This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json) Hash identifier: KpUZaA3bspmz5oAJTyZpP8J4D5EajN7xJQmiyE9bA3o= Subject key identifier: AE:FD:9D:9F:11:54:11:7E:3E:1B:E6:8B:9D:FE:A5:CD:77:E1:D9:25 Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e Certificate serial: 019B766D9EE558AC7D3B3607D138392D52E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft Manifest number: 101D Signing time: Wed 31 Dec 2025 22:00:54 +0000 Manifest this update: Wed 31 Dec 2025 22:00:54 +0000 Manifest next update: Thu 01 Jan 2026 22:00:54 +0000 Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=) 2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: lDU/D7Nne+rXPu6vugX0OH9clIx/ezXpOn2wDp2/lxg=) 3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:9e:e5:58:ac:7d:3b:36:07:d1:38:39:2d:52:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e Validity Not Before: Dec 31 22:00:54 2025 GMT Not After : Jan 1 22:00:54 2026 GMT Subject: CN=aefd9d9f1154117e3e1be68b9dfea5cd77e1d925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:4f:be:4e:16:4d:0b:4b:c9:1c:00:03:c1: 4d:6a:5e:41:20:d7:d0:02:d8:aa:d7:49:01:f6:ac: 63:b3:bf:09:f8:17:e1:d4:34:3a:2b:75:81:d5:66: d7:c2:c8:83:b3:ac:d1:2e:e1:1f:38:6a:74:46:b2: 0b:25:3c:c7:7c:43:ed:36:bc:d7:b0:af:9e:b5:9f: 0b:25:dc:65:84:54:51:7a:f9:2e:7c:37:c2:98:59: 4b:08:a3:1e:d3:d5:19:3a:78:7c:1a:ce:e0:c1:33: 93:cb:c1:f4:3a:23:15:a8:f6:8a:dc:cc:49:14:a0: 55:cf:f7:d9:66:dd:0a:6d:19:89:d8:c8:1c:30:41: bd:77:c9:70:8b:d2:0a:d5:82:3f:43:5e:9d:ad:21: f9:45:27:10:32:c4:40:d6:ec:68:fd:f2:85:44:ea: b6:4d:63:3b:e4:d6:b8:4c:72:33:5d:33:4f:37:5c: d0:29:e8:af:b1:58:8a:ef:ee:06:5c:16:d0:52:1b: 63:ad:5a:cd:4c:e2:9e:86:6e:c2:5c:f3:0a:f2:f7: e5:f2:00:89:53:9b:bd:80:90:19:93:1c:32:d2:f2: cb:83:6f:7f:13:75:82:79:13:de:ad:5d:a6:c4:64: 1b:dc:7a:27:52:59:93:ec:64:ee:79:08:df:cb:a1: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FD:9D:9F:11:54:11:7E:3E:1B:E6:8B:9D:FE:A5:CD:77:E1:D9:25 X509v3 Authority Key Identifier: keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a6:f6:32:d2:7c:c7:6b:37:c3:2a:2e:9c:8b:e8:1c:f3:57: 76:a6:af:c7:03:19:1e:94:25:38:1f:bb:6d:08:e9:1c:f7:67: 74:76:59:0e:29:ba:d2:78:5c:6a:df:b5:a1:9c:3d:35:5b:5d: 5e:5c:a0:32:e0:e3:4c:d2:f1:40:fe:d0:b3:56:72:52:f6:fa: 61:e8:4c:7a:73:d1:c6:ed:df:5c:6b:b7:48:f4:5e:fc:12:c7: 6c:07:55:cb:dc:4b:53:a9:b2:bc:76:39:71:bc:35:c6:f6:3e: 1e:89:35:b2:d8:38:f0:b5:b6:d4:66:a0:7e:12:0d:3f:1b:cb: 43:2a:b8:9a:db:0b:3e:19:4f:ae:25:0f:b2:7d:f8:16:a4:10: 1f:68:f6:14:89:54:12:a9:d6:fe:4c:a5:df:b2:8d:d5:45:8e: a0:6d:ea:01:1c:b7:cf:68:93:c5:b5:37:32:b4:17:f9:1b:06: 46:17:72:ae:ae:5f:64:99:54:03:b3:bd:f2:40:61:7e:95:b3: 5a:19:0c:8b:ea:48:b9:da:39:86:90:a3:17:4e:b0:ea:f4:e7: b9:39:7c:3d:20:b3:97:dd:13:78:26:d7:6b:c9:18:e7:3d:15: 34:60:16:30:ed:10:39:dd:a9:23:78:09:91:84:5f:75:44:ab: c3:c7:e1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bZ7lWKx9OzYH0Tg5LVLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1 MWMyN2UwHhcNMjUxMjMxMjIwMDU0WhcNMjYwMTAxMjIwMDU0WjAzMTEwLwYDVQQD EyhhZWZkOWQ5ZjExNTQxMTdlM2UxYmU2OGI5ZGZlYTVjZDc3ZTFkOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzolPvk4WTQtLyRwAA8FNal5BINfQ Atiq10kB9qxjs78J+Bfh1DQ6K3WB1WbXwsiDs6zRLuEfOGp0RrILJTzHfEPtNrzX sK+etZ8LJdxlhFRRevkufDfCmFlLCKMe09UZOnh8Gs7gwTOTy8H0OiMVqPaK3MxJ FKBVz/fZZt0KbRmJ2MgcMEG9d8lwi9IK1YI/Q16drSH5RScQMsRA1uxo/fKFROq2 TWM75Na4THIzXTNPN1zQKeivsViK7+4GXBbQUhtjrVrNTOKehm7CXPMK8vfl8gCJ U5u9gJAZkxwy0vLLg29/E3WCeRPerV2mxGQb3HonUlmT7GTueQjfy6HSkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK79nZ8RVBF+Phvmi53+pc134dklMB8GA1UdIwQY MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt Yjc1NzhiMTBiYTdlLzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6b2MtJ8 x2s3wyounIvoHPNXdqavxwMZHpQlOB+7bQjpHPdndHZZDim60nhcat+1oZw9NVtd XlygMuDjTNLxQP7Qs1ZyUvb6YehMenPRxu3fXGu3SPRe/BLHbAdVy9xLU6myvHY5 cbw1xvY+Hok1stg48LW21GagfhINPxvLQyq4mtsLPhlPriUPsn34FqQQH2j2FIlU EqnW/kyl37KN1UWOoG3qARy3z2iTxbU3MrQX+RsGRhdyrq5fZJlUA7O98kBhfpWz WhkMi+pIudo5hpCjF06w6vTnuTl8PSCzl90TeCbXa8kY5z0VNGAWMO0QOd2pI3gJ kYRfdUSrw8fheQ== -----END CERTIFICATE-----Generated at Thu Jan 1 05:47:12 2026 by rpki-client