This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json) Hash identifier: XJ1NN6Wd3W4x9hR4zZ4RMA9n7cTlzk6RNerWzKuv9os= Subject key identifier: D6:FC:F3:95:A2:49:69:98:52:FD:0D:44:F0:EC:43:2D:51:2F:33:43 Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Certificate serial: 019B0D80E6EA9838F9B94FA904A1DB60EC10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft Manifest number: 0272 Signing time: Thu 11 Dec 2025 13:01:50 +0000 Manifest this update: Thu 11 Dec 2025 13:01:50 +0000 Manifest next update: Fri 12 Dec 2025 13:01:50 +0000 Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=) 2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=) 3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: MAJgu0IlcnhKmzXeVbuLZFAXjy7rqOiySf56GECAUXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:e6:ea:98:38:f9:b9:4f:a9:04:a1:db:60:ec:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81 Validity Not Before: Dec 11 13:01:50 2025 GMT Not After : Dec 12 13:01:50 2025 GMT Subject: CN=d6fcf395a249699852fd0d44f0ec432d512f3343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:6b:99:b6:e0:31:f1:a2:bd:f3:13:fb:e4: 1f:f5:60:57:76:98:2d:61:69:f1:0e:1b:cf:fb:10: ae:61:c2:5b:4a:d0:71:ce:06:79:1e:7f:1d:91:43: a6:d1:d0:40:94:a4:a9:97:a4:09:2f:68:ef:40:78: db:24:8a:8b:e6:55:ca:3b:29:89:cf:b7:ba:2a:f7: 61:2b:d6:90:6e:6e:7c:61:f5:6e:10:17:da:fc:93: 10:72:04:05:a9:f2:79:b7:16:7b:be:a9:c9:31:3c: 24:07:fd:60:5f:7f:98:61:d2:aa:be:78:59:d2:f5: 06:8e:20:4a:61:08:ea:39:45:6e:59:39:96:94:56: 8e:97:fb:84:30:e5:93:0e:df:a3:79:e0:17:c7:48: 73:e3:a5:f4:9b:4d:b4:57:e3:d8:80:23:7a:96:39: 11:53:76:95:8b:55:2b:3a:7a:00:22:6e:b6:01:33: c1:35:12:47:c2:da:6d:2f:5a:37:99:64:be:87:53: 30:4d:a9:0c:c7:3c:45:57:64:db:24:50:73:fd:61: 4c:a9:f8:aa:6d:f0:b9:dc:55:67:50:90:cf:51:c3: 5c:13:0c:97:01:8e:e7:8b:d8:58:c6:b1:4f:fe:cc: 10:c9:6c:33:41:14:61:b0:11:a0:bc:ee:3a:c2:1e: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FC:F3:95:A2:49:69:98:52:FD:0D:44:F0:EC:43:2D:51:2F:33:43 X509v3 Authority Key Identifier: keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:00:93:f7:b7:fa:33:23:fa:6a:b1:90:9c:b9:86:11:47:b5: ec:8e:b0:9d:15:81:39:f1:d5:e2:96:c9:ef:83:6a:a0:2f:aa: 4d:4b:69:df:cb:e1:22:8a:eb:38:a0:08:01:98:87:55:c3:b8: bd:0d:e7:e3:aa:75:c0:83:a8:81:dc:24:d5:d6:44:a8:1f:db: 76:21:18:0e:f3:06:fc:bb:c6:bf:1b:1b:1b:55:81:47:36:26: 40:16:71:96:4c:4c:fb:5f:eb:b1:62:33:eb:1b:1b:5e:57:09: 94:98:23:fb:5f:0a:1d:39:80:b7:51:f2:fa:15:c3:f9:c2:ea: af:bf:70:6c:2c:fa:42:fa:55:ae:3a:83:c7:5a:be:d8:01:a2: a1:4a:6f:14:e6:95:ae:70:ae:39:44:ef:15:4f:4c:f1:9f:ad: 11:aa:95:a3:d8:7b:b1:9a:02:fc:2e:cf:3d:b3:ea:ce:46:53: 79:aa:db:47:1c:3c:e4:fc:85:d5:ff:f4:7f:08:41:64:f5:76: 9f:cd:11:ef:ef:21:b1:f8:51:ed:eb:be:2e:9e:24:fb:99:e5: 56:bd:3f:d9:4b:1d:3b:54:de:57:57:b6:34:23:6b:37:0f:36: 28:84:ce:90:ad:0c:0f:aa:5f:d6:90:90:b8:d3:9d:26:48:29: 0f:a9:83:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgObqmDj5uU+pBKHbYOwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYTRkMTQyZDQxMGFhYjA5MDUxMTJjNGFlNTc5MDc2YzBl NmRjODEwHhcNMjUxMjExMTMwMTUwWhcNMjUxMjEyMTMwMTUwWjAzMTEwLwYDVQQD EyhkNmZjZjM5NWEyNDk2OTk4NTJmZDBkNDRmMGVjNDMyZDUxMmYzMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3NrmbbgMfGivfMT++Qf9WBXdpgt YWnxDhvP+xCuYcJbStBxzgZ5Hn8dkUOm0dBAlKSpl6QJL2jvQHjbJIqL5lXKOymJ z7e6KvdhK9aQbm58YfVuEBfa/JMQcgQFqfJ5txZ7vqnJMTwkB/1gX3+YYdKqvnhZ 0vUGjiBKYQjqOUVuWTmWlFaOl/uEMOWTDt+jeeAXx0hz46X0m020V+PYgCN6ljkR U3aVi1UrOnoAIm62ATPBNRJHwtptL1o3mWS+h1MwTakMxzxFV2TbJFBz/WFMqfiq bfC53FVnUJDPUcNcEwyXAY7ni9hYxrFP/swQyWwzQRRhsBGgvO46wh6f8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb885WiSWmYUv0NRPDsQy1RLzNDMB8GA1UdIwQY MBaAFMGk0ULUEKqwkFESxK5XkHbA5tyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYt OTkwOTc2NzBiNDRlLzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xODA1N2EtN2MyOC00NGIwLWIzNDYtOTkwOTc2NzBiNDRl LzEvd2FUUlF0UVFxckNRVVJMRXJsZVFkc0RtM0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwCT97f6 MyP6arGQnLmGEUe17I6wnRWBOfHV4pbJ74NqoC+qTUtp38vhIorrOKAIAZiHVcO4 vQ3n46p1wIOogdwk1dZEqB/bdiEYDvMG/LvGvxsbG1WBRzYmQBZxlkxM+1/rsWIz 6xsbXlcJlJgj+18KHTmAt1Hy+hXD+cLqr79wbCz6QvpVrjqDx1q+2AGioUpvFOaV rnCuOUTvFU9M8Z+tEaqVo9h7sZoC/C7PPbPqzkZTearbRxw85PyF1f/0fwhBZPV2 n80R7+8hsfhR7eu+Lp4k+5nlVr0/2UsdO1TeV1e2NCNrNw82KITOkK0MD6pf1pCQ uNOdJkgpD6mDyA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:17 2025 by rpki-client