This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json) Hash identifier: xqrs/Ux26a3ovYhegmWNRHlhYeVX6IqK30WljNrCMLo= Subject key identifier: 1A:9D:29:3F:1E:BB:06:76:D4:17:6C:61:0D:E6:5E:00:CE:A0:48:6B Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Certificate serial: 019B0DEDC98F9048DE3D8EBA5812C6538D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 15:00:46 +0000 Manifest this update: Thu 11 Dec 2025 15:00:46 +0000 Manifest next update: Fri 12 Dec 2025 15:00:46 +0000 Files and hashes: 1: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: 6o+fpqvnYxMFuN8eDMirwDX7fS4kIGXgT0t7L2ngLLA=) 2: wzgPBQF88-_CiYEBssnryfMBX2w.roa (hash: YBjh+lwXHnu03g8De0628UnV8ZQfh0OnAO4LQ244jes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:c9:8f:90:48:de:3d:8e:ba:58:12:c6:53:8d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Validity Not Before: Dec 11 15:00:46 2025 GMT Not After : Dec 12 15:00:46 2025 GMT Subject: CN=1a9d293f1ebb0676d4176c610de65e00cea0486b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fb:a4:76:7d:2e:f3:28:72:72:1a:31:81:13: f9:fc:fd:ef:6c:c2:92:1c:4e:a2:fe:f7:ba:83:dd: 85:0d:c7:55:8f:da:d9:26:e4:e1:e2:a0:e5:40:eb: bc:83:b7:ec:9e:1f:00:6f:87:04:03:c6:61:82:9b: 76:95:eb:f1:3d:4c:8d:70:78:9f:c5:fc:c3:4f:21: 8b:9a:5b:8f:c7:91:40:79:38:87:4b:03:82:90:dc: e8:97:d7:b8:72:ac:52:0d:9d:fc:71:e0:34:fa:15: 2f:42:85:69:94:75:ed:d9:e6:62:d0:95:64:07:01: 13:de:fa:cd:78:fb:42:53:ec:95:7a:2d:bb:75:00: e9:87:25:55:a3:6e:73:fd:87:6c:88:3b:77:33:5c: 2c:64:00:17:08:ef:37:77:98:72:ea:dc:5a:70:cc: ca:3a:87:db:15:a7:01:58:c0:8e:12:3e:33:f6:50: 23:c6:e4:18:13:9c:0e:cc:4f:2d:1f:af:1d:bd:7e: 5d:d0:65:ad:95:ef:fc:a7:25:e1:f1:bb:94:79:e3: e5:77:09:67:6c:2c:9e:64:83:a0:d7:d9:19:59:14: e9:d8:02:4b:3c:05:98:94:57:8c:21:da:54:e0:cc: ca:42:c5:6c:92:3f:e3:36:78:fc:fd:fb:f9:2a:c8: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9D:29:3F:1E:BB:06:76:D4:17:6C:61:0D:E6:5E:00:CE:A0:48:6B X509v3 Authority Key Identifier: keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:e6:82:cb:0a:ff:a5:41:27:ae:73:21:9a:41:75:24:bc: d4:02:be:ae:5f:03:2e:d1:3b:d5:d5:bf:fe:7c:9b:f1:2c:f4: 6a:aa:aa:5b:39:d8:b4:25:c9:ce:47:dd:c7:0e:30:5b:2b:2e: 6b:c4:53:4d:1d:f4:b2:e0:8c:d5:96:d7:96:c9:38:33:5f:61: a9:2c:df:83:c2:ca:d3:71:f9:04:39:c8:44:96:ac:9c:af:16: 4e:1e:1a:df:7b:b6:6d:2b:36:13:5c:57:16:e6:9d:11:a6:a8: 59:f7:e5:ea:85:32:c9:9a:6b:39:12:3b:b9:1d:2d:1f:8d:d2: 20:dd:0a:0a:36:5d:a5:85:84:19:bb:2f:38:4d:4d:5d:26:9a: 37:cf:f0:e5:46:af:ff:2e:b0:1a:d1:5b:1e:c9:7d:d0:20:28: 95:17:ca:f6:03:d2:d9:9a:94:32:d0:24:ab:3d:4d:8d:cb:4f: a4:e4:a1:5b:67:6b:b6:ee:e6:0b:ae:71:79:30:e1:13:4f:00: 06:f9:9d:f3:9e:98:71:bc:47:83:21:40:d9:9c:4b:93:55:57: df:bc:16:89:fc:d0:39:1a:77:96:08:50:95:4c:48:f8:1e:33: 28:d6:da:59:0d:7d:bc:b3:fe:81:8b:84:6d:2e:39:9a:3f:16: d3:06:4a:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7cmPkEjePY66WBLGU40dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1 ZDFmODkwHhcNMjUxMjExMTUwMDQ2WhcNMjUxMjEyMTUwMDQ2WjAzMTEwLwYDVQQD EygxYTlkMjkzZjFlYmIwNjc2ZDQxNzZjNjEwZGU2NWUwMGNlYTA0ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/ukdn0u8yhychoxgRP5/P3vbMKS HE6i/ve6g92FDcdVj9rZJuTh4qDlQOu8g7fsnh8Ab4cEA8Zhgpt2levxPUyNcHif xfzDTyGLmluPx5FAeTiHSwOCkNzol9e4cqxSDZ38ceA0+hUvQoVplHXt2eZi0JVk BwET3vrNePtCU+yVei27dQDphyVVo25z/YdsiDt3M1wsZAAXCO83d5hy6txacMzK OofbFacBWMCOEj4z9lAjxuQYE5wOzE8tH68dvX5d0GWtle/8pyXh8buUeePldwln bCyeZIOg19kZWRTp2AJLPAWYlFeMIdpU4MzKQsVskj/jNnj8/fv5KshPqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqdKT8euwZ21BdsYQ3mXgDOoEhrMB8GA1UdIwQY MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt MWU2OTVlZjQ5YzEwLzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+TmgssK /6VBJ65zIZpBdSS81AK+rl8DLtE71dW//nyb8Sz0aqqqWznYtCXJzkfdxw4wWysu a8RTTR30suCM1ZbXlsk4M19hqSzfg8LK03H5BDnIRJasnK8WTh4a33u2bSs2E1xX FuadEaaoWffl6oUyyZprORI7uR0tH43SIN0KCjZdpYWEGbsvOE1NXSaaN8/w5Uav /y6wGtFbHsl90CAolRfK9gPS2ZqUMtAkqz1NjctPpOShW2drtu7mC65xeTDhE08A Bvmd856YcbxHgyFA2ZxLk1VX37wWifzQORp3lghQlUxI+B4zKNbaWQ19vLP+gYuE bS45mj8W0wZKsA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:15:58 2025 by rpki-client