This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json) Hash identifier: kyxF/GYaMkfwIEglyNlz6dGzgLQCIczbSfmg6/nwm+E= Subject key identifier: 85:C0:3C:34:42:7B:09:88:9F:46:C3:02:DF:D4:30:B4:45:70:53:80 Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74 Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174 Certificate serial: 019B1A96DBEF091453F245E72424854EF68F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft Manifest number: 0B83 Signing time: Sun 14 Dec 2025 02:00:52 +0000 Manifest this update: Sun 14 Dec 2025 02:00:52 +0000 Manifest next update: Mon 15 Dec 2025 02:00:52 +0000 Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: R2+0ebpaC/96h0TtQEL6VtUrWgkSSTOp/56QRmmQd6s=) 2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:db:ef:09:14:53:f2:45:e7:24:24:85:4e:f6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174 Validity Not Before: Dec 14 02:00:52 2025 GMT Not After : Dec 15 02:00:52 2025 GMT Subject: CN=85c03c34427b09889f46c302dfd430b445705380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:37:36:12:d1:ee:3c:dd:b9:d5:dc:05:79: 54:c7:aa:20:b6:cf:a3:e2:d8:ab:26:af:1c:9f:3f: 94:8e:6e:8d:15:05:73:1e:64:1e:6e:0c:1d:22:c4: 00:e4:0f:36:00:7a:c8:ca:f3:b1:96:98:41:85:e9: fc:cc:66:a1:6a:9f:42:be:5b:41:0d:91:21:9c:24: 7e:7f:c5:a6:a9:20:b1:e7:27:98:dc:3e:cd:72:38: c3:b8:29:a5:43:3c:27:9d:cc:5f:5c:99:ff:39:20: 6a:fb:53:7b:cb:1c:64:db:3a:56:57:e4:79:4f:c6: 35:6e:36:90:af:3b:1c:a1:3d:52:18:be:12:06:dd: da:45:c1:f6:ec:7c:9d:67:3c:bf:8d:af:a6:e7:42: cc:15:b7:79:2a:2d:9e:1c:07:28:83:4d:3c:86:5e: f5:8e:2e:0b:44:5c:54:69:06:e0:85:09:6f:30:62: 4c:02:60:1c:fc:d8:78:b4:29:56:49:9c:0f:c2:d0: 44:6d:7b:ba:d7:da:1c:59:c6:a8:f6:f7:d3:99:93: 11:fa:63:2f:47:cd:5c:cc:14:20:77:e5:f5:cd:64: 75:34:d0:c9:f8:18:ee:2a:fa:08:82:38:cc:07:e0: 5d:ba:18:05:bf:15:e2:86:89:a1:dd:40:8c:48:bb: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C0:3C:34:42:7B:09:88:9F:46:C3:02:DF:D4:30:B4:45:70:53:80 X509v3 Authority Key Identifier: keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b3:2a:0f:66:79:64:d9:c5:c0:2f:8d:0a:5a:70:53:52:3e: 30:82:cc:df:91:3f:61:6a:57:1f:c2:67:f6:28:c3:7d:65:86: 0a:7a:11:50:09:04:ae:13:2e:04:90:55:89:25:0a:54:d8:2f: 3d:5d:5c:06:9d:ee:34:ce:54:69:e1:1e:2e:99:79:c7:32:08: 1d:4c:f8:f5:e6:c6:b7:e7:b2:0f:cf:7e:57:68:ba:4d:1f:47: cc:2c:2a:ec:4c:67:49:ad:be:44:01:76:1b:47:86:ee:ac:06: 26:14:f4:cd:f4:cb:ce:97:d4:26:d6:09:4f:9f:6c:a8:f5:48: b7:13:ec:ed:17:4a:83:e8:11:98:d7:bc:e8:91:64:dc:73:a0: 23:b7:59:b8:8a:cf:fb:d7:7e:1f:72:e2:02:c0:4a:ed:66:66: d1:d7:c7:05:cf:2e:bd:28:92:6c:e2:66:28:3e:26:49:f3:2f: dc:25:66:d8:7b:38:a6:e3:03:e7:9d:bf:1f:ff:6e:01:96:0e: b1:eb:9f:5e:b5:5c:72:fc:3d:c4:d5:5c:8d:b8:90:83:37:36: 27:57:44:1d:38:fc:77:26:5c:e7:32:34:d3:85:d0:cb:54:b1: e2:1c:64:db:df:36:49:18:7a:5f:36:40:8c:a5:8d:67:f1:59: dd:eb:03:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaltvvCRRT8kXnJCSFTvaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJjMDIxYjY1N2E1OTRlZTU4ZDlkMzZkOGQ5MTgzMWQw ODUxNzQwHhcNMjUxMjE0MDIwMDUyWhcNMjUxMjE1MDIwMDUyWjAzMTEwLwYDVQQD Eyg4NWMwM2MzNDQyN2IwOTg4OWY0NmMzMDJkZmQ0MzBiNDQ1NzA1MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHU3NhLR7jzdudXcBXlUx6ogts+j 4tirJq8cnz+Ujm6NFQVzHmQebgwdIsQA5A82AHrIyvOxlphBhen8zGahap9CvltB DZEhnCR+f8WmqSCx5yeY3D7NcjjDuCmlQzwnncxfXJn/OSBq+1N7yxxk2zpWV+R5 T8Y1bjaQrzscoT1SGL4SBt3aRcH27HydZzy/ja+m50LMFbd5Ki2eHAcog008hl71 ji4LRFxUaQbghQlvMGJMAmAc/Nh4tClWSZwPwtBEbXu619ocWcao9vfTmZMR+mMv R81czBQgd+X1zWR1NNDJ+BjuKvoIgjjMB+BduhgFvxXihomh3UCMSLuXNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXAPDRCewmIn0bDAt/UMLRFcFOAMB8GA1UdIwQY MBaAFEcLwCG2V6WU7ljZ022NkYMdCFF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQt M2JlY2RkZmNjYWU2LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQtM2JlY2RkZmNjYWU2 LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrMqD2Z5 ZNnFwC+NClpwU1I+MILM35E/YWpXH8Jn9ijDfWWGCnoRUAkErhMuBJBViSUKVNgv PV1cBp3uNM5UaeEeLpl5xzIIHUz49ebGt+eyD89+V2i6TR9HzCwq7ExnSa2+RAF2 G0eG7qwGJhT0zfTLzpfUJtYJT59sqPVItxPs7RdKg+gRmNe86JFk3HOgI7dZuIrP +9d+H3LiAsBK7WZm0dfHBc8uvSiSbOJmKD4mSfMv3CVm2Hs4puMD552/H/9uAZYO seufXrVccvw9xNVcjbiQgzc2J1dEHTj8dyZc5zI004XQy1Sx4hxk2982SRh6XzZA jKWNZ/FZ3esDuQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:43:24 2025 by rpki-client