This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft File: wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json) Hash identifier: TIzyabX9QUPGhpikIBYJK6UskCYlxNG6Xb3nY8v9svk= Subject key identifier: F6:A5:9B:42:20:64:CB:A4:27:31:8B:2D:C1:C6:F3:4D:28:C3:96:3D Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84 Certificate issuer: /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84 Certificate serial: 019AF2765A1FEF4D66F522EB68A559B6CB3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft Manifest number: 04BA Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: gFdeoXEbH4NYc2xJCqVYJ2bijkzw5M8dVnHDnFmG2II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5a:1f:ef:4d:66:f5:22:eb:68:a5:59:b6:cb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=f6a59b422064cba427318b2dc1c6f34d28c3963d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:1b:d6:23:86:f2:e7:1e:d2:ac:ac:56:f3: 28:8b:92:de:19:b9:46:b8:8e:02:c8:bc:39:2d:a6: 53:9a:ff:d5:30:2b:55:f6:62:d1:22:63:f4:7d:ae: be:ab:a5:78:5c:ae:4c:89:6c:0d:29:f2:54:56:3b: 55:ad:a3:de:58:de:fd:9c:0b:54:76:d7:2e:b1:0a: 06:82:06:a0:97:5b:c3:f7:6f:a6:b8:e6:57:b8:ec: 47:bd:13:75:22:5a:11:b1:b4:8a:29:31:bd:e9:42: 80:b6:1a:9b:f7:bb:f6:1c:40:59:a3:4f:5b:b6:68: 37:1f:dc:9a:7e:1a:7c:d6:99:b6:3f:7d:79:7f:4b: 6d:f5:8e:ba:8b:df:84:79:10:fb:3d:a6:60:40:1f: e6:43:09:0e:52:97:8f:dc:f8:b7:c6:62:77:ad:b2: f3:56:a9:46:bf:dd:2f:9a:3d:b1:35:0f:f0:30:df: b6:f0:8c:87:4c:3a:94:4b:57:4e:87:8c:40:2c:83: 3d:9f:fd:0f:ee:29:49:01:3e:e3:39:95:10:52:61: bb:00:bb:a4:da:8d:08:cd:16:dc:26:a4:bd:fe:ec: 46:b9:dd:73:f1:39:db:6e:d0:b2:45:57:cf:93:a7: 97:74:50:02:a9:dc:38:da:ef:df:a1:a4:98:fa:8d: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A5:9B:42:20:64:CB:A4:27:31:8B:2D:C1:C6:F3:4D:28:C3:96:3D X509v3 Authority Key Identifier: keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:44:ff:2c:23:83:c2:90:52:02:fa:ea:1e:65:6a:73:d8:96: dc:4d:07:37:e0:17:61:d4:b9:7d:72:eb:c2:a2:b0:b3:e0:e8: ec:e3:37:1b:8c:3b:6b:11:d5:20:a0:0d:90:e2:14:b7:6b:d2: 16:75:18:03:20:23:f4:b7:90:59:60:c1:38:ae:0b:18:8c:61: a4:98:b9:c4:7e:8f:7c:a8:26:dc:36:45:20:b7:dd:bd:c4:11: 11:e6:4e:05:66:8e:97:2a:be:05:4d:01:fc:de:6f:17:c6:71: de:bd:48:ab:14:00:23:cc:8f:ea:e9:26:e8:6f:df:c7:6c:a8: cb:83:34:80:20:93:dd:0d:d6:fc:f0:ab:f2:ec:8e:0e:8e:99: e6:4b:07:30:66:e6:04:7b:0f:59:ed:c9:67:01:48:e9:86:63: fc:48:a3:a7:3d:f5:69:c4:40:6e:57:7f:e7:39:77:bb:d6:b1: 7f:2b:cc:6a:7f:a9:d4:42:13:99:55:82:6f:8f:71:05:6a:5c: 4c:ca:8c:62:8b:c6:0b:31:a4:38:c0:2b:6d:0c:18:63:ba:88: ed:85:3e:47:8c:2a:1d:9f:52:30:03:6c:74:c0:a4:56:c2:d1: b1:d1:41:54:20:47:85:12:00:8e:2c:4e:77:c4:69:75:37:18: 29:a1:dd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlof701m9SLraKVZtss6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMDRlZDllYjU5NWM4OWJiOWVjN2UyMGY5ODUyOWU5NTE3 MzlkODQwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EyhmNmE1OWI0MjIwNjRjYmE0MjczMThiMmRjMWM2ZjM0ZDI4YzM5NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvQb1iOG8uce0qysVvMoi5LeGblG uI4CyLw5LaZTmv/VMCtV9mLRImP0fa6+q6V4XK5MiWwNKfJUVjtVraPeWN79nAtU dtcusQoGggagl1vD92+muOZXuOxHvRN1IloRsbSKKTG96UKAthqb97v2HEBZo09b tmg3H9yafhp81pm2P315f0tt9Y66i9+EeRD7PaZgQB/mQwkOUpeP3Pi3xmJ3rbLz VqlGv90vmj2xNQ/wMN+28IyHTDqUS1dOh4xALIM9n/0P7ilJAT7jOZUQUmG7ALuk 2o0IzRbcJqS9/uxGud1z8TnbbtCyRVfPk6eXdFACqdw42u/foaSY+o1XfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPalm0IgZMukJzGLLcHG800ow5Y9MB8GA1UdIwQY MBaAFMAE7Z61lcibuex+IPmFKelRc52EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MGVmZjItNzI5OS00NDJiLTgxY2Ut MWVhNWQyZTk1NDFhLzEvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82MGVmZjItNzI5OS00NDJiLTgxY2UtMWVhNWQyZTk1NDFh LzEvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0T/LCOD wpBSAvrqHmVqc9iW3E0HN+AXYdS5fXLrwqKws+Do7OM3G4w7axHVIKANkOIUt2vS FnUYAyAj9LeQWWDBOK4LGIxhpJi5xH6PfKgm3DZFILfdvcQREeZOBWaOlyq+BU0B /N5vF8Zx3r1IqxQAI8yP6ukm6G/fx2yoy4M0gCCT3Q3W/PCr8uyODo6Z5ksHMGbm BHsPWe3JZwFI6YZj/Eijpz31acRAbld/5zl3u9axfyvMan+p1EITmVWCb49xBWpc TMqMYovGCzGkOMArbQwYY7qI7YU+R4wqHZ9SMANsdMCkVsLRsdFBVCBHhRIAjixO d8RpdTcYKaHdtw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:50 2025 by rpki-client