This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json) Hash identifier: 2eCHSOz6w5RYmK+BxtNAAyvQ5wyYFcB+RW7orbJyNg4= Subject key identifier: 8A:2C:45:B2:23:3D:BE:40:F0:C4:D3:40:DF:0F:B7:D3:0C:8A:68:A3 Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e Certificate serial: 019AF31CBFD4E3F38E51F2DA0052B8369A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft Manifest number: 0FD9 Signing time: Sat 06 Dec 2025 10:02:18 +0000 Manifest this update: Sat 06 Dec 2025 10:02:18 +0000 Manifest next update: Sun 07 Dec 2025 10:02:18 +0000 Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=) 2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: F711Tcugtzh0SIxdW5V0RmaJGlV9ZbC7hayxnW+Wbow=) 3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bf:d4:e3:f3:8e:51:f2:da:00:52:b8:36:9a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e Validity Not Before: Dec 6 10:02:18 2025 GMT Not After : Dec 7 10:02:18 2025 GMT Subject: CN=8a2c45b2233dbe40f0c4d340df0fb7d30c8a68a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:ac:7d:c5:31:fa:4b:5c:d4:b0:18:8b:13: 50:7a:15:87:50:ec:0f:87:2c:11:c6:bd:55:73:b6: 73:17:b0:5b:42:7a:ad:44:61:e8:f6:7b:1b:d6:4f: e3:80:a6:05:81:42:e7:04:07:2e:ec:51:82:e0:05: 1e:8d:9c:8e:68:b9:a8:6d:91:32:12:a0:35:1c:cb: 7a:e8:51:5d:0c:f2:bd:81:c7:b6:79:50:6d:b2:8f: ca:25:c6:e0:0a:1b:37:f2:d3:3a:41:83:41:85:d0: e8:34:95:13:8f:62:3c:f2:fc:24:c7:97:88:49:c5: 24:34:69:16:3e:70:39:d4:fc:e4:0c:af:0b:7c:10: 2c:af:f5:48:c1:c7:85:32:b8:a3:51:53:87:36:2f: 8d:63:f9:10:6f:49:0f:9a:dd:37:a1:65:b6:31:bc: 99:30:08:b6:74:ac:ae:b8:3a:4e:68:94:35:e9:2c: 8f:c6:e2:da:17:b1:df:1b:51:c0:87:ee:50:6a:60: 2d:cb:65:3e:05:78:41:84:60:48:5b:39:d0:76:86: 0f:a9:ec:c0:89:6a:c1:38:56:f3:18:ad:bb:4f:ed: c7:ac:53:2a:12:65:a8:ec:94:cc:ff:85:b6:5d:5c: ca:5d:8c:d1:1b:0c:84:9d:ed:83:80:3a:64:49:24: eb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2C:45:B2:23:3D:BE:40:F0:C4:D3:40:DF:0F:B7:D3:0C:8A:68:A3 X509v3 Authority Key Identifier: keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:0d:9f:78:72:b5:76:23:3b:cc:dd:28:fe:92:9d:3c:2e:c6: 14:e6:da:13:4c:8d:22:fb:fb:b1:f5:1a:8f:7a:07:c0:c4:71: 79:70:4e:e8:27:dd:f2:db:d8:56:6e:fd:f1:0c:08:4d:7a:9b: c9:0f:3c:78:55:d6:fd:dc:1e:5f:41:58:8d:c8:2c:78:36:6e: 36:fb:5f:ea:ef:61:b4:81:34:06:e2:a9:f9:38:a7:62:59:5b: f3:c3:27:c8:6d:7e:10:95:bf:aa:01:23:29:7a:d8:67:91:92: 76:0e:66:ef:b8:8b:53:b6:8c:2d:4f:48:2e:14:4c:c4:1e:86: 71:f1:a1:3b:38:04:c4:be:48:94:09:ff:0c:f0:8c:42:22:b9: 97:d0:f5:3b:f1:d3:93:b2:18:22:28:93:8a:a0:a1:1a:d1:f8: cb:fc:a1:de:18:cf:ae:47:90:86:49:f7:02:fc:79:8f:fc:69: 6b:74:9b:cd:27:11:a1:93:c3:2c:ec:48:f1:d9:d7:8c:66:ad: 7d:1d:31:6b:67:32:dd:be:d7:7c:95:e7:02:dd:e8:1c:c7:62: c6:b8:42:17:02:a7:09:9b:7d:04:6d:3e:de:1a:14:18:d7:a6: 74:2a:c3:92:98:80:c7:9c:a8:94:dd:84:0a:11:ec:a9:13:e7: ef:1f:8c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHL/U4/OOUfLaAFK4NppeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1 MWMyN2UwHhcNMjUxMjA2MTAwMjE4WhcNMjUxMjA3MTAwMjE4WjAzMTEwLwYDVQQD Eyg4YTJjNDViMjIzM2RiZTQwZjBjNGQzNDBkZjBmYjdkMzBjOGE2OGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlisfcUx+ktc1LAYixNQehWHUOwP hywRxr1Vc7ZzF7BbQnqtRGHo9nsb1k/jgKYFgULnBAcu7FGC4AUejZyOaLmobZEy EqA1HMt66FFdDPK9gce2eVBtso/KJcbgChs38tM6QYNBhdDoNJUTj2I88vwkx5eI ScUkNGkWPnA51PzkDK8LfBAsr/VIwceFMrijUVOHNi+NY/kQb0kPmt03oWW2MbyZ MAi2dKyuuDpOaJQ16SyPxuLaF7HfG1HAh+5QamAty2U+BXhBhGBIWznQdoYPqezA iWrBOFbzGK27T+3HrFMqEmWo7JTM/4W2XVzKXYzRGwyEne2DgDpkSSTrRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIosRbIjPb5A8MTTQN8Pt9MMimijMB8GA1UdIwQY MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt Yjc1NzhiMTBiYTdlLzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmA2feHK1 diM7zN0o/pKdPC7GFObaE0yNIvv7sfUaj3oHwMRxeXBO6Cfd8tvYVm798QwITXqb yQ88eFXW/dweX0FYjcgseDZuNvtf6u9htIE0BuKp+TinYllb88MnyG1+EJW/qgEj KXrYZ5GSdg5m77iLU7aMLU9ILhRMxB6GcfGhOzgExL5IlAn/DPCMQiK5l9D1O/HT k7IYIiiTiqChGtH4y/yh3hjPrkeQhkn3Avx5j/xpa3SbzScRoZPDLOxI8dnXjGat fR0xa2cy3b7XfJXnAt3oHMdixrhCFwKnCZt9BG0+3hoUGNemdCrDkpiAx5yolN2E ChHsqRPn7x+Mdw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:13 2025 by rpki-client