This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json) Hash identifier: jC2+A/W29gmularcKPqjnM/yroPHDNOivPJ2zCWLFWM= Subject key identifier: CC:94:68:09:DE:21:4B:A0:42:83:E5:D3:98:2D:B5:39:40:0C:2A:11 Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4 Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4 Certificate serial: 019B1013599BDEB3772EBBDE158C9F2646F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft Manifest number: 136F Signing time: Fri 12 Dec 2025 01:01:02 +0000 Manifest this update: Fri 12 Dec 2025 01:01:02 +0000 Manifest next update: Sat 13 Dec 2025 01:01:02 +0000 Files and hashes: 1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=) 2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=) 3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: TDfcUE/XW1qrI+UhKh18Ve05tJUV+Lsbepiyhv0QHUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:59:9b:de:b3:77:2e:bb:de:15:8c:9f:26:46:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4 Validity Not Before: Dec 12 01:01:02 2025 GMT Not After : Dec 13 01:01:02 2025 GMT Subject: CN=cc946809de214ba04283e5d3982db539400c2a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:68:d2:f1:61:ca:da:05:d8:c4:3e:5d:1e: 58:85:be:2c:68:28:c7:9a:c2:31:39:4e:75:f6:d8: c8:97:2b:91:0f:9a:dd:a0:1d:96:4f:4d:8a:28:8c: 42:76:a1:67:78:58:29:48:a1:5d:f1:31:18:5d:34: 5d:72:46:27:85:48:b4:61:98:f1:18:13:60:b7:58: 65:cd:f4:3e:e2:4a:6c:38:19:0f:ef:8e:27:54:90: 3f:14:bd:e5:9c:6e:60:3c:46:24:dd:4c:d9:20:b5: 0d:f1:31:cf:ae:d3:d5:36:8e:c0:ad:e5:05:35:cd: fc:05:f9:dc:ab:5d:07:15:c4:47:57:33:d7:0c:33: 9e:05:49:f4:d9:9d:b6:b9:e2:be:65:e2:26:ac:45: 4f:b8:4e:54:7f:3f:d5:89:61:ab:64:24:ad:76:71: 1b:be:bb:ad:ec:e8:e5:ee:56:c9:f7:4f:43:a1:11: 14:8f:b8:44:7b:38:a3:10:b0:eb:3e:e0:ed:17:df: b9:6e:72:11:b3:fc:5e:2b:d4:0d:97:aa:bd:a3:65: 75:4f:31:16:a5:98:a6:27:53:c0:31:b1:b3:a0:a7: a9:2d:89:da:ba:43:e6:8d:d8:f4:d4:32:21:3b:7a: fc:7a:dc:9b:bf:79:ab:c6:5c:55:4d:ef:93:3f:22: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:94:68:09:DE:21:4B:A0:42:83:E5:D3:98:2D:B5:39:40:0C:2A:11 X509v3 Authority Key Identifier: keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e1:61:42:a4:f7:58:76:85:ce:f8:f0:d1:a9:4c:ae:5d:81: 22:7f:99:5c:e2:54:04:9b:ae:d6:e8:2c:da:42:a6:d6:88:e0: e4:db:10:31:ed:4f:cb:a0:31:dc:df:7f:b2:96:f6:d3:e7:33: 6c:70:17:23:1d:27:73:c4:22:5c:6b:98:cb:5f:bc:d6:54:7a: ca:fb:8e:82:49:f5:f1:d2:c0:ea:b9:b3:57:7c:df:93:88:e1: 62:18:48:d5:7a:a4:27:31:eb:a0:1d:04:ed:6d:66:6b:58:01: 0f:84:a5:cf:8e:03:64:04:b6:62:cd:4c:74:12:ac:3b:6a:e1: 47:2e:44:62:2b:64:28:b7:90:42:8c:7f:cd:8f:b7:1e:b2:ae: 7d:0a:c3:7b:3d:9f:be:ac:7f:29:04:9c:df:50:27:c3:b4:51: c7:44:f9:37:79:f9:12:8c:33:9a:1a:6e:cd:c2:10:0f:ed:6b: 51:51:27:f1:ce:e6:4b:f6:c5:1f:3d:0a:42:aa:9c:19:6b:91: 65:80:d7:6c:74:43:dc:14:73:16:b7:36:b6:a8:1e:68:78:64: e4:0b:46:30:c3:bd:62:5e:5b:e8:7e:ff:46:8b:9a:a1:c2:af: e1:fc:b2:3d:0a:da:c6:de:ab:10:a1:ce:82:ed:85:64:6f:1e: 5a:38:7c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE1mb3rN3LrveFYyfJkbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTE5NmQ5OGRlY2QzOGViMDNmNWYwNmI0OGU1NTZjNzRm MjMxZjQwHhcNMjUxMjEyMDEwMTAyWhcNMjUxMjEzMDEwMTAyWjAzMTEwLwYDVQQD EyhjYzk0NjgwOWRlMjE0YmEwNDI4M2U1ZDM5ODJkYjUzOTQwMGMyYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyylo0vFhytoF2MQ+XR5Yhb4saCjH msIxOU519tjIlyuRD5rdoB2WT02KKIxCdqFneFgpSKFd8TEYXTRdckYnhUi0YZjx GBNgt1hlzfQ+4kpsOBkP744nVJA/FL3lnG5gPEYk3UzZILUN8THPrtPVNo7AreUF Nc38Bfncq10HFcRHVzPXDDOeBUn02Z22ueK+ZeImrEVPuE5Ufz/ViWGrZCStdnEb vrut7Ojl7lbJ909DoREUj7hEezijELDrPuDtF9+5bnIRs/xeK9QNl6q9o2V1TzEW pZimJ1PAMbGzoKepLYnaukPmjdj01DIhO3r8etybv3mrxlxVTe+TPyIqWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyUaAneIUugQoPl05gttTlADCoRMB8GA1UdIwQY MBaAFP0RltmN7NOOsD9fBrSOVWx08jH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUt NGY4OTAyYmZlMTcyLzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUtNGY4OTAyYmZlMTcy LzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauFhQqT3 WHaFzvjw0alMrl2BIn+ZXOJUBJuu1ugs2kKm1ojg5NsQMe1Py6Ax3N9/spb20+cz bHAXIx0nc8QiXGuYy1+81lR6yvuOgkn18dLA6rmzV3zfk4jhYhhI1XqkJzHroB0E 7W1ma1gBD4Slz44DZAS2Ys1MdBKsO2rhRy5EYitkKLeQQox/zY+3HrKufQrDez2f vqx/KQSc31Anw7RRx0T5N3n5EowzmhpuzcIQD+1rUVEn8c7mS/bFHz0KQqqcGWuR ZYDXbHRD3BRzFrc2tqgeaHhk5AtGMMO9Yl5b6H7/RouaocKv4fyyPQraxt6rEKHO gu2FZG8eWjh8fA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:36:51 2025 by rpki-client