This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json) Hash identifier: Y6ByiRatrwtUTjHQwbYmgJys/26FM8ocSbNR/ANWwlg= Subject key identifier: B8:C1:97:F5:3F:FF:E0:6B:FA:4D:86:E3:88:89:CB:42:2E:20:A5:29 Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd Certificate serial: 019B405B17ED68EA28C439E3BC42F05843D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft Manifest number: 1182 Signing time: Sun 21 Dec 2025 10:01:10 +0000 Manifest this update: Sun 21 Dec 2025 10:01:10 +0000 Manifest next update: Mon 22 Dec 2025 10:01:10 +0000 Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: FOBdnc26NR0CjDrMfWKZ4hv3GOoOcLA9xQs9cGhJ9/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:17:ed:68:ea:28:c4:39:e3:bc:42:f0:58:43:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd Validity Not Before: Dec 21 10:01:10 2025 GMT Not After : Dec 22 10:01:10 2025 GMT Subject: CN=b8c197f53fffe06bfa4d86e38889cb422e20a529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:36:9a:e3:18:fb:80:92:10:18:3c:a2:87:01: 82:6b:8d:1e:7e:8c:35:42:03:f4:f9:d5:a1:b9:62: 1a:db:ed:48:99:11:ba:1f:1c:1d:23:44:57:30:fa: d5:94:fb:78:08:9d:5f:ea:9c:94:71:4a:fb:ec:e5: 24:fd:93:da:da:6a:d0:27:78:53:ef:c7:d8:5f:01: 13:5e:24:93:42:e4:d1:8a:75:32:cb:e1:d7:b2:1a: 74:27:ea:bb:af:da:df:d1:fd:c5:6f:4e:c6:d9:31: 4f:d3:08:f3:fb:ab:5f:d4:03:12:d1:ce:72:ae:8f: 66:26:95:fc:43:c1:0b:2c:59:7d:06:4e:0c:5e:05: fa:77:88:c5:66:27:e9:94:9d:5a:05:79:41:e7:e1: b2:55:05:2f:b2:80:8c:6e:b0:e0:3f:f3:86:cf:f4: a5:1f:45:11:5e:91:e8:41:0d:ca:69:a1:97:ec:a1: d7:d4:3c:86:7e:e2:e0:52:80:5e:81:c9:71:93:51: c2:4f:fd:24:47:9d:3a:03:84:e9:2f:14:86:f0:45: 93:ab:72:8e:fd:64:32:ae:c0:97:50:eb:d0:33:6a: 28:78:1b:14:ea:cd:95:04:ec:64:9c:7f:fa:5f:a9: 78:54:8a:91:36:86:5b:cf:06:aa:92:c7:2d:86:b5: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:97:F5:3F:FF:E0:6B:FA:4D:86:E3:88:89:CB:42:2E:20:A5:29 X509v3 Authority Key Identifier: keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c7:b0:15:95:92:16:f3:4f:6d:b3:49:de:d7:1b:c3:2e:7b: 58:e5:46:35:b1:94:4f:d0:64:6c:d3:e0:e1:fb:49:5c:8d:be: 0d:bb:b6:8c:3a:47:3d:7d:07:fc:8a:14:18:a7:b9:e4:a7:1b: be:34:46:14:54:f9:e0:aa:b0:3f:be:0e:d6:90:83:e4:f3:d0: c8:66:8a:d1:f9:fb:4a:8d:a2:39:42:6c:04:0a:74:e4:e6:1c: 84:28:cc:33:b9:82:8d:d4:17:17:73:64:d5:bc:ac:ce:42:4e: 42:0f:6f:c3:9d:bc:d2:e8:ab:70:e8:33:6d:f6:99:8c:3e:7a: a1:8b:cf:dd:df:c2:84:a1:9a:4c:43:ce:8f:b7:00:ce:e0:90: 16:34:12:2c:96:c5:cb:11:0e:8d:28:25:80:e4:5f:0f:dc:85: 18:e3:0b:9f:cf:5d:26:25:d6:ff:f4:c1:2f:71:72:66:76:be: 55:12:d2:85:c0:70:c7:93:71:a6:8f:08:5c:b5:66:00:d8:b5: be:0a:37:fd:39:3b:2d:f1:11:6c:9b:a3:e2:cb:42:81:97:10: 5c:c5:e6:0c:3d:93:38:48:33:6f:ed:21:b8:40:1a:cc:86:61: ce:c1:13:cf:57:52:7b:a3:07:5d:1d:0f:70:b5:ca:48:48:3e: 44:1c:a2:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxftaOooxDnjvELwWEPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMGJlOTEzMjEwNzQ0MzRjOWU4MjBkYjY2MWM5MWNhNjJj Y2IwZmQwHhcNMjUxMjIxMTAwMTEwWhcNMjUxMjIyMTAwMTEwWjAzMTEwLwYDVQQD EyhiOGMxOTdmNTNmZmZlMDZiZmE0ZDg2ZTM4ODg5Y2I0MjJlMjBhNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zaa4xj7gJIQGDyihwGCa40efow1 QgP0+dWhuWIa2+1ImRG6HxwdI0RXMPrVlPt4CJ1f6pyUcUr77OUk/ZPa2mrQJ3hT 78fYXwETXiSTQuTRinUyy+HXshp0J+q7r9rf0f3Fb07G2TFP0wjz+6tf1AMS0c5y ro9mJpX8Q8ELLFl9Bk4MXgX6d4jFZifplJ1aBXlB5+GyVQUvsoCMbrDgP/OGz/Sl H0URXpHoQQ3KaaGX7KHX1DyGfuLgUoBegclxk1HCT/0kR506A4TpLxSG8EWTq3KO /WQyrsCXUOvQM2ooeBsU6s2VBOxknH/6X6l4VIqRNoZbzwaqkscthrVhLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjBl/U//+Br+k2G44iJy0IuIKUpMB8GA1UdIwQY MBaAFAML6RMhB0Q0yegg22YckcpizLD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUt MmM0MGQ4MTFmZDRlLzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUtMmM0MGQ4MTFmZDRl LzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMewFZWS FvNPbbNJ3tcbwy57WOVGNbGUT9BkbNPg4ftJXI2+Dbu2jDpHPX0H/IoUGKe55Kcb vjRGFFT54KqwP74O1pCD5PPQyGaK0fn7So2iOUJsBAp05OYchCjMM7mCjdQXF3Nk 1byszkJOQg9vw5280uircOgzbfaZjD56oYvP3d/ChKGaTEPOj7cAzuCQFjQSLJbF yxEOjSglgORfD9yFGOMLn89dJiXW//TBL3FyZna+VRLShcBwx5Nxpo8IXLVmANi1 vgo3/Tk7LfERbJuj4stCgZcQXMXmDD2TOEgzb+0huEAazIZhzsETz1dSe6MHXR0P cLXKSEg+RByiSA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:22 2025 by rpki-client