This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json) Hash identifier: yIAI9DEzt940KswhSDIWtxqDRzOnam/dm+wgXvGt2bw= Subject key identifier: C2:33:F4:7D:2F:25:C1:24:1F:BB:EE:3C:58:67:32:DB:B0:96:D0:57 Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a Certificate serial: 019B405B3684303AC015E36F0933003BED1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft Manifest number: 068D Signing time: Sun 21 Dec 2025 10:01:18 +0000 Manifest this update: Sun 21 Dec 2025 10:01:18 +0000 Manifest next update: Mon 22 Dec 2025 10:01:18 +0000 Files and hashes: 1: KG9HkmRGaF_sHhDWjx3vp73PeIA.roa (hash: xtQ/Bf0q+zKX28vYl4yuK/JzcH8nDzNW75ipUDIj1iY=) 2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: BDxbjbcLbftcERo+0IY8jXnNdzwsiA62FvRlVyFftTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:36:84:30:3a:c0:15:e3:6f:09:33:00:3b:ed:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a Validity Not Before: Dec 21 10:01:18 2025 GMT Not After : Dec 22 10:01:18 2025 GMT Subject: CN=c233f47d2f25c1241fbbee3c586732dbb096d057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:ff:18:98:42:97:36:29:e7:5d:ac:79:49: f8:f9:da:ae:69:3b:48:80:51:fa:8e:35:4d:f8:5b: 70:49:da:90:2e:fc:24:80:a2:85:d7:b8:9c:77:2f: c0:66:79:fd:71:74:e0:00:95:83:84:0d:ff:36:79: 46:77:7d:55:54:28:2d:30:cc:2c:bd:57:15:69:0f: 9f:77:77:03:25:24:0e:36:4f:74:d4:ac:5d:6a:49: f0:83:ce:55:d8:f8:c7:b4:ff:06:10:6a:c5:60:4e: 42:e5:ef:fe:73:17:a3:1c:5b:d3:7e:cc:8f:59:02: 25:71:ed:4c:75:6d:13:de:d4:cc:0f:3e:3b:9c:21: 6b:99:02:d3:37:05:fe:05:58:19:30:e6:c3:6e:75: 3e:4a:8b:3c:f9:9e:1d:ed:34:06:00:b9:cb:68:d0: e8:d9:24:13:a3:74:cd:50:d0:69:6f:fc:5c:2c:0d: 7b:a0:d2:53:11:aa:f5:16:15:7b:8f:96:48:39:6b: c1:0b:06:c5:0a:29:fd:b3:e1:78:06:a1:bb:18:d5: 08:39:8d:0d:ac:63:b9:4f:13:b4:b5:b2:bc:5c:88: 30:f9:ff:92:0d:25:a0:2b:3f:6a:ab:39:b5:3a:3f: 99:f6:e8:3e:f6:7a:21:3b:ad:75:a0:4d:47:29:0e: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:33:F4:7D:2F:25:C1:24:1F:BB:EE:3C:58:67:32:DB:B0:96:D0:57 X509v3 Authority Key Identifier: keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:80:1e:d5:21:b3:eb:81:e4:3a:a5:46:c8:43:65:15:62:7f: df:e1:ed:ea:0a:6e:d9:90:ec:33:64:77:03:9d:fb:74:f5:58: 78:78:aa:72:72:49:84:dd:cc:95:6f:2d:e4:35:d0:a6:a6:41: 22:1e:20:12:9e:ab:51:7a:ed:fe:63:bd:d4:c3:03:32:12:61: d5:47:a7:f8:2c:65:28:37:a4:81:3a:af:76:dc:7a:0d:de:c2: ce:aa:e3:f8:59:8c:86:13:8a:a5:82:4f:cc:11:e2:15:08:49: fb:ec:13:e5:bc:80:c4:4c:f5:a5:b5:9f:06:dd:09:14:34:8e: 0b:31:38:de:13:e9:2c:29:5a:ae:75:e1:ea:fa:b8:ce:8c:df: 5d:27:84:f9:cf:c0:d4:9f:4f:b7:0a:36:62:6e:f2:35:b2:02: 23:51:0e:2c:a9:9a:53:12:c9:53:47:be:8b:98:c1:03:d5:7a: 64:a6:c7:0d:b9:c5:7e:f8:d7:0a:b6:45:be:5f:d1:0a:d1:a2: b6:73:4b:85:07:6f:5a:30:22:37:a3:36:7e:50:42:01:ab:1f: ef:b6:07:20:47:d4:4e:1d:d1:3b:21:3a:b7:d5:03:03:ff:67: 28:48:65:60:36:bc:21:24:f1:ca:34:b4:b2:ac:03:43:21:68: c0:10:d4:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWzaEMDrAFeNvCTMAO+0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMGE4OGQ3ZTVhNTY1ZWE3MTljZmM0MGQ4YmI2M2VlMTY3 MTg1NmEwHhcNMjUxMjIxMTAwMTE4WhcNMjUxMjIyMTAwMTE4WjAzMTEwLwYDVQQD EyhjMjMzZjQ3ZDJmMjVjMTI0MWZiYmVlM2M1ODY3MzJkYmIwOTZkMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Iv/GJhClzYp512seUn4+dquaTtI gFH6jjVN+FtwSdqQLvwkgKKF17icdy/AZnn9cXTgAJWDhA3/NnlGd31VVCgtMMws vVcVaQ+fd3cDJSQONk901Kxdaknwg85V2PjHtP8GEGrFYE5C5e/+cxejHFvTfsyP WQIlce1MdW0T3tTMDz47nCFrmQLTNwX+BVgZMObDbnU+Sos8+Z4d7TQGALnLaNDo 2SQTo3TNUNBpb/xcLA17oNJTEar1FhV7j5ZIOWvBCwbFCin9s+F4BqG7GNUIOY0N rGO5TxO0tbK8XIgw+f+SDSWgKz9qqzm1Oj+Z9ug+9nohO611oE1HKQ6ajQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIz9H0vJcEkH7vuPFhnMtuwltBXMB8GA1UdIwQY MBaAFMAKiNflpWXqcZz8QNi7Y+4WcYVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYt ZGUzYzhkOTUzZWM1LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYtZGUzYzhkOTUzZWM1 LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoAe1SGz 64HkOqVGyENlFWJ/3+Ht6gpu2ZDsM2R3A537dPVYeHiqcnJJhN3MlW8t5DXQpqZB Ih4gEp6rUXrt/mO91MMDMhJh1Uen+CxlKDekgTqvdtx6Dd7Czqrj+FmMhhOKpYJP zBHiFQhJ++wT5byAxEz1pbWfBt0JFDSOCzE43hPpLClarnXh6vq4zozfXSeE+c/A 1J9Ptwo2Ym7yNbICI1EOLKmaUxLJU0e+i5jBA9V6ZKbHDbnFfvjXCrZFvl/RCtGi tnNLhQdvWjAiN6M2flBCAasf77YHIEfUTh3ROyE6t9UDA/9nKEhlYDa8ISTxyjS0 sqwDQyFowBDUNg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:26:43 2025 by rpki-client