This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json) Hash identifier: dAFLhxMqNdTfwL5wqedEa8u9wOaJhSidC8Hm3hrtRkk= Subject key identifier: 1D:07:F8:96:AD:58:42:1B:6B:05:6A:6B:19:76:E2:7B:1A:04:60:9D Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Certificate serial: 019B4694462599E43C950ED303F4E95E191F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft Manifest number: 0550 Signing time: Mon 22 Dec 2025 15:01:20 +0000 Manifest this update: Mon 22 Dec 2025 15:01:20 +0000 Manifest next update: Tue 23 Dec 2025 15:01:20 +0000 Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: aBVfh6eFjwHJQMtu/Gka/J6816OjDApnB6FAIkKqr2M=) 2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:46:25:99:e4:3c:95:0e:d3:03:f4:e9:5e:19:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Validity Not Before: Dec 22 15:01:20 2025 GMT Not After : Dec 23 15:01:20 2025 GMT Subject: CN=1d07f896ad58421b6b056a6b1976e27b1a04609d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:48:fd:8e:bc:f0:ee:63:54:3a:04:6f:44: 52:d5:73:f2:b6:3f:97:40:6e:a2:ce:4f:02:25:b3: 8c:42:0f:d4:7e:05:39:70:75:49:77:26:af:97:3d: 67:49:4f:84:6d:b4:f2:ac:a9:41:ae:c0:bf:2f:79: c3:56:3e:20:b4:4f:49:89:2d:d3:e9:fe:e4:59:43: a8:82:9d:e6:65:2b:21:a7:50:1b:f7:30:e3:cf:0b: 5a:6a:dc:10:ca:69:44:a1:cf:17:29:cc:4b:db:22: a6:2b:b1:a9:e9:60:b1:37:22:fa:bf:97:41:46:19: 97:8a:a2:31:35:ae:d9:6c:73:74:7e:bd:21:84:fb: 13:b3:4a:57:e7:ec:b1:4d:86:1e:18:90:9e:05:4c: c3:c1:c0:78:94:d2:bb:9a:19:65:f9:46:5d:0e:ab: 0c:2e:3c:7d:00:19:09:29:52:97:27:fa:f5:de:51: 20:88:30:53:91:ea:dc:8b:04:27:d5:32:fb:2d:64: c1:f7:22:c6:e4:5c:17:3d:a3:3d:96:5d:d9:69:7d: ef:10:28:6e:df:0b:46:66:f3:da:2e:76:ea:b4:13: 7a:ed:e5:85:5d:70:de:02:06:62:8d:8a:ac:5b:bb: 6a:ef:23:9a:a0:e9:1c:96:b8:65:b4:a0:cd:52:cf: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:07:F8:96:AD:58:42:1B:6B:05:6A:6B:19:76:E2:7B:1A:04:60:9D X509v3 Authority Key Identifier: keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:13:1a:e8:d9:2c:a0:c0:4c:00:d0:0d:d8:da:bf:68:d7:2b: 7f:b6:08:3c:36:eb:2c:8b:78:ea:08:89:c3:8f:b4:70:2e:bc: db:63:a0:65:e2:3a:28:3a:7f:2b:65:d6:97:38:17:7f:e1:e1: 92:ac:da:ba:08:bd:73:95:32:a9:93:8c:12:74:40:83:bf:76: ad:8a:6b:30:72:02:37:35:70:54:3a:92:89:de:1a:9a:c6:2e: ab:07:6d:0d:ea:f0:62:5a:65:90:6b:07:99:4c:da:c7:ff:39: c6:3d:f8:97:18:b3:29:1e:a4:1d:cc:88:e4:49:4d:ee:99:c6: 60:5e:f9:fb:33:0b:af:ee:45:c4:d7:fa:8c:dc:23:e9:e4:d1: 00:ee:9a:dd:ee:93:ce:f0:f3:ea:42:1f:82:94:9a:26:5d:53: c1:a7:c7:65:84:bf:41:3d:8e:5f:b3:40:7e:29:b6:69:20:bb: 80:43:8e:04:20:da:4e:1c:41:bc:0e:ef:02:a7:70:12:ae:78: fa:2a:af:d7:9f:75:2a:17:4a:ae:5a:b3:2e:65:53:fd:0c:41: 56:2a:13:50:69:1c:d5:ea:b7:7a:cc:e2:93:42:03:c7:eb:30: f9:a7:09:1f:87:83:99:6f:eb:c4:18:7f:60:bb:29:5d:18:71: a8:de:c4:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlEYlmeQ8lQ7TA/TpXhkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjE4NjkwOTkxNDVlMzFkN2I0YjVjNTVlYzVmOWE3MjRm ZmNhN2UwHhcNMjUxMjIyMTUwMTIwWhcNMjUxMjIzMTUwMTIwWjAzMTEwLwYDVQQD EygxZDA3Zjg5NmFkNTg0MjFiNmIwNTZhNmIxOTc2ZTI3YjFhMDQ2MDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGVI/Y688O5jVDoEb0RS1XPytj+X QG6izk8CJbOMQg/UfgU5cHVJdyavlz1nSU+EbbTyrKlBrsC/L3nDVj4gtE9JiS3T 6f7kWUOogp3mZSshp1Ab9zDjzwtaatwQymlEoc8XKcxL2yKmK7Gp6WCxNyL6v5dB RhmXiqIxNa7ZbHN0fr0hhPsTs0pX5+yxTYYeGJCeBUzDwcB4lNK7mhll+UZdDqsM Ljx9ABkJKVKXJ/r13lEgiDBTkerciwQn1TL7LWTB9yLG5FwXPaM9ll3ZaX3vEChu 3wtGZvPaLnbqtBN67eWFXXDeAgZijYqsW7tq7yOaoOkclrhltKDNUs9yOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0H+JatWEIbawVqaxl24nsaBGCdMB8GA1UdIwQY MBaAFGlhhpCZFF4x17S1xV7F+ack/8p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQt MmJjY2MyNzVlNjk2LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQtMmJjY2MyNzVlNjk2 LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBMa6Nks oMBMANAN2Nq/aNcrf7YIPDbrLIt46giJw4+0cC6822OgZeI6KDp/K2XWlzgXf+Hh kqzaugi9c5UyqZOMEnRAg792rYprMHICNzVwVDqSid4amsYuqwdtDerwYlplkGsH mUzax/85xj34lxizKR6kHcyI5ElN7pnGYF75+zMLr+5FxNf6jNwj6eTRAO6a3e6T zvDz6kIfgpSaJl1TwafHZYS/QT2OX7NAfim2aSC7gEOOBCDaThxBvA7vAqdwEq54 +iqv1591KhdKrlqzLmVT/QxBVioTUGkc1eq3eszik0IDx+sw+acJH4eDmW/rxBh/ YLspXRhxqN7EIA== -----END CERTIFICATE-----Generated at Tue Dec 23 00:01:16 2025 by rpki-client