This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json) Hash identifier: TbmWD3qui7d822J4lr99LXi+VB3gY4DlIFRjCCDt/sA= Subject key identifier: 25:4B:B5:37:19:8C:BD:C2:0F:F0:C2:01:1B:06:BB:FE:0F:4C:33:4F Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc Certificate serial: 019B5AF612F2A6B59415CEB6708AE7108023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft Manifest number: 0AF3 Signing time: Fri 26 Dec 2025 14:00:34 +0000 Manifest this update: Fri 26 Dec 2025 14:00:34 +0000 Manifest next update: Sat 27 Dec 2025 14:00:34 +0000 Files and hashes: 1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: 7GGNpG6iys1qXoxqDu77gdK7OOpxCh2Cu/KBtrSmDp4=) 2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:12:f2:a6:b5:94:15:ce:b6:70:8a:e7:10:80:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc Validity Not Before: Dec 26 14:00:34 2025 GMT Not After : Dec 27 14:00:34 2025 GMT Subject: CN=254bb537198cbdc20ff0c2011b06bbfe0f4c334f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:9b:4a:13:f2:03:7c:b8:fd:1e:92:2f:99: 2b:1c:4d:99:36:39:e9:a3:98:2f:74:79:08:37:80: 3f:f3:c3:99:22:44:f1:6e:cd:e2:42:01:3e:43:dc: e2:21:3f:f6:60:76:17:88:b5:0e:9f:b5:45:66:4a: 8d:7c:a6:43:9d:c1:c8:44:23:0b:89:13:44:45:40: a7:a9:4c:c3:3d:89:c5:2e:dc:41:6d:57:d2:1a:a3: 40:4c:f6:59:cb:b2:a0:07:01:14:62:39:d0:c2:f0: e5:76:d5:fd:6b:f7:6d:b4:4b:f5:0c:37:45:09:48: e5:69:cb:46:8b:c8:d5:d7:b3:2d:b9:8b:f9:07:84: 76:84:b2:0e:fb:97:d3:eb:b6:f5:aa:12:d1:b4:f3: 13:bc:c8:e6:6c:0b:74:78:44:d6:91:10:ff:ab:4e: c2:91:06:52:d7:11:cd:07:d7:c2:07:b9:53:95:1f: 47:a6:87:fa:c2:93:4b:ef:ec:d6:e8:c8:bd:ac:03: d0:aa:05:fc:ac:cb:e7:54:5e:46:aa:59:c2:c6:0b: 19:86:d9:d9:75:43:b4:dd:bf:b6:79:c0:90:ec:d1: bc:e6:f4:32:06:b6:a9:34:03:34:92:ba:46:2f:fa: f0:67:81:6f:b9:e7:c6:cc:ed:5f:7b:a2:7f:07:69: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4B:B5:37:19:8C:BD:C2:0F:F0:C2:01:1B:06:BB:FE:0F:4C:33:4F X509v3 Authority Key Identifier: keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7d:88:5b:df:2b:7f:dc:82:c1:65:7e:50:8f:39:b5:f2:18: c7:68:d0:47:5e:ac:b1:e5:b7:f9:f3:6d:8d:d6:5a:49:96:35: 29:b4:e3:0f:e9:36:90:2e:8e:16:d3:d9:36:28:0b:1b:85:86: 41:0f:31:5f:03:ed:d3:45:df:c7:94:7a:fe:35:17:8f:26:94: 08:e5:eb:8e:15:46:66:96:a5:3a:41:b6:81:df:cd:9c:9b:76: 0f:4b:fa:11:87:12:fa:34:df:ce:cc:a4:29:83:3b:71:44:4b: 7d:4c:bb:b5:ea:16:14:39:3d:34:08:06:5f:1d:8d:36:62:9f: d0:53:5d:a1:81:85:22:73:56:b3:c8:4f:01:00:a0:8d:b3:d4: 60:66:7c:43:f1:1a:95:e2:bb:18:17:ba:d2:8e:ba:6f:73:a7: 73:75:aa:78:2d:80:3c:83:07:d6:a3:bb:01:df:d8:9e:73:4d: 8c:b7:63:2d:7a:74:09:a3:fc:9d:3e:f5:1f:4a:60:7c:78:fe: 91:84:f7:41:5a:c0:70:ae:39:81:cb:09:52:22:7e:a2:8a:2b: 7f:e1:07:d0:3d:69:7d:23:3c:cb:6b:23:1e:f6:2b:e1:76:6a: 1e:ef:5f:e9:3f:53:76:1d:be:b2:d5:ce:84:7a:8d:8a:82:16: 81:37:9a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9hLyprWUFc62cIrnEIAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MDAxYmNjNjlhMTY1MDM0MjFiODg4NTFmNDdhYTE2YzVj ZjJkYmMwHhcNMjUxMjI2MTQwMDM0WhcNMjUxMjI3MTQwMDM0WjAzMTEwLwYDVQQD EygyNTRiYjUzNzE5OGNiZGMyMGZmMGMyMDExYjA2YmJmZTBmNGMzMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXqbShPyA3y4/R6SL5krHE2ZNjnp o5gvdHkIN4A/88OZIkTxbs3iQgE+Q9ziIT/2YHYXiLUOn7VFZkqNfKZDncHIRCML iRNERUCnqUzDPYnFLtxBbVfSGqNATPZZy7KgBwEUYjnQwvDldtX9a/dttEv1DDdF CUjlactGi8jV17MtuYv5B4R2hLIO+5fT67b1qhLRtPMTvMjmbAt0eETWkRD/q07C kQZS1xHNB9fCB7lTlR9Hpof6wpNL7+zW6Mi9rAPQqgX8rMvnVF5GqlnCxgsZhtnZ dUO03b+2ecCQ7NG85vQyBrapNAM0krpGL/rwZ4FvuefGzO1fe6J/B2nH1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVLtTcZjL3CD/DCARsGu/4PTDNPMB8GA1UdIwQY MBaAFHcAG8xpoWUDQhuIhR9HqhbFzy28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMt MGE4YmQyZjM2YzcyLzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMtMGE4YmQyZjM2Yzcy LzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX2IW98r f9yCwWV+UI85tfIYx2jQR16sseW3+fNtjdZaSZY1KbTjD+k2kC6OFtPZNigLG4WG QQ8xXwPt00Xfx5R6/jUXjyaUCOXrjhVGZpalOkG2gd/NnJt2D0v6EYcS+jTfzsyk KYM7cURLfUy7teoWFDk9NAgGXx2NNmKf0FNdoYGFInNWs8hPAQCgjbPUYGZ8Q/Ea leK7GBe60o66b3Onc3WqeC2APIMH1qO7Ad/YnnNNjLdjLXp0CaP8nT71H0pgfHj+ kYT3QVrAcK45gcsJUiJ+ooorf+EH0D1pfSM8y2sjHvYr4XZqHu9f6T9Tdh2+stXO hHqNioIWgTeabA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:39 2025 by rpki-client