This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json) Hash identifier: b0FE3aXJNK1vthwzsM26iJDEYt10kiX+q9YPkRMhK7M= Subject key identifier: F5:FB:FF:44:80:9B:A7:25:2C:3A:43:60:3C:D1:28:C3:14:62:8A:65 Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157 Certificate serial: 019B03D81BE61A49231FC168B46AAE4916FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft Manifest number: 176A Signing time: Tue 09 Dec 2025 16:00:53 +0000 Manifest this update: Tue 09 Dec 2025 16:00:53 +0000 Manifest next update: Wed 10 Dec 2025 16:00:53 +0000 Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: XEAUAd40EHirBc3ObCAUnsq6dG7COUUdJMkcZ9JVFxs=) 2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:d8:1b:e6:1a:49:23:1f:c1:68:b4:6a:ae:49:16:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157 Validity Not Before: Dec 9 16:00:53 2025 GMT Not After : Dec 10 16:00:53 2025 GMT Subject: CN=f5fbff44809ba7252c3a43603cd128c314628a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:bf:9c:f1:e0:dc:ad:87:13:42:b1:a2:c2: bd:31:bd:90:dd:d4:d3:f4:98:f1:6e:de:5b:ab:7f: a1:08:a3:18:65:91:96:2c:f8:0a:c5:bb:87:23:a2: b3:ea:86:07:fa:38:e5:45:fa:57:fe:35:13:39:6f: 7e:1e:9c:77:fa:b4:13:16:71:0b:a7:09:59:71:94: 30:93:31:8a:9d:a5:00:c4:ad:82:d9:05:6d:a2:9a: 7c:f3:12:33:ca:c4:f1:5b:72:2e:a0:ec:e3:a3:d5: 01:d5:1e:3f:a3:0c:b4:2a:59:86:2a:43:4f:40:ac: 06:ca:f8:d0:c4:71:1b:e1:c5:ad:63:18:6a:1c:d5: 72:e0:7e:0f:c5:97:c7:78:73:f9:fd:b6:ae:80:e8: ee:67:97:c0:20:06:3f:2c:99:30:c3:44:37:6e:75: d6:d1:0a:05:5b:61:4a:93:ed:a3:51:9e:51:df:e3: b4:a5:11:97:2c:40:1c:a3:42:94:b3:04:4b:d2:2e: 97:ef:de:f9:c0:54:5a:6a:78:f7:e5:09:7f:98:de: 69:d9:16:b1:20:f0:1f:f7:5b:7d:4c:7d:fe:46:21: d8:1d:75:f4:50:dd:89:fc:ea:96:8b:c3:5a:28:21: d6:ab:90:7d:95:17:3c:00:c9:e3:44:1e:25:8d:47: e6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FB:FF:44:80:9B:A7:25:2C:3A:43:60:3C:D1:28:C3:14:62:8A:65 X509v3 Authority Key Identifier: keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:4b:df:7a:1c:e1:4f:d5:ea:69:5e:f7:31:b1:24:3e:57:f2: e1:3a:0b:8e:41:92:7e:a1:bd:bf:9b:eb:46:f3:a3:b4:9c:92: 50:73:d4:e2:7a:d6:74:bf:18:4c:56:e0:f8:3d:53:33:15:96: 79:69:71:63:ba:01:71:0b:6a:b3:57:d5:ab:aa:ba:81:23:04: 2f:12:7b:c0:02:63:bb:dd:b4:53:99:fe:eb:a9:07:a8:e2:7a: 66:90:78:3f:f9:14:fb:56:fe:91:cc:1a:e5:66:fb:cb:84:c9: 65:75:87:37:46:f0:e7:a2:72:92:5e:01:fc:5a:a2:de:57:a3: 1f:23:c4:18:0f:e2:1e:80:63:9c:72:1a:23:9f:70:fb:4b:96: 16:c3:99:f6:d8:1a:f7:48:88:1d:d5:18:60:94:5d:87:6d:74: dd:c4:85:06:cd:f1:69:6c:4d:cc:9e:69:06:ee:3d:cf:af:ea: 5e:b2:2a:9d:0b:c4:0a:3c:63:47:66:74:45:67:e7:72:18:eb: 1b:1b:8b:12:c9:2c:68:77:0b:1d:42:d5:47:93:66:08:3f:01: b5:49:65:ae:5f:bd:23:82:8b:9d:41:ef:d7:d7:53:c8:f5:83: 40:49:13:e1:dc:8a:0b:f9:11:84:3c:6f:6f:69:20:cd:9d:fe: 52:40:f5:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsD2BvmGkkjH8FotGquSRb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx MGUxNTcwHhcNMjUxMjA5MTYwMDUzWhcNMjUxMjEwMTYwMDUzWjAzMTEwLwYDVQQD EyhmNWZiZmY0NDgwOWJhNzI1MmMzYTQzNjAzY2QxMjhjMzE0NjI4YTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8m/nPHg3K2HE0KxosK9Mb2Q3dTT 9Jjxbt5bq3+hCKMYZZGWLPgKxbuHI6Kz6oYH+jjlRfpX/jUTOW9+Hpx3+rQTFnEL pwlZcZQwkzGKnaUAxK2C2QVtopp88xIzysTxW3IuoOzjo9UB1R4/owy0KlmGKkNP QKwGyvjQxHEb4cWtYxhqHNVy4H4PxZfHeHP5/baugOjuZ5fAIAY/LJkww0Q3bnXW 0QoFW2FKk+2jUZ5R3+O0pRGXLEAco0KUswRL0i6X7975wFRaanj35Ql/mN5p2Rax IPAf91t9TH3+RiHYHXX0UN2J/OqWi8NaKCHWq5B9lRc8AMnjRB4ljUfmyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX7/0SAm6clLDpDYDzRKMMUYoplMB8GA1UdIwQY MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3kvfehzh T9XqaV73MbEkPlfy4ToLjkGSfqG9v5vrRvOjtJySUHPU4nrWdL8YTFbg+D1TMxWW eWlxY7oBcQtqs1fVq6q6gSMELxJ7wAJju920U5n+66kHqOJ6ZpB4P/kU+1b+kcwa 5Wb7y4TJZXWHN0bw56Jykl4B/Fqi3lejHyPEGA/iHoBjnHIaI59w+0uWFsOZ9tga 90iIHdUYYJRdh2103cSFBs3xaWxNzJ5pBu49z6/qXrIqnQvECjxjR2Z0RWfnchjr GxuLEsksaHcLHULVR5NmCD8BtUllrl+9I4KLnUHv19dTyPWDQEkT4dyKC/kRhDxv b2kgzZ3+UkD1vw== -----END CERTIFICATE-----Generated at Tue Dec 9 21:50:42 2025 by rpki-client