This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft File: wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json) Hash identifier: wfa/mlG+RM4nAeXeX0/U0nnpcWRYCM6b0zZLe6iErWc= Subject key identifier: E3:71:15:72:C0:41:80:81:4F:26:2B:4F:E5:7D:D7:EE:16:16:38:C0 Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7 Certificate issuer: /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7 Certificate serial: 019AF4650DDD0BD51DBF56A51ADEC879FBB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft Manifest number: 11EB Signing time: Sat 06 Dec 2025 16:00:54 +0000 Manifest this update: Sat 06 Dec 2025 16:00:54 +0000 Manifest next update: Sun 07 Dec 2025 16:00:54 +0000 Files and hashes: 1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=) 2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: XwBKYVf1FQj1ItW2N1+/IE8q6U9aNGJav32/gvJD30c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:0d:dd:0b:d5:1d:bf:56:a5:1a:de:c8:79:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7 Validity Not Before: Dec 6 16:00:54 2025 GMT Not After : Dec 7 16:00:54 2025 GMT Subject: CN=e3711572c04180814f262b4fe57dd7ee161638c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:b5:c2:59:86:5b:11:67:64:0a:24:c4:78: 3a:99:17:96:f4:c7:4e:36:42:e3:f3:ce:ef:97:61: 62:aa:85:19:fb:50:b3:ac:11:cc:2e:0e:47:e7:2f: 9d:4b:82:35:bc:76:7c:0a:bc:3e:73:7a:c1:0e:2b: c5:55:0a:3f:8f:e4:c1:84:4c:88:e6:f0:26:32:92: d7:d0:23:f6:62:b4:99:56:fc:cb:c4:76:95:73:cd: ab:30:0f:d5:ce:f2:ad:58:7c:e1:12:7a:c7:4e:a7: 8d:87:57:20:73:f4:4b:78:dd:8e:74:24:d1:bf:86: 38:8e:99:e0:ae:47:f6:3e:6e:5b:44:23:d4:a9:8f: b6:f7:10:ff:03:5f:d0:88:37:3c:27:db:e4:df:f0: 5f:89:bc:7a:8e:99:b0:e7:95:00:83:03:fa:c8:22: b1:c3:a8:f4:75:98:99:dd:7f:df:b2:91:70:1f:8e: da:4e:22:12:62:aa:3f:7c:0d:5f:dd:75:61:dd:29: 1d:7f:ea:2e:72:99:6a:88:ea:da:86:71:f3:90:20: 48:61:d2:ed:cf:e5:72:15:7a:44:8d:a2:f2:68:ac: 01:3e:7d:4b:3e:a6:47:79:8d:95:fc:40:6f:27:d9: 06:ec:f5:67:c4:e4:40:a0:bb:ba:54:77:5f:32:ce: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:71:15:72:C0:41:80:81:4F:26:2B:4F:E5:7D:D7:EE:16:16:38:C0 X509v3 Authority Key Identifier: keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:1a:c1:3c:d2:31:fc:aa:6d:5e:b8:ad:ad:47:79:e5:0e:3b: db:b8:70:bf:d6:62:f9:ae:b3:a1:84:04:b6:4f:96:c7:d4:f3: 28:ec:11:4c:92:01:98:00:ee:82:69:b1:de:5a:2c:78:e5:33: 71:f4:96:7b:61:f4:21:78:c0:d3:67:33:d6:a5:65:fc:49:bc: 7e:15:ad:f8:4a:34:ef:df:e7:cc:58:c8:af:5e:11:f4:05:f8: 1d:e7:30:4b:36:b5:68:40:a1:9e:d8:f1:9c:f9:58:d7:ad:75: bf:20:a2:8f:f4:20:e5:02:a9:5c:96:79:ef:0d:01:24:ef:3d: 0a:37:0d:1a:2d:79:d5:c4:48:c9:2e:66:ea:31:90:ed:f4:52: 60:78:a8:11:eb:1f:96:9a:f1:39:c4:27:21:7b:d9:35:68:1d: 57:4b:12:07:fc:64:15:ba:81:60:39:1d:87:13:84:b1:ed:d3: 49:f6:11:02:f9:b7:73:4f:9e:4e:9d:14:38:8e:0f:10:6e:0c: c9:c0:95:09:fc:0c:cb:fb:c1:1f:ff:ef:29:59:c4:32:ee:e7: fa:71:f5:85:db:7f:b1:7a:6c:26:31:40:ec:9b:60:9d:19:29: 42:4b:74:81:0b:79:d6:f2:99:7c:1e:5f:17:30:2b:bb:28:d1: f1:2f:4d:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQ3dC9Udv1alGt7IefuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1 YmY2YzcwHhcNMjUxMjA2MTYwMDU0WhcNMjUxMjA3MTYwMDU0WjAzMTEwLwYDVQQD EyhlMzcxMTU3MmMwNDE4MDgxNGYyNjJiNGZlNTdkZDdlZTE2MTYzOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZC1wlmGWxFnZAokxHg6mReW9MdO NkLj887vl2FiqoUZ+1CzrBHMLg5H5y+dS4I1vHZ8Crw+c3rBDivFVQo/j+TBhEyI 5vAmMpLX0CP2YrSZVvzLxHaVc82rMA/VzvKtWHzhEnrHTqeNh1cgc/RLeN2OdCTR v4Y4jpngrkf2Pm5bRCPUqY+29xD/A1/QiDc8J9vk3/Bfibx6jpmw55UAgwP6yCKx w6j0dZiZ3X/fspFwH47aTiISYqo/fA1f3XVh3Skdf+oucplqiOrahnHzkCBIYdLt z+VyFXpEjaLyaKwBPn1LPqZHeY2V/EBvJ9kG7PVnxORAoLu6VHdfMs6tiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONxFXLAQYCBTyYrT+V91+4WFjjAMB8GA1UdIwQY MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3RrBPNIx /KptXritrUd55Q4727hwv9Zi+a6zoYQEtk+Wx9TzKOwRTJIBmADugmmx3loseOUz cfSWe2H0IXjA02cz1qVl/Em8fhWt+Eo079/nzFjIr14R9AX4HecwSza1aEChntjx nPlY1611vyCij/Qg5QKpXJZ57w0BJO89CjcNGi151cRIyS5m6jGQ7fRSYHioEesf lprxOcQnIXvZNWgdV0sSB/xkFbqBYDkdhxOEse3TSfYRAvm3c0+eTp0UOI4PEG4M ycCVCfwMy/vBH//vKVnEMu7n+nH1hdt/sXpsJjFA7JtgnRkpQkt0gQt51vKZfB5f FzAruyjR8S9NiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:09 2025 by rpki-client