This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft File: wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json) Hash identifier: XAmG7Sv/nHH3uoX8DdIC2cBZY+IOi1WdGwEtuhw5+iY= Subject key identifier: B7:21:91:59:9C:C0:F2:80:9A:81:39:C1:80:5F:F5:E2:3B:DB:6A:3A Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7 Certificate issuer: /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7 Certificate serial: 019B66560E2BBB3BB2984DE385D187B2EC9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft Manifest number: 1226 Signing time: Sun 28 Dec 2025 19:01:14 +0000 Manifest this update: Sun 28 Dec 2025 19:01:14 +0000 Manifest next update: Mon 29 Dec 2025 19:01:14 +0000 Files and hashes: 1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=) 2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: ruYM8X6YdX1VrwKrV39myKA2JJmLWuGC4Jrwdsmud3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:0e:2b:bb:3b:b2:98:4d:e3:85:d1:87:b2:ec:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7 Validity Not Before: Dec 28 19:01:14 2025 GMT Not After : Dec 29 19:01:14 2025 GMT Subject: CN=b72191599cc0f2809a8139c1805ff5e23bdb6a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:c3:81:63:fe:f1:75:c8:b9:19:58:da:50: ca:b4:d1:3c:48:ae:f8:34:a3:d4:b9:b9:80:ba:61: 5e:1a:9e:b9:4f:f7:24:9f:fb:80:8c:70:ea:ea:8a: b7:02:98:6e:2b:46:b0:df:29:c0:f3:ec:3a:b9:9e: eb:9c:51:c0:9d:fb:71:30:89:43:31:71:df:bf:e9: 06:77:d1:fe:24:c3:18:1b:63:00:85:df:23:5f:bc: 22:6b:1b:84:5e:4a:18:b2:8e:b9:4d:47:8a:a2:01: 96:6a:b9:ec:67:51:05:c0:43:af:21:34:2d:fa:d3: c8:51:1a:01:b0:94:07:5a:8e:22:d0:66:7d:c7:8f: 64:c9:e8:c7:12:e3:bb:fe:6c:24:9f:72:f0:f4:ee: a3:71:f9:51:34:30:92:17:81:e7:79:f0:48:cf:d1: 0b:f7:4e:12:01:a2:a4:80:ca:c4:89:f2:a0:1a:40: 5e:bc:17:83:86:f3:bb:23:c6:b0:d1:68:61:5e:3d: 9f:d8:f9:8f:79:dd:3b:11:98:ba:4a:96:94:6f:1b: b8:f4:0b:d0:2f:dc:30:76:75:61:9a:86:9b:28:c9: 4b:fe:37:d4:0c:96:d9:79:00:2d:d7:6d:dc:15:eb: 00:0f:e1:35:ce:96:e5:2b:ce:35:a0:e9:f8:e6:09: e8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:91:59:9C:C0:F2:80:9A:81:39:C1:80:5F:F5:E2:3B:DB:6A:3A X509v3 Authority Key Identifier: keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:6d:72:b3:7a:0d:62:f4:7b:b8:5a:5f:91:06:6c:aa:3d:08: 76:48:35:bc:3b:66:69:3f:70:86:0c:52:ed:46:c6:4e:59:f6: a4:42:41:cd:0c:8c:b9:fe:37:2e:dc:55:74:00:69:6f:14:3c: 36:a0:1a:59:50:5a:88:3d:cf:43:60:e0:6f:42:59:18:18:6d: 23:4d:41:5b:c5:39:7b:d8:d4:5d:57:f6:b5:7b:f9:c8:ab:41: 49:e6:ee:b6:d8:10:fb:31:a1:e8:a2:b2:2c:18:20:5d:24:b3: 21:dc:92:86:bc:cb:eb:70:b8:1a:ef:2d:4e:18:55:2f:69:48: da:a4:b9:53:c7:92:3a:5e:38:2b:2f:d2:06:fc:1f:33:51:a6: e9:fd:92:0f:4c:21:11:9f:e0:c5:e7:f0:2e:e1:34:cc:9c:27: f2:a2:fa:dc:45:a8:a2:75:28:ff:70:ce:51:be:e7:71:c9:c8: 97:4b:0a:0b:03:ae:a5:32:2e:77:6d:61:7a:5f:5f:a1:2d:72: b0:6c:0d:43:2b:3f:b6:eb:91:b0:67:32:dd:90:c6:f0:d0:cf: 9f:ab:70:b6:c2:05:28:92:8c:21:1c:4b:cf:00:08:a0:8a:66: 9e:9b:d5:35:67:db:e7:ae:ce:47:ae:b3:83:f3:a0:c4:0e:e9: 60:f1:6e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVg4ruzuymE3jhdGHsuyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1 YmY2YzcwHhcNMjUxMjI4MTkwMTE0WhcNMjUxMjI5MTkwMTE0WjAzMTEwLwYDVQQD EyhiNzIxOTE1OTljYzBmMjgwOWE4MTM5YzE4MDVmZjVlMjNiZGI2YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRzDgWP+8XXIuRlY2lDKtNE8SK74 NKPUubmAumFeGp65T/ckn/uAjHDq6oq3AphuK0aw3ynA8+w6uZ7rnFHAnftxMIlD MXHfv+kGd9H+JMMYG2MAhd8jX7wiaxuEXkoYso65TUeKogGWarnsZ1EFwEOvITQt +tPIURoBsJQHWo4i0GZ9x49kyejHEuO7/mwkn3Lw9O6jcflRNDCSF4HnefBIz9EL 904SAaKkgMrEifKgGkBevBeDhvO7I8aw0WhhXj2f2PmPed07EZi6SpaUbxu49AvQ L9wwdnVhmoabKMlL/jfUDJbZeQAt123cFesAD+E1zpblK841oOn45gnobwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLchkVmcwPKAmoE5wYBf9eI722o6MB8GA1UdIwQY MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzm1ys3oN YvR7uFpfkQZsqj0Idkg1vDtmaT9whgxS7UbGTln2pEJBzQyMuf43LtxVdABpbxQ8 NqAaWVBaiD3PQ2Dgb0JZGBhtI01BW8U5e9jUXVf2tXv5yKtBSebuttgQ+zGh6KKy LBggXSSzIdyShrzL63C4Gu8tThhVL2lI2qS5U8eSOl44Ky/SBvwfM1Gm6f2SD0wh EZ/gxefwLuE0zJwn8qL63EWoonUo/3DOUb7nccnIl0sKCwOupTIud21hel9foS1y sGwNQys/tuuRsGcy3ZDG8NDPn6twtsIFKJKMIRxLzwAIoIpmnpvVNWfb567OR66z g/OgxA7pYPFu2Q== -----END CERTIFICATE-----Generated at Mon Dec 29 02:24:34 2025 by rpki-client