr6eda2TOi2VSGq+O/54CjbcA4rhwqDVpcpXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:da:c5:f5:f2:c7:c2:31:7d:47:83:92:9a:ef:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Validity Not Before: Dec 6 23:01:12 2025 GMT Not After : Dec 7 23:01:12 2025 GMT Subject: CN=8444949b27929c2bd3c4404969af506a475f3917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:cb:34:65:1c:d7:c5:05:c4:b0:07:da:3b: 17:09:79:c5:25:d7:6e:6c:07:fd:77:22:ff:a2:b8: e1:82:97:c0:ca:56:8e:41:12:4f:9f:60:34:70:92: 29:a6:9f:0a:08:2c:9a:02:02:ee:76:b6:5a:31:20: 86:32:98:b9:42:2d:3b:ba:94:3d:d6:be:c8:d5:24: b3:d6:b1:c1:3e:c3:f7:16:b4:f0:9a:24:91:02:72: 5c:ab:3c:d9:f7:bc:82:e0:e5:49:aa:b6:5c:e2:da: 0b:f5:8b:a4:53:72:9b:ee:f2:2a:e1:ab:ef:b9:13: 97:b3:eb:79:69:00:ee:8b:04:74:57:78:a3:31:e3: 60:db:19:38:d3:46:85:ac:2f:b9:65:a8:84:94:46: 8c:f6:fa:d7:27:e4:99:f9:1d:54:9d:ae:a1:21:73: c1:37:01:f8:f2:6b:0e:f5:d0:f7:6e:6d:1e:26:f8: c0:ba:6f:c7:e6:84:22:5d:6c:05:84:f0:e9:73:6e: 29:d6:1e:c7:8a:ff:e3:81:40:a4:bf:96:60:f6:0b: 9f:1c:45:54:ef:a9:30:6c:04:87:b9:b5:1d:b1:f2: e7:67:f0:3d:3a:09:dd:ab:4e:ac:fe:61:c7:f0:94: 43:86:da:e3:9b:46:e3:cd:97:3e:80:7d:8c:2c:03: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:44:94:9B:27:92:9C:2B:D3:C4:40:49:69:AF:50:6A:47:5F:39:17 X509v3 Authority Key Identifier: keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:23:99:24:28:3f:be:22:33:90:11:0a:44:7f:77:89:c9: c8:85:8e:71:54:49:c3:eb:a0:48:f0:71:ab:62:44:1e:cc:b9: 71:ba:2b:0e:62:a4:f7:87:ec:c5:c5:87:3c:08:29:63:50:d1: 66:7d:a8:24:c8:31:5c:6e:c3:4a:cd:15:60:8c:3b:8d:88:d0: 58:42:5e:9d:e8:04:c5:23:af:b3:24:24:83:a3:01:40:e2:77: 14:32:ef:75:97:18:d1:84:de:4b:13:c2:7f:a0:d1:d7:bc:62: af:86:7b:a0:02:e6:36:09:9d:cb:50:d9:54:0f:50:bc:0a:4f: 17:52:e1:d4:03:91:40:80:d3:f2:34:f7:67:e6:39:df:ba:eb: 41:76:32:51:b3:8b:07:0c:85:fd:12:d9:b9:13:ad:ff:cb:69: a4:b4:9f:a7:38:df:1f:f3:26:cb:7b:47:34:da:f2:20:cf:11: 44:0e:b4:fa:78:a3:ab:8e:d6:28:9b:ba:bf:d7:53:77:97:36: e4:81:29:13:9a:85:84:cc:eb:30:a3:d9:c4:ef:07:ef:cf:fa: 3d:c2:65:35:a8:b3:4a:c7:f3:e0:cc:9d:01:b1:ee:2f:55:9f: 69:f6:95:d0:21:47:77:9a:5b:1f:f4:5a:d6:01:13:58:c9:22: 8a:d2:48:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15drF9fLHwjF9R4OSmu/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzk2NGFhYmY0MDRkZGEzZjVlMGVjYzFjNzA2YWIzMjdj NmY5MzEwHhcNMjUxMjA2MjMwMTEyWhcNMjUxMjA3MjMwMTEyWjAzMTEwLwYDVQQD Eyg4NDQ0OTQ5YjI3OTI5YzJiZDNjNDQwNDk2OWFmNTA2YTQ3NWYzOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4/LNGUc18UFxLAH2jsXCXnFJddu bAf9dyL/orjhgpfAylaOQRJPn2A0cJIppp8KCCyaAgLudrZaMSCGMpi5Qi07upQ9 1r7I1SSz1rHBPsP3FrTwmiSRAnJcqzzZ97yC4OVJqrZc4toL9YukU3Kb7vIq4avv uROXs+t5aQDuiwR0V3ijMeNg2xk400aFrC+5ZaiElEaM9vrXJ+SZ+R1Una6hIXPB NwH48msO9dD3bm0eJvjAum/H5oQiXWwFhPDpc24p1h7Hiv/jgUCkv5Zg9gufHEVU 76kwbASHubUdsfLnZ/A9Ogndq06s/mHH8JRDhtrjm0bjzZc+gH2MLAOcDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRElJsnkpwr08RASWmvUGpHXzkXMB8GA1UdIwQY MBaAFMJ5ZKq/QE3aP14OzBxwarMnxvkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEt NWViZjJhNTRlYjZkLzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEtNWViZjJhNTRlYjZk LzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGA0jmSQo P74iM5ARCkR/d4nJyIWOcVRJw+ugSPBxq2JEHsy5cborDmKk94fsxcWHPAgpY1DR Zn2oJMgxXG7DSs0VYIw7jYjQWEJenegExSOvsyQkg6MBQOJ3FDLvdZcY0YTeSxPC f6DR17xir4Z7oALmNgmdy1DZVA9QvApPF1Lh1AORQIDT8jT3Z+Y537rrQXYyUbOL BwyF/RLZuROt/8tppLSfpzjfH/Mmy3tHNNryIM8RRA60+nijq47WKJu6v9dTd5c2 5IEpE5qFhMzrMKPZxO8H78/6PcJlNaizSsfz4MydAbHuL1WfafaV0CFHd5pbH/Ra 1gETWMkiitJIKA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:56 2025 by rpki-client