This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json) Hash identifier: +jabn5Br2PbgbohY+q0UAMNIw50N7DSm597l1lLmx3w= Subject key identifier: 17:CA:1C:09:F2:C3:CB:7D:A4:05:43:32:EB:B3:3C:1A:72:28:9C:93 Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988 Certificate serial: 019AF2ADEA4C9F1F25324847D992FA3C1FE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:01:15 +0000 Manifest this update: Sat 06 Dec 2025 08:01:15 +0000 Manifest next update: Sun 07 Dec 2025 08:01:15 +0000 Files and hashes: 1: 9Z5tAyPoNAUrhK3XQbPirY-i870.roa (hash: JYdT76bIYS9WiRnbn5ANGOhlwfQ42Z47wnU1M4quBe4=) 2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: eFObVxnr1JQYakMSeGx8zXI57vTZKqtypqAo473Ki4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ea:4c:9f:1f:25:32:48:47:d9:92:fa:3c:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988 Validity Not Before: Dec 6 08:01:15 2025 GMT Not After : Dec 7 08:01:15 2025 GMT Subject: CN=17ca1c09f2c3cb7da4054332ebb33c1a72289c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:74:ce:ec:ed:84:ba:1a:c4:65:68:3a:d6: ac:29:5c:26:34:9e:a9:1c:be:25:da:e7:1d:47:e3: d7:1c:7e:4e:74:90:d4:cb:58:57:ec:b7:94:54:1e: 16:49:57:ce:b2:0d:bf:0a:bf:34:fa:ad:09:8c:07: 86:7a:58:96:55:24:89:d6:03:7a:6f:87:48:b3:51: 66:37:95:6d:fe:ff:96:4a:9d:1c:31:bb:29:a0:50: 29:f9:ed:09:c0:18:63:9a:3c:f2:97:90:e1:f5:bf: 9a:a2:9e:54:24:d4:79:c2:72:73:13:4e:e9:8f:af: ee:57:00:c4:aa:3a:fe:f8:e4:bb:cd:02:d6:1d:c1: bb:6d:3b:83:06:9c:e0:1d:16:ed:1d:60:22:bd:b1: 10:af:0d:38:44:d9:1a:f9:da:16:c1:cb:4c:9a:59: c5:d5:74:00:fe:ea:81:1c:c2:97:7e:f6:56:ad:63: 71:94:06:41:f4:5b:e7:02:d0:a0:1f:8d:10:10:75: bb:80:56:d5:17:23:e2:b3:5e:ac:f6:46:3c:a7:9d: 99:45:32:9c:3d:3f:32:2a:ee:1b:d7:fc:5d:79:5c: 90:44:68:97:dd:ef:0a:ce:18:da:3c:ad:08:6e:63: 03:bb:d7:b1:02:1c:d4:ae:b7:9d:83:45:a5:bb:fe: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CA:1C:09:F2:C3:CB:7D:A4:05:43:32:EB:B3:3C:1A:72:28:9C:93 X509v3 Authority Key Identifier: keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:09:21:61:6b:e0:01:51:3a:f7:22:78:f9:92:7d:c9:be:12: 7b:c8:98:b6:84:44:a6:2f:cd:c2:78:aa:7c:34:56:51:9b:f4: e0:c1:cb:bd:9d:04:a6:76:10:cc:9b:d0:4e:9e:89:59:f7:ba: a7:cf:f3:ce:00:23:4e:93:c3:2a:88:89:46:ba:de:ad:74:7d: 09:d2:ac:98:e5:c9:05:f7:1d:08:14:b3:57:69:54:4f:02:23: a5:17:3c:81:8c:e9:02:b9:7b:9f:09:c0:ca:99:4a:0e:aa:a0: 6a:d4:9c:8c:03:b6:35:9e:26:c6:17:da:fe:a8:7c:40:bf:6f: 56:d3:51:c8:22:49:9f:66:8e:9e:53:b7:d7:17:80:7e:ff:4f: 51:8e:06:a2:be:2e:8f:82:6b:9b:b0:22:ea:cb:fa:d0:22:61: 25:a8:9d:18:a3:3d:bf:ef:5a:56:88:49:97:0d:41:3a:72:23: f1:fe:cd:12:01:e2:41:82:ab:b8:f5:17:7d:85:5e:14:6a:29: 9f:69:03:69:fb:3c:69:52:46:b2:3a:ae:fd:d2:67:af:0c:ac: f3:b1:0e:30:f4:9f:1e:15:4a:60:af:bf:93:75:02:d8:d1:1d: cb:c7:74:36:99:f8:78:e0:9d:cc:9f:fb:3b:6d:c8:ff:87:11: 09:1c:16:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrepMnx8lMkhH2ZL6PB/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWRiZGZlMDFlOWEzZjk2ZDUwMDIyYzNjZGFmZGMzZTFh OGQ5ODgwHhcNMjUxMjA2MDgwMTE1WhcNMjUxMjA3MDgwMTE1WjAzMTEwLwYDVQQD EygxN2NhMWMwOWYyYzNjYjdkYTQwNTQzMzJlYmIzM2MxYTcyMjg5YzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uh0zuzthLoaxGVoOtasKVwmNJ6p HL4l2ucdR+PXHH5OdJDUy1hX7LeUVB4WSVfOsg2/Cr80+q0JjAeGeliWVSSJ1gN6 b4dIs1FmN5Vt/v+WSp0cMbspoFAp+e0JwBhjmjzyl5Dh9b+aop5UJNR5wnJzE07p j6/uVwDEqjr++OS7zQLWHcG7bTuDBpzgHRbtHWAivbEQrw04RNka+doWwctMmlnF 1XQA/uqBHMKXfvZWrWNxlAZB9FvnAtCgH40QEHW7gFbVFyPis16s9kY8p52ZRTKc PT8yKu4b1/xdeVyQRGiX3e8KzhjaPK0IbmMDu9exAhzUrredg0Wlu/7xxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfKHAnyw8t9pAVDMuuzPBpyKJyTMB8GA1UdIwQY MBaAFMGtvf4B6aP5bVACLDza/cPhqNmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYt NDM5NDA1MmNkNjVlLzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYtNDM5NDA1MmNkNjVl LzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQkhYWvg AVE69yJ4+ZJ9yb4Se8iYtoREpi/NwniqfDRWUZv04MHLvZ0EpnYQzJvQTp6JWfe6 p8/zzgAjTpPDKoiJRrrerXR9CdKsmOXJBfcdCBSzV2lUTwIjpRc8gYzpArl7nwnA yplKDqqgatScjAO2NZ4mxhfa/qh8QL9vVtNRyCJJn2aOnlO31xeAfv9PUY4Gor4u j4Jrm7Ai6sv60CJhJaidGKM9v+9aVohJlw1BOnIj8f7NEgHiQYKruPUXfYVeFGop n2kDafs8aVJGsjqu/dJnrwys87EOMPSfHhVKYK+/k3UC2NEdy8d0Npn4eOCdzJ/7 O23I/4cRCRwW5g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:05 2025 by rpki-client