This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json) Hash identifier: UWwoLpWqoOAo4kcS18vWBGDNxx4QXN0iLsfPmVG0Lks= Subject key identifier: 6E:C1:9D:38:E8:C0:CE:5F:2D:26:AA:7F:71:B6:65:F8:A7:1C:78:F1 Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee Certificate serial: 019B424A5BC6043CCDC9209A00859D476782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft Manifest number: 02D1 Signing time: Sun 21 Dec 2025 19:02:07 +0000 Manifest this update: Sun 21 Dec 2025 19:02:07 +0000 Manifest next update: Mon 22 Dec 2025 19:02:07 +0000 Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=) 2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=) 3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: Asu/NtopG6Y2f+5xnCb70wdLExPiBWbVQqTa4WmKmsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:5b:c6:04:3c:cd:c9:20:9a:00:85:9d:47:67:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee Validity Not Before: Dec 21 19:02:07 2025 GMT Not After : Dec 22 19:02:07 2025 GMT Subject: CN=6ec19d38e8c0ce5f2d26aa7f71b665f8a71c78f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:61:78:01:d6:d4:1f:19:26:76:f4:91:e0: 3c:ba:14:91:e9:4d:19:f6:a5:30:86:c6:7a:65:5d: 1b:71:32:03:06:db:66:6f:bf:20:21:7a:8a:7d:8d: db:80:fa:0d:19:99:dc:18:39:19:a9:fa:cc:1d:ce: 33:91:4e:a3:85:81:01:3b:3a:62:bd:be:a4:11:d4: 6b:0c:5d:c8:c9:99:d6:b5:4d:a1:7e:c5:34:7f:16: ba:99:38:4c:81:ff:5a:16:5f:6f:84:99:94:a3:85: 90:42:6e:6c:4c:2d:27:5a:9c:ca:0b:f9:39:4c:9b: 40:4b:ca:6e:08:4e:7b:6d:d2:6c:b3:61:4e:04:1f: 44:3a:73:88:fd:62:29:5b:27:c9:20:a1:ac:cb:2b: b3:64:e6:c8:c2:8f:62:3a:ae:61:37:7f:cd:d7:f6: 81:18:6b:62:70:81:e4:66:8b:56:cc:fb:4a:73:7e: 6e:d4:77:ed:aa:91:9c:b6:bd:fd:85:a7:92:19:bf: a1:e8:1a:c0:b6:3a:67:25:f1:e1:7c:9a:ad:17:18: 3b:2f:55:b1:bb:0e:4d:16:62:68:d5:44:62:b7:05: 66:c5:9e:2a:3d:8c:ad:fb:71:77:83:de:20:83:08: 70:0a:d8:78:86:9d:a1:c4:f4:04:cc:1a:76:92:4c: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C1:9D:38:E8:C0:CE:5F:2D:26:AA:7F:71:B6:65:F8:A7:1C:78:F1 X509v3 Authority Key Identifier: keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c0:43:e8:ad:64:73:fd:c4:ed:91:ad:16:75:21:66:75:4e: c1:db:2e:74:08:52:c3:9d:d6:1d:24:25:b9:07:2e:45:a9:0c: af:3d:e0:a3:b4:8b:2c:bb:b4:4e:39:3a:e0:49:ed:51:ce:71: 18:ca:80:72:e1:e1:0e:78:87:7c:33:e4:04:cb:2e:1e:45:68: a9:f9:3a:4a:e5:96:c9:2f:cf:8c:eb:43:00:65:1a:bb:27:59: 94:40:0c:f6:ff:cb:68:dd:e2:6f:f9:4b:37:84:f8:5b:98:d9: 8f:55:18:a1:1a:1a:a6:20:63:60:3a:c6:ae:a9:22:3f:5c:3c: 57:94:4a:1e:f3:e3:31:b4:9f:91:88:f0:d8:50:4e:f2:48:50: 36:bb:9e:fd:95:ab:73:fa:46:87:4b:62:a0:7e:f2:59:69:89: 76:2c:1d:f6:e2:b9:3e:df:28:2e:ef:6f:31:e5:01:8f:7e:63: a6:bb:ed:47:e1:58:4c:7c:3a:d5:5e:c8:b7:6d:03:b3:07:ab: 67:82:af:78:ef:f4:dc:1e:1f:7e:33:c7:90:b9:b5:ca:52:1c: cb:36:fe:ff:4a:6e:3e:79:5c:7c:f1:b8:09:e5:3d:c2:13:23: c3:ac:a3:e6:cb:8a:6a:63:84:29:62:35:95:95:97:23:d5:33: 73:06:94:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSlvGBDzNySCaAIWdR2eCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MDQ4NWY1ZWFjNjc1YTI0MWFiNmUwMmQ4ZTUzZGQyODU1 NmQyZWUwHhcNMjUxMjIxMTkwMjA3WhcNMjUxMjIyMTkwMjA3WjAzMTEwLwYDVQQD Eyg2ZWMxOWQzOGU4YzBjZTVmMmQyNmFhN2Y3MWI2NjVmOGE3MWM3OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMZheAHW1B8ZJnb0keA8uhSR6U0Z 9qUwhsZ6ZV0bcTIDBttmb78gIXqKfY3bgPoNGZncGDkZqfrMHc4zkU6jhYEBOzpi vb6kEdRrDF3IyZnWtU2hfsU0fxa6mThMgf9aFl9vhJmUo4WQQm5sTC0nWpzKC/k5 TJtAS8puCE57bdJss2FOBB9EOnOI/WIpWyfJIKGsyyuzZObIwo9iOq5hN3/N1/aB GGticIHkZotWzPtKc35u1HftqpGctr39haeSGb+h6BrAtjpnJfHhfJqtFxg7L1Wx uw5NFmJo1URitwVmxZ4qPYyt+3F3g94ggwhwCth4hp2hxPQEzBp2kkzy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7BnTjowM5fLSaqf3G2ZfinHHjxMB8GA1UdIwQY MBaAFEcEhfXqxnWiQatuAtjlPdKFVtLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAt MDA3N2MyYmRiZjM3LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAtMDA3N2MyYmRiZjM3 LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsBD6K1k c/3E7ZGtFnUhZnVOwdsudAhSw53WHSQluQcuRakMrz3go7SLLLu0Tjk64EntUc5x GMqAcuHhDniHfDPkBMsuHkVoqfk6SuWWyS/PjOtDAGUauydZlEAM9v/LaN3ib/lL N4T4W5jZj1UYoRoapiBjYDrGrqkiP1w8V5RKHvPjMbSfkYjw2FBO8khQNrue/ZWr c/pGh0tioH7yWWmJdiwd9uK5Pt8oLu9vMeUBj35jprvtR+FYTHw61V7It20Dswer Z4KveO/03B4ffjPHkLm1ylIcyzb+/0puPnlcfPG4CeU9whMjw6yj5suKamOEKWI1 lZWXI9UzcwaUYg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:00 2025 by rpki-client