This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json) Hash identifier: VLPTSrilhSaEqgRlNXLyWR560IkjVV47gOUo+RBS8sc= Subject key identifier: D6:FE:BB:DF:FA:49:1C:2B:0B:A7:9B:15:1A:0D:5B:F1:00:4A:E0:00 Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988 Certificate serial: 019B47A6490C5589CDF649288DEE41A64951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 20:00:38 +0000 Manifest this update: Mon 22 Dec 2025 20:00:38 +0000 Manifest next update: Tue 23 Dec 2025 20:00:38 +0000 Files and hashes: 1: 9Z5tAyPoNAUrhK3XQbPirY-i870.roa (hash: JYdT76bIYS9WiRnbn5ANGOhlwfQ42Z47wnU1M4quBe4=) 2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: eoJIUNsky3zv/9Wft962m0WZXtcfFa3HXaPSr8v5KNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:49:0c:55:89:cd:f6:49:28:8d:ee:41:a6:49:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988 Validity Not Before: Dec 22 20:00:38 2025 GMT Not After : Dec 23 20:00:38 2025 GMT Subject: CN=d6febbdffa491c2b0ba79b151a0d5bf1004ae000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:f1:37:0d:ca:46:2d:e3:cc:81:78:74:96: 0c:b5:6e:e6:4c:be:a8:9a:20:36:a2:03:52:ea:5d: 0f:46:18:aa:40:5c:c4:9d:9b:41:4e:80:0b:a4:cd: 91:90:e5:2c:67:c9:d7:4a:fb:2d:fb:fd:66:42:04: 4c:e5:c8:00:15:bf:33:43:d7:e0:65:32:48:8a:5e: 21:44:b6:d0:3b:bc:7b:ec:61:0d:2f:e3:c4:12:38: 0b:8a:d0:ae:8e:a8:8c:b0:56:7f:23:77:5d:2a:47: e8:45:41:41:08:cb:05:99:6d:5a:5b:c3:70:03:96: cd:37:36:39:af:a5:1a:a4:40:d5:b1:1e:cb:1c:d9: 1e:63:85:83:dd:55:af:fc:43:7c:99:53:63:fb:93: 6c:99:0c:ff:f5:2e:82:64:3a:42:5a:ed:12:09:80: 98:24:e9:28:e9:e9:79:bb:4c:aa:e7:a6:2e:39:2e: 4c:38:45:35:ef:ab:53:ba:3c:32:3e:47:45:31:58: c0:d9:e2:06:08:da:12:95:2f:6f:26:15:52:e8:30: 07:cb:d1:62:06:df:27:d1:16:99:13:ac:40:4b:19: 47:f1:68:ae:64:5e:82:8b:d1:43:41:79:c1:98:87: df:ff:d1:15:49:3f:b9:d8:b4:1b:bc:41:23:5c:b6: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FE:BB:DF:FA:49:1C:2B:0B:A7:9B:15:1A:0D:5B:F1:00:4A:E0:00 X509v3 Authority Key Identifier: keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:91:f4:ea:1f:5c:1a:aa:82:45:9d:86:04:64:c4:ec:52:cf: fe:3d:3c:6c:0d:34:d6:30:28:33:92:8c:6d:a6:54:de:b9:a2: fd:c8:d7:3e:a3:cd:ce:fe:c2:cb:ae:bc:5b:8d:ff:ff:96:31: da:d6:32:a4:9a:27:05:4a:35:6c:e8:ca:21:aa:50:79:2c:be: 12:80:44:66:a0:19:be:b6:cd:a0:38:8e:b1:b7:3a:b5:56:7f: d4:3a:ad:f7:d7:04:6c:d5:2b:0f:b7:39:a7:69:b3:62:e3:32: 76:6c:cc:7c:7e:59:10:95:cf:09:0a:47:56:59:80:39:9d:19: 44:99:59:84:97:b4:82:f1:90:9d:4e:e8:15:37:a9:27:7d:93: b5:77:d6:77:ed:ea:b9:f2:9a:54:9b:bd:19:8e:8e:f3:75:a4: 1e:d9:be:e1:ed:41:c6:e7:60:42:83:50:8e:d3:21:34:5e:ca: 9d:77:c2:85:c0:b2:a7:a6:c9:31:65:2e:03:ae:b7:1c:46:04: 87:5f:46:fd:45:cc:5f:35:50:81:ac:6a:a4:fd:b1:03:dc:39: 85:ab:8c:8b:74:b0:63:f0:42:d4:fa:19:88:17:f5:c7:0d:df: b7:d6:54:99:20:1d:78:6d:b7:56:9d:0b:46:65:61:08:27:69: e6:06:97:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpkkMVYnN9kkoje5BpklRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWRiZGZlMDFlOWEzZjk2ZDUwMDIyYzNjZGFmZGMzZTFh OGQ5ODgwHhcNMjUxMjIyMjAwMDM4WhcNMjUxMjIzMjAwMDM4WjAzMTEwLwYDVQQD EyhkNmZlYmJkZmZhNDkxYzJiMGJhNzliMTUxYTBkNWJmMTAwNGFlMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5/xNw3KRi3jzIF4dJYMtW7mTL6o miA2ogNS6l0PRhiqQFzEnZtBToALpM2RkOUsZ8nXSvst+/1mQgRM5cgAFb8zQ9fg ZTJIil4hRLbQO7x77GENL+PEEjgLitCujqiMsFZ/I3ddKkfoRUFBCMsFmW1aW8Nw A5bNNzY5r6UapEDVsR7LHNkeY4WD3VWv/EN8mVNj+5NsmQz/9S6CZDpCWu0SCYCY JOko6el5u0yq56YuOS5MOEU176tTujwyPkdFMVjA2eIGCNoSlS9vJhVS6DAHy9Fi Bt8n0RaZE6xASxlH8WiuZF6Ci9FDQXnBmIff/9EVST+52LQbvEEjXLYxMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb+u9/6SRwrC6ebFRoNW/EASuAAMB8GA1UdIwQY MBaAFMGtvf4B6aP5bVACLDza/cPhqNmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYt NDM5NDA1MmNkNjVlLzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYtNDM5NDA1MmNkNjVl LzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5H06h9c GqqCRZ2GBGTE7FLP/j08bA001jAoM5KMbaZU3rmi/cjXPqPNzv7Cy668W43//5Yx 2tYypJonBUo1bOjKIapQeSy+EoBEZqAZvrbNoDiOsbc6tVZ/1Dqt99cEbNUrD7c5 p2mzYuMydmzMfH5ZEJXPCQpHVlmAOZ0ZRJlZhJe0gvGQnU7oFTepJ32TtXfWd+3q ufKaVJu9GY6O83WkHtm+4e1BxudgQoNQjtMhNF7KnXfChcCyp6bJMWUuA663HEYE h19G/UXMXzVQgaxqpP2xA9w5hauMi3SwY/BC1PoZiBf1xw3ft9ZUmSAdeG23Vp0L RmVhCCdp5gaXCw== -----END CERTIFICATE-----Generated at Tue Dec 23 01:55:43 2025 by rpki-client