This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json) Hash identifier: udGMEFPuHH9HvU5JtrITKLIOPwRwAr3XMg7/AwP3DqA= Subject key identifier: A1:4A:4F:22:7B:06:42:A0:0B:70:F8:48:E5:F9:28:C5:E6:59:EA:27 Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6 Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6 Certificate serial: 019B5DC024E1346B039DBEE10F1D0544297B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft Manifest number: 0551 Signing time: Sat 27 Dec 2025 03:00:31 +0000 Manifest this update: Sat 27 Dec 2025 03:00:31 +0000 Manifest next update: Sun 28 Dec 2025 03:00:31 +0000 Files and hashes: 1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: Y2aljZatPTi2JCjDmcmQCQz5A//ERChi+du1X/s8Qqs=) 2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:24:e1:34:6b:03:9d:be:e1:0f:1d:05:44:29:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6 Validity Not Before: Dec 27 03:00:31 2025 GMT Not After : Dec 28 03:00:31 2025 GMT Subject: CN=a14a4f227b0642a00b70f848e5f928c5e659ea27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:b1:48:84:12:f1:51:96:0e:7a:71:05:36: 24:b3:ef:e7:6e:04:6f:f9:86:70:7d:40:f9:51:36: 45:3c:28:4e:06:8b:b8:85:9c:a3:7c:5d:fb:0b:09: e1:fa:0d:0e:5c:aa:a2:38:2c:6b:4d:2f:53:f1:1a: 0e:8b:e5:6d:35:57:0f:c0:7c:6d:78:49:37:79:e3: 2a:62:94:ae:ea:67:ca:9a:8f:16:4e:f6:43:fe:20: db:26:9f:c3:53:03:bd:20:c0:ef:14:ae:a6:fc:2f: 4e:46:9f:e7:f3:11:85:8d:b1:fd:41:b5:37:1d:71: 67:1a:73:3e:a4:41:75:61:ae:7e:75:43:c3:e2:c0: ee:a6:b3:f9:26:92:07:86:1d:2c:11:a5:1b:c8:37: c1:92:e0:f8:dd:e2:c0:6a:07:9e:7d:e6:5b:33:7c: e7:f5:3b:8b:ba:7e:f1:d7:0d:cb:b4:05:e2:1c:20: f3:7a:56:95:ae:7d:f7:db:5d:f1:2b:df:f1:82:c0: 7b:64:77:25:ba:0f:52:45:fa:94:d8:c8:e5:b2:8f: 31:35:e0:aa:96:64:41:21:74:84:fe:9f:57:f0:ab: b3:3c:18:9b:02:9c:23:51:b6:d9:ac:17:81:d3:7c: d0:1c:76:69:d1:da:b4:49:c8:86:a5:db:30:d5:a5: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4A:4F:22:7B:06:42:A0:0B:70:F8:48:E5:F9:28:C5:E6:59:EA:27 X509v3 Authority Key Identifier: keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:51:ad:cb:f8:bd:af:ed:1d:2c:a9:70:03:0e:93:ed:c8:ec: fa:eb:c9:a6:51:80:7c:9b:02:7d:55:92:d1:3d:87:8d:d9:e7: 81:09:34:6b:a5:c3:f9:97:c5:96:2b:ef:b3:6b:2c:87:43:99: 19:e8:5d:c2:22:d5:4c:12:e4:28:7a:19:84:77:7c:30:ed:4a: 0d:08:50:72:b0:53:94:a7:e4:fe:0f:76:17:95:e0:7a:47:12: c7:10:97:20:af:1a:54:ee:35:d1:1d:c6:09:29:d2:52:74:12: d1:d3:a6:a5:da:a4:84:2c:cb:24:65:f0:68:73:7e:be:83:ac: f7:4b:84:b9:34:fb:0f:e6:18:3d:bc:15:00:e7:95:78:3b:3c: 68:30:c5:39:e4:fe:6a:bf:cf:1e:d6:07:7f:f3:bd:10:24:cd: 1c:cc:a8:37:7c:29:86:d5:50:59:d4:9b:8f:74:f7:50:95:23: 56:19:3f:06:21:4a:b3:3c:31:2c:68:db:81:7b:12:45:5c:e4: a9:09:74:39:ea:96:fe:e1:c6:ae:72:ec:46:7f:21:bf:3b:6d: 86:ad:56:b6:ad:00:12:29:46:45:fc:7f:6c:b5:37:3d:d1:22: 2b:9f:9f:7e:af:55:00:11:d0:33:d0:8f:8b:1f:55:18:99:f8: a3:26:88:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwCThNGsDnb7hDx0FRCl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMDQ5NjA0NzM3Yzc4YmQyNGRiYjI1ZWIzMzZmNGE0MTZl NjQ1ZjYwHhcNMjUxMjI3MDMwMDMxWhcNMjUxMjI4MDMwMDMxWjAzMTEwLwYDVQQD EyhhMTRhNGYyMjdiMDY0MmEwMGI3MGY4NDhlNWY5MjhjNWU2NTllYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI2xSIQS8VGWDnpxBTYks+/nbgRv +YZwfUD5UTZFPChOBou4hZyjfF37Cwnh+g0OXKqiOCxrTS9T8RoOi+VtNVcPwHxt eEk3eeMqYpSu6mfKmo8WTvZD/iDbJp/DUwO9IMDvFK6m/C9ORp/n8xGFjbH9QbU3 HXFnGnM+pEF1Ya5+dUPD4sDuprP5JpIHhh0sEaUbyDfBkuD43eLAageefeZbM3zn 9TuLun7x1w3LtAXiHCDzelaVrn33213xK9/xgsB7ZHclug9SRfqU2Mjlso8xNeCq lmRBIXSE/p9X8KuzPBibApwjUbbZrBeB03zQHHZp0dq0SciGpdsw1aXXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFKTyJ7BkKgC3D4SOX5KMXmWeonMB8GA1UdIwQY MBaAFAMElgRzfHi9JNuyXrM29KQW5kX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEt MTY5ZTUzN2E4OTBjLzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEtMTY5ZTUzN2E4OTBj LzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1Gty/i9 r+0dLKlwAw6T7cjs+uvJplGAfJsCfVWS0T2HjdnngQk0a6XD+ZfFlivvs2ssh0OZ GehdwiLVTBLkKHoZhHd8MO1KDQhQcrBTlKfk/g92F5XgekcSxxCXIK8aVO410R3G CSnSUnQS0dOmpdqkhCzLJGXwaHN+voOs90uEuTT7D+YYPbwVAOeVeDs8aDDFOeT+ ar/PHtYHf/O9ECTNHMyoN3wphtVQWdSbj3T3UJUjVhk/BiFKszwxLGjbgXsSRVzk qQl0OeqW/uHGrnLsRn8hvztthq1Wtq0AEilGRfx/bLU3PdEiK5+ffq9VABHQM9CP ix9VGJn4oyaIoQ== -----END CERTIFICATE-----Generated at Sat Dec 27 08:09:05 2025 by rpki-client