This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json) Hash identifier: OwPmexEzTEE9UvsFHLx5zvk2yk/9iiwLJwWOhlgfuKg= Subject key identifier: 53:4B:49:75:A8:04:41:D9:D8:92:7C:93:72:96:31:5C:70:92:B4:D7 Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Certificate serial: 019B2EC249FA8AAFC84F996184C91729BDB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft Manifest number: 0649 Signing time: Thu 18 Dec 2025 00:00:43 +0000 Manifest this update: Thu 18 Dec 2025 00:00:43 +0000 Manifest next update: Fri 19 Dec 2025 00:00:43 +0000 Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=) 2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: /SaqTPdK/prDavFZgT0iD0arI2kHnxMBhNv5BjL5xA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:49:fa:8a:af:c8:4f:99:61:84:c9:17:29:bd:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Validity Not Before: Dec 18 00:00:43 2025 GMT Not After : Dec 19 00:00:43 2025 GMT Subject: CN=534b4975a80441d9d8927c937296315c7092b4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:d9:b6:74:61:18:69:25:a6:b6:1e:81:ec: f3:59:a9:e1:a8:f8:7c:b2:4f:b7:81:0f:af:df:ae: 87:66:22:85:2e:04:78:99:6c:b7:30:7e:0b:9d:cf: 67:45:07:02:ff:8a:9f:ee:d3:1d:d5:08:dd:8f:fc: 6f:a9:3c:dc:3f:f7:c8:6f:8f:d8:4b:3d:3e:78:33: 74:65:09:4d:73:29:2b:b5:7b:87:a2:11:c3:3f:4e: af:54:92:f7:c9:69:e4:70:8b:8c:72:0b:f3:3b:ce: 87:90:9b:f6:17:33:eb:0b:f1:ff:2c:f2:6d:17:ba: 5e:04:f0:1e:42:f0:4b:4f:21:7f:c3:ac:36:64:ed: fb:90:fa:cc:e5:99:ef:f8:39:ea:3b:65:be:d8:d6: 3b:d2:66:de:c3:dd:73:30:c1:bc:0f:12:ad:50:07: f7:f3:65:4d:55:03:3e:c8:a7:cd:46:c6:fc:aa:00: 79:e6:55:bb:a5:18:03:d5:65:d5:ad:2a:ca:5c:59: 8c:8e:38:ec:d6:c1:c8:9d:ce:4c:c7:0e:01:19:ed: ab:c6:4d:a3:f4:b3:b8:27:f0:27:f9:53:9e:a9:9c: 84:3f:d5:2b:09:d4:95:3c:97:0a:d3:74:e3:63:e2: c2:86:48:58:06:eb:8b:20:39:fe:e3:64:12:75:cc: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:49:75:A8:04:41:D9:D8:92:7C:93:72:96:31:5C:70:92:B4:D7 X509v3 Authority Key Identifier: keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5a:9e:ab:29:a3:04:cc:62:96:32:0f:82:34:ec:26:d2:83: 66:19:96:1b:9d:a6:d3:f0:07:43:7b:37:fb:47:40:1a:87:9d: eb:c2:1d:94:44:4d:be:4e:ac:1a:d8:b9:9e:c9:d4:b8:26:43: ba:ac:2d:e8:dc:a3:8a:20:00:5d:46:69:56:17:de:3a:fb:b4: 0d:f0:5f:6b:b1:9c:67:45:d0:3e:c2:d8:14:72:00:76:e3:07: c5:19:05:62:a7:8c:b7:15:8b:13:7f:9c:e1:ff:00:5a:23:ad: 9d:05:02:53:4a:99:19:84:73:49:e1:2a:ec:aa:08:ae:eb:d7: 59:e3:1a:e7:8f:1b:b5:9d:ee:80:6c:11:ec:3a:93:49:cb:12: ba:41:04:38:f4:73:fc:f5:3a:ae:04:9c:57:aa:69:01:54:84: 00:c9:86:81:f4:33:b5:fa:c5:66:e8:18:44:81:22:12:24:44: ed:6b:5b:07:5e:09:21:5b:bf:ed:c8:6f:15:89:c6:65:b9:3f: 38:18:9e:86:a8:dd:b3:79:d0:6d:4f:84:5f:ab:b2:66:6a:51: 30:7a:93:a1:8c:06:32:b3:43:b2:2e:db:bc:52:2e:0d:24:0b: 93:21:6b:30:e4:a3:a0:a6:c5:c9:9c:8d:ad:c0:9b:d3:dc:8b: 0c:0f:ae:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwkn6iq/IT5lhhMkXKb21MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDVkNDI5MWNhZTgxODVjNmMzNDJlMjVkZWU5YjdlOTIw Zjc2ZGQwHhcNMjUxMjE4MDAwMDQzWhcNMjUxMjE5MDAwMDQzWjAzMTEwLwYDVQQD Eyg1MzRiNDk3NWE4MDQ0MWQ5ZDg5MjdjOTM3Mjk2MzE1YzcwOTJiNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19fZtnRhGGklprYegezzWanhqPh8 sk+3gQ+v366HZiKFLgR4mWy3MH4Lnc9nRQcC/4qf7tMd1Qjdj/xvqTzcP/fIb4/Y Sz0+eDN0ZQlNcykrtXuHohHDP06vVJL3yWnkcIuMcgvzO86HkJv2FzPrC/H/LPJt F7peBPAeQvBLTyF/w6w2ZO37kPrM5Znv+DnqO2W+2NY70mbew91zMMG8DxKtUAf3 82VNVQM+yKfNRsb8qgB55lW7pRgD1WXVrSrKXFmMjjjs1sHInc5Mxw4BGe2rxk2j 9LO4J/An+VOeqZyEP9UrCdSVPJcK03TjY+LChkhYBuuLIDn+42QSdcxK0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNLSXWoBEHZ2JJ8k3KWMVxwkrTXMB8GA1UdIwQY MBaAFK8F1CkcroGFxsNC4l3um36SD3bdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAt ZTdmMDVmMDI5YTQ4LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAtZTdmMDVmMDI5YTQ4 LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVqeqymj BMxiljIPgjTsJtKDZhmWG52m0/AHQ3s3+0dAGoed68IdlERNvk6sGti5nsnUuCZD uqwt6NyjiiAAXUZpVhfeOvu0DfBfa7GcZ0XQPsLYFHIAduMHxRkFYqeMtxWLE3+c 4f8AWiOtnQUCU0qZGYRzSeEq7KoIruvXWeMa548btZ3ugGwR7DqTScsSukEEOPRz /PU6rgScV6ppAVSEAMmGgfQztfrFZugYRIEiEiRE7WtbB14JIVu/7chvFYnGZbk/ OBiehqjds3nQbU+EX6uyZmpRMHqToYwGMrNDsi7bvFIuDSQLkyFrMOSjoKbFyZyN rcCb09yLDA+uNw== -----END CERTIFICATE-----Generated at Thu Dec 18 04:20:06 2025 by rpki-client