This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft File: wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json) Hash identifier: 8WVuK23J042ifxch2CFWSh3u+PdDTJbaOe/knF5q9mA= Subject key identifier: F3:29:56:DA:16:CB:4E:0F:17:B9:5A:9C:A8:5E:FB:19:CA:26:E9:E9 Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae Certificate serial: 019AF68A6DFE3B81E1135A0C6ADA971B4A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft Manifest number: 1894 Signing time: Sun 07 Dec 2025 02:00:58 +0000 Manifest this update: Sun 07 Dec 2025 02:00:58 +0000 Manifest next update: Mon 08 Dec 2025 02:00:58 +0000 Files and hashes: 1: n40E_mpSUbDrPRin7wGLybLjxqo.roa (hash: n8pRkvwikyBf8VB7ZruFdea9HTihfe0isjxqpvjQRDY=) 2: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: mqFAj+3MLldFfYcbdys5evNXJZHsFfyLg3Qb9XWnDtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:6d:fe:3b:81:e1:13:5a:0c:6a:da:97:1b:4a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae Validity Not Before: Dec 7 02:00:58 2025 GMT Not After : Dec 8 02:00:58 2025 GMT Subject: CN=f32956da16cb4e0f17b95a9ca85efb19ca26e9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:27:03:4b:90:bd:36:b6:0e:c3:64:ba:02: ff:fb:62:ed:00:4f:6c:e9:50:5d:85:82:4a:b1:42: 37:10:b2:b6:40:37:92:d0:7b:60:de:6f:70:da:5d: 57:2b:a1:c2:78:84:70:fa:f3:f3:e7:76:d6:e3:1d: 45:b7:e4:9b:1b:79:f2:09:71:f6:5c:5e:13:c2:2a: 87:db:c5:c8:bf:8a:59:dd:ef:98:c3:8e:53:92:c6: 69:4a:ce:30:a5:1d:6e:11:ce:ca:b0:09:0b:e7:a6: 4e:0b:86:4b:46:0f:44:17:33:ff:54:a2:3f:9e:cb: 10:12:d1:cd:89:44:39:6d:1e:01:f0:be:27:ba:46: 48:e9:d3:e7:9c:14:82:a9:d2:9b:06:0f:aa:9f:90: ef:9a:31:20:d0:f0:c2:ee:44:b4:30:4b:82:9b:e8: 09:b6:ac:fb:3b:b6:85:8f:a1:7a:f7:4d:df:d3:16: c9:48:99:12:a7:d8:02:06:0e:5a:15:ba:53:5a:ab: 7e:0a:52:52:24:ba:28:f7:ee:b5:83:25:63:a6:b9: bc:11:59:97:7e:63:e5:07:70:45:25:34:27:8a:81: 68:f4:c7:ff:e0:b1:b5:35:7c:95:55:47:fe:90:21: 0b:43:09:8a:a8:3b:0a:7b:01:ee:ab:c9:0f:46:96: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:29:56:DA:16:CB:4E:0F:17:B9:5A:9C:A8:5E:FB:19:CA:26:E9:E9 X509v3 Authority Key Identifier: keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b6:b6:e7:46:c0:70:64:a6:e4:fd:ab:63:6f:e0:b5:58:15: 89:1d:50:4b:23:95:7a:fb:50:a1:7e:e2:5f:ce:73:9e:f3:86: d8:6c:d4:ec:6b:6c:d2:1f:76:38:f6:10:70:3e:55:68:f9:34: 1b:40:e8:01:d4:9e:e5:2d:16:db:89:cf:46:ea:f0:96:d4:04: a8:bb:3f:bf:84:cc:a5:64:f6:2b:0a:4e:1d:ae:c9:de:f5:7e: 72:df:06:ad:88:c8:73:ec:93:ff:6e:e0:fb:d3:ef:c5:7c:1b: ec:00:e1:e9:29:04:3b:67:27:ce:05:13:a5:1e:77:42:c4:3d: 94:27:e4:91:14:7b:ed:82:4d:e8:6a:27:d3:7c:95:54:44:75: b1:e6:b4:d0:83:8e:63:3d:28:b2:66:e6:2a:31:32:88:ad:7b: 49:47:7b:61:b0:3a:b9:90:e6:87:74:c9:36:fe:34:1a:fc:6c: 63:89:d2:76:33:9d:56:df:75:94:fa:39:a1:bc:0a:c4:ac:60: 69:ed:6c:79:2c:0c:31:9f:ed:42:8a:0f:52:d6:7a:2d:d7:5a: 5b:f7:db:21:fc:92:55:4c:96:be:43:bf:36:7b:cb:02:66:70: 4e:e1:ad:80:02:85:a8:82:ea:35:c4:b5:e5:95:b3:e8:19:a2: d1:47:37:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2im3+O4HhE1oMatqXG0ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3 MmMyYWUwHhcNMjUxMjA3MDIwMDU4WhcNMjUxMjA4MDIwMDU4WjAzMTEwLwYDVQQD EyhmMzI5NTZkYTE2Y2I0ZTBmMTdiOTVhOWNhODVlZmIxOWNhMjZlOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0wnA0uQvTa2DsNkugL/+2LtAE9s 6VBdhYJKsUI3ELK2QDeS0Htg3m9w2l1XK6HCeIRw+vPz53bW4x1Ft+SbG3nyCXH2 XF4TwiqH28XIv4pZ3e+Yw45TksZpSs4wpR1uEc7KsAkL56ZOC4ZLRg9EFzP/VKI/ nssQEtHNiUQ5bR4B8L4nukZI6dPnnBSCqdKbBg+qn5DvmjEg0PDC7kS0MEuCm+gJ tqz7O7aFj6F6903f0xbJSJkSp9gCBg5aFbpTWqt+ClJSJLoo9+61gyVjprm8EVmX fmPlB3BFJTQnioFo9Mf/4LG1NXyVVUf+kCELQwmKqDsKewHuq8kPRpatiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMpVtoWy04PF7lanKhe+xnKJunpMB8GA1UdIwQY MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt Zjk4ZGE1NGFmNDM0LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0 LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOra250bA cGSm5P2rY2/gtVgViR1QSyOVevtQoX7iX85znvOG2GzU7Gts0h92OPYQcD5VaPk0 G0DoAdSe5S0W24nPRurwltQEqLs/v4TMpWT2KwpOHa7J3vV+ct8GrYjIc+yT/27g +9PvxXwb7ADh6SkEO2cnzgUTpR53QsQ9lCfkkRR77YJN6Gon03yVVER1sea00IOO Yz0osmbmKjEyiK17SUd7YbA6uZDmh3TJNv40GvxsY4nSdjOdVt91lPo5obwKxKxg ae1seSwMMZ/tQooPUtZ6LddaW/fbIfySVUyWvkO/NnvLAmZwTuGtgAKFqILqNcS1 5ZWz6Bmi0Uc3cA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:30:01 2025 by rpki-client