This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json) Hash identifier: LTDG2x9quF2aVJEio/r3dZJn968qIQ+6hx2Pl+5y138= Subject key identifier: 59:D3:C9:CD:6F:66:72:2C:D7:97:14:41:78:42:8A:A3:7D:D4:15:62 Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Certificate serial: 019B2F67F6F1CC9ADC1D44805D355294C8D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 03:01:41 +0000 Manifest this update: Thu 18 Dec 2025 03:01:41 +0000 Manifest next update: Fri 19 Dec 2025 03:01:41 +0000 Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: 8/kTV8wWpITSmszTMffhdiae3fqjOvBEBBNkmcIOKME=) 2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:f6:f1:cc:9a:dc:1d:44:80:5d:35:52:94:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Validity Not Before: Dec 18 03:01:41 2025 GMT Not After : Dec 19 03:01:41 2025 GMT Subject: CN=59d3c9cd6f66722cd797144178428aa37dd41562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:ec:7f:9f:ec:70:e2:9e:5e:24:7b:6b:3d: 10:2b:e5:d2:d8:f2:88:ae:28:9d:ef:56:b6:48:0a: cf:49:a0:a5:8b:68:53:7e:d5:36:4d:c9:e6:9b:df: b4:77:34:7c:2f:b5:88:2c:f4:ee:99:28:52:89:13: 77:da:b5:4b:85:a6:0d:e5:12:eb:46:12:6a:43:c5: 9a:07:7b:82:df:89:35:dc:1c:ef:02:e8:ca:8f:8c: 52:47:52:5c:ec:da:a2:38:60:c3:f2:3f:f4:ee:3f: 57:c0:dc:b3:db:63:85:f7:df:f3:ed:00:c5:21:17: d2:40:ee:30:fc:0e:cd:d7:cf:fc:13:e1:83:2e:69: 32:d0:9e:21:4d:12:c2:3f:75:a7:ac:95:6b:89:a5: fc:0e:e9:ed:06:6b:9a:9f:7b:65:bd:ba:66:c7:51: 0c:55:cd:3d:51:b8:25:61:fb:b4:ad:66:d1:24:72: 8a:56:3a:63:94:21:6e:f5:79:0b:5a:1a:9b:b0:4c: 15:4f:c9:63:0b:28:7c:b8:4d:15:ab:5e:bd:60:0b: 15:05:ca:2b:95:cd:09:43:9c:1f:e5:c2:62:41:25: 37:ff:0f:5c:99:c6:73:13:0a:ea:3d:13:47:3c:00: 1b:9d:b2:77:ac:dd:aa:10:d2:8d:cd:12:d2:35:b6: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D3:C9:CD:6F:66:72:2C:D7:97:14:41:78:42:8A:A3:7D:D4:15:62 X509v3 Authority Key Identifier: keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6f:3a:b9:4a:a6:34:65:6b:65:16:81:4c:55:e4:fb:a0:b8: 4a:9e:50:66:e7:10:da:a7:fc:04:a2:7b:d5:69:a7:99:ba:9f: bb:f9:12:3b:e7:38:63:0d:38:3f:04:74:d5:0e:fb:dd:f4:b1: 4d:37:91:aa:cb:3f:e3:88:78:0d:9b:88:1b:94:30:36:06:ff: 69:36:ef:82:bf:a0:8a:2a:dc:73:fd:ca:94:25:ed:93:87:ae: 5d:52:be:77:2f:97:60:91:9f:b5:53:82:d1:a3:5f:91:64:7a: 4f:3b:db:70:42:ca:ad:7e:0e:cf:cb:09:e0:c6:89:74:8f:a0: c4:1a:6b:77:47:2d:e5:d5:b4:5c:44:dc:46:60:71:17:ce:61: fd:95:26:68:57:8f:38:61:e6:37:95:e9:f7:3f:16:31:71:84: 8c:00:63:7c:88:15:2e:fc:29:a1:9c:3a:82:2d:6c:cf:73:4e: 6d:96:36:98:73:6d:99:ca:ab:99:fb:45:8e:1d:e0:6b:88:33: 07:de:95:cb:ff:5a:4e:02:7a:04:e0:be:aa:d8:08:2b:11:fa: 3b:89:c0:a6:57:1e:ca:6b:49:2c:f6:9b:95:b4:62:36:cb:3d: 25:9b:63:f1:6d:cd:0b:95:d3:d8:58:70:af:32:da:69:75:48: 3a:0a:e9:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ/bxzJrcHUSAXTVSlMjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw YTViNmMwHhcNMjUxMjE4MDMwMTQxWhcNMjUxMjE5MDMwMTQxWjAzMTEwLwYDVQQD Eyg1OWQzYzljZDZmNjY3MjJjZDc5NzE0NDE3ODQyOGFhMzdkZDQxNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUDsf5/scOKeXiR7az0QK+XS2PKI riid71a2SArPSaCli2hTftU2Tcnmm9+0dzR8L7WILPTumShSiRN32rVLhaYN5RLr RhJqQ8WaB3uC34k13BzvAujKj4xSR1Jc7NqiOGDD8j/07j9XwNyz22OF99/z7QDF IRfSQO4w/A7N18/8E+GDLmky0J4hTRLCP3WnrJVriaX8DuntBmuan3tlvbpmx1EM Vc09UbglYfu0rWbRJHKKVjpjlCFu9XkLWhqbsEwVT8ljCyh8uE0Vq169YAsVBcor lc0JQ5wf5cJiQSU3/w9cmcZzEwrqPRNHPAAbnbJ3rN2qENKNzRLSNbZ7tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnTyc1vZnIs15cUQXhCiqN91BViMB8GA1UdIwQY MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt MTFkZmZlMTA4MTQ3LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3 LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoG86uUqm NGVrZRaBTFXk+6C4Sp5QZucQ2qf8BKJ71Wmnmbqfu/kSO+c4Yw04PwR01Q773fSx TTeRqss/44h4DZuIG5QwNgb/aTbvgr+giircc/3KlCXtk4euXVK+dy+XYJGftVOC 0aNfkWR6TzvbcELKrX4Oz8sJ4MaJdI+gxBprd0ct5dW0XETcRmBxF85h/ZUmaFeP OGHmN5Xp9z8WMXGEjABjfIgVLvwpoZw6gi1sz3NObZY2mHNtmcqrmftFjh3ga4gz B96Vy/9aTgJ6BOC+qtgIKxH6O4nAplceymtJLPablbRiNss9JZtj8W3NC5XT2Fhw rzLaaXVIOgrpxA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:53 2025 by rpki-client