This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json) Hash identifier: gBS6HLgtyfABu7ogn/71C0k6TkKUWyefA3A2wgGErBg= Subject key identifier: 0E:01:46:8E:2B:14:BC:A4:FF:86:A1:4F:18:EF:8B:95:0B:B8:C7:AF Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3 Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3 Certificate serial: 019B41A4DCD9C55F47097A3D549C0F24BCB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft Manifest number: 0CC6 Signing time: Sun 21 Dec 2025 16:01:22 +0000 Manifest this update: Sun 21 Dec 2025 16:01:22 +0000 Manifest next update: Mon 22 Dec 2025 16:01:22 +0000 Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: Zj+JG1aJQ/vvrn030+ayii7OuLa57bFaOoNdjRTHD5M=) 2: IXB7KzKujGJB9qHSV-0muRiEa80.roa (hash: BqHzdDeRfi2F8mGR+zPLtSwSdgCJjnyKcweTv1mlvB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:dc:d9:c5:5f:47:09:7a:3d:54:9c:0f:24:bc:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3 Validity Not Before: Dec 21 16:01:22 2025 GMT Not After : Dec 22 16:01:22 2025 GMT Subject: CN=0e01468e2b14bca4ff86a14f18ef8b950bb8c7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:13:7b:f7:f3:27:3f:e6:e6:84:5a:93:b1: 87:89:9e:a6:c2:db:e7:28:b6:6d:c9:ba:a5:5b:a6: 6f:7b:ba:9b:d7:d8:c8:95:03:b0:71:15:71:2e:8c: 48:75:dc:ec:6c:c4:b2:ff:ef:84:55:5a:4f:03:0d: 1c:a6:c1:4e:de:28:c8:22:fb:70:d4:2b:17:37:22: 47:4d:a9:60:59:0e:45:95:b1:65:12:bc:2f:27:da: 3c:55:ac:41:99:86:45:ee:f8:b0:3b:6b:86:c1:fa: 42:f2:5c:aa:0e:e9:7a:8b:ba:d0:c1:27:2f:e8:02: 7d:06:88:1c:53:88:1b:3a:06:b4:05:0b:6f:36:6d: 91:6e:da:65:f3:b1:0a:79:32:3b:54:16:36:8d:8a: 9b:d5:16:d5:c1:9d:26:e9:62:3b:5d:82:1c:c8:95: 51:45:6d:b2:83:10:09:53:87:53:3f:9b:24:7b:8d: 94:b7:2d:e0:dc:7c:f7:9c:00:1d:32:8d:23:f0:32: 80:30:b6:b7:d5:77:6f:bf:b1:05:dc:70:57:69:af: 31:c9:4f:b8:53:2c:3b:66:8a:69:c2:90:e9:a4:e2: a5:b0:f5:28:ea:ab:92:d6:8d:2c:7b:69:28:de:ed: ba:ea:72:5d:86:f8:b8:2f:84:3e:ee:7e:73:12:1b: 79:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:01:46:8E:2B:14:BC:A4:FF:86:A1:4F:18:EF:8B:95:0B:B8:C7:AF X509v3 Authority Key Identifier: keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f6:5e:26:38:2a:45:d8:fc:bd:13:9a:c3:6f:e8:dc:57:03: 34:5b:61:cf:c6:eb:9a:77:f6:d7:42:82:5d:6b:86:9e:e2:4a: 44:e8:8a:2d:dc:29:90:59:99:f0:5c:74:31:60:ce:7d:3c:f7: 26:31:cb:75:98:9b:ea:73:92:00:e1:b9:3e:8a:77:34:17:17: 89:1d:b7:7a:50:9b:c6:39:ef:ff:2c:e6:39:ea:36:d3:d7:da: 75:44:0b:7e:6a:ea:d9:85:ab:28:6c:c0:7b:07:54:71:aa:21: 9a:ec:1a:23:0b:78:72:ea:9b:9b:5e:65:40:40:44:79:4f:95: 23:92:4d:48:65:f7:82:bc:3b:89:bd:8b:68:53:f3:40:9d:73: 81:c0:75:ae:cc:4c:d9:23:83:94:28:99:52:ca:2b:08:8f:0a: f0:19:1f:65:cb:cc:a7:56:28:f7:af:1e:93:12:5a:84:6c:f5: ae:7f:ed:2b:e3:05:49:04:ec:48:08:6e:ef:cd:33:17:6a:e7: 8b:23:af:cf:da:2c:ea:1d:36:58:09:8e:1c:7f:29:ee:de:26: 52:0a:6b:d4:5a:41:da:70:35:03:9a:32:cc:0c:9f:95:21:87: 94:98:de:6e:2e:12:26:64:2d:de:28:dc:84:a6:05:53:fe:d0: ec:03:45:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpNzZxV9HCXo9VJwPJLy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMDkwZmFjM2NjNDJmMTk5NzQ1NWExMmU2NDMwNjQ2Mzdj NjlkYzMwHhcNMjUxMjIxMTYwMTIyWhcNMjUxMjIyMTYwMTIyWjAzMTEwLwYDVQQD EygwZTAxNDY4ZTJiMTRiY2E0ZmY4NmExNGYxOGVmOGI5NTBiYjhjN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUITe/fzJz/m5oRak7GHiZ6mwtvn KLZtybqlW6Zve7qb19jIlQOwcRVxLoxIddzsbMSy/++EVVpPAw0cpsFO3ijIIvtw 1CsXNyJHTalgWQ5FlbFlErwvJ9o8VaxBmYZF7viwO2uGwfpC8lyqDul6i7rQwScv 6AJ9BogcU4gbOga0BQtvNm2Rbtpl87EKeTI7VBY2jYqb1RbVwZ0m6WI7XYIcyJVR RW2ygxAJU4dTP5ske42Uty3g3Hz3nAAdMo0j8DKAMLa31Xdvv7EF3HBXaa8xyU+4 Uyw7ZoppwpDppOKlsPUo6quS1o0se2ko3u266nJdhvi4L4Q+7n5zEht5swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4BRo4rFLyk/4ahTxjvi5ULuMevMB8GA1UdIwQY MBaAFAMJD6w8xC8Zl0VaEuZDBkY3xp3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAt ZmRkMjNiNDNjNTJlLzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAtZmRkMjNiNDNjNTJl LzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvZeJjgq Rdj8vROaw2/o3FcDNFthz8brmnf210KCXWuGnuJKROiKLdwpkFmZ8Fx0MWDOfTz3 JjHLdZib6nOSAOG5Pop3NBcXiR23elCbxjnv/yzmOeo209fadUQLfmrq2YWrKGzA ewdUcaohmuwaIwt4cuqbm15lQEBEeU+VI5JNSGX3grw7ib2LaFPzQJ1zgcB1rsxM 2SODlCiZUsorCI8K8BkfZcvMp1Yo968ekxJahGz1rn/tK+MFSQTsSAhu780zF2rn iyOvz9os6h02WAmOHH8p7t4mUgpr1FpB2nA1A5oyzAyflSGHlJjebi4SJmQt3ijc hKYFU/7Q7ANFgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:16 2025 by rpki-client