This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json) Hash identifier: UlhcdQZxO7FZtJ8NwPyAXoERVPHNOj/P4kuv/A/V1YQ= Subject key identifier: 60:11:AE:31:1C:B4:2F:D3:3A:7B:BA:B5:8A:D4:60:7D:15:CD:7F:88 Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157 Certificate serial: 019B3DC7BC4BE8F2715FF644D026C0840341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:00:58 +0000 Manifest this update: Sat 20 Dec 2025 22:00:58 +0000 Manifest next update: Sun 21 Dec 2025 22:00:58 +0000 Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: zrWS4HGLjiMEn4kGx2rwXII0UmmfWk35YWiDjyjvC7E=) 2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:bc:4b:e8:f2:71:5f:f6:44:d0:26:c0:84:03:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157 Validity Not Before: Dec 20 22:00:58 2025 GMT Not After : Dec 21 22:00:58 2025 GMT Subject: CN=6011ae311cb42fd33a7bbab58ad4607d15cd7f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:45:a7:52:a4:85:1d:97:b3:ae:a1:89:ea: 82:03:f6:ea:d4:32:49:76:c6:bf:74:fe:7e:5f:b1: 90:65:09:f5:c4:2b:ec:38:15:c3:57:d2:6b:95:b0: 6a:5c:c9:a8:fb:58:8b:97:7f:c3:78:f6:07:97:f7: 8e:a5:8c:28:ab:28:ec:7d:01:2a:70:0e:1e:47:7b: d9:3c:ba:87:8c:5d:00:28:28:1f:0e:87:a4:c3:09: 64:b2:6e:25:19:66:7d:d5:dc:fb:18:61:8d:d6:53: 6d:0f:dc:16:f9:b5:81:5b:3f:ff:76:2e:ef:21:74: 8c:8f:52:70:b9:a4:ab:a5:ed:7e:99:17:6b:a9:31: 34:31:92:df:50:9c:7c:c9:58:04:8d:c2:12:31:3d: 3d:58:8d:76:1c:f9:d9:d4:b3:4e:7e:93:2c:45:8a: 08:80:1f:fa:bd:bd:9e:b7:f4:7a:2b:73:ca:71:da: 92:5b:16:9b:db:da:df:50:f4:b1:fd:6a:6e:7d:6b: ea:c5:d2:d3:f9:aa:0b:f8:11:7a:88:5f:57:2d:13: fa:08:61:de:c4:0d:6e:14:48:27:a8:4b:7d:89:a1: 69:d0:da:83:48:94:57:43:d4:42:c4:09:07:dd:3a: d8:54:ba:f5:73:d2:ef:5a:a6:35:07:db:0e:de:ed: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:AE:31:1C:B4:2F:D3:3A:7B:BA:B5:8A:D4:60:7D:15:CD:7F:88 X509v3 Authority Key Identifier: keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:78:c6:84:05:ec:3e:fd:f0:c4:92:77:24:be:9e:45:3f:c9: 60:97:59:6d:8e:1a:5e:99:84:00:5c:73:df:fc:75:28:11:3e: 26:24:df:5f:9a:8f:3f:fd:1f:08:9e:b0:1f:e6:d7:25:9d:bd: 92:5b:39:47:b1:af:3d:2d:7a:64:ea:8c:ee:df:a3:ed:5a:f0: 82:37:1b:65:08:00:61:f8:da:3f:e4:3e:4d:07:6c:f9:fe:e1: e4:87:ee:25:17:af:91:d4:39:8f:e1:42:32:d4:5a:4f:08:bd: e6:09:96:bf:9a:d1:85:d2:af:cd:66:35:4f:81:5d:a7:e5:b1: 50:b3:2e:20:8a:02:cb:a7:c2:03:87:fc:57:8c:f4:43:36:7b: 9e:fe:63:24:c1:9b:c4:69:bb:18:db:91:18:ea:4a:16:18:e8: 5e:56:f4:ab:3b:83:9f:4d:22:b9:d1:9c:1c:b1:94:5d:61:59: fe:29:00:ee:35:11:31:34:15:13:03:5f:12:d6:e8:53:98:cc: 7f:af:29:f8:a1:b9:0c:04:b5:76:60:d4:e5:b3:d0:8a:bb:aa: 0b:5a:b0:4f:e7:14:78:2c:c3:73:40:b1:08:30:79:9a:4b:8c: f7:1b:87:31:aa:14:80:43:92:6e:e4:fd:5c:09:a0:b5:32:7b: 0a:2b:65:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7xL6PJxX/ZE0CbAhANBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx MGUxNTcwHhcNMjUxMjIwMjIwMDU4WhcNMjUxMjIxMjIwMDU4WjAzMTEwLwYDVQQD Eyg2MDExYWUzMTFjYjQyZmQzM2E3YmJhYjU4YWQ0NjA3ZDE1Y2Q3Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1BFp1KkhR2Xs66hieqCA/bq1DJJ dsa/dP5+X7GQZQn1xCvsOBXDV9JrlbBqXMmo+1iLl3/DePYHl/eOpYwoqyjsfQEq cA4eR3vZPLqHjF0AKCgfDoekwwlksm4lGWZ91dz7GGGN1lNtD9wW+bWBWz//di7v IXSMj1JwuaSrpe1+mRdrqTE0MZLfUJx8yVgEjcISMT09WI12HPnZ1LNOfpMsRYoI gB/6vb2et/R6K3PKcdqSWxab29rfUPSx/WpufWvqxdLT+aoL+BF6iF9XLRP6CGHe xA1uFEgnqEt9iaFp0NqDSJRXQ9RCxAkH3TrYVLr1c9LvWqY1B9sO3u3a4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGARrjEctC/TOnu6tYrUYH0VzX+IMB8GA1UdIwQY MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3jGhAXs Pv3wxJJ3JL6eRT/JYJdZbY4aXpmEAFxz3/x1KBE+JiTfX5qPP/0fCJ6wH+bXJZ29 kls5R7GvPS16ZOqM7t+j7VrwgjcbZQgAYfjaP+Q+TQds+f7h5IfuJRevkdQ5j+FC MtRaTwi95gmWv5rRhdKvzWY1T4Fdp+WxULMuIIoCy6fCA4f8V4z0QzZ7nv5jJMGb xGm7GNuRGOpKFhjoXlb0qzuDn00iudGcHLGUXWFZ/ikA7jURMTQVEwNfEtboU5jM f68p+KG5DAS1dmDU5bPQiruqC1qwT+cUeCzDc0CxCDB5mkuM9xuHMaoUgEOSbuT9 XAmgtTJ7CitlfA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:02 2025 by rpki-client