This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json) Hash identifier: j+TCKMxEtk+FhUpSUsXjVJm5+sQeubmx519XP8vjpdc= Subject key identifier: B5:13:92:AA:62:52:70:A1:9C:0A:28:D0:86:55:0C:8E:0E:54:95:94 Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157 Certificate serial: 019AF276EAB166619F9907310F7D1542DB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: ZIVPkOWigblvloneBwNAWpJ9zScARSprJAlPwhquAik=) 2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ea:b1:66:61:9f:99:07:31:0f:7d:15:42:db:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=b51392aa625270a19c0a28d086550c8e0e549594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:99:ec:9c:6d:5e:06:b5:b0:4f:77:61:e9: 8f:c0:04:49:0b:0f:33:97:53:78:37:cd:17:eb:11: 94:43:2b:67:ac:9c:38:89:00:51:a0:0d:85:ea:bf: f0:83:48:27:2c:5b:9f:79:48:0a:c7:d3:77:9f:3b: ff:8a:d6:13:0c:96:5b:79:f0:8e:c8:9c:0c:9d:a2: 2c:81:36:8a:03:04:0a:f8:1b:48:d1:4a:eb:28:8c: 6c:db:31:a8:09:3c:9a:6e:39:c2:5c:b7:a3:81:c2: e1:15:06:b3:f2:1d:af:c4:25:63:17:2e:d4:a7:4f: 13:f1:44:fb:6f:ca:8a:61:d1:42:e8:57:bf:79:2d: 6b:72:bb:9b:c8:79:6b:92:62:73:ba:8a:d9:f8:34: 52:12:0a:61:c4:1c:06:67:3e:36:32:d2:8d:37:07: 6c:17:db:56:3b:3d:49:1e:76:e0:89:1b:48:fb:5f: c5:ca:71:59:aa:ef:dd:46:13:c3:f3:1e:4d:6b:31: 99:b6:54:78:ef:8f:f2:77:19:9b:86:c5:25:f9:10: fd:39:55:1f:e3:ee:3a:74:e8:3a:fa:bc:9c:61:40: 84:3a:ec:06:3a:b5:87:31:73:a4:47:59:28:f4:ed: b8:ef:51:7f:5e:02:36:4a:dd:d1:43:56:a8:ae:df: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:13:92:AA:62:52:70:A1:9C:0A:28:D0:86:55:0C:8E:0E:54:95:94 X509v3 Authority Key Identifier: keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:08:dd:e5:8b:76:54:19:4e:b8:a1:4f:29:a2:07:55:7c:73: 72:af:06:63:0c:fc:d4:e0:e9:76:0d:6a:44:27:9b:7a:a0:31: a5:d2:73:53:39:cd:20:cc:78:4e:38:e5:00:ed:47:9f:b4:7a: d8:04:4f:cc:9e:e7:47:76:7e:0e:a9:42:72:55:b6:20:f3:db: 41:76:e1:9c:71:1b:fd:3a:39:04:f5:96:f9:a5:93:f6:2a:a1: c9:ee:95:fb:d7:94:4e:90:b8:24:49:4a:d4:1a:ec:0d:13:54: 2d:a0:45:4b:c8:ea:be:e0:f9:31:6a:ac:8b:22:3a:ca:13:b8: e6:f1:01:45:1e:b4:e4:f3:ca:c3:58:a8:2f:09:3b:db:fe:90: f8:cc:61:21:81:ae:26:6e:ef:63:06:8c:16:68:db:8e:fd:4e: fc:78:97:4b:43:fa:22:01:e2:f8:05:1f:4f:6b:a3:a3:ce:30: d6:65:cc:28:e9:bf:2d:e6:a9:0c:e6:29:d5:8e:80:95:bf:fb: 0d:7d:f7:6b:79:34:f2:06:cf:2f:f1:2c:97:83:33:12:53:bc: ac:9f:8e:f7:90:a8:a0:9f:6c:16:d4:69:fd:ae:e6:bf:64:70: 78:71:ac:83:90:ce:b0:58:c6:2c:c4:69:4b:05:e9:eb:e3:e6: 6f:53:f2:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduqxZmGfmQcxD30VQtsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx MGUxNTcwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EyhiNTEzOTJhYTYyNTI3MGExOWMwYTI4ZDA4NjU1MGM4ZTBlNTQ5NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEuZ7JxtXga1sE93YemPwARJCw8z l1N4N80X6xGUQytnrJw4iQBRoA2F6r/wg0gnLFufeUgKx9N3nzv/itYTDJZbefCO yJwMnaIsgTaKAwQK+BtI0UrrKIxs2zGoCTyabjnCXLejgcLhFQaz8h2vxCVjFy7U p08T8UT7b8qKYdFC6Fe/eS1rcrubyHlrkmJzuorZ+DRSEgphxBwGZz42MtKNNwds F9tWOz1JHnbgiRtI+1/FynFZqu/dRhPD8x5NazGZtlR474/ydxmbhsUl+RD9OVUf 4+46dOg6+rycYUCEOuwGOrWHMXOkR1ko9O2471F/XgI2St3RQ1aort/0PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUTkqpiUnChnAoo0IZVDI4OVJWUMB8GA1UdIwQY MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Qjd5Yt2 VBlOuKFPKaIHVXxzcq8GYwz81ODpdg1qRCebeqAxpdJzUznNIMx4TjjlAO1Hn7R6 2ARPzJ7nR3Z+DqlCclW2IPPbQXbhnHEb/To5BPWW+aWT9iqhye6V+9eUTpC4JElK 1BrsDRNULaBFS8jqvuD5MWqsiyI6yhO45vEBRR605PPKw1ioLwk72/6Q+MxhIYGu Jm7vYwaMFmjbjv1O/HiXS0P6IgHi+AUfT2ujo84w1mXMKOm/LeapDOYp1Y6Alb/7 DX33a3k08gbPL/Esl4MzElO8rJ+O95CooJ9sFtRp/a7mv2RweHGsg5DOsFjGLMRp SwXp6+Pmb1Pybg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:21 2025 by rpki-client