This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json) Hash identifier: O91oK6CHposuygwaIXJpHq7wCiKtJv6zH4ilH7yNOpA= Subject key identifier: CB:E2:D4:B9:93:6B:E4:A6:68:A3:D0:C3:F2:D1:DD:FC:89:AD:DD:EA Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a Certificate serial: 019B6AD78769477DEE23D39E48D11F76B274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft Manifest number: 0E59 Signing time: Mon 29 Dec 2025 16:01:08 +0000 Manifest this update: Mon 29 Dec 2025 16:01:08 +0000 Manifest next update: Tue 30 Dec 2025 16:01:08 +0000 Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: YIwVj73Nnizq3/zg5VGYIPL89Y5gZDbeZ0UuwnBX0Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:87:69:47:7d:ee:23:d3:9e:48:d1:1f:76:b2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a Validity Not Before: Dec 29 16:01:08 2025 GMT Not After : Dec 30 16:01:08 2025 GMT Subject: CN=cbe2d4b9936be4a668a3d0c3f2d1ddfc89adddea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:f8:e4:93:c7:42:55:63:97:67:fc:b4:9d: fb:a5:e1:50:77:67:d9:79:6f:15:31:f1:dc:c7:52: 34:03:f1:87:57:8f:98:d3:56:86:47:48:b7:fc:37: e6:3b:46:a4:ce:65:50:f0:5f:0e:fa:f5:21:f6:e8: 5f:e4:cd:34:e5:95:20:97:57:51:b2:fd:94:39:97: 4f:70:6c:14:70:27:90:32:b3:0e:86:3d:6f:5c:7c: f6:49:de:30:83:f6:cd:8d:1b:7f:a4:bf:7b:8e:7b: 97:fd:b7:a3:3e:fe:ef:d0:32:ee:a6:bf:6a:c6:0d: 05:3e:e7:00:4b:87:23:33:18:9c:a9:77:ef:55:42: 79:4a:4e:12:1d:8d:60:a8:52:7a:3d:4a:37:19:2d: 06:46:c1:ef:7c:ca:12:23:2e:ff:22:ca:5b:4a:80: 67:13:43:c9:c0:41:9b:4b:ff:25:2f:54:29:3a:78: 07:9a:e3:4c:8a:53:8c:50:7d:94:ca:44:bf:91:ab: 87:c3:39:43:42:07:81:53:da:69:a1:46:3f:94:a1: c1:4b:88:3e:dc:91:21:2c:93:6d:49:c2:b4:86:cf: 8f:47:a4:30:f3:1c:26:55:c8:9e:0a:ac:e6:0a:01: eb:17:30:86:98:6a:a8:61:24:f3:54:b4:94:51:09: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E2:D4:B9:93:6B:E4:A6:68:A3:D0:C3:F2:D1:DD:FC:89:AD:DD:EA X509v3 Authority Key Identifier: keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b6:0d:8c:6e:75:68:72:b4:0b:ff:df:00:75:b7:9a:8d:61: 6b:58:5f:4b:92:6b:2a:d1:67:b8:64:3d:b1:c2:5e:77:d6:5e: d4:ff:6b:97:45:85:87:2c:8a:aa:bf:a4:dc:6e:31:9c:8f:58: 4a:b9:4f:32:5f:94:70:f8:ce:40:27:df:bb:fe:8a:58:ac:2a: f9:09:d9:79:6e:78:32:5e:57:f8:70:14:54:7b:bd:6d:23:24: 78:8d:e2:cc:f8:62:e5:e8:4e:81:8d:92:a1:97:46:2d:01:f7: e5:1d:9f:c3:b4:99:1a:9e:b3:be:ed:3e:86:b7:8d:cb:c5:4e: c8:90:ee:c3:ce:e0:a4:02:ab:bb:42:b2:6f:86:ca:aa:90:9f: 86:75:5f:4f:40:d9:87:e7:67:ce:1c:fd:49:19:17:b9:5a:e4: 20:0a:ea:72:5f:f6:2b:c0:ce:ea:ed:ab:61:35:a2:01:e1:92: a4:d0:e1:26:a7:94:df:af:09:b4:f7:d6:f7:8b:31:cd:38:34: 1e:45:f4:64:ad:93:7a:fc:04:b3:63:fb:26:77:47:8d:08:2a: df:4c:42:5e:f0:b5:13:0d:4b:66:00:a0:3d:6e:65:2e:96:a2: f1:b8:66:74:9f:24:50:a0:ff:28:c4:c4:49:c5:4f:f4:12:b4: 47:80:25:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq14dpR33uI9OeSNEfdrJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjJiYjNlOWQzNWI1YWY5ZGNhMDhlYTdjY2VmZjQzNTE5 YTRhNmEwHhcNMjUxMjI5MTYwMTA4WhcNMjUxMjMwMTYwMTA4WjAzMTEwLwYDVQQD EyhjYmUyZDRiOTkzNmJlNGE2NjhhM2QwYzNmMmQxZGRmYzg5YWRkZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPr45JPHQlVjl2f8tJ37peFQd2fZ eW8VMfHcx1I0A/GHV4+Y01aGR0i3/DfmO0akzmVQ8F8O+vUh9uhf5M005ZUgl1dR sv2UOZdPcGwUcCeQMrMOhj1vXHz2Sd4wg/bNjRt/pL97jnuX/bejPv7v0DLupr9q xg0FPucAS4cjMxicqXfvVUJ5Sk4SHY1gqFJ6PUo3GS0GRsHvfMoSIy7/IspbSoBn E0PJwEGbS/8lL1QpOngHmuNMilOMUH2UykS/kauHwzlDQgeBU9ppoUY/lKHBS4g+ 3JEhLJNtScK0hs+PR6Qw8xwmVcieCqzmCgHrFzCGmGqoYSTzVLSUUQm7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvi1LmTa+SmaKPQw/LR3fyJrd3qMB8GA1UdIwQY MBaAFGliuz6dNbWvncoI6nzO/0NRmkpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYt NTEzNmYyNjIyNjQxLzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYtNTEzNmYyNjIyNjQx LzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrYNjG51 aHK0C//fAHW3mo1ha1hfS5JrKtFnuGQ9scJed9Ze1P9rl0WFhyyKqr+k3G4xnI9Y SrlPMl+UcPjOQCffu/6KWKwq+QnZeW54Ml5X+HAUVHu9bSMkeI3izPhi5ehOgY2S oZdGLQH35R2fw7SZGp6zvu0+hreNy8VOyJDuw87gpAKru0Kyb4bKqpCfhnVfT0DZ h+dnzhz9SRkXuVrkIArqcl/2K8DO6u2rYTWiAeGSpNDhJqeU368JtPfW94sxzTg0 HkX0ZK2TevwEs2P7JndHjQgq30xCXvC1Ew1LZgCgPW5lLpai8bhmdJ8kUKD/KMTE ScVP9BK0R4AlqA== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:44 2025 by rpki-client