This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json) Hash identifier: DapH76W47jBbeA0Nctvk6zqQJ0fkcsVxOGIGG62NHf8= Subject key identifier: 91:43:91:0A:8C:9C:3B:E0:57:E0:2E:D8:1A:C0:97:1D:14:02:BE:9A Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738 Certificate serial: 019B33B220D9CC7AFB019342EAF248F9B6E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft Manifest number: 0AA1 Signing time: Thu 18 Dec 2025 23:01:10 +0000 Manifest this update: Thu 18 Dec 2025 23:01:10 +0000 Manifest next update: Fri 19 Dec 2025 23:01:10 +0000 Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: VVxG6MzsXmFcoUAVi+Qer9r9SSSk/B5lH38F7x4126I=) 2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:20:d9:cc:7a:fb:01:93:42:ea:f2:48:f9:b6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738 Validity Not Before: Dec 18 23:01:10 2025 GMT Not After : Dec 19 23:01:10 2025 GMT Subject: CN=9143910a8c9c3be057e02ed81ac0971d1402be9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:29:be:bd:63:7e:1c:74:cb:5c:d1:b8:10: 58:1d:9d:6e:7f:e3:d0:6d:b8:3e:04:ad:43:db:9b: 91:16:ba:86:bf:c9:cd:b3:49:d2:96:73:c3:94:88: 5e:86:11:24:de:d6:82:91:aa:56:ab:90:9e:19:0f: 78:03:a0:85:6e:bf:80:89:fd:87:f1:7d:35:66:4f: da:1b:73:5c:ab:df:17:2c:39:82:36:18:5d:5c:de: cd:5c:93:bc:a4:da:a8:ba:8e:5d:68:f5:9d:73:80: 6a:42:a4:2a:b2:b9:c5:9d:08:72:fe:b4:4d:d5:a1: d6:05:8e:1f:22:1f:1d:67:f9:0f:66:ce:28:bf:20: 7c:1b:61:33:76:ad:b9:92:ce:00:b2:b2:e3:fa:a7: 0d:42:2c:25:cc:e0:1e:52:06:b8:66:00:2d:e1:73: 8f:e6:38:b0:7f:1e:7d:74:83:73:9d:9f:e6:df:e6: 9b:ca:6b:d4:66:f7:de:84:49:17:bc:a2:e5:87:f1: 3c:cd:2d:2a:21:3c:70:ac:0f:dd:9c:a6:92:c7:e9: 16:d8:0c:00:ad:e1:08:41:19:aa:d1:56:10:ce:b0: 76:ed:cf:86:22:4a:69:6e:68:b2:fe:35:3f:db:3d: 53:96:f4:cb:f7:a1:72:d0:4a:21:92:82:09:62:0a: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:43:91:0A:8C:9C:3B:E0:57:E0:2E:D8:1A:C0:97:1D:14:02:BE:9A X509v3 Authority Key Identifier: keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e8:c1:fc:26:45:27:a9:d2:b3:a4:aa:52:9e:76:98:2a:99: d3:b8:7c:bd:07:4b:b9:d5:c8:0a:8d:f6:10:dd:9b:77:7b:30: 65:c1:41:86:20:f4:6d:0c:b7:f1:c4:d7:7a:09:9c:eb:30:d0: 47:51:36:06:2e:46:45:5b:5a:fe:c6:43:69:65:0d:8e:4b:96: 84:83:74:aa:fd:27:17:61:2e:5e:6a:13:79:7c:ce:24:72:de: f3:bc:cd:2b:fb:30:61:53:32:36:c5:6b:f1:0b:43:ed:b3:5c: 2c:a4:be:f3:2d:97:c8:0a:d1:53:37:20:cf:3e:3b:65:c8:7c: e9:8e:02:5f:84:c5:df:9e:37:2e:8b:6a:d2:d3:27:08:cc:3d: cc:04:fc:ef:b1:3c:f7:0d:6c:50:fb:b3:95:50:b6:d6:fd:3c: c3:1b:a3:25:c6:2b:a7:58:f6:7f:1a:57:29:f4:ce:89:05:32: 16:5d:39:0f:ec:47:0b:c5:d5:ee:22:bf:f4:08:aa:88:43:1b: d1:a1:5a:f9:da:bd:50:e6:7b:57:43:a9:01:51:84:8f:57:23: 30:89:8f:35:22:a3:9e:7d:49:ea:8c:e2:7e:74:17:be:6b:9a: 29:ff:46:e7:61:85:c4:86:36:b6:f9:cf:4b:2b:31:d6:f3:cf: dc:a1:0e:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsiDZzHr7AZNC6vJI+bbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx YWU3MzgwHhcNMjUxMjE4MjMwMTEwWhcNMjUxMjE5MjMwMTEwWjAzMTEwLwYDVQQD Eyg5MTQzOTEwYThjOWMzYmUwNTdlMDJlZDgxYWMwOTcxZDE0MDJiZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfUpvr1jfhx0y1zRuBBYHZ1uf+PQ bbg+BK1D25uRFrqGv8nNs0nSlnPDlIhehhEk3taCkapWq5CeGQ94A6CFbr+Aif2H 8X01Zk/aG3Ncq98XLDmCNhhdXN7NXJO8pNqouo5daPWdc4BqQqQqsrnFnQhy/rRN 1aHWBY4fIh8dZ/kPZs4ovyB8G2Ezdq25ks4AsrLj+qcNQiwlzOAeUga4ZgAt4XOP 5jiwfx59dINznZ/m3+abymvUZvfehEkXvKLlh/E8zS0qITxwrA/dnKaSx+kW2AwA reEIQRmq0VYQzrB27c+GIkppbmiy/jU/2z1TlvTL96Fy0EohkoIJYgrV9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFDkQqMnDvgV+Au2BrAlx0UAr6aMB8GA1UdIwQY MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5 LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACujB/CZF J6nSs6SqUp52mCqZ07h8vQdLudXICo32EN2bd3swZcFBhiD0bQy38cTXegmc6zDQ R1E2Bi5GRVta/sZDaWUNjkuWhIN0qv0nF2EuXmoTeXzOJHLe87zNK/swYVMyNsVr 8QtD7bNcLKS+8y2XyArRUzcgzz47Zch86Y4CX4TF3543Lotq0tMnCMw9zAT877E8 9w1sUPuzlVC21v08wxujJcYrp1j2fxpXKfTOiQUyFl05D+xHC8XV7iK/9AiqiEMb 0aFa+dq9UOZ7V0OpAVGEj1cjMImPNSKjnn1J6ozifnQXvmuaKf9G52GFxIY2tvnP Sysx1vPP3KEO5A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:32:05 2025 by rpki-client