This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json) Hash identifier: GsNY17RxMi0tlx/8fNY/6pOfmsEayUjVV4TxsstUz/8= Subject key identifier: 50:6A:39:7A:58:A9:44:FC:12:D0:18:C7:AE:B9:F4:1D:A7:C2:04:E5 Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Certificate serial: 019B2F67185E910447651F4D2E1E57F1240F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft Manifest number: 0544 Signing time: Thu 18 Dec 2025 03:00:44 +0000 Manifest this update: Thu 18 Dec 2025 03:00:44 +0000 Manifest next update: Fri 19 Dec 2025 03:00:44 +0000 Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: KzfVTwCvqpiZOrJ14CK6Yhdecngvw/P67k1o1xsHWrM=) 2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:18:5e:91:04:47:65:1f:4d:2e:1e:57:f1:24:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Validity Not Before: Dec 18 03:00:44 2025 GMT Not After : Dec 19 03:00:44 2025 GMT Subject: CN=506a397a58a944fc12d018c7aeb9f41da7c204e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:30:62:bd:1b:45:c2:d5:33:5b:d9:f4:36: f3:f3:da:13:0d:49:d1:63:1d:64:b9:1b:0c:c5:8a: 4e:70:72:0f:d3:37:44:5a:0d:85:bf:50:64:b4:47: 6b:d4:46:de:dd:12:bc:1f:45:5a:1d:28:19:b2:a8: d4:53:73:da:08:33:76:75:2c:eb:66:75:99:be:4e: a1:43:c9:53:02:e7:83:f8:d0:c8:db:67:f5:9a:fa: 61:20:ce:b5:cb:41:15:3a:30:e0:9f:e4:0a:a1:17: 0d:7a:54:fa:7a:5f:5b:3a:92:bc:ba:53:b0:93:9d: d3:34:75:fa:a6:57:76:20:18:42:2b:b9:9c:2a:85: 5c:a9:79:c7:3c:d7:8a:cd:4d:73:0d:90:bc:c0:a7: 6b:99:55:af:95:59:40:43:80:b1:02:59:0d:89:74: 43:29:49:eb:e8:75:b3:f3:4c:13:1c:2a:73:74:6d: ed:7b:70:e3:67:46:24:8b:b1:26:d4:be:0f:79:a9: 0b:12:45:74:00:ea:b5:ad:bc:69:b8:db:cb:24:de: c0:ab:8c:03:0b:e9:5a:fd:ef:3d:2f:50:20:01:78: 05:68:29:34:6b:24:9f:2d:ae:6f:be:43:f0:e6:69: a5:40:c2:40:c8:ed:55:c7:87:2f:50:8e:fd:b7:62: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6A:39:7A:58:A9:44:FC:12:D0:18:C7:AE:B9:F4:1D:A7:C2:04:E5 X509v3 Authority Key Identifier: keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1b:06:ef:96:9d:09:d6:38:8f:e1:2c:bb:89:01:92:75:bf: 18:bf:aa:b9:8e:f4:43:31:57:4d:23:d9:9c:50:01:99:d3:28: de:70:56:4b:c7:84:24:75:e6:c3:ce:a9:72:e0:b0:bc:03:32: 3b:49:03:9e:df:bb:2b:5a:40:16:7f:88:e0:2f:75:6b:d3:74: 47:65:f2:e7:8e:e9:46:29:74:aa:8a:84:43:c5:25:ce:31:25: ab:ef:de:b3:dd:cd:18:cf:41:66:18:3d:1e:71:cb:98:98:d2: 1a:5f:c9:d1:68:5d:1d:d0:c5:77:58:71:7d:31:f9:86:20:22: ec:19:8c:07:ea:e4:33:29:fa:f6:74:43:53:3f:46:a4:87:3c: 89:d9:2a:61:cb:43:88:08:d8:c0:35:cc:35:13:12:14:83:3f: 43:9e:0f:07:da:80:ec:7e:05:36:47:1b:f3:ab:0d:00:62:0e: 58:31:82:8c:92:29:fc:b7:bb:ed:9b:82:5c:00:a9:dd:08:63: 4a:b6:91:aa:81:87:44:85:76:d5:3e:64:bb:71:e3:a6:9f:2e: 8b:af:82:7a:2c:b2:cf:58:f3:25:c0:c7:23:20:28:73:57:65: 98:33:58:74:40:58:23:2a:93:e9:10:76:3f:50:b0:c8:50:69: df:71:37:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZxhekQRHZR9NLh5X8SQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjE4NjkwOTkxNDVlMzFkN2I0YjVjNTVlYzVmOWE3MjRm ZmNhN2UwHhcNMjUxMjE4MDMwMDQ0WhcNMjUxMjE5MDMwMDQ0WjAzMTEwLwYDVQQD Eyg1MDZhMzk3YTU4YTk0NGZjMTJkMDE4YzdhZWI5ZjQxZGE3YzIwNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA4wYr0bRcLVM1vZ9Dbz89oTDUnR Yx1kuRsMxYpOcHIP0zdEWg2Fv1BktEdr1Ebe3RK8H0VaHSgZsqjUU3PaCDN2dSzr ZnWZvk6hQ8lTAueD+NDI22f1mvphIM61y0EVOjDgn+QKoRcNelT6el9bOpK8ulOw k53TNHX6pld2IBhCK7mcKoVcqXnHPNeKzU1zDZC8wKdrmVWvlVlAQ4CxAlkNiXRD KUnr6HWz80wTHCpzdG3te3DjZ0Yki7Em1L4PeakLEkV0AOq1rbxpuNvLJN7Aq4wD C+la/e89L1AgAXgFaCk0aySfLa5vvkPw5mmlQMJAyO1Vx4cvUI79t2LJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBqOXpYqUT8EtAYx6659B2nwgTlMB8GA1UdIwQY MBaAFGlhhpCZFF4x17S1xV7F+ack/8p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQt MmJjY2MyNzVlNjk2LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQtMmJjY2MyNzVlNjk2 LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBsG75ad CdY4j+Esu4kBknW/GL+quY70QzFXTSPZnFABmdMo3nBWS8eEJHXmw86pcuCwvAMy O0kDnt+7K1pAFn+I4C91a9N0R2Xy547pRil0qoqEQ8UlzjElq+/es93NGM9BZhg9 HnHLmJjSGl/J0WhdHdDFd1hxfTH5hiAi7BmMB+rkMyn69nRDUz9GpIc8idkqYctD iAjYwDXMNRMSFIM/Q54PB9qA7H4FNkcb86sNAGIOWDGCjJIp/Le77ZuCXACp3Qhj SraRqoGHRIV21T5ku3Hjpp8ui6+Ceiyyz1jzJcDHIyAoc1dlmDNYdEBYIyqT6RB2 P1CwyFBp33E3/Q== -----END CERTIFICATE-----Generated at Thu Dec 18 06:03:03 2025 by rpki-client