This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft File: WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json) Hash identifier: +rt0Im3OouxSDfgegXUe4VLlGHVVgljnkoLnaz2VlzU= Subject key identifier: 7A:A7:4F:24:9E:9B:4D:FD:2B:71:A4:B9:75:18:E8:36:6A:EB:F7:86 Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F Certificate issuer: /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f Certificate serial: 019B2DE6D3370722DA23C031CA8C974AE565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 20:01:00 +0000 Manifest this update: Wed 17 Dec 2025 20:01:00 +0000 Manifest next update: Thu 18 Dec 2025 20:01:00 +0000 Files and hashes: 1: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: jFvxWbqzbyrZkXgLZ7s0ma+OzvYmlj6qc/b8eDpowRc=) 2: sQw9W7aILGy9Pa9_58J_ycedqSY.roa (hash: 3h6rvOsq/U2tYyEzeXc8KFTE7Z25JXJxvFL7/RbG7Wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:d3:37:07:22:da:23:c0:31:ca:8c:97:4a:e5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f Validity Not Before: Dec 17 20:01:00 2025 GMT Not After : Dec 18 20:01:00 2025 GMT Subject: CN=7aa74f249e9b4dfd2b71a4b97518e8366aebf786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:fa:6b:ae:b7:59:5a:b0:be:4b:5f:4a:0a: 34:51:94:b1:37:d0:f4:a4:07:20:67:b5:1e:b5:45: 5c:68:a0:a4:cb:af:a3:d3:c0:6f:e0:6d:00:d3:20: b0:9d:cb:70:eb:c0:66:e6:a4:fb:d1:84:22:a0:02: a7:29:80:c2:65:40:db:46:55:de:d8:89:bd:c9:03: 5c:06:a4:4c:83:05:e3:af:40:01:8c:a7:5e:59:5f: 5c:8a:10:6f:e5:5a:d3:f9:86:75:a0:0e:d9:7d:16: af:57:2e:c1:82:d2:c2:40:9b:10:1e:3d:3f:07:a3: 55:0e:f0:a6:3a:f6:09:4d:59:9d:09:0b:dc:9a:a7: b0:43:94:99:d3:38:86:54:fc:6c:bc:f0:ee:25:01: 28:24:1d:eb:2c:34:c4:60:0f:78:7d:87:42:55:21: 49:ba:80:53:2e:07:b6:50:45:03:1f:1f:83:1d:5a: c8:c2:0f:92:86:0f:d9:3a:00:0f:f8:eb:91:da:60: f5:f2:47:2d:9f:be:ab:54:da:0c:95:3a:45:03:97: 10:12:b9:ce:db:f9:ef:20:42:00:00:93:5d:ea:69: 7c:cc:ec:ac:73:72:0a:c3:40:56:63:4f:44:eb:2a: d2:37:49:3b:a7:38:56:df:eb:42:40:f7:e6:25:58: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:4F:24:9E:9B:4D:FD:2B:71:A4:B9:75:18:E8:36:6A:EB:F7:86 X509v3 Authority Key Identifier: keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:22:66:c0:ec:35:36:ad:79:94:d8:8e:ae:d2:b1:ba:50:a2: 8a:5f:99:75:cf:10:6f:8c:e6:ff:a5:57:74:24:f9:c2:40:0c: ef:8b:06:e6:17:eb:c8:4f:04:c2:a2:30:79:b7:19:ce:fd:be: a7:63:52:a1:56:80:c3:84:32:11:97:a8:0a:0b:79:8f:14:e9: 3d:3b:f6:26:67:1f:77:91:79:27:10:25:0e:93:28:c8:cb:97: e0:8d:8d:5e:0a:9f:5c:a1:ad:c7:04:03:7f:93:50:2e:9d:b2: 92:11:65:0c:d0:e0:48:55:eb:7e:47:3f:7e:a1:b5:3c:56:f3: 85:44:36:2f:a0:c0:be:39:b3:98:ba:99:aa:46:fa:74:60:1c: 95:f4:c2:75:25:86:cb:52:59:20:41:19:87:6f:73:ea:15:14: 30:52:95:bd:21:30:39:d7:d4:d7:9f:ef:eb:a3:5c:81:21:f4: d7:40:f3:89:59:12:8c:11:53:ea:58:2d:28:39:90:1c:75:16: 8d:3c:22:ca:49:1e:74:c0:2e:0d:a1:42:31:92:59:a8:dc:d5: ef:c8:33:4c:f9:a7:c6:7f:3a:3b:9a:54:ad:0f:d2:cb:88:c0: 23:e8:25:5d:f4:ba:2f:62:76:5b:68:66:74:81:3f:65:6d:0d: 6c:2e:9f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5tM3ByLaI8AxyoyXSuVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGFjZDIxMTIzZjllNzVhOTJhMGU2ZDRiMjZmOWU5Yzk2 MzY3NWYwHhcNMjUxMjE3MjAwMTAwWhcNMjUxMjE4MjAwMTAwWjAzMTEwLwYDVQQD Eyg3YWE3NGYyNDllOWI0ZGZkMmI3MWE0Yjk3NTE4ZTgzNjZhZWJmNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJf6a663WVqwvktfSgo0UZSxN9D0 pAcgZ7UetUVcaKCky6+j08Bv4G0A0yCwnctw68Bm5qT70YQioAKnKYDCZUDbRlXe 2Im9yQNcBqRMgwXjr0ABjKdeWV9cihBv5VrT+YZ1oA7ZfRavVy7BgtLCQJsQHj0/ B6NVDvCmOvYJTVmdCQvcmqewQ5SZ0ziGVPxsvPDuJQEoJB3rLDTEYA94fYdCVSFJ uoBTLge2UEUDHx+DHVrIwg+Shg/ZOgAP+OuR2mD18kctn76rVNoMlTpFA5cQErnO 2/nvIEIAAJNd6ml8zOysc3IKw0BWY09E6yrSN0k7pzhW3+tCQPfmJVj2XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqnTySem039K3GkuXUY6DZq6/eGMB8GA1UdIwQY MBaAFFpKzSESP551qSoObUsm+enJY2dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQt YmNkMzMwMjgxMGUzLzEvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8zMWNiYzgtM2MyMy00YmRmLTgzYTQtYmNkMzMwMjgxMGUz LzEvV2tyTklSSV9ubldwS2c1dFN5YjU2Y2xqWjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiJmwOw1 Nq15lNiOrtKxulCiil+Zdc8Qb4zm/6VXdCT5wkAM74sG5hfryE8EwqIwebcZzv2+ p2NSoVaAw4QyEZeoCgt5jxTpPTv2Jmcfd5F5JxAlDpMoyMuX4I2NXgqfXKGtxwQD f5NQLp2ykhFlDNDgSFXrfkc/fqG1PFbzhUQ2L6DAvjmzmLqZqkb6dGAclfTCdSWG y1JZIEEZh29z6hUUMFKVvSEwOdfU15/v66NcgSH010DziVkSjBFT6lgtKDmQHHUW jTwiykkedMAuDaFCMZJZqNzV78gzTPmnxn86O5pUrQ/Sy4jAI+glXfS6L2J2W2hm dIE/ZW0NbC6faw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:22:23 2025 by rpki-client