This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json) Hash identifier: HwaHtYa6wo5wMJiK4767SvKdre52DVn+Min5N64SiU4= Subject key identifier: 01:4E:40:C0:90:64:1C:FE:97:9F:6B:1F:82:5D:18:A7:2B:A2:13:F4 Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Certificate serial: 019B2551D3B96D5051B739D918A06BEBEBB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft Manifest number: 0727 Signing time: Tue 16 Dec 2025 04:01:18 +0000 Manifest this update: Tue 16 Dec 2025 04:01:18 +0000 Manifest next update: Wed 17 Dec 2025 04:01:18 +0000 Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: 4q4TdLf8YA24nosYZL/h9t0cnT5h35nmxJmUyslvOvQ=) 2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:d3:b9:6d:50:51:b7:39:d9:18:a0:6b:eb:eb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Validity Not Before: Dec 16 04:01:18 2025 GMT Not After : Dec 17 04:01:18 2025 GMT Subject: CN=014e40c090641cfe979f6b1f825d18a72ba213f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:61:16:0d:15:b4:2c:2b:73:1b:aa:37:a8: c3:45:2c:ba:71:a2:84:25:94:4f:44:be:82:84:c1: 04:cb:f1:4e:7c:a6:72:24:66:17:60:ef:90:b0:3f: 6c:a1:ff:6e:3d:28:fe:ce:2f:e9:02:0f:48:e4:af: 2c:fd:d6:46:cc:48:ff:49:f0:6f:fe:a8:2f:50:8a: 9e:87:09:17:31:83:1a:70:0c:f7:a0:d7:d4:0b:3b: 66:63:38:91:83:6b:4c:c2:b6:0b:53:10:0e:25:c1: d3:55:ec:a2:b7:ae:08:e5:b9:57:0c:b7:4c:56:d8: 0f:d6:61:37:f7:d9:e7:a2:f3:1c:e1:a6:c8:b4:11: 74:4e:c3:d9:11:f8:52:50:4e:c5:19:20:2a:81:04: 73:33:c6:4e:90:6a:94:b0:d0:ff:9e:d6:55:75:33: 5b:29:59:e7:90:a6:12:da:5d:4d:64:02:7a:61:e2: d4:fb:86:16:cc:27:4e:b8:4c:36:c7:a5:2e:31:45: 07:e9:51:c5:b2:e4:f6:d4:78:ff:42:4b:98:8b:b7: 10:0e:be:17:8c:2e:61:19:f9:f6:1d:59:51:3c:ee: 56:0c:7c:80:d4:23:35:c0:1a:10:fa:f4:bb:56:6b: e2:39:cc:65:8e:29:73:6b:ac:8c:af:d7:54:fd:b3: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4E:40:C0:90:64:1C:FE:97:9F:6B:1F:82:5D:18:A7:2B:A2:13:F4 X509v3 Authority Key Identifier: keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d3:22:f7:0a:a5:17:43:25:29:7d:38:de:54:36:83:cd:4c: 02:8a:45:3d:c7:d4:28:c5:24:44:b6:6b:e5:a5:3a:f0:e0:1b: 0d:09:87:b9:82:3e:dc:d9:b9:32:42:d8:20:f7:9f:0a:87:0f: 01:b1:5f:bf:2d:0e:7d:bc:8b:d5:8a:06:e2:e7:31:15:30:8e: c3:0c:57:24:b3:ea:64:48:02:9c:dd:d8:7a:ea:1e:8c:b6:e9: 29:13:a6:51:a4:a5:dc:65:2c:7d:85:1b:02:e0:7e:f5:47:c5: b6:a2:77:89:c7:e4:17:0e:94:12:56:25:3a:92:3e:a2:7e:47: ea:e6:8b:26:10:2b:9a:ff:cd:f7:d1:e6:92:bb:03:cd:f1:05: fb:86:e4:2d:b3:42:90:6e:5b:c7:dd:6f:11:c1:ac:2c:6f:d9: ca:1a:e1:c8:55:a1:07:dd:1a:03:1a:c3:a6:2e:be:5a:da:34: 21:15:9a:4d:ee:68:b9:30:93:aa:83:47:bf:10:f3:ac:65:fa: f5:b3:50:16:cd:ea:51:0e:66:c8:33:4e:76:f8:41:3f:20:5d: d4:1b:ad:20:72:a6:18:97:25:d7:2a:b6:1e:ef:73:bb:77:6d: a3:be:aa:e2:1a:ca:79:89:1a:e9:44:5f:6c:50:c1:2a:88:4c: 2a:cd:c2:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUdO5bVBRtznZGKBr6+u5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmMzM2Q1YmE1ODUyMzRjY2NlZjhhNTdhZDg2Y2ExZWFm YzRhYTIwHhcNMjUxMjE2MDQwMTE4WhcNMjUxMjE3MDQwMTE4WjAzMTEwLwYDVQQD EygwMTRlNDBjMDkwNjQxY2ZlOTc5ZjZiMWY4MjVkMThhNzJiYTIxM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpdhFg0VtCwrcxuqN6jDRSy6caKE JZRPRL6ChMEEy/FOfKZyJGYXYO+QsD9sof9uPSj+zi/pAg9I5K8s/dZGzEj/SfBv /qgvUIqehwkXMYMacAz3oNfUCztmYziRg2tMwrYLUxAOJcHTVeyit64I5blXDLdM VtgP1mE399nnovMc4abItBF0TsPZEfhSUE7FGSAqgQRzM8ZOkGqUsND/ntZVdTNb KVnnkKYS2l1NZAJ6YeLU+4YWzCdOuEw2x6UuMUUH6VHFsuT21Hj/QkuYi7cQDr4X jC5hGfn2HVlRPO5WDHyA1CM1wBoQ+vS7VmviOcxljilza6yMr9dU/bNcNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFOQMCQZBz+l59rH4JdGKcrohP0MB8GA1UdIwQY MBaAFK68M9W6WFI0zM74pXrYbKHq/EqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmIt OTZhNWI1ZGFkNjcxLzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmItOTZhNWI1ZGFkNjcx LzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitMi9wql F0MlKX043lQ2g81MAopFPcfUKMUkRLZr5aU68OAbDQmHuYI+3Nm5MkLYIPefCocP AbFfvy0OfbyL1YoG4ucxFTCOwwxXJLPqZEgCnN3YeuoejLbpKROmUaSl3GUsfYUb AuB+9UfFtqJ3icfkFw6UElYlOpI+on5H6uaLJhArmv/N99HmkrsDzfEF+4bkLbNC kG5bx91vEcGsLG/ZyhrhyFWhB90aAxrDpi6+Wto0IRWaTe5ouTCTqoNHvxDzrGX6 9bNQFs3qUQ5myDNOdvhBPyBd1ButIHKmGJcl1yq2Hu9zu3dto76q4hrKeYka6URf bFDBKohMKs3CVg== -----END CERTIFICATE-----Generated at Tue Dec 16 07:32:21 2025 by rpki-client