This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json) Hash identifier: y40nWjR+FJ9vFelYZcgf0mWLY63LPDq+uUGbYDQCXZ8= Subject key identifier: 1E:2D:AC:E7:C5:27:D7:3E:DA:3F:C8:F1:2A:05:6C:C1:97:AE:9E:46 Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20 Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20 Certificate serial: 019B34C65DC95DEB8ADFEEB41CB2B4E18425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft Manifest number: 122D Signing time: Fri 19 Dec 2025 04:02:53 +0000 Manifest this update: Fri 19 Dec 2025 04:02:53 +0000 Manifest next update: Sat 20 Dec 2025 04:02:53 +0000 Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: 8XRcXkHneySRG58M2vkTbvt1OI0Eg4iyzmcUdYhTRRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:5d:c9:5d:eb:8a:df:ee:b4:1c:b2:b4:e1:84:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20 Validity Not Before: Dec 19 04:02:53 2025 GMT Not After : Dec 20 04:02:53 2025 GMT Subject: CN=1e2dace7c527d73eda3fc8f12a056cc197ae9e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:6d:ef:4f:4d:dc:97:b7:75:8c:c5:a4:ea: 68:f5:18:03:e3:a2:bf:dc:78:8e:7e:71:ac:f7:d0: 7f:49:33:82:31:b3:55:08:04:66:7d:b5:80:66:86: 43:8c:ef:0a:64:53:d9:89:04:5c:91:d8:f8:2c:4a: 71:14:6c:e3:3e:11:bc:b4:1f:f3:8f:80:f3:78:9b: 49:a8:ff:87:08:3c:1c:27:da:c0:62:31:70:46:fe: 81:34:c9:31:ce:4a:03:c6:73:9b:6b:2c:17:4f:e9: 32:34:b1:9f:b8:e5:4b:7d:fc:67:4b:60:d2:81:d6: 47:e7:20:44:e5:ce:be:47:db:de:87:33:3d:70:a1: c7:f2:d6:f4:fe:35:4a:6c:cf:10:44:68:10:74:db: 68:80:e7:53:59:11:01:4c:7b:b9:57:00:ab:13:4c: a6:b4:99:ba:55:82:49:c0:c2:6b:39:20:96:90:fc: ae:ba:38:ae:b8:c7:e2:83:01:c1:cd:8a:35:23:5b: ca:6a:f0:be:21:3b:a8:4a:26:bb:be:93:eb:6c:c1: d7:5d:74:b7:b6:32:83:51:fd:ff:62:c0:30:29:87: ac:19:57:a7:2f:22:70:7f:96:fb:bb:9c:ca:e0:2f: f0:b4:87:f0:63:e0:fb:df:88:3b:e5:75:c9:9e:7c: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2D:AC:E7:C5:27:D7:3E:DA:3F:C8:F1:2A:05:6C:C1:97:AE:9E:46 X509v3 Authority Key Identifier: keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a7:9f:e5:27:b1:94:48:f6:36:b4:2e:87:13:60:d4:f4:03: 83:e2:17:ce:5f:6e:2d:d2:57:be:f2:e4:5e:2e:64:7e:02:6e: 5e:6f:54:f3:32:32:c0:a4:d6:c1:80:c9:0c:53:fc:d5:67:27: d5:d7:53:16:ca:81:16:2e:3f:5f:32:d1:3c:5a:03:62:4f:fb: 96:8b:05:a9:0f:68:a4:79:aa:68:84:ef:4f:a4:85:12:3e:75: 11:7c:cd:01:ad:b5:d8:66:32:c5:0f:87:ee:76:9e:5a:0e:c2: 17:5a:43:7d:c2:af:0f:cb:9e:27:a8:ea:ff:09:b9:e0:2f:8b: 81:99:77:cb:3b:4f:63:2e:ab:58:0f:b3:ae:aa:48:f2:db:c7: 6c:24:d3:39:c2:e9:dc:74:3c:d0:06:58:d3:af:28:7e:ea:a4: 65:86:ec:ea:eb:0e:7e:cd:e5:c9:cf:69:a2:71:d5:c1:64:63: fe:73:80:46:4c:75:79:be:92:7a:76:fc:a5:6a:e7:31:02:54: a5:15:e9:ae:a7:f9:54:14:99:ee:2d:25:26:cd:34:95:5f:a5: e6:cc:27:32:95:20:70:44:6d:56:81:67:80:7b:6c:0d:11:f2: 23:31:d1:6e:64:b3:34:23:9e:40:bc:72:e9:eb:72:bf:c3:ff: 4b:cb:72:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xl3JXeuK3+60HLK04YQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMDU1ZTMyZWNkNzcyYWUyODAzYTRjMzU2ZDc3Njg3ODdl NzJlMjAwHhcNMjUxMjE5MDQwMjUzWhcNMjUxMjIwMDQwMjUzWjAzMTEwLwYDVQQD EygxZTJkYWNlN2M1MjdkNzNlZGEzZmM4ZjEyYTA1NmNjMTk3YWU5ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KZt709N3Je3dYzFpOpo9RgD46K/ 3HiOfnGs99B/STOCMbNVCARmfbWAZoZDjO8KZFPZiQRckdj4LEpxFGzjPhG8tB/z j4DzeJtJqP+HCDwcJ9rAYjFwRv6BNMkxzkoDxnObaywXT+kyNLGfuOVLffxnS2DS gdZH5yBE5c6+R9vehzM9cKHH8tb0/jVKbM8QRGgQdNtogOdTWREBTHu5VwCrE0ym tJm6VYJJwMJrOSCWkPyuujiuuMfigwHBzYo1I1vKavC+ITuoSia7vpPrbMHXXXS3 tjKDUf3/YsAwKYesGVenLyJwf5b7u5zK4C/wtIfwY+D734g75XXJnnxS4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4trOfFJ9c+2j/I8SoFbMGXrp5GMB8GA1UdIwQY MBaAFMAFXjLs13KuKAOkw1bXdoeH5y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMt N2MyZDQwOWFjODlhLzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMtN2MyZDQwOWFjODlh LzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6ef5Sex lEj2NrQuhxNg1PQDg+IXzl9uLdJXvvLkXi5kfgJuXm9U8zIywKTWwYDJDFP81Wcn 1ddTFsqBFi4/XzLRPFoDYk/7losFqQ9opHmqaITvT6SFEj51EXzNAa212GYyxQ+H 7naeWg7CF1pDfcKvD8ueJ6jq/wm54C+LgZl3yztPYy6rWA+zrqpI8tvHbCTTOcLp 3HQ80AZY068ofuqkZYbs6usOfs3lyc9ponHVwWRj/nOARkx1eb6Senb8pWrnMQJU pRXprqf5VBSZ7i0lJs00lV+l5swnMpUgcERtVoFngHtsDRHyIzHRbmSzNCOeQLxy 6etyv8P/S8tyEg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:47 2025 by rpki-client