This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json) Hash identifier: Z5SsbbC5UYOSTlrldUjpHo8ppDULOVGtfZu0LrU8k9g= Subject key identifier: C9:2C:70:78:3A:65:CB:4D:02:65:E1:1F:BB:AA:AE:0A:F1:5D:C4:8B Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75 Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875 Certificate serial: 019AF3C097666C622EE63AA326718ADF16ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft Manifest number: 14B2 Signing time: Sat 06 Dec 2025 13:01:16 +0000 Manifest this update: Sat 06 Dec 2025 13:01:16 +0000 Manifest next update: Sun 07 Dec 2025 13:01:16 +0000 Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: mwYXBmFdnDQkWbBeUEcC2IA51ODBj2PvIAF77p+wQlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:97:66:6c:62:2e:e6:3a:a3:26:71:8a:df:16:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875 Validity Not Before: Dec 6 13:01:16 2025 GMT Not After : Dec 7 13:01:16 2025 GMT Subject: CN=c92c70783a65cb4d0265e11fbbaaae0af15dc48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:6e:96:42:42:5a:02:9b:d3:21:03:43:85: 79:dd:d2:e9:1a:7f:4f:23:d1:57:2e:50:76:d9:32: 7f:ab:f6:53:66:3f:78:8b:fe:a7:30:29:16:8d:8a: fc:9f:ea:79:41:f4:13:f9:d5:be:84:d6:29:85:c8: 6a:36:9a:b5:b7:15:32:9e:0f:55:8e:23:32:0f:78: 34:07:58:d2:66:db:e0:da:14:ca:a7:c6:80:bc:92: 52:92:e6:94:a8:18:b9:96:45:0c:f0:fa:f7:f1:40: c3:c1:ec:13:56:11:95:71:18:0a:0f:c3:1c:e0:fc: 45:90:c5:e2:ad:75:90:8d:f3:f6:22:77:b6:a7:d3: 8b:0a:99:37:ea:b2:ff:60:6f:dc:9a:46:ec:49:3c: 6d:55:32:9d:22:d6:9a:8f:51:29:7b:2f:b7:8c:ef: e0:82:e4:7e:43:db:b9:f4:2e:57:ae:46:80:02:d1: 0d:8c:90:14:10:5c:33:30:9d:b8:cc:32:b5:39:f4: b9:11:73:71:ff:2f:0f:ee:e6:3d:ac:46:9f:f3:a6: 31:e9:99:3a:21:10:76:51:8c:6c:70:a6:fb:63:83: 34:07:9f:40:cf:cd:a6:e7:02:d3:98:48:aa:b1:d5: 20:56:ea:f1:de:21:c3:0b:01:8a:f9:14:92:54:81: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2C:70:78:3A:65:CB:4D:02:65:E1:1F:BB:AA:AE:0A:F1:5D:C4:8B X509v3 Authority Key Identifier: keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e4:08:52:03:83:15:4f:f5:30:93:e1:4f:9c:93:8b:51:2d: e2:16:0d:2c:6d:2b:b6:e8:f9:64:95:1a:ea:13:5c:85:3e:e0: d2:bf:e2:c0:20:8e:9d:f8:21:b8:91:ce:77:07:85:61:0b:fa: 4b:29:96:0e:12:7a:89:2e:81:2a:1a:b9:a7:5d:02:7f:36:7d: d1:07:d7:fe:6a:52:db:7e:18:c1:e3:c3:0d:0d:d9:5b:c7:f1: bd:6c:cd:b4:53:fc:d4:d2:fa:a1:aa:0b:9e:8e:b4:04:af:a7: 2f:74:03:54:ae:a7:e1:cd:52:12:8d:8a:93:06:de:80:e3:a2: dc:e6:5c:52:43:83:b5:5b:8e:ce:d5:1c:5f:79:46:2d:4d:79: 77:ad:09:60:3f:0e:4c:90:fc:92:26:14:eb:8a:cb:1f:1a:23: 90:45:a2:23:21:34:e5:d7:53:39:03:c5:07:db:9f:7f:f1:13: b6:d5:ad:0e:e3:45:24:33:3c:c2:28:e0:0f:58:35:23:f5:16: c3:78:cb:27:4d:8f:f7:0f:e5:f4:8a:53:bf:d4:fc:87:60:0e: d7:1c:33:2c:38:65:cf:c0:bc:2c:4c:e1:d7:38:69:5a:a5:c6: 22:ba:4b:50:c9:df:43:43:48:de:f9:37:4f:5e:fd:e0:82:a7: 5c:de:7c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJdmbGIu5jqjJnGK3xbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWUzOThmOWFhZGQwNjM4YmZmZWEyNGMxYzc5ZWI4ODMy Zjc4NzUwHhcNMjUxMjA2MTMwMTE2WhcNMjUxMjA3MTMwMTE2WjAzMTEwLwYDVQQD EyhjOTJjNzA3ODNhNjVjYjRkMDI2NWUxMWZiYmFhYWUwYWYxNWRjNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoctulkJCWgKb0yEDQ4V53dLpGn9P I9FXLlB22TJ/q/ZTZj94i/6nMCkWjYr8n+p5QfQT+dW+hNYphchqNpq1txUyng9V jiMyD3g0B1jSZtvg2hTKp8aAvJJSkuaUqBi5lkUM8Pr38UDDwewTVhGVcRgKD8Mc 4PxFkMXirXWQjfP2Ine2p9OLCpk36rL/YG/cmkbsSTxtVTKdItaaj1Epey+3jO/g guR+Q9u59C5XrkaAAtENjJAUEFwzMJ24zDK1OfS5EXNx/y8P7uY9rEaf86Yx6Zk6 IRB2UYxscKb7Y4M0B59Az82m5wLTmEiqsdUgVurx3iHDCwGK+RSSVIGrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkscHg6ZctNAmXhH7uqrgrxXcSLMB8GA1UdIwQY MBaAFMGuOY+ardBji//qJMHHnriDL3h1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzct OWQ1ZTYzNGFhZjlmLzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzctOWQ1ZTYzNGFhZjlm LzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOQIUgOD FU/1MJPhT5yTi1Et4hYNLG0rtuj5ZJUa6hNchT7g0r/iwCCOnfghuJHOdweFYQv6 SymWDhJ6iS6BKhq5p10CfzZ90QfX/mpS234YwePDDQ3ZW8fxvWzNtFP81NL6oaoL no60BK+nL3QDVK6n4c1SEo2KkwbegOOi3OZcUkODtVuOztUcX3lGLU15d60JYD8O TJD8kiYU64rLHxojkEWiIyE05ddTOQPFB9uff/ETttWtDuNFJDM8wijgD1g1I/UW w3jLJ02P9w/l9IpTv9T8h2AO1xwzLDhlz8C8LEzh1zhpWqXGIrpLUMnfQ0NI3vk3 T1794IKnXN58PA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:31 2025 by rpki-client