This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft File: wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json) Hash identifier: BGRFBjuKv+FGKSWsYHLp4BXQTsZgq8mXfgxtRba7a34= Subject key identifier: CF:2B:7F:B0:B0:D6:CF:F2:BC:83:F8:76:C2:65:AF:22:43:7F:72:53 Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF Certificate issuer: /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af Certificate serial: 019AF19BAFCCD16D55AC6694C912E9F279D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:43 +0000 Manifest this update: Sat 06 Dec 2025 03:01:43 +0000 Manifest next update: Sun 07 Dec 2025 03:01:43 +0000 Files and hashes: 1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=) 2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: 5Mz3gAnWlQTzYj8bccqnCZPw78Pk/TMLQinJWJC3SFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:af:cc:d1:6d:55:ac:66:94:c9:12:e9:f2:79:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af Validity Not Before: Dec 6 03:01:43 2025 GMT Not After : Dec 7 03:01:43 2025 GMT Subject: CN=cf2b7fb0b0d6cff2bc83f876c265af22437f7253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9a:83:90:1d:3a:29:42:3f:85:da:22:6a:12: 00:70:be:01:d4:27:d4:44:43:b1:f0:1d:65:3c:72: eb:83:0d:12:16:c3:44:41:4c:4c:e9:0a:f1:ab:c0: 3a:fc:e5:90:cb:80:45:d8:7b:f5:d2:78:a5:6b:1a: a5:74:40:cc:31:77:e0:9c:ba:1d:61:ce:d8:b9:65: e9:7d:17:29:0b:ff:e9:7f:b2:ec:be:22:09:a0:55: 95:e3:df:55:f4:36:04:13:a6:6d:52:b4:b8:cb:8a: 5d:81:f6:59:33:07:89:9b:62:19:2a:c8:c9:8b:78: 3c:83:91:6f:c5:a8:93:60:47:89:2b:b3:00:2b:f2: 70:bf:a7:18:34:91:43:19:f1:36:36:a2:5a:5e:80: 32:4d:0b:85:0c:1d:5d:aa:3f:01:49:55:24:35:04: b0:e9:d6:06:f9:46:17:ba:9d:bf:d6:9b:b7:a7:7b: 60:3e:92:88:40:14:ec:21:55:51:20:d0:d6:d8:a8: df:04:50:a5:0b:e3:7f:e8:ae:af:fe:af:a2:7a:ce: 95:f6:6d:de:95:ee:37:cb:9d:8e:17:cd:2b:f8:db: 19:74:ad:01:b6:85:da:ed:00:b6:97:7a:f4:96:b5: bb:0c:79:b8:65:d8:70:c3:1c:28:30:94:38:7d:24: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:7F:B0:B0:D6:CF:F2:BC:83:F8:76:C2:65:AF:22:43:7F:72:53 X509v3 Authority Key Identifier: keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b8:8c:0a:f4:8c:6e:8d:c9:04:c5:04:c4:77:00:d7:1b:aa: e7:82:7d:44:46:26:c7:dc:79:4a:ba:8f:f9:dd:b1:18:f6:19: 71:f8:24:ca:ff:45:52:ba:b1:35:9f:d3:9a:58:49:e1:c6:65: 7b:7c:f1:0f:c6:4c:63:43:68:e4:1f:89:8c:18:94:56:f6:f8: b9:8b:19:f3:8b:44:62:ee:7c:7a:67:c3:f9:16:0a:eb:37:48: 3d:fc:2a:2b:15:3e:52:be:ec:6a:00:d2:72:06:92:7a:db:0c: ff:43:3b:c2:4b:51:fe:88:ea:5f:41:4b:48:e2:8e:e5:99:4f: 42:fc:2e:fb:e8:fa:19:cb:47:72:55:82:95:10:1d:95:00:dd: 66:b0:45:dc:54:15:b6:cc:c1:56:f4:32:21:ad:04:94:44:15: e2:34:52:41:51:79:ed:0b:5b:dc:1b:5a:af:90:38:c6:29:44: 34:21:95:01:f8:7e:53:6b:1b:bd:0b:89:a9:03:96:b1:04:99: f5:61:24:d7:b9:84:29:32:e3:b9:d0:91:60:a5:fa:e1:98:67: 87:7c:dd:83:32:cf:a5:30:d7:0c:4f:b4:fd:55:1d:23:6d:0e: 89:46:68:10:ce:1e:e0:c7:7d:76:76:b8:46:db:13:fd:08:2b: 40:d9:d3:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6/M0W1VrGaUyRLp8nnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWU2MzY1NDlmNTZkODQ4NThmZjk2YzhiMTYzMGU4Y2I4 YTQ4YWYwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD EyhjZjJiN2ZiMGIwZDZjZmYyYmM4M2Y4NzZjMjY1YWYyMjQzN2Y3MjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pqDkB06KUI/hdoiahIAcL4B1CfU REOx8B1lPHLrgw0SFsNEQUxM6Qrxq8A6/OWQy4BF2Hv10nilaxqldEDMMXfgnLod Yc7YuWXpfRcpC//pf7LsviIJoFWV499V9DYEE6ZtUrS4y4pdgfZZMweJm2IZKsjJ i3g8g5FvxaiTYEeJK7MAK/Jwv6cYNJFDGfE2NqJaXoAyTQuFDB1dqj8BSVUkNQSw 6dYG+UYXup2/1pu3p3tgPpKIQBTsIVVRINDW2KjfBFClC+N/6K6v/q+ies6V9m3e le43y52OF80r+NsZdK0BtoXa7QC2l3r0lrW7DHm4ZdhwwxwoMJQ4fSTYNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8rf7Cw1s/yvIP4dsJlryJDf3JTMB8GA1UdIwQY MBaAFMGuY2VJ9W2EhY/5bIsWMOjLikivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YjkwOGQtZjQzYS00ODgyLWE2NmYt YjIxNjg0NGFjMWU0LzEvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80YjkwOGQtZjQzYS00ODgyLWE2NmYtYjIxNjg0NGFjMWU0 LzEvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7iMCvSM bo3JBMUExHcA1xuq54J9REYmx9x5SrqP+d2xGPYZcfgkyv9FUrqxNZ/TmlhJ4cZl e3zxD8ZMY0No5B+JjBiUVvb4uYsZ84tEYu58emfD+RYK6zdIPfwqKxU+Ur7sagDS cgaSetsM/0M7wktR/ojqX0FLSOKO5ZlPQvwu++j6GctHclWClRAdlQDdZrBF3FQV tszBVvQyIa0ElEQV4jRSQVF57Qtb3Btar5A4xilENCGVAfh+U2sbvQuJqQOWsQSZ 9WEk17mEKTLjudCRYKX64Zhnh3zdgzLPpTDXDE+0/VUdI20OiUZoEM4e4Md9dna4 RtsT/QgrQNnT/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:13 2025 by rpki-client