This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json) Hash identifier: nlc3qN0nrxy/efWhrH1d922GXXVu+IDOpYKQZkWEcG8= Subject key identifier: 38:59:5A:5D:2C:22:AA:5A:EB:58:E7:83:55:03:77:AF:F3:EB:96:57 Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a Certificate serial: 019B59763F80A8CF28F488E530543B87964E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft Manifest number: 0E50 Signing time: Fri 26 Dec 2025 07:01:20 +0000 Manifest this update: Fri 26 Dec 2025 07:01:20 +0000 Manifest next update: Sat 27 Dec 2025 07:01:20 +0000 Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: Bn0zo129F4pixp7KdgYwxBT7Kq6WZeJbPne/FDL+vsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:3f:80:a8:cf:28:f4:88:e5:30:54:3b:87:96:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a Validity Not Before: Dec 26 07:01:20 2025 GMT Not After : Dec 27 07:01:20 2025 GMT Subject: CN=38595a5d2c22aa5aeb58e783550377aff3eb9657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1d:b5:29:22:8e:b5:62:41:ef:ed:0d:eb:fa: f4:7a:2e:10:63:9e:26:6f:10:c0:55:c7:64:8a:e2: ee:6e:6a:27:63:6d:6f:59:78:0f:3b:8c:72:86:eb: 30:12:ec:89:91:bc:b8:61:8d:99:33:15:a0:02:14: e1:d6:ea:41:f7:80:a8:3e:6d:81:89:ce:c4:94:7a: 32:5d:38:65:d1:9d:61:26:2e:60:6e:c1:03:35:82: 86:2c:d3:a0:70:7f:9d:7c:57:9b:ef:97:cb:56:56: 57:f7:bb:2d:3a:7f:88:cc:49:b6:8f:bc:7d:53:d4: b2:a1:b9:ac:01:02:83:92:eb:c8:a8:28:53:f3:85: 69:e0:32:db:33:03:12:14:be:2c:46:f7:c2:c3:bf: 94:c4:fc:38:73:e4:22:c1:fc:31:0b:93:1d:5f:0e: 4d:fa:ea:17:35:27:7b:26:1a:a1:9f:bb:46:5f:89: 50:34:ee:9c:6f:9e:2d:4d:f7:21:fe:8a:2c:13:82: 69:ad:33:5f:95:c9:89:a6:53:d4:cf:42:ac:f9:7a: 97:ed:37:db:82:42:21:1d:90:dc:6f:75:b9:38:f7: 83:4c:83:7a:de:87:63:0f:42:5c:7d:94:24:4a:8b: 56:99:4d:60:30:cc:a6:a0:a1:b5:c3:4b:bb:09:f3: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:59:5A:5D:2C:22:AA:5A:EB:58:E7:83:55:03:77:AF:F3:EB:96:57 X509v3 Authority Key Identifier: keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9e:46:ad:74:ab:76:74:b7:08:86:bf:20:c6:4b:07:f9:f1: c1:48:21:04:41:ba:7c:7a:56:95:b2:5d:e3:52:65:9d:70:79: f4:41:a6:f5:8d:44:71:f7:22:cd:e9:b9:68:8a:28:3f:8d:44: d6:35:b4:4e:a7:4e:0b:81:af:5f:76:64:34:7c:4e:e4:c7:62: 1f:03:f2:89:80:b2:a9:2e:b3:f0:65:e7:44:ce:8e:93:d7:b9: 48:93:0a:c9:f6:7e:84:40:6b:be:e9:79:55:70:36:8a:d8:6a: e6:51:45:39:46:83:e9:db:b5:3b:7d:ac:5e:fb:2b:a6:13:ea: 2a:78:f6:e9:4a:a0:fb:ae:f4:b9:17:10:3e:c8:2f:ed:d3:4a: b3:89:cd:6e:63:ed:58:c5:59:4e:02:02:2e:2c:10:76:9e:fb: 1b:e8:ec:7a:29:36:08:a4:b1:3f:a6:50:53:b9:4a:4d:95:a8: 8b:39:cd:d3:4d:5f:a8:e2:24:df:b0:91:2a:7f:c3:59:5c:33: bf:a7:24:b0:94:c1:63:f4:77:44:12:28:b4:09:3b:77:3a:13: 2e:ca:65:1e:7e:1d:50:40:8d:d7:9d:80:a0:33:e2:8b:6a:25: df:fc:79:80:0b:b5:c9:25:60:86:92:b0:d5:4b:a4:36:3f:68: ab:c9:bc:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdj+AqM8o9IjlMFQ7h5ZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjJiYjNlOWQzNWI1YWY5ZGNhMDhlYTdjY2VmZjQzNTE5 YTRhNmEwHhcNMjUxMjI2MDcwMTIwWhcNMjUxMjI3MDcwMTIwWjAzMTEwLwYDVQQD EygzODU5NWE1ZDJjMjJhYTVhZWI1OGU3ODM1NTAzNzdhZmYzZWI5NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h21KSKOtWJB7+0N6/r0ei4QY54m bxDAVcdkiuLubmonY21vWXgPO4xyhuswEuyJkby4YY2ZMxWgAhTh1upB94CoPm2B ic7ElHoyXThl0Z1hJi5gbsEDNYKGLNOgcH+dfFeb75fLVlZX97stOn+IzEm2j7x9 U9SyobmsAQKDkuvIqChT84Vp4DLbMwMSFL4sRvfCw7+UxPw4c+QiwfwxC5MdXw5N +uoXNSd7Jhqhn7tGX4lQNO6cb54tTfch/oosE4JprTNflcmJplPUz0Ks+XqX7Tfb gkIhHZDcb3W5OPeDTIN63odjD0JcfZQkSotWmU1gMMymoKG1w0u7CfMTgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhZWl0sIqpa61jng1UDd6/z65ZXMB8GA1UdIwQY MBaAFGliuz6dNbWvncoI6nzO/0NRmkpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYt NTEzNmYyNjIyNjQxLzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYtNTEzNmYyNjIyNjQx LzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ5GrXSr dnS3CIa/IMZLB/nxwUghBEG6fHpWlbJd41JlnXB59EGm9Y1Ecfcizem5aIooP41E 1jW0TqdOC4GvX3ZkNHxO5MdiHwPyiYCyqS6z8GXnRM6Ok9e5SJMKyfZ+hEBrvul5 VXA2ithq5lFFOUaD6du1O32sXvsrphPqKnj26Uqg+670uRcQPsgv7dNKs4nNbmPt WMVZTgICLiwQdp77G+jseik2CKSxP6ZQU7lKTZWoiznN001fqOIk37CRKn/DWVwz v6cksJTBY/R3RBIotAk7dzoTLsplHn4dUECN152AoDPii2ol3/x5gAu1ySVghpKw 1UukNj9oq8m8UA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:30 2025 by rpki-client