This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json) Hash identifier: NZDgt3+6MErBxWxemLStID2T4MjyoAgzoQCf4+prV04= Subject key identifier: 90:F3:7F:26:3D:3C:83:4E:71:B4:5F:DC:E8:73:A4:13:AB:D1:54:D3 Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Certificate serial: 019B27AE19D1F078FC789A83961278D1E060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 15:01:19 +0000 Manifest this update: Tue 16 Dec 2025 15:01:19 +0000 Manifest next update: Wed 17 Dec 2025 15:01:19 +0000 Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: q3K8H5+uscyMDtEy+0MoLRI45fW1Xrrrw8sIz4sIP8M=) 2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:19:d1:f0:78:fc:78:9a:83:96:12:78:d1:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Validity Not Before: Dec 16 15:01:19 2025 GMT Not After : Dec 17 15:01:19 2025 GMT Subject: CN=90f37f263d3c834e71b45fdce873a413abd154d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:66:03:f3:d4:32:20:cb:26:77:ea:cc:eb: eb:8d:a3:f8:e8:b8:e2:58:e7:25:34:15:74:23:75: 6d:2f:2c:49:b8:e4:ee:ca:4c:48:ae:43:22:79:5a: 0f:1a:a3:fb:3d:b3:85:b5:ba:28:01:85:d8:ba:ae: 06:35:8c:cf:2e:fa:21:f5:a2:df:e8:4a:69:5b:af: 37:4e:cc:44:3b:e5:4c:13:ed:78:dd:77:0f:1d:62: 3d:04:25:27:db:08:ac:7c:ce:e3:6f:59:5f:0c:95: 11:5b:c7:bf:ad:d7:09:d7:76:f1:44:12:a5:6c:bb: a9:62:8f:2c:f7:94:cc:59:3e:78:5b:d3:26:d9:28: cd:9f:48:b9:30:ba:11:23:5a:34:cf:3e:81:34:fb: 8b:7b:53:11:b7:fa:2d:83:af:53:07:7d:5b:db:7f: b4:7b:ad:15:15:5a:2f:46:eb:68:cb:c5:7a:af:21: 14:ae:23:7f:54:bd:d6:66:66:10:c9:43:1d:17:fd: 19:8d:6f:3a:92:d6:90:f5:17:5e:1a:58:76:ee:11: f2:6e:50:6e:fe:c9:4b:54:af:e5:91:57:a2:4e:9f: d0:f1:21:78:ff:6c:ae:57:ce:16:23:58:46:2c:7e: b9:eb:66:1a:e4:55:cb:b7:2d:a0:02:8b:63:aa:5e: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F3:7F:26:3D:3C:83:4E:71:B4:5F:DC:E8:73:A4:13:AB:D1:54:D3 X509v3 Authority Key Identifier: keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:fe:bf:9c:ea:05:a2:f0:e8:94:40:97:63:69:f5:fe:6a:34: 45:ae:c4:dd:8d:45:39:c6:6a:73:a9:53:bf:1e:64:ff:16:69: 2e:4c:e3:a2:55:01:85:f5:8f:18:6d:fc:31:6c:09:86:5c:5b: b3:f7:10:03:73:b0:2b:ca:3d:9a:04:39:36:3b:ba:41:ac:84: 64:24:d2:1b:e2:1d:7a:93:b5:51:7a:6e:c6:44:90:f3:76:e2: 9d:5c:a2:7e:11:e9:a2:11:e2:98:9c:02:9d:4f:88:c0:ab:68: ce:9d:ee:8b:8d:45:8b:10:ec:43:29:43:7e:20:28:77:72:b5: 10:d8:56:c6:50:df:92:89:22:bd:18:69:ca:73:47:4b:0d:c8: 6d:7e:46:ee:c2:d5:bf:b5:72:9a:52:1e:b5:f6:d4:1e:29:3a: a4:7d:43:b6:3e:0a:2f:31:09:be:0a:b2:b3:2c:d5:c8:bb:d1: eb:91:0c:9d:6e:66:04:07:72:46:b9:a7:a0:6d:a8:8b:b3:16: 80:4a:4f:78:54:cc:a5:19:17:e0:e9:25:a8:6b:9f:dc:39:2f: 8a:44:01:d7:71:71:ba:6a:39:33:66:d3:a9:ed:6a:cb:83:77: c4:79:a7:05:d0:06:d6:52:57:6f:80:1b:d0:62:28:65:14:c8: c0:75:0e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrhnR8Hj8eJqDlhJ40eBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw YTViNmMwHhcNMjUxMjE2MTUwMTE5WhcNMjUxMjE3MTUwMTE5WjAzMTEwLwYDVQQD Eyg5MGYzN2YyNjNkM2M4MzRlNzFiNDVmZGNlODczYTQxM2FiZDE1NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuxmA/PUMiDLJnfqzOvrjaP46Lji WOclNBV0I3VtLyxJuOTuykxIrkMieVoPGqP7PbOFtbooAYXYuq4GNYzPLvoh9aLf 6EppW683TsxEO+VME+143XcPHWI9BCUn2wisfM7jb1lfDJURW8e/rdcJ13bxRBKl bLupYo8s95TMWT54W9Mm2SjNn0i5MLoRI1o0zz6BNPuLe1MRt/otg69TB31b23+0 e60VFVovRutoy8V6ryEUriN/VL3WZmYQyUMdF/0ZjW86ktaQ9RdeGlh27hHyblBu /slLVK/lkVeiTp/Q8SF4/2yuV84WI1hGLH6562Ya5FXLty2gAotjql7U0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDzfyY9PINOcbRf3OhzpBOr0VTTMB8GA1UdIwQY MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt MTFkZmZlMTA4MTQ3LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3 LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvP6/nOoF ovDolECXY2n1/mo0Ra7E3Y1FOcZqc6lTvx5k/xZpLkzjolUBhfWPGG38MWwJhlxb s/cQA3OwK8o9mgQ5Nju6QayEZCTSG+IdepO1UXpuxkSQ83binVyifhHpohHimJwC nU+IwKtozp3ui41FixDsQylDfiAod3K1ENhWxlDfkokivRhpynNHSw3IbX5G7sLV v7VymlIetfbUHik6pH1Dtj4KLzEJvgqysyzVyLvR65EMnW5mBAdyRrmnoG2oi7MW gEpPeFTMpRkX4OklqGuf3DkvikQB13Fxumo5M2bTqe1qy4N3xHmnBdAG1lJXb4Ab 0GIoZRTIwHUOXw== -----END CERTIFICATE-----Generated at Tue Dec 16 19:50:50 2025 by rpki-client