This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json) Hash identifier: sd4/KU+EIby8KlvzlBckzyI0kJaSL0ezAn2zmC+0wXM= Subject key identifier: EE:A8:AD:9F:50:38:46:8E:A5:17:67:43:09:1E:83:B1:65:4B:4C:A1 Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9 Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9 Certificate serial: 019AF31DA9EFBCB4394627AFE1546129D7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:03:18 +0000 Manifest this update: Sat 06 Dec 2025 10:03:18 +0000 Manifest next update: Sun 07 Dec 2025 10:03:18 +0000 Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: xCeup4qANaq5Lb2EN6U140x1exQ8RJ5THwzreals0RU=) 2: oz4j6XAA3JSDTaFAUqvMD6Q_gKU.roa (hash: alaiQ7nYgvlQJD63x0493TKwZeIQqdX8mBDJEuCO9ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:a9:ef:bc:b4:39:46:27:af:e1:54:61:29:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9 Validity Not Before: Dec 6 10:03:18 2025 GMT Not After : Dec 7 10:03:18 2025 GMT Subject: CN=eea8ad9f5038468ea5176743091e83b1654b4ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:46:eb:43:78:1b:bb:ff:f1:3d:e1:ca:1b: 50:01:29:35:69:22:81:b5:a6:97:16:5f:de:7f:11: 39:23:7c:10:59:c7:af:c5:36:b2:88:e5:16:63:f9: 71:35:db:8a:5f:ad:d2:0a:d9:79:76:24:4a:50:b1: 6f:ff:0e:0c:14:e7:44:7c:2c:f2:16:ed:6d:30:ad: 08:f2:d8:56:3e:54:e3:72:de:9a:69:a7:10:3b:56: ef:e0:79:22:3e:45:dc:f3:d4:32:a0:45:9e:c8:8c: 2e:9d:cd:d1:a4:2c:15:90:c6:91:5d:b4:a3:41:91: 98:24:af:4b:c9:b5:40:ee:51:c2:c3:37:46:01:da: d2:dd:8f:a6:4c:dd:ca:bb:a4:5a:b9:58:38:57:c8: 9d:43:33:47:0f:14:94:e6:0f:36:fb:6c:99:68:8d: 8f:c5:ac:29:77:fd:67:4f:d5:b5:2e:de:00:eb:a3: da:2c:56:00:be:2d:f8:8a:e2:a1:22:fb:b3:fc:89: 17:80:90:db:38:d4:16:da:84:f6:86:cb:6a:7a:ed: ac:13:45:dd:48:9a:d2:7e:71:a8:13:4d:ea:56:cd: 0f:d7:07:bd:84:d3:ec:3d:e9:ec:47:d4:2f:ef:b4: 7b:88:3b:4e:a8:40:a9:b3:6c:8e:15:61:dd:43:54: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A8:AD:9F:50:38:46:8E:A5:17:67:43:09:1E:83:B1:65:4B:4C:A1 X509v3 Authority Key Identifier: keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:86:8d:92:69:9d:64:8b:28:a3:73:54:0e:ec:0f:6d:0c:93: 37:b1:09:46:37:1a:b5:0c:d3:57:70:41:f9:f6:d5:4d:4c:b5: 72:f3:3e:b5:de:b1:91:64:3c:ee:a8:2d:47:90:0d:38:d0:8b: bf:24:6d:ed:0a:3f:db:6b:8d:77:4a:27:c5:84:54:df:25:c9: 44:5c:21:8c:53:f1:43:fd:f1:66:62:28:83:44:23:1f:44:21: cd:90:75:70:2d:b2:f8:83:b3:52:51:75:73:8f:31:50:13:01: 54:db:bd:f9:d8:27:dc:a0:21:a5:4a:b6:7d:34:17:f4:f8:6b: 27:06:0f:f4:0d:e3:47:73:b2:b7:05:1a:e5:d9:b1:f2:c2:e0: 5e:5d:56:cd:1c:c4:e7:02:57:a1:fe:1b:00:c4:15:66:7a:e0: 37:6c:6b:28:2a:6b:45:c0:85:29:3c:ca:7d:46:d1:65:40:97: 0a:b0:6e:f9:30:73:ed:eb:40:51:63:00:56:e2:00:c8:8a:81: 78:8e:cd:01:3d:b7:40:3d:89:40:02:1c:d5:d3:89:b6:d1:86: a1:8c:3c:5a:de:17:58:14:79:ac:d4:2e:27:ea:8f:6b:51:0a: 05:5e:82:ac:41:e5:06:33:ac:c6:8f:ac:1d:20:7f:8f:96:4b: ee:64:c8:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHanvvLQ5Riev4VRhKdenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MGFkNDJjNjRjNGY1NWZlY2U3OGIyNDI3MDcxZmU2Njg0 YzIwYzkwHhcNMjUxMjA2MTAwMzE4WhcNMjUxMjA3MTAwMzE4WjAzMTEwLwYDVQQD EyhlZWE4YWQ5ZjUwMzg0NjhlYTUxNzY3NDMwOTFlODNiMTY1NGI0Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLRG60N4G7v/8T3hyhtQASk1aSKB taaXFl/efxE5I3wQWcevxTayiOUWY/lxNduKX63SCtl5diRKULFv/w4MFOdEfCzy Fu1tMK0I8thWPlTjct6aaacQO1bv4HkiPkXc89QyoEWeyIwunc3RpCwVkMaRXbSj QZGYJK9LybVA7lHCwzdGAdrS3Y+mTN3Ku6RauVg4V8idQzNHDxSU5g82+2yZaI2P xawpd/1nT9W1Lt4A66PaLFYAvi34iuKhIvuz/IkXgJDbONQW2oT2hstqeu2sE0Xd SJrSfnGoE03qVs0P1we9hNPsPensR9Qv77R7iDtOqECps2yOFWHdQ1ThBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6orZ9QOEaOpRdnQwkeg7FlS0yhMB8GA1UdIwQY MBaAFFgK1CxkxPVf7OeLJCcHH+ZoTCDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEt NzM2OWE0MjU3MDE0LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEtNzM2OWE0MjU3MDE0 LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoaNkmmd ZIsoo3NUDuwPbQyTN7EJRjcatQzTV3BB+fbVTUy1cvM+td6xkWQ87qgtR5ANONCL vyRt7Qo/22uNd0onxYRU3yXJRFwhjFPxQ/3xZmIog0QjH0QhzZB1cC2y+IOzUlF1 c48xUBMBVNu9+dgn3KAhpUq2fTQX9PhrJwYP9A3jR3OytwUa5dmx8sLgXl1WzRzE 5wJXof4bAMQVZnrgN2xrKCprRcCFKTzKfUbRZUCXCrBu+TBz7etAUWMAVuIAyIqB eI7NAT23QD2JQAIc1dOJttGGoYw8Wt4XWBR5rNQuJ+qPa1EKBV6CrEHlBjOsxo+s HSB/j5ZL7mTIJA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:28 2025 by rpki-client