This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json) Hash identifier: h5/xAg34g3zCkA0SyHZWeZFdxRep6aeLCGdU7qoy5og= Subject key identifier: 76:E8:B9:5B:07:11:6F:AB:85:4C:88:BC:F2:5F:90:54:0B:B4:02:86 Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Certificate serial: 019B32D76E76720BE1883B838E98FC2A7FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft Manifest number: 149A Signing time: Thu 18 Dec 2025 19:02:17 +0000 Manifest this update: Thu 18 Dec 2025 19:02:17 +0000 Manifest next update: Fri 19 Dec 2025 19:02:17 +0000 Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=) 2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=) 3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=) 4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: UBa2kz5E8X6ASG+sgrdBzpn8pP6utzZH70Q3qrXkDUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:6e:76:72:0b:e1:88:3b:83:8e:98:fc:2a:7f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Validity Not Before: Dec 18 19:02:17 2025 GMT Not After : Dec 19 19:02:17 2025 GMT Subject: CN=76e8b95b07116fab854c88bcf25f90540bb40286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:4c:d2:91:b4:99:a1:42:a7:8b:1f:ca:09: de:db:c2:01:28:11:06:40:33:73:c3:eb:d9:f5:29: eb:e7:76:67:ce:fc:74:08:fe:da:3d:6a:2f:85:7d: 5c:3d:eb:ca:a4:61:0e:df:4c:01:f6:93:67:98:95: 8b:8d:be:66:9c:d0:f0:3f:61:f8:ad:95:bc:71:c0: 72:88:4a:66:42:95:5d:bc:5d:f6:81:2f:a0:64:d0: 63:cc:6e:80:3a:d1:af:da:42:fd:21:b8:a6:51:df: 38:6a:30:d9:c5:ec:3e:2e:d0:f3:af:93:f2:f6:a2: d0:3c:aa:8d:d2:88:fd:8e:95:f3:d0:23:3b:3e:19: 3e:eb:1e:ec:81:11:2a:99:eb:22:7b:bb:b2:2d:dd: 6e:d6:68:eb:15:b2:67:08:03:97:58:8d:50:ee:19: 60:a2:4e:3e:f3:e9:94:8f:2b:b6:69:2f:09:7f:ee: c5:63:a1:c6:c4:48:cd:29:77:81:11:b8:1b:5b:bf: 0d:71:f7:da:cb:97:62:be:ff:0b:31:c8:81:12:73: 19:30:6f:a6:25:b8:9d:e7:20:37:81:04:82:50:f4: fd:67:a9:16:93:7d:cd:64:f7:ff:6a:41:3c:79:05: 90:7c:7c:dc:45:0b:f3:de:40:97:ee:db:d9:e3:17: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E8:B9:5B:07:11:6F:AB:85:4C:88:BC:F2:5F:90:54:0B:B4:02:86 X509v3 Authority Key Identifier: keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:80:bd:ef:9e:0c:21:0f:68:83:a2:79:26:7c:2a:ac:3b:70: 68:00:54:3e:db:43:66:d2:c2:4f:f0:06:6f:fa:6f:70:af:c3: 45:ad:7e:57:d7:da:aa:74:19:3b:00:c0:2e:8c:68:be:69:11: eb:2f:a2:19:86:d9:dc:3c:d6:88:55:72:29:8b:cd:10:ad:7a: 8a:dc:2f:89:cb:ca:d3:fc:ed:61:b3:22:2f:24:62:90:e1:e2: b0:0a:66:51:9c:e8:d6:18:e9:50:ee:d3:5a:8e:d0:42:9e:bd: a9:dd:d4:0f:6d:96:bf:06:f4:cc:b0:06:a7:c3:3d:6f:74:50: ac:a1:d2:aa:f2:4d:9b:83:2a:1e:c8:0a:5f:a1:e5:95:d0:4d: 83:e2:f6:66:ff:7f:1d:e4:0a:f3:95:f2:0b:7c:a3:fe:d6:f9: fd:bc:0e:94:7f:da:9d:4b:79:71:fa:d7:8e:42:37:38:32:41: b9:d3:51:70:96:04:d8:21:36:c7:63:81:c4:92:ac:e5:44:72: b0:f8:8b:34:e0:b8:9e:07:67:8a:e4:ca:01:57:2f:2a:4f:32: 28:b8:df:e8:e1:e2:89:5a:8d:44:38:00:a0:8d:8c:b4:69:09: c6:5e:d0:de:71:9a:da:ad:8c:f1:a0:fa:eb:85:ca:75:73:a1: 9f:81:eb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1252cgvhiDuDjpj8Kn/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl OTFhNGQwHhcNMjUxMjE4MTkwMjE3WhcNMjUxMjE5MTkwMjE3WjAzMTEwLwYDVQQD Eyg3NmU4Yjk1YjA3MTE2ZmFiODU0Yzg4YmNmMjVmOTA1NDBiYjQwMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunJM0pG0maFCp4sfygne28IBKBEG QDNzw+vZ9Snr53Znzvx0CP7aPWovhX1cPevKpGEO30wB9pNnmJWLjb5mnNDwP2H4 rZW8ccByiEpmQpVdvF32gS+gZNBjzG6AOtGv2kL9IbimUd84ajDZxew+LtDzr5Py 9qLQPKqN0oj9jpXz0CM7Phk+6x7sgREqmesie7uyLd1u1mjrFbJnCAOXWI1Q7hlg ok4+8+mUjyu2aS8Jf+7FY6HGxEjNKXeBEbgbW78Ncffay5divv8LMciBEnMZMG+m Jbid5yA3gQSCUPT9Z6kWk33NZPf/akE8eQWQfHzcRQvz3kCX7tvZ4xcd5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbouVsHEW+rhUyIvPJfkFQLtAKGMB8GA1UdIwQY MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt M2FjM2I2NzM3MDQyLzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoC9754M IQ9og6J5JnwqrDtwaABUPttDZtLCT/AGb/pvcK/DRa1+V9faqnQZOwDALoxovmkR 6y+iGYbZ3DzWiFVyKYvNEK16itwvicvK0/ztYbMiLyRikOHisApmUZzo1hjpUO7T Wo7QQp69qd3UD22Wvwb0zLAGp8M9b3RQrKHSqvJNm4MqHsgKX6HlldBNg+L2Zv9/ HeQK85XyC3yj/tb5/bwOlH/anUt5cfrXjkI3ODJBudNRcJYE2CE2x2OBxJKs5URy sPiLNOC4ngdniuTKAVcvKk8yKLjf6OHiiVqNRDgAoI2MtGkJxl7Q3nGa2q2M8aD6 64XKdXOhn4Hrvw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:11:47 2025 by rpki-client