This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json) Hash identifier: HILRybWs/AAjtIEpJqi9E6MLOAAvmxuh8NoPRThbV20= Subject key identifier: 08:CF:3B:7E:CF:4B:FC:55:3C:D6:EF:E6:5D:2B:E8:7D:36:79:2D:B7 Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d Certificate serial: 019B3532A2317C67A172BD270495758083A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft Manifest number: 05BA Signing time: Fri 19 Dec 2025 06:01:09 +0000 Manifest this update: Fri 19 Dec 2025 06:01:09 +0000 Manifest next update: Sat 20 Dec 2025 06:01:09 +0000 Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=) 2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: yEfXlSdNP09DjJDwOZKARq1/tYgw4u8VJMe8LQzADwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:a2:31:7c:67:a1:72:bd:27:04:95:75:80:83:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d Validity Not Before: Dec 19 06:01:09 2025 GMT Not After : Dec 20 06:01:09 2025 GMT Subject: CN=08cf3b7ecf4bfc553cd6efe65d2be87d36792db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:20:c0:2b:59:11:5d:d9:0f:60:90:69:97:9d: 91:0c:d7:1b:b6:ad:34:c5:35:54:ea:77:4d:f4:e9: f6:4b:cc:86:c6:bc:60:9f:d2:91:8a:cc:41:d3:e7: 4c:11:61:b2:18:7a:8d:ac:11:c4:bd:d4:47:dd:f9: 48:19:33:25:51:ed:17:25:87:79:a6:a1:2f:64:30: 03:92:ac:ab:4a:3e:6e:47:2c:29:5f:b4:89:c0:50: d6:bb:c5:28:11:25:c3:ff:e0:b7:aa:79:2b:c2:05: 5a:ee:29:d8:eb:7d:de:8c:a3:1c:3f:b8:4e:b8:7e: 27:d8:a9:f5:7f:87:89:c9:59:7d:48:3a:22:7d:02: 72:b6:19:1a:d2:57:f7:56:59:b1:d1:b3:78:06:17: ac:a7:50:87:c9:41:63:50:35:45:ca:c7:15:c3:01: 64:87:4b:94:01:0d:6e:14:c7:fb:42:61:8d:83:4e: 37:81:d4:f2:9a:3d:fe:1c:14:b7:2e:49:37:04:20: e5:af:9b:15:67:46:84:8f:d3:9c:8a:b2:55:92:15: 3d:7e:d3:5b:ae:93:89:a4:9c:66:42:e2:99:67:53: 9a:38:4a:b2:32:20:af:f6:5a:52:1f:e0:77:da:c5: c7:8e:24:03:89:13:3e:e8:68:4f:94:58:08:9f:f9: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CF:3B:7E:CF:4B:FC:55:3C:D6:EF:E6:5D:2B:E8:7D:36:79:2D:B7 X509v3 Authority Key Identifier: keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:39:ba:bc:2f:8d:2f:87:42:91:bd:65:8a:c3:b7:f4:c8:8d: 23:8e:eb:35:36:25:f0:8a:29:85:ec:65:34:ab:7f:01:73:cd: 7d:e8:cc:8b:90:74:77:b3:9a:c6:f9:61:70:06:48:f7:7c:ed: 18:65:72:34:68:13:39:cb:76:85:d4:c3:8a:6f:ee:59:98:0d: f0:58:a4:71:0c:f3:eb:7c:2c:cf:40:36:05:0c:41:49:e7:d3: 65:54:a1:59:d0:be:27:be:7f:77:83:53:e0:9e:63:a5:37:d9: ba:6a:ee:4a:5a:76:b5:b1:67:9f:76:e7:ec:0c:4b:2a:80:8d: 3e:a7:ac:13:36:9e:f5:0c:50:2a:01:aa:b8:74:85:7a:d9:39: 96:a9:d8:f9:7d:04:9e:db:d1:53:21:fd:d8:45:04:42:12:41: 07:01:f5:cb:51:ba:b6:9c:d1:94:b7:76:94:92:2e:ce:49:aa: d3:72:a0:43:45:5b:0a:72:66:a3:1d:78:05:06:91:97:be:2a: 1a:ba:0d:6c:f2:36:48:87:20:c3:b6:dd:a2:6c:7c:60:fa:a5: 21:87:d3:dc:78:74:d0:8e:de:c3:1c:12:d7:fa:b3:c7:23:56: a3:8d:bb:8c:fc:59:cd:54:e7:95:0c:3d:4e:07:6a:16:e8:1d: 50:11:57:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MqIxfGehcr0nBJV1gIOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDMwZDNiNGM1ODllOTRhM2VmNjFkZGQ1NDAxYThmM2Zm NzliNmQwHhcNMjUxMjE5MDYwMTA5WhcNMjUxMjIwMDYwMTA5WjAzMTEwLwYDVQQD EygwOGNmM2I3ZWNmNGJmYzU1M2NkNmVmZTY1ZDJiZTg3ZDM2NzkyZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CDAK1kRXdkPYJBpl52RDNcbtq00 xTVU6ndN9On2S8yGxrxgn9KRisxB0+dMEWGyGHqNrBHEvdRH3flIGTMlUe0XJYd5 pqEvZDADkqyrSj5uRywpX7SJwFDWu8UoESXD/+C3qnkrwgVa7inY633ejKMcP7hO uH4n2Kn1f4eJyVl9SDoifQJythka0lf3Vlmx0bN4Bhesp1CHyUFjUDVFyscVwwFk h0uUAQ1uFMf7QmGNg043gdTymj3+HBS3Lkk3BCDlr5sVZ0aEj9OcirJVkhU9ftNb rpOJpJxmQuKZZ1OaOEqyMiCv9lpSH+B32sXHjiQDiRM+6GhPlFgIn/n3JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjPO37PS/xVPNbv5l0r6H02eS23MB8GA1UdIwQY MBaAFK8DDTtMWJ6Uo+9h3dVAGo8/95ttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEt OTI0NWE5YWI5NzhiLzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEtOTI0NWE5YWI5Nzhi LzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTm6vC+N L4dCkb1lisO39MiNI47rNTYl8IophexlNKt/AXPNfejMi5B0d7OaxvlhcAZI93zt GGVyNGgTOct2hdTDim/uWZgN8FikcQzz63wsz0A2BQxBSefTZVShWdC+J75/d4NT 4J5jpTfZumruSlp2tbFnn3bn7AxLKoCNPqesEzae9QxQKgGquHSFetk5lqnY+X0E ntvRUyH92EUEQhJBBwH1y1G6tpzRlLd2lJIuzkmq03KgQ0VbCnJmox14BQaRl74q GroNbPI2SIcgw7bdomx8YPqlIYfT3Hh00I7ewxwS1/qzxyNWo427jPxZzVTnlQw9 TgdqFugdUBFXmw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:54 2025 by rpki-client