This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json) Hash identifier: MVDBkkTaIgN/IGJLTqbpE4cPYzLtCgDa711MRUg+tNY= Subject key identifier: 0E:1A:4E:AF:AF:E6:E4:4B:7A:55:EA:AA:C3:BE:0A:DC:F2:16:2E:83 Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Certificate serial: 019AF31B1A8DA1607B9EB5CBD06BF9326D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft Manifest number: 11C0 Signing time: Sat 06 Dec 2025 10:00:30 +0000 Manifest this update: Sat 06 Dec 2025 10:00:30 +0000 Manifest next update: Sun 07 Dec 2025 10:00:30 +0000 Files and hashes: 1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=) 2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: XXpLHjl5AYY4xSh7R2dLhgjuYmq/Gbho6muYz5/y3lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1a:8d:a1:60:7b:9e:b5:cb:d0:6b:f9:32:6d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Validity Not Before: Dec 6 10:00:30 2025 GMT Not After : Dec 7 10:00:30 2025 GMT Subject: CN=0e1a4eafafe6e44b7a55eaaac3be0adcf2162e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:ff:95:24:c3:cd:7d:45:9c:87:c2:a4:c3: d8:48:16:7c:15:59:d5:68:dc:fa:92:cf:86:2b:99: 4c:aa:bf:4f:28:e6:bf:10:e5:72:e5:fd:c5:8f:df: 1e:2c:c1:05:dd:14:14:60:ce:01:85:31:c9:d5:3b: ff:e6:24:b7:2f:ef:f6:05:d3:78:a8:51:e9:36:55: d6:f2:50:89:1b:ad:a6:30:5a:34:b6:86:e0:4f:99: b3:62:8f:e1:47:97:4e:16:98:a4:4d:e5:2c:80:11: b8:61:30:07:57:de:4a:fc:0d:dc:5d:dc:e3:17:1c: a9:89:08:17:bc:42:77:8b:47:3e:a7:3e:49:94:03: ad:95:ba:2b:52:93:6f:3b:c6:f7:a2:3a:00:9e:dc: d0:66:fe:e3:e0:73:0f:2a:a3:68:71:a1:0a:c8:81: c6:a1:97:72:5d:88:0d:51:0f:02:10:14:ab:03:24: 64:9c:ac:ec:07:23:84:02:c8:a6:7e:8f:b8:18:42: 2e:dc:0f:68:2e:2f:66:c6:2f:01:41:b6:b6:cf:cd: 05:9c:f1:14:78:45:f8:22:70:64:46:33:52:ad:eb: 2a:6d:05:c5:b6:22:dc:5f:bf:0d:9d:29:83:2b:a5: 51:14:8b:04:d5:6a:f2:69:3d:03:a0:e5:ab:40:62: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1A:4E:AF:AF:E6:E4:4B:7A:55:EA:AA:C3:BE:0A:DC:F2:16:2E:83 X509v3 Authority Key Identifier: keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ab:c7:65:cb:84:a9:a6:61:6a:cb:e5:3f:b9:a7:1f:26:93: b4:a1:95:a7:0b:92:3f:50:b5:5f:6d:51:f1:16:ff:ee:0c:83: 1c:30:1a:9e:de:d6:69:7a:8f:d1:b4:07:1a:41:5d:a0:c4:d3: 7f:2f:cc:c2:6d:be:7d:1b:87:2a:74:88:93:9b:f7:e2:5e:cc: 0f:8c:b1:6f:ce:cd:fd:82:48:c0:f8:65:d9:3a:2d:ba:c9:2e: 7b:c9:0d:6a:8c:d6:48:20:44:11:dc:60:c1:16:f2:1b:09:62: 26:cd:f9:ea:01:06:6f:f0:81:7a:31:dc:01:ce:cb:4d:5b:8d: 2b:d5:c6:7b:b4:58:c1:4d:40:98:48:aa:49:a4:b7:d2:ef:47: 9e:f4:29:c7:b2:d8:e9:b6:38:e6:44:9c:19:47:e8:c5:9a:cb: cb:55:14:8c:b7:bb:e0:9c:94:3a:61:a2:e6:25:87:b8:5a:a9: 80:f1:9d:7b:fe:1b:f2:b7:1d:cd:89:05:93:8a:13:ba:4d:21: f4:99:5a:23:20:3a:83:25:87:3b:ee:69:75:ed:c7:01:2b:cc: 94:98:f9:b9:4c:15:ac:7c:1c:65:92:0d:d5:69:1e:35:c8:38: f1:53:ea:63:94:9e:3b:49:82:6e:c5:9a:2d:98:e4:9b:e2:a9: c6:7a:e3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxqNoWB7nrXL0Gv5Mm2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5 NDY4OTQwHhcNMjUxMjA2MTAwMDMwWhcNMjUxMjA3MTAwMDMwWjAzMTEwLwYDVQQD EygwZTFhNGVhZmFmZTZlNDRiN2E1NWVhYWFjM2JlMGFkY2YyMTYyZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aH/lSTDzX1FnIfCpMPYSBZ8FVnV aNz6ks+GK5lMqr9PKOa/EOVy5f3Fj98eLMEF3RQUYM4BhTHJ1Tv/5iS3L+/2BdN4 qFHpNlXW8lCJG62mMFo0tobgT5mzYo/hR5dOFpikTeUsgBG4YTAHV95K/A3cXdzj FxypiQgXvEJ3i0c+pz5JlAOtlborUpNvO8b3ojoAntzQZv7j4HMPKqNocaEKyIHG oZdyXYgNUQ8CEBSrAyRknKzsByOEAsimfo+4GEIu3A9oLi9mxi8BQba2z80FnPEU eEX4InBkRjNSresqbQXFtiLcX78NnSmDK6VRFIsE1WryaT0DoOWrQGKrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4aTq+v5uRLelXqqsO+CtzyFi6DMB8GA1UdIwQY MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et OTNlOTE4ZDEwZWM1LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1 LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqvHZcuE qaZhasvlP7mnHyaTtKGVpwuSP1C1X21R8Rb/7gyDHDAant7WaXqP0bQHGkFdoMTT fy/Mwm2+fRuHKnSIk5v34l7MD4yxb87N/YJIwPhl2Totuskue8kNaozWSCBEEdxg wRbyGwliJs356gEGb/CBejHcAc7LTVuNK9XGe7RYwU1AmEiqSaS30u9HnvQpx7LY 6bY45kScGUfoxZrLy1UUjLe74JyUOmGi5iWHuFqpgPGde/4b8rcdzYkFk4oTuk0h 9JlaIyA6gyWHO+5pde3HASvMlJj5uUwVrHwcZZIN1WkeNcg48VPqY5SeO0mCbsWa LZjkm+Kpxnrj+A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:19 2025 by rpki-client