This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json) Hash identifier: tS4m2dIOKRcR9d5/ena3szZMOUjIk/pRaGzMJm16VC8= Subject key identifier: 97:A4:1B:CC:76:C9:43:B0:EC:CA:70:8D:D6:E1:04:7F:8C:18:5E:12 Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Certificate serial: 019B3DC82486A2BA581B23ACC13A0405E090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft Manifest number: 028B Signing time: Sat 20 Dec 2025 22:01:25 +0000 Manifest this update: Sat 20 Dec 2025 22:01:25 +0000 Manifest next update: Sun 21 Dec 2025 22:01:25 +0000 Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=) 2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=) 3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: Q/RWNMyHup8pM3ma1/XituaHLIjvv97t419D9pwajbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:24:86:a2:ba:58:1b:23:ac:c1:3a:04:05:e0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Validity Not Before: Dec 20 22:01:25 2025 GMT Not After : Dec 21 22:01:25 2025 GMT Subject: CN=97a41bcc76c943b0ecca708dd6e1047f8c185e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:dd:7b:f2:0d:a0:bd:8d:e4:fe:2e:bc:64: 6f:52:6a:51:f8:3d:28:cf:4c:10:32:b8:5c:6a:32: c7:a0:f7:94:b2:6c:11:c5:da:f3:47:ce:3a:23:af: 58:88:44:5f:92:46:2d:cb:66:01:19:1b:53:fa:ac: 7b:d6:75:61:f6:9c:a4:42:e5:64:cc:61:00:c0:fe: bf:61:1e:74:f8:d8:fd:ec:c0:8f:48:d6:e6:13:ce: 7c:f4:be:5a:64:6d:55:a2:99:fd:b4:34:6b:bb:dc: c2:6a:d6:cc:32:82:d4:ac:e9:b6:43:d6:ea:61:0f: 2f:eb:53:41:bc:a0:8f:76:b0:db:b4:f3:fa:cf:62: 3e:94:bb:9f:2a:61:28:a3:47:f9:b3:83:26:d9:56: 69:75:57:0d:78:1e:5e:e8:94:25:98:dc:cc:c2:19: 90:b4:f0:c4:80:ab:33:ec:83:a0:7a:f2:a1:30:ba: 09:6e:62:6a:6e:82:7a:06:e7:fc:6a:fe:6b:6e:d9: b5:42:3a:93:ab:64:db:3b:93:26:c6:91:17:ae:78: 72:a5:d9:2f:5c:bb:bc:0e:9f:15:58:30:05:71:e6: fa:76:4a:ac:8f:d9:bf:80:fb:a2:23:3a:e5:0c:eb: 70:6b:cf:ae:88:fe:ea:31:60:56:8c:e6:1b:d2:b7: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A4:1B:CC:76:C9:43:B0:EC:CA:70:8D:D6:E1:04:7F:8C:18:5E:12 X509v3 Authority Key Identifier: keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ff:ac:2a:10:b0:85:c3:64:5e:82:1b:69:11:0d:de:5d:f0: b8:fe:df:00:b9:88:ab:18:d3:74:1e:b2:6b:72:28:e6:bd:bf: 2f:fa:d2:60:87:d1:4d:a7:a5:de:dc:6a:51:68:33:fe:bb:52: 8e:9f:ea:58:9b:fc:67:62:99:55:42:4b:4e:04:48:8e:69:c4: ef:ec:32:59:96:89:22:af:33:c9:64:6d:54:96:57:d7:f7:75: c8:1d:a1:78:09:ce:48:06:9f:9a:06:e6:85:db:18:5b:d5:2f: 5c:33:33:fe:74:aa:df:2d:b0:1f:73:65:a6:f1:fd:64:5b:60: 24:0f:8c:c9:b5:eb:70:dc:a7:08:dc:2e:d5:ae:41:ca:34:10: 71:13:48:b8:51:26:23:4c:58:4b:02:6c:17:19:2d:11:45:e0: 94:08:32:21:0f:c9:d9:5d:36:02:ed:a3:91:c4:3b:e3:41:00: 62:7c:92:9e:e5:98:25:b7:89:7e:f6:6a:9f:8f:48:fb:92:f9: 19:6a:11:93:24:d4:c0:91:b9:cf:ca:1e:0e:f6:89:11:fb:41: 4d:40:6d:74:4e:5e:ee:0b:8f:d0:8c:af:02:bd:d9:98:8b:74: 5c:22:9e:4d:3e:76:3d:6a:67:b7:ec:f9:9f:07:ab:73:cc:9d: fd:ed:b0:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yCSGorpYGyOswToEBeCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYTRkMTQyZDQxMGFhYjA5MDUxMTJjNGFlNTc5MDc2YzBl NmRjODEwHhcNMjUxMjIwMjIwMTI1WhcNMjUxMjIxMjIwMTI1WjAzMTEwLwYDVQQD Eyg5N2E0MWJjYzc2Yzk0M2IwZWNjYTcwOGRkNmUxMDQ3ZjhjMTg1ZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqjde/INoL2N5P4uvGRvUmpR+D0o z0wQMrhcajLHoPeUsmwRxdrzR846I69YiERfkkYty2YBGRtT+qx71nVh9pykQuVk zGEAwP6/YR50+Nj97MCPSNbmE8589L5aZG1Vopn9tDRru9zCatbMMoLUrOm2Q9bq YQ8v61NBvKCPdrDbtPP6z2I+lLufKmEoo0f5s4Mm2VZpdVcNeB5e6JQlmNzMwhmQ tPDEgKsz7IOgevKhMLoJbmJqboJ6Buf8av5rbtm1QjqTq2TbO5MmxpEXrnhypdkv XLu8Dp8VWDAFceb6dkqsj9m/gPuiIzrlDOtwa8+uiP7qMWBWjOYb0rczWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJekG8x2yUOw7MpwjdbhBH+MGF4SMB8GA1UdIwQY MBaAFMGk0ULUEKqwkFESxK5XkHbA5tyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYt OTkwOTc2NzBiNDRlLzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYtOTkwOTc2NzBiNDRl LzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/+sKhCw hcNkXoIbaREN3l3wuP7fALmIqxjTdB6ya3Io5r2/L/rSYIfRTael3txqUWgz/rtS jp/qWJv8Z2KZVUJLTgRIjmnE7+wyWZaJIq8zyWRtVJZX1/d1yB2heAnOSAafmgbm hdsYW9UvXDMz/nSq3y2wH3NlpvH9ZFtgJA+MybXrcNynCNwu1a5ByjQQcRNIuFEm I0xYSwJsFxktEUXglAgyIQ/J2V02Au2jkcQ740EAYnySnuWYJbeJfvZqn49I+5L5 GWoRkyTUwJG5z8oeDvaJEftBTUBtdE5e7guP0IyvAr3ZmIt0XCKeTT52PWpnt+z5 nwerc8yd/e2w2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:11 2025 by rpki-client