This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json) Hash identifier: U/trDaFqI8rWe2NlhuI779zNgo1q7nb5rtq+mwxM7tU= Subject key identifier: 1D:35:68:31:76:FF:DE:CB:A6:0E:2D:B5:9E:71:53:01:A2:1E:CC:6C Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Certificate serial: 019B348D4C877B298FD0707C63AE4A5E22C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 03:00:33 +0000 Manifest this update: Fri 19 Dec 2025 03:00:33 +0000 Manifest next update: Sat 20 Dec 2025 03:00:33 +0000 Files and hashes: 1: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: uW+okVh3dYNj1uChNkyDDEpxgsIqbu9WDaPejS0nlFs=) 2: wzgPBQF88-_CiYEBssnryfMBX2w.roa (hash: YBjh+lwXHnu03g8De0628UnV8ZQfh0OnAO4LQ244jes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:4c:87:7b:29:8f:d0:70:7c:63:ae:4a:5e:22:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Validity Not Before: Dec 19 03:00:33 2025 GMT Not After : Dec 20 03:00:33 2025 GMT Subject: CN=1d35683176ffdecba60e2db59e715301a21ecc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:39:04:f8:41:c2:36:79:fb:47:f8:5c:76: 93:a6:8b:8f:be:b7:38:63:fd:ae:f1:4d:c1:c5:8a: 95:fb:ff:0a:0d:1c:34:15:45:55:9f:8b:b3:cf:16: 2e:c8:72:94:10:95:2d:d4:6d:b3:79:b3:3f:14:47: f7:f8:53:cc:11:d8:b7:dd:dc:69:f9:4c:85:c3:18: 5f:6d:6d:f7:9a:dd:6d:d5:41:e5:73:08:0d:2a:33: 34:eb:42:d4:47:fc:20:8a:5b:ca:9c:f1:61:05:5e: 11:1c:4d:9f:20:c5:64:d2:11:36:bb:4a:d4:1c:8e: dc:fb:93:f1:5c:3a:c3:4e:1a:8d:88:52:44:9d:19: 43:9e:46:ac:d0:96:f0:e3:42:6e:05:76:83:17:e9: 71:91:8f:4a:e6:56:25:70:c2:24:53:d8:64:a2:49: e9:78:09:30:86:b9:a5:97:a5:0b:bd:83:8f:9f:25: d7:f1:5b:4d:7c:a7:9e:09:ad:31:40:47:8e:a3:61: 75:8e:b7:25:9b:0e:06:9f:83:ab:40:06:1e:8a:da: 7f:4a:d0:dc:44:1e:57:d8:65:16:ef:6b:e1:6f:79: 5c:e0:0b:a5:99:50:3d:25:b0:35:5a:09:62:62:af: 7c:d6:e0:73:27:a2:26:1c:0a:6c:8a:94:72:82:a3: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:35:68:31:76:FF:DE:CB:A6:0E:2D:B5:9E:71:53:01:A2:1E:CC:6C X509v3 Authority Key Identifier: keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e1:2b:71:d0:e4:29:07:b6:0c:f7:44:c1:7d:59:02:a3:ec: f6:fd:c1:e4:ce:32:b2:b1:06:8e:3b:ce:89:0e:44:fc:ea:ed: 19:46:b6:14:dc:84:96:30:b8:aa:80:d3:77:f8:62:a8:21:93: ae:74:a0:93:10:3a:dd:8f:3a:63:14:be:93:30:a2:18:25:d4: cb:72:13:44:b1:89:c6:e4:37:c1:b2:dc:c9:c6:da:6f:c2:00: ec:3d:ce:c4:a6:23:31:61:c6:fe:c4:47:68:8a:72:32:04:cc: d7:54:03:e0:ea:72:07:79:7d:a5:47:a0:8f:cd:fc:c7:75:b3: 9c:31:31:7b:d7:9c:65:55:79:41:0f:06:00:e7:5f:fb:9e:cf: 08:e1:7f:49:bd:a0:e2:5c:b4:eb:73:ae:89:2a:ba:96:b1:66: d2:27:4e:4d:e2:fa:70:4c:55:5a:bc:69:cb:1a:87:1a:e7:f4: 44:49:94:5c:77:ea:ca:94:67:7b:e8:f8:aa:53:0b:cb:e4:3f: 4e:80:f7:ba:43:43:88:82:80:32:89:04:98:66:8e:bb:06:f5: 88:34:98:65:d5:1f:fd:64:22:f0:a3:ed:5b:15:6c:7d:92:89: 4f:a0:60:ba:46:2f:06:c8:65:50:96:4d:1f:b2:56:68:20:51: 48:51:c4:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jUyHeymP0HB8Y65KXiLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1 ZDFmODkwHhcNMjUxMjE5MDMwMDMzWhcNMjUxMjIwMDMwMDMzWjAzMTEwLwYDVQQD EygxZDM1NjgzMTc2ZmZkZWNiYTYwZTJkYjU5ZTcxNTMwMWEyMWVjYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Y5BPhBwjZ5+0f4XHaTpouPvrc4 Y/2u8U3BxYqV+/8KDRw0FUVVn4uzzxYuyHKUEJUt1G2zebM/FEf3+FPMEdi33dxp +UyFwxhfbW33mt1t1UHlcwgNKjM060LUR/wgilvKnPFhBV4RHE2fIMVk0hE2u0rU HI7c+5PxXDrDThqNiFJEnRlDnkas0Jbw40JuBXaDF+lxkY9K5lYlcMIkU9hkoknp eAkwhrmll6ULvYOPnyXX8VtNfKeeCa0xQEeOo2F1jrclmw4Gn4OrQAYeitp/StDc RB5X2GUW72vhb3lc4AulmVA9JbA1WgliYq981uBzJ6ImHApsipRygqOgcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB01aDF2/97Lpg4ttZ5xUwGiHsxsMB8GA1UdIwQY MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt MWU2OTVlZjQ5YzEwLzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOErcdDk KQe2DPdEwX1ZAqPs9v3B5M4ysrEGjjvOiQ5E/OrtGUa2FNyEljC4qoDTd/hiqCGT rnSgkxA63Y86YxS+kzCiGCXUy3ITRLGJxuQ3wbLcycbab8IA7D3OxKYjMWHG/sRH aIpyMgTM11QD4OpyB3l9pUegj838x3WznDExe9ecZVV5QQ8GAOdf+57PCOF/Sb2g 4ly063OuiSq6lrFm0idOTeL6cExVWrxpyxqHGuf0REmUXHfqypRne+j4qlMLy+Q/ ToD3ukNDiIKAMokEmGaOuwb1iDSYZdUf/WQi8KPtWxVsfZKJT6BgukYvBshlUJZN H7JWaCBRSFHEfA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:25 2025 by rpki-client