This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json) Hash identifier: QT2S5R+C3OiS/EJ96gkE+NW8nnbzZH4EM49VP4fHfFI= Subject key identifier: 1A:0A:8F:DD:8D:A5:E7:19:3C:86:46:40:E3:01:3B:4A:14:5D:E9:46 Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738 Certificate serial: 019B35A0F9CC737946E6BB230F5F75C4EF80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft Manifest number: 0AA2 Signing time: Fri 19 Dec 2025 08:01:40 +0000 Manifest this update: Fri 19 Dec 2025 08:01:40 +0000 Manifest next update: Sat 20 Dec 2025 08:01:40 +0000 Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: zzhYmY9Lk/9IOaArgBieEpDK2dEW7Ati4av4Ek3qYEM=) 2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:f9:cc:73:79:46:e6:bb:23:0f:5f:75:c4:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738 Validity Not Before: Dec 19 08:01:40 2025 GMT Not After : Dec 20 08:01:40 2025 GMT Subject: CN=1a0a8fdd8da5e7193c864640e3013b4a145de946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:d6:2e:a7:27:96:5d:47:6e:22:3a:ce:6e: a8:a6:35:27:aa:54:ad:e4:a5:e7:ce:0d:de:c4:ee: 71:96:7a:0d:59:1a:6d:fe:d0:b0:f2:f1:62:88:c5: 68:7a:f4:1f:bf:7e:75:eb:86:34:1a:17:21:d4:67: 50:8e:b3:d1:e8:e0:29:1f:e8:57:64:a7:37:28:b6: 6b:0d:a7:a9:26:41:77:d5:74:a6:7b:2a:98:38:a3: ee:47:33:91:26:0b:f5:42:8e:5a:f6:e5:c9:bb:7a: 13:41:6d:ed:72:32:d8:d6:4f:9f:40:1a:67:4a:4e: 8c:be:34:d1:90:eb:8f:5a:da:f9:fd:78:56:33:ea: f9:d9:46:ce:11:ae:b2:6d:ed:38:c3:f3:aa:9c:57: 62:b9:b0:3d:b5:9d:78:e2:2b:40:5d:b3:a3:a8:af: b0:29:01:e3:75:b5:44:b4:81:d4:cf:9d:89:77:fe: 4f:7f:f6:fd:db:6d:1a:bc:23:5b:54:09:6d:93:e7: eb:85:30:3b:ef:b3:6d:bf:89:ea:d8:9c:99:72:78: e2:59:82:72:8b:6e:d9:fd:3a:a8:d9:8f:7e:0c:ff: 31:66:f0:1c:f0:13:85:79:0c:ae:c1:b6:28:fc:79: 34:37:02:5e:9f:38:39:20:30:47:a4:a6:d9:d3:ab: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0A:8F:DD:8D:A5:E7:19:3C:86:46:40:E3:01:3B:4A:14:5D:E9:46 X509v3 Authority Key Identifier: keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:98:8d:f5:db:3f:8f:df:77:ea:c2:8c:4f:94:2d:4b:35:12: 23:93:33:ad:a4:da:ae:4f:88:af:4c:78:a4:db:fb:05:78:77: 95:1a:c3:1b:76:c7:da:1b:80:92:6c:c5:2a:d8:77:4b:e6:83: b5:c4:5a:99:d8:58:2f:65:54:44:21:69:fb:77:1a:b0:b0:10: 62:a9:46:1a:08:3c:6e:93:cb:05:cc:38:f9:f8:71:d1:0d:11: da:18:fa:36:b0:06:89:ad:86:80:37:8d:a8:1f:63:54:b3:2b: ad:8c:97:1d:6c:df:89:78:fa:ac:92:d0:c7:ab:65:0b:71:eb: 75:48:19:42:53:72:4d:49:2b:cd:9a:4c:6f:80:10:cc:c0:9d: 9e:2c:11:1e:35:c7:d3:30:95:4e:0e:23:d4:c5:60:9c:f8:e1: db:89:15:10:c2:38:31:13:7c:ed:20:a7:2e:65:d5:2c:03:9c: bd:80:4b:11:b1:96:9f:76:4e:fd:ba:e4:30:ae:4f:42:ba:2a: 61:6d:9f:6f:2a:cf:2a:44:ec:9a:7d:b4:7d:f5:a1:d3:5a:d8: f5:a0:ff:3d:c3:35:d9:8c:9e:52:53:fc:fc:aa:a4:e3:58:3b: 2b:b9:29:60:04:69:0b:f8:86:00:31:4e:4e:83:07:aa:a4:1d: e5:d1:16:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oPnMc3lG5rsjD191xO+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx YWU3MzgwHhcNMjUxMjE5MDgwMTQwWhcNMjUxMjIwMDgwMTQwWjAzMTEwLwYDVQQD EygxYTBhOGZkZDhkYTVlNzE5M2M4NjQ2NDBlMzAxM2I0YTE0NWRlOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/fWLqcnll1HbiI6zm6opjUnqlSt 5KXnzg3exO5xlnoNWRpt/tCw8vFiiMVoevQfv35164Y0Ghch1GdQjrPR6OApH+hX ZKc3KLZrDaepJkF31XSmeyqYOKPuRzORJgv1Qo5a9uXJu3oTQW3tcjLY1k+fQBpn Sk6MvjTRkOuPWtr5/XhWM+r52UbOEa6ybe04w/OqnFdiubA9tZ144itAXbOjqK+w KQHjdbVEtIHUz52Jd/5Pf/b9220avCNbVAltk+frhTA777Ntv4nq2JyZcnjiWYJy i27Z/Tqo2Y9+DP8xZvAc8BOFeQyuwbYo/Hk0NwJenzg5IDBHpKbZ06s6/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoKj92NpecZPIZGQOMBO0oUXelGMB8GA1UdIwQY MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5 LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpiN9ds/ j9936sKMT5QtSzUSI5MzraTark+Ir0x4pNv7BXh3lRrDG3bH2huAkmzFKth3S+aD tcRamdhYL2VURCFp+3casLAQYqlGGgg8bpPLBcw4+fhx0Q0R2hj6NrAGia2GgDeN qB9jVLMrrYyXHWzfiXj6rJLQx6tlC3HrdUgZQlNyTUkrzZpMb4AQzMCdniwRHjXH 0zCVTg4j1MVgnPjh24kVEMI4MRN87SCnLmXVLAOcvYBLEbGWn3ZO/brkMK5PQroq YW2fbyrPKkTsmn20ffWh01rY9aD/PcM12YyeUlP8/Kqk41g7K7kpYARpC/iGADFO ToMHqqQd5dEWJQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:36:30 2025 by rpki-client