This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft File: wA7St1AmRN0DbiOS-wMyz7FNuNI.mft (raw, json) Hash identifier: Mv63afhXGSNxsLXSKhKzl5uALznFJLs/67oBUSTJzOU= Subject key identifier: 8B:5E:75:91:67:08:2D:C9:C7:D2:89:81:B2:33:14:41:B8:D5:F5:6B Authority key identifier: C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2 Certificate issuer: /CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2 Certificate serial: 019AF3C037E7BDD984401FED8FACE61DC928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 13:00:51 +0000 Manifest this update: Sat 06 Dec 2025 13:00:51 +0000 Manifest next update: Sun 07 Dec 2025 13:00:51 +0000 Files and hashes: 1: wA7St1AmRN0DbiOS-wMyz7FNuNI.crl (hash: tQlYyw2/3IitKHD4r0jI98FaEmJ44Z8FSvVllhwYuYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:37:e7:bd:d9:84:40:1f:ed:8f:ac:e6:1d:c9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2 Validity Not Before: Dec 6 13:00:51 2025 GMT Not After : Dec 7 13:00:51 2025 GMT Subject: CN=8b5e759167082dc9c7d28981b2331441b8d5f56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:07:92:d8:f5:33:f6:da:c7:c6:d3:bb:ff: e0:89:75:31:ab:4c:15:0d:83:d4:7f:8a:e9:08:70: 16:88:aa:ea:ee:6e:f7:5d:ed:e7:7e:74:5d:7d:5c: c7:28:67:07:57:49:33:ed:a8:06:ce:8c:d5:bc:43: 1f:35:4f:60:f5:be:a7:2b:b8:26:bd:e2:95:10:84: 8d:96:68:74:f2:26:19:6a:77:99:f2:cd:48:75:3c: 63:6e:ca:b2:20:f8:51:21:1f:c0:40:4a:fc:2d:2f: 4e:66:17:31:86:fc:d6:a8:84:75:ab:ef:c3:a7:b3: d4:f0:2c:c7:a8:72:92:64:ef:ef:4a:a4:3d:9e:84: db:31:6e:37:05:88:1d:ba:28:8f:cd:3d:a4:a0:c5: 83:0a:5a:cb:e3:a1:2a:e7:4b:a5:c6:4c:4c:72:97: 35:f4:a9:7b:6d:6a:61:3f:69:0f:a5:6e:3f:82:22: de:02:c5:79:da:08:79:a9:b8:ab:7b:60:d8:be:ae: 5f:61:64:36:54:03:5e:6f:d0:24:cb:f4:33:88:86: e0:c0:62:d7:9f:53:95:40:01:c4:ac:65:a0:a4:8d: 55:02:bd:09:d7:d3:1b:fc:54:72:33:c3:56:62:bd: e6:54:68:11:0f:58:d0:3a:20:53:2a:27:7c:be:27: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5E:75:91:67:08:2D:C9:C7:D2:89:81:B2:33:14:41:B8:D5:F5:6B X509v3 Authority Key Identifier: keyid:C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ad:7b:5d:ae:a1:05:9f:3c:d1:cb:4f:ce:58:3f:2b:f8:d2: 90:16:75:dc:2d:08:89:0b:3c:e1:67:8d:b6:87:66:ec:8e:65: 74:ce:62:de:8d:a3:d2:3e:ce:59:22:86:c4:62:44:54:50:17: b5:3e:12:98:f1:2e:e8:bc:75:d1:84:48:94:fb:48:a7:8f:b7: 70:0a:60:ef:9b:ac:b0:d6:b8:47:48:c8:b7:34:f7:76:42:72: b9:98:53:3e:cb:31:6e:9a:81:e7:a5:d6:dd:02:02:53:ff:46: f6:72:01:9d:5c:e7:eb:2a:65:ef:ec:9c:31:76:b6:ef:a5:e3: 50:88:e5:7b:5f:cc:85:e8:42:f2:69:c7:77:cd:1d:f6:9b:6f: 72:98:95:71:63:97:a8:2d:f2:08:a6:29:61:04:06:9e:e6:ef: 4f:0d:86:64:bc:ae:f9:91:45:f9:42:ab:f3:b8:d6:54:ad:d5: 7a:61:ed:05:c0:49:b9:a4:86:02:af:9e:60:c0:8c:33:84:d1: 8f:22:2c:1e:c4:62:26:23:23:d3:a4:d4:40:3e:ba:3a:fa:41: 4e:c8:c3:2c:20:97:c0:7e:9e:2e:ec:8f:f3:f8:09:09:c6:9c: f4:8f:5b:58:83:f2:c3:bd:63:9a:12:b5:d2:68:a2:b0:d2:48: a1:fb:46:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDfnvdmEQB/tj6zmHckoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMGVkMmI3NTAyNjQ0ZGQwMzZlMjM5MmZiMDMzMmNmYjE0 ZGI4ZDIwHhcNMjUxMjA2MTMwMDUxWhcNMjUxMjA3MTMwMDUxWjAzMTEwLwYDVQQD Eyg4YjVlNzU5MTY3MDgyZGM5YzdkMjg5ODFiMjMzMTQ0MWI4ZDVmNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbEHktj1M/bax8bTu//giXUxq0wV DYPUf4rpCHAWiKrq7m73Xe3nfnRdfVzHKGcHV0kz7agGzozVvEMfNU9g9b6nK7gm veKVEISNlmh08iYZaneZ8s1IdTxjbsqyIPhRIR/AQEr8LS9OZhcxhvzWqIR1q+/D p7PU8CzHqHKSZO/vSqQ9noTbMW43BYgduiiPzT2koMWDClrL46Eq50ulxkxMcpc1 9Kl7bWphP2kPpW4/giLeAsV52gh5qbire2DYvq5fYWQ2VANeb9Aky/QziIbgwGLX n1OVQAHErGWgpI1VAr0J19Mb/FRyM8NWYr3mVGgRD1jQOiBTKid8vicEJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItedZFnCC3Jx9KJgbIzFEG41fVrMB8GA1UdIwQY MBaAFMAO0rdQJkTdA24jkvsDMs+xTbjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAt MDllOGZhZmFmMGNjLzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAtMDllOGZhZmFmMGNj LzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoK17Xa6h BZ880ctPzlg/K/jSkBZ13C0IiQs84WeNtodm7I5ldM5i3o2j0j7OWSKGxGJEVFAX tT4SmPEu6Lx10YRIlPtIp4+3cApg75ussNa4R0jItzT3dkJyuZhTPssxbpqB56XW 3QICU/9G9nIBnVzn6ypl7+ycMXa276XjUIjle1/MhehC8mnHd80d9ptvcpiVcWOX qC3yCKYpYQQGnubvTw2GZLyu+ZFF+UKr87jWVK3VemHtBcBJuaSGAq+eYMCMM4TR jyIsHsRiJiMj06TUQD66OvpBTsjDLCCXwH6eLuyP8/gJCcac9I9bWIPyw71jmhK1 0miisNJIoftGLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:22 2025 by rpki-client