This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json) Hash identifier: 2vuheSwiH3lkbFD1CcGupcQRi/jkiKEjZy+LWNbaL58= Subject key identifier: D3:84:A2:2B:F5:DD:B3:A5:A1:75:E7:AB:02:D0:50:81:C4:85:B5:A7 Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56 Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456 Certificate serial: 019AF878C8B3A8887A383E9D7F5EFEA17A7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft Manifest number: 026A Signing time: Sun 07 Dec 2025 11:00:56 +0000 Manifest this update: Sun 07 Dec 2025 11:00:56 +0000 Manifest next update: Mon 08 Dec 2025 11:00:56 +0000 Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=) 2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: feXqPRawzajWprsQvl19VWjx3Fif4pwHCVs2DWxw7V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:78:c8:b3:a8:88:7a:38:3e:9d:7f:5e:fe:a1:7a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456 Validity Not Before: Dec 7 11:00:56 2025 GMT Not After : Dec 8 11:00:56 2025 GMT Subject: CN=d384a22bf5ddb3a5a175e7ab02d05081c485b5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:67:a5:92:3f:03:e1:39:f6:69:91:67:aa: 8c:7a:01:6d:be:1c:af:50:34:16:a0:cd:a0:d4:34: 01:ae:fe:77:9a:c7:0e:12:9e:7a:a4:f2:54:7b:ad: 48:3c:01:d0:d2:3d:94:c1:9c:d8:08:af:b5:84:24: d1:70:94:ed:04:11:f8:0b:af:bd:27:07:a2:5d:e8: 04:72:35:eb:1d:a7:95:a0:60:aa:21:54:ad:e7:78: 0f:94:9e:74:74:85:58:d6:2f:ce:b3:6c:88:fe:66: 48:ef:9a:6e:b7:06:f6:ae:08:af:00:47:e3:fe:04: 3e:f7:96:3b:1c:99:45:b7:11:c4:f5:e1:35:a3:5f: 0a:85:e0:1f:93:a9:35:52:c5:8b:0f:9b:4d:9e:92: dc:0a:8c:1e:ef:e5:8e:05:8e:00:a7:30:01:b5:b5: 3b:35:79:ba:45:36:8c:b9:8d:12:17:9f:a9:0e:b4: 83:73:8f:df:44:e5:05:fe:e2:5c:ba:df:f8:e0:8e: 9b:a2:d1:c7:2f:6c:0b:e3:bd:10:c3:7f:c5:ae:7a: 57:33:68:01:55:15:30:72:c5:46:be:e2:91:76:48: c4:f3:e0:18:e7:28:6d:0b:bb:ef:6b:1e:36:d0:3d: 5e:3a:05:40:98:d9:6e:c6:71:63:5a:b1:1c:9a:0f: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:A2:2B:F5:DD:B3:A5:A1:75:E7:AB:02:D0:50:81:C4:85:B5:A7 X509v3 Authority Key Identifier: keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c5:54:42:91:81:5f:fe:b6:0b:84:69:2a:27:dc:ad:f0:a4: 02:b0:16:e3:f6:fc:f0:2c:cf:c5:77:10:cb:fd:db:12:1b:a8: ff:34:d4:14:83:70:05:7c:de:65:fe:55:7c:bd:72:e1:82:a1: 46:91:2b:43:2e:69:54:8f:8b:02:b3:8f:0f:81:3e:b8:a3:6e: 85:7e:e1:55:b0:31:40:a5:13:cb:66:f1:0e:1c:18:1f:5c:60: 1b:b5:6e:fe:a0:79:ec:89:48:66:b6:f9:3b:ed:35:e7:b3:ec: f8:b4:14:5b:e3:0e:0c:62:fd:9d:89:11:5e:c9:27:ec:db:32: 18:f4:9c:7e:63:35:92:14:1d:6c:5f:4b:db:9d:2e:1b:f8:f0: 70:87:79:04:60:b3:10:98:f2:07:dc:5e:29:08:66:51:c3:34: 75:45:6b:62:fd:f6:b5:5d:02:55:e2:a8:ca:d1:6c:d1:13:70: 39:b2:70:2d:54:49:ea:aa:ed:1b:ca:03:b8:fd:82:b8:c1:a1: d4:ab:02:61:46:0f:59:bd:5e:25:45:5e:af:a6:96:7c:9e:3c: e1:e1:82:3f:52:4a:17:d7:69:9f:fa:ba:95:29:81:f0:9f:b8: 39:8b:7d:34:2d:4c:84:8d:6d:00:87:cf:63:f2:c2:c1:aa:ee: cd:5a:2d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eMizqIh6OD6df17+oXp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDg5ZGMxODllMDA5MzYxYWNiMjY1NTY4MGU2NjljMGJj NDc0NTYwHhcNMjUxMjA3MTEwMDU2WhcNMjUxMjA4MTEwMDU2WjAzMTEwLwYDVQQD EyhkMzg0YTIyYmY1ZGRiM2E1YTE3NWU3YWIwMmQwNTA4MWM0ODViNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qFnpZI/A+E59mmRZ6qMegFtvhyv UDQWoM2g1DQBrv53mscOEp56pPJUe61IPAHQ0j2UwZzYCK+1hCTRcJTtBBH4C6+9 JweiXegEcjXrHaeVoGCqIVSt53gPlJ50dIVY1i/Os2yI/mZI75putwb2rgivAEfj /gQ+95Y7HJlFtxHE9eE1o18KheAfk6k1UsWLD5tNnpLcCowe7+WOBY4ApzABtbU7 NXm6RTaMuY0SF5+pDrSDc4/fROUF/uJcut/44I6botHHL2wL470Qw3/FrnpXM2gB VRUwcsVGvuKRdkjE8+AY5yhtC7vvax420D1eOgVAmNluxnFjWrEcmg9DhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOEoiv13bOloXXnqwLQUIHEhbWnMB8GA1UdIwQY MBaAFFjYncGJ4Ak2GssmVWgOZpwLxHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGIt OWRmZjViZDU0ODhhLzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGItOWRmZjViZDU0ODhh LzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccVUQpGB X/62C4RpKifcrfCkArAW4/b88CzPxXcQy/3bEhuo/zTUFINwBXzeZf5VfL1y4YKh RpErQy5pVI+LArOPD4E+uKNuhX7hVbAxQKUTy2bxDhwYH1xgG7Vu/qB57IlIZrb5 O+0157Ps+LQUW+MODGL9nYkRXskn7NsyGPScfmM1khQdbF9L250uG/jwcId5BGCz EJjyB9xeKQhmUcM0dUVrYv32tV0CVeKoytFs0RNwObJwLVRJ6qrtG8oDuP2CuMGh 1KsCYUYPWb1eJUVer6aWfJ484eGCP1JKF9dpn/q6lSmB8J+4OYt9NC1MhI1tAIfP Y/LCwaruzVotIg== -----END CERTIFICATE-----Generated at Sun Dec 7 16:37:49 2025 by rpki-client