This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json) Hash identifier: 5ydAhOEeR8XdODZuT5fSqxdgfL+gGlYRhZHuplI108c= Subject key identifier: 8F:A4:E5:A6:5D:93:75:96:6F:60:D7:73:9D:D5:7A:0A:F6:C4:0E:EF Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20 Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20 Certificate serial: 019AF12ED85FD36876A3DC8D69EE13677CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft Manifest number: 120A Signing time: Sat 06 Dec 2025 01:02:50 +0000 Manifest this update: Sat 06 Dec 2025 01:02:50 +0000 Manifest next update: Sun 07 Dec 2025 01:02:50 +0000 Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: +wL5YC775pcqSHe7nNI5TbzyJcdzADYuptRYeUOqvhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d8:5f:d3:68:76:a3:dc:8d:69:ee:13:67:7c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20 Validity Not Before: Dec 6 01:02:50 2025 GMT Not After : Dec 7 01:02:50 2025 GMT Subject: CN=8fa4e5a65d9375966f60d7739dd57a0af6c40eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:4b:41:60:9d:0f:91:be:a0:e9:b2:15:d6: f6:87:11:9e:ea:46:36:6f:9d:ec:3d:95:1a:00:4f: c3:ac:17:df:83:34:cd:c1:a5:b2:e0:1c:09:87:f5: a8:b7:52:e6:db:48:6b:02:33:da:a0:a6:77:fc:88: c7:c5:eb:c7:44:d0:9a:98:a9:ed:ab:aa:ac:bb:e1: af:02:74:ef:ce:29:a4:be:58:76:66:5f:0e:6a:8e: 82:e8:93:25:3e:3b:0a:44:57:2e:0b:b8:b1:69:bb: 7b:d0:7f:03:03:20:f1:2f:62:43:95:57:a3:55:90: 64:f9:97:d1:1f:f5:d5:41:89:df:99:39:e4:67:90: 18:3a:b1:47:16:82:b0:15:16:64:7f:75:b3:88:10: 89:29:21:f9:24:00:1a:26:36:66:2c:d6:75:f5:48: 0c:cb:33:2a:06:5d:58:7e:0e:ee:44:9b:b2:ee:96: 29:f9:8c:7a:0b:9f:df:66:51:e5:c7:4d:64:a8:d6: 2e:eb:93:46:52:41:2c:41:8c:a6:2b:6b:4f:d3:ef: 76:f5:45:10:b9:76:1c:83:1c:b7:93:d1:d2:35:b2: 68:e7:3d:0f:91:bf:3e:d2:e3:1b:c6:59:2e:ab:fc: a2:ec:cb:4a:15:92:0d:da:14:82:48:ab:40:20:9a: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A4:E5:A6:5D:93:75:96:6F:60:D7:73:9D:D5:7A:0A:F6:C4:0E:EF X509v3 Authority Key Identifier: keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:00:64:da:5b:8d:cb:a1:39:25:df:96:12:0c:5a:43:c2:04: b0:d0:ef:19:b5:ac:1c:73:bc:7d:dc:3f:7f:fa:4b:76:64:a6: 1a:c8:f1:6b:1e:2b:a5:6b:d2:e1:30:d7:b7:d6:49:57:cf:d3: 12:23:7f:9a:c7:2a:fb:a5:12:df:ae:b4:ea:7f:c7:32:29:4e: 31:0c:29:94:83:02:38:33:85:c1:4e:df:73:b6:7d:c8:e2:75: 0d:eb:fa:ba:c8:db:47:26:d1:11:1a:6f:5f:3e:87:f6:21:3a: 42:ef:d7:62:67:06:db:e7:94:81:2a:79:bb:78:2d:a8:37:c3: ae:e0:c0:2d:71:f1:82:ec:ed:88:7c:c0:01:66:c6:8e:59:fd: 69:02:98:0f:8c:a5:f4:d1:09:c0:f0:cf:93:c2:77:28:e9:32: ae:66:13:c8:4d:df:8d:63:42:83:41:b9:ea:8f:51:a2:65:00: a5:01:6b:0b:63:67:95:4b:30:9c:c7:1a:d4:48:3b:e9:9e:8d: 78:d1:0d:bf:e5:d1:07:2f:88:b2:6c:9b:fd:b2:e5:d6:d3:e3: f9:b1:9c:a9:02:0c:d7:0c:f1:98:ad:7c:53:8c:69:4f:97:89: cb:ea:c9:97:9d:0d:a1:7d:6b:b3:46:fb:66:34:3d:4a:5f:75: c6:db:97:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLthf02h2o9yNae4TZ3zMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMDU1ZTMyZWNkNzcyYWUyODAzYTRjMzU2ZDc3Njg3ODdl NzJlMjAwHhcNMjUxMjA2MDEwMjUwWhcNMjUxMjA3MDEwMjUwWjAzMTEwLwYDVQQD Eyg4ZmE0ZTVhNjVkOTM3NTk2NmY2MGQ3NzM5ZGQ1N2EwYWY2YzQwZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuONLQWCdD5G+oOmyFdb2hxGe6kY2 b53sPZUaAE/DrBffgzTNwaWy4BwJh/Wot1Lm20hrAjPaoKZ3/IjHxevHRNCamKnt q6qsu+GvAnTvzimkvlh2Zl8Oao6C6JMlPjsKRFcuC7ixabt70H8DAyDxL2JDlVej VZBk+ZfRH/XVQYnfmTnkZ5AYOrFHFoKwFRZkf3WziBCJKSH5JAAaJjZmLNZ19UgM yzMqBl1Yfg7uRJuy7pYp+Yx6C5/fZlHlx01kqNYu65NGUkEsQYymK2tP0+929UUQ uXYcgxy3k9HSNbJo5z0Pkb8+0uMbxlkuq/yi7MtKFZIN2hSCSKtAIJoNDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+k5aZdk3WWb2DXc53Vegr2xA7vMB8GA1UdIwQY MBaAFMAFXjLs13KuKAOkw1bXdoeH5y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMt N2MyZDQwOWFjODlhLzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMtN2MyZDQwOWFjODlh LzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuABk2luN y6E5Jd+WEgxaQ8IEsNDvGbWsHHO8fdw/f/pLdmSmGsjxax4rpWvS4TDXt9ZJV8/T EiN/mscq+6US36606n/HMilOMQwplIMCODOFwU7fc7Z9yOJ1Dev6usjbRybRERpv Xz6H9iE6Qu/XYmcG2+eUgSp5u3gtqDfDruDALXHxguztiHzAAWbGjln9aQKYD4yl 9NEJwPDPk8J3KOkyrmYTyE3fjWNCg0G56o9RomUApQFrC2NnlUswnMca1Eg76Z6N eNENv+XRBy+Ismyb/bLl1tPj+bGcqQIM1wzxmK18U4xpT5eJy+rJl50NoX1rs0b7 ZjQ9Sl91xtuX/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:51 2025 by rpki-client