This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft File: wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json) Hash identifier: 5mD+S4FK40qKBJez71/UpU+OyZpRRJ6PQ191XoGzxD0= Subject key identifier: D4:FF:D4:0D:7C:BC:56:03:6F:49:D6:B5:2A:3F:AE:27:FD:7E:06:7D Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Certificate serial: 019B66FBAA88E0E9F10CB1B72D8F80B51819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft Manifest number: 17AD Signing time: Sun 28 Dec 2025 22:02:07 +0000 Manifest this update: Sun 28 Dec 2025 22:02:07 +0000 Manifest next update: Mon 29 Dec 2025 22:02:07 +0000 Files and hashes: 1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=) 2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=) 3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=) 4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: eLWXeNLcXANfD0YhMugJ+Z63/i8B5jaWwy+sz56JXW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:aa:88:e0:e9:f1:0c:b1:b7:2d:8f:80:b5:18:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Validity Not Before: Dec 28 22:02:07 2025 GMT Not After : Dec 29 22:02:07 2025 GMT Subject: CN=d4ffd40d7cbc56036f49d6b52a3fae27fd7e067d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:ec:d9:59:95:92:3c:ee:6a:a5:93:4c:62: 4c:bb:5d:d8:53:e0:4b:fc:0b:9e:86:42:40:c1:7b: 98:c5:5a:3f:24:41:4b:c8:23:45:3a:c9:a4:45:3c: fc:96:67:89:4f:47:62:70:c3:78:a2:52:a4:94:9d: df:03:7c:f1:9a:c8:e8:29:3d:d2:21:45:fd:a0:16: 6a:67:83:0e:d4:db:4f:cf:4d:2d:6f:29:b1:b5:ee: f2:2c:12:f0:ca:3c:08:e1:77:38:bf:fb:d9:85:69: 08:94:26:06:a9:c6:58:df:ac:bd:46:ec:8c:2e:62: e5:35:d9:d4:92:58:2c:83:29:3f:ff:5c:7a:69:21: 09:d0:33:e5:ba:ab:e8:bf:35:a8:b6:28:7b:fc:88: 7f:4e:c8:0a:7d:22:e8:a7:6b:7d:47:21:fc:bf:fc: fb:6e:4d:84:5d:80:ac:71:d4:bd:5f:76:31:c7:41: 77:f2:ed:a4:23:fc:a8:8d:d2:b0:4b:00:69:d1:11: df:c7:21:1b:2a:3a:ae:4d:b7:aa:7b:7b:d5:6c:13: 79:55:82:68:d3:20:4b:9d:9a:94:ab:c8:19:09:ac: 4a:af:3d:53:86:53:66:fe:82:4d:25:90:63:c4:7f: d3:1a:3c:bf:56:be:86:55:ae:e7:b8:fa:2d:80:4f: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FF:D4:0D:7C:BC:56:03:6F:49:D6:B5:2A:3F:AE:27:FD:7E:06:7D X509v3 Authority Key Identifier: keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d8:d7:87:09:1e:31:0c:a0:9a:89:cb:b0:b8:dc:5b:c2:35: d2:3c:96:4d:3a:38:fc:72:f7:cd:0b:7e:72:d1:8d:64:04:42: b7:85:87:c5:bd:c6:7a:01:7e:36:c8:d3:a0:5b:57:54:69:7d: 09:ab:1a:e4:e8:fa:30:f0:ff:ba:d8:ea:ca:2f:18:40:60:41: 03:c4:23:86:ce:9e:55:49:66:d7:f7:b6:f0:33:eb:df:78:49: c5:82:7a:b5:51:a7:b0:69:d5:f5:bf:42:5f:3c:ca:c1:65:28: fc:24:74:17:6c:7e:26:65:77:8c:2a:9f:e2:75:d7:08:54:60: bc:3a:6c:83:b7:63:3d:be:52:9a:4d:4f:21:84:10:d2:48:8c: d1:78:2a:2e:b4:e7:a6:69:46:79:3b:08:af:04:a5:14:31:a8: ce:2b:33:69:2f:13:b7:ec:63:33:c6:7e:55:2f:d2:13:a0:10: 86:a4:5a:69:35:7d:6f:c5:50:9f:b4:53:c5:fc:26:70:cf:7d: 56:94:63:6c:a3:39:db:f8:24:10:84:b0:8e:3b:45:6e:2f:32: 35:d2:cf:78:60:2b:e8:fb:58:7d:20:c3:3a:d3:0e:ec:65:fb: 84:9e:7f:b0:f9:36:5e:75:c3:43:40:b1:32:7f:ae:a8:f8:6d: e7:46:21:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+6qI4OnxDLG3LY+AtRgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5 YjYwYmUwHhcNMjUxMjI4MjIwMjA3WhcNMjUxMjI5MjIwMjA3WjAzMTEwLwYDVQQD EyhkNGZmZDQwZDdjYmM1NjAzNmY0OWQ2YjUyYTNmYWUyN2ZkN2UwNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusbs2VmVkjzuaqWTTGJMu13YU+BL /AuehkJAwXuYxVo/JEFLyCNFOsmkRTz8lmeJT0dicMN4olKklJ3fA3zxmsjoKT3S IUX9oBZqZ4MO1NtPz00tbymxte7yLBLwyjwI4Xc4v/vZhWkIlCYGqcZY36y9RuyM LmLlNdnUklgsgyk//1x6aSEJ0DPluqvovzWotih7/Ih/TsgKfSLop2t9RyH8v/z7 bk2EXYCscdS9X3Yxx0F38u2kI/yojdKwSwBp0RHfxyEbKjquTbeqe3vVbBN5VYJo 0yBLnZqUq8gZCaxKrz1ThlNm/oJNJZBjxH/TGjy/Vr6GVa7nuPotgE9sbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNT/1A18vFYDb0nWtSo/rif9fgZ9MB8GA1UdIwQY MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt ZmZkNjQ2ZDA1ZjY3LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3 LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtjXhwke MQygmonLsLjcW8I10jyWTTo4/HL3zQt+ctGNZARCt4WHxb3GegF+NsjToFtXVGl9 Casa5Oj6MPD/utjqyi8YQGBBA8Qjhs6eVUlm1/e28DPr33hJxYJ6tVGnsGnV9b9C XzzKwWUo/CR0F2x+JmV3jCqf4nXXCFRgvDpsg7djPb5Smk1PIYQQ0kiM0XgqLrTn pmlGeTsIrwSlFDGoziszaS8Tt+xjM8Z+VS/SE6AQhqRaaTV9b8VQn7RTxfwmcM99 VpRjbKM52/gkEISwjjtFbi8yNdLPeGAr6PtYfSDDOtMO7GX7hJ5/sPk2XnXDQ0Cx Mn+uqPht50YhrA== -----END CERTIFICATE-----Generated at Mon Dec 29 04:14:10 2025 by rpki-client