This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json) Hash identifier: 9A+Rgz/EyVXAK7JYPi34KB9ehSUaPGmzhDzRaX2YONU= Subject key identifier: ED:42:11:BB:96:7F:88:2F:3B:D0:5D:3E:E1:5E:9F:B4:EB:1C:01:13 Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Certificate serial: 019B3343DF7E529BEB8E6DD0C893C544775A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft Manifest number: 0546 Signing time: Thu 18 Dec 2025 21:00:44 +0000 Manifest this update: Thu 18 Dec 2025 21:00:44 +0000 Manifest next update: Fri 19 Dec 2025 21:00:44 +0000 Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: q5GsT35vtNkwOWsmBQ4EisWy/FhKY2+/5pWWr0+0tRM=) 2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:df:7e:52:9b:eb:8e:6d:d0:c8:93:c5:44:77:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Validity Not Before: Dec 18 21:00:44 2025 GMT Not After : Dec 19 21:00:44 2025 GMT Subject: CN=ed4211bb967f882f3bd05d3ee15e9fb4eb1c0113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:2f:02:8b:8d:26:55:eb:09:fb:47:00:d2: 61:b6:0e:53:7b:e0:c8:d6:39:53:87:d0:27:49:63: 61:81:c2:15:fd:45:9b:81:d7:d3:7f:c2:d4:be:df: 91:89:11:17:50:a4:96:07:85:2d:7c:91:f6:a7:b7: ba:a0:53:e0:19:48:09:e6:09:e3:3b:8f:78:11:fe: 37:9b:32:34:c8:d7:e3:90:b0:67:bc:d3:04:3c:34: 8a:e4:ec:36:ee:3c:c8:f3:ac:03:ee:dc:e8:a8:ec: 84:a2:82:13:78:51:c0:63:2d:d9:ab:4d:4e:5e:f6: 77:34:3f:7e:1b:e0:fd:ee:19:13:e1:ce:dc:f3:db: af:1e:37:37:07:f1:14:94:b1:00:31:4b:f8:7b:59: 15:c2:57:7c:bd:9f:7f:6b:7e:08:64:0d:6c:ce:49: 6a:7e:84:e4:89:59:64:f4:4e:11:02:eb:5e:f8:e5: 5a:84:d0:12:32:a8:81:8d:13:07:ec:6c:e1:b4:05: 5d:dc:1e:cc:1c:44:bf:16:2b:b8:f3:ae:80:ee:71: 8c:96:09:1c:43:40:f6:55:92:ab:d2:de:c5:09:89: eb:38:35:2b:14:65:4e:52:2d:98:b6:b4:92:62:43: a5:14:da:f2:19:84:b7:49:78:a9:3e:6b:eb:28:e5: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:11:BB:96:7F:88:2F:3B:D0:5D:3E:E1:5E:9F:B4:EB:1C:01:13 X509v3 Authority Key Identifier: keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a8:0b:d1:42:b6:ae:64:7b:62:60:fe:e4:33:3f:d4:4f:c4: 07:b3:d1:06:c6:99:0d:b9:f3:4a:1f:c9:30:a1:56:34:29:54: 64:15:7f:31:f5:5c:e1:79:35:a2:9c:b2:7d:1f:55:34:05:2b: a6:b6:3d:cb:75:10:53:af:31:30:c5:cf:2f:1b:29:10:c9:d0: d9:6f:77:fb:81:56:cf:42:b2:0e:a2:d1:ee:5c:07:4f:ab:1a: 49:cb:cf:52:8a:13:3c:0a:fd:26:5e:16:65:3c:d6:4b:2d:6b: 14:9d:87:b5:82:24:c2:6a:f7:3c:cb:8e:01:22:83:c3:2c:f3: f2:93:31:17:f8:0c:74:fa:ba:bb:9a:01:20:49:fd:c0:37:c3: dd:93:bf:87:db:2b:7d:6c:93:e1:fd:da:89:4d:61:24:2e:48: b6:4d:82:c1:49:14:a3:cd:49:19:a6:22:8f:d3:ae:aa:07:6e: ff:4b:d7:ad:af:13:d7:33:31:11:51:7d:97:86:53:f7:9e:4a: 9b:1f:8a:8e:d1:79:5a:7b:b1:2a:c6:62:a3:28:15:2b:26:af: 33:7f:44:ec:d0:59:7f:73:6f:e6:72:0f:ce:7b:53:20:7a:cb: f8:e0:e3:ae:aa:54:2d:ca:c7:58:f8:46:d9:14:fb:64:ca:b6: fb:85:de:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ99+Upvrjm3QyJPFRHdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjE4NjkwOTkxNDVlMzFkN2I0YjVjNTVlYzVmOWE3MjRm ZmNhN2UwHhcNMjUxMjE4MjEwMDQ0WhcNMjUxMjE5MjEwMDQ0WjAzMTEwLwYDVQQD EyhlZDQyMTFiYjk2N2Y4ODJmM2JkMDVkM2VlMTVlOWZiNGViMWMwMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7kvAouNJlXrCftHANJhtg5Te+DI 1jlTh9AnSWNhgcIV/UWbgdfTf8LUvt+RiREXUKSWB4UtfJH2p7e6oFPgGUgJ5gnj O494Ef43mzI0yNfjkLBnvNMEPDSK5Ow27jzI86wD7tzoqOyEooITeFHAYy3Zq01O XvZ3ND9+G+D97hkT4c7c89uvHjc3B/EUlLEAMUv4e1kVwld8vZ9/a34IZA1szklq foTkiVlk9E4RAute+OVahNASMqiBjRMH7GzhtAVd3B7MHES/Fiu4866A7nGMlgkc Q0D2VZKr0t7FCYnrODUrFGVOUi2YtrSSYkOlFNryGYS3SXipPmvrKOW1MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1CEbuWf4gvO9BdPuFen7TrHAETMB8GA1UdIwQY MBaAFGlhhpCZFF4x17S1xV7F+ack/8p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQt MmJjY2MyNzVlNjk2LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQtMmJjY2MyNzVlNjk2 LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqgL0UK2 rmR7YmD+5DM/1E/EB7PRBsaZDbnzSh/JMKFWNClUZBV/MfVc4Xk1opyyfR9VNAUr prY9y3UQU68xMMXPLxspEMnQ2W93+4FWz0KyDqLR7lwHT6saScvPUooTPAr9Jl4W ZTzWSy1rFJ2HtYIkwmr3PMuOASKDwyzz8pMxF/gMdPq6u5oBIEn9wDfD3ZO/h9sr fWyT4f3aiU1hJC5Itk2CwUkUo81JGaYij9Ouqgdu/0vXra8T1zMxEVF9l4ZT955K mx+KjtF5WnuxKsZioygVKyavM39E7NBZf3Nv5nIPzntTIHrL+ODjrqpULcrHWPhG 2RT7ZMq2+4XeFg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:39:03 2025 by rpki-client