This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json) Hash identifier: gTHLnO6uvn4QzDYqaVAv6Oxy1+R9VS9lsVft8+MjdlI= Subject key identifier: 91:77:BA:54:6B:65:91:E9:64:AA:CB:31:0C:E0:E7:18:9D:31:DA:75 Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74 Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174 Certificate serial: 019B4513D1B177F2FDDC1E4B65C892643F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft Manifest number: 0B99 Signing time: Mon 22 Dec 2025 08:01:25 +0000 Manifest this update: Mon 22 Dec 2025 08:01:25 +0000 Manifest next update: Tue 23 Dec 2025 08:01:25 +0000 Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: YXqlV/C3qkKxVGyIk4CFhWw9ZT7RvdZ1J8a/t7MeEcs=) 2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:d1:b1:77:f2:fd:dc:1e:4b:65:c8:92:64:3f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174 Validity Not Before: Dec 22 08:01:25 2025 GMT Not After : Dec 23 08:01:25 2025 GMT Subject: CN=9177ba546b6591e964aacb310ce0e7189d31da75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:16:af:2e:3c:77:83:8e:76:d9:0f:a4:f1: 7e:3d:33:a5:40:cc:d4:97:36:0a:77:ea:81:48:5b: f7:d0:20:4d:6d:12:b9:5b:49:b7:c0:a5:bb:1d:48: cc:69:08:b5:48:41:dd:2a:11:01:80:bd:e4:d0:ed: fe:0b:8a:5b:09:2e:a3:26:08:2b:87:75:ce:60:81: 3a:13:41:be:34:b6:bc:89:21:14:d5:fd:a8:21:f5: a2:12:29:a8:d8:6c:db:7e:f9:7b:be:3a:6e:33:bf: 8d:3d:a0:d6:35:03:46:20:84:57:e7:e4:58:00:2e: 56:c6:c2:84:68:48:c2:31:33:1d:07:8b:99:ea:e4: 10:d4:9a:1b:52:be:44:85:3a:b8:57:6e:2d:87:95: a9:65:8b:42:ca:3d:f3:24:80:d7:b9:c7:f8:f5:8e: 25:17:f8:ef:9d:78:5a:8c:42:cb:59:4b:d6:40:a0: 71:13:c0:78:1f:6a:10:27:c3:e7:80:80:c7:7a:cc: a6:07:5a:00:b8:ce:d6:d2:d0:07:31:94:f2:07:68: 83:8d:c6:e7:25:56:0c:d5:61:c0:ea:9c:22:3c:31: 6c:81:68:81:8a:05:9b:d5:4d:d2:c1:34:1f:8c:20: 0f:10:f2:9e:66:8b:cb:cc:41:8c:38:25:9c:a5:28: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:77:BA:54:6B:65:91:E9:64:AA:CB:31:0C:E0:E7:18:9D:31:DA:75 X509v3 Authority Key Identifier: keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:73:d5:35:38:29:4f:73:6b:04:77:50:29:92:e5:72:d8: 4c:f0:71:4c:a0:3c:44:b6:4a:db:54:ce:fd:76:9e:c4:f8:b8: 69:e4:1e:61:5a:8c:1b:3b:d0:5a:52:d5:e2:af:3f:30:94:35: 77:cf:a7:e7:b7:74:ef:23:8b:14:80:31:5e:b1:52:e0:14:b5: 28:d5:e3:3c:62:ef:22:df:46:a3:4d:df:1d:1b:e2:ab:fa:e0: dd:4c:cd:95:eb:eb:da:35:bf:f1:3c:45:c1:4f:13:0f:3a:c7: 5e:38:2b:cf:36:c7:62:66:d5:d1:7e:88:30:cd:3a:04:a0:bf: 6f:41:bf:c9:93:83:6b:09:ef:2a:81:97:58:d0:fb:1c:a8:d7: a7:6f:96:9f:ec:13:22:a0:34:cc:3e:dc:08:ca:4f:d2:5b:5f: a9:34:1d:4f:a9:36:09:29:d8:76:d6:6e:f3:fa:01:c0:2d:2a: 4c:79:11:d6:17:2b:8c:71:1a:39:85:c3:89:cc:c4:10:56:66: 66:73:1a:28:61:63:80:a7:0d:b5:f4:e5:36:c5:3d:29:e4:c1: 58:67:5a:c4:7c:14:38:92:b6:61:58:bf:d8:e7:cc:3e:32:73: 3b:56:25:8c:cc:ee:6c:9c:96:29:4f:89:b7:62:86:ee:44:60: 8a:f1:ce:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE9Gxd/L93B5LZciSZD97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJjMDIxYjY1N2E1OTRlZTU4ZDlkMzZkOGQ5MTgzMWQw ODUxNzQwHhcNMjUxMjIyMDgwMTI1WhcNMjUxMjIzMDgwMTI1WjAzMTEwLwYDVQQD Eyg5MTc3YmE1NDZiNjU5MWU5NjRhYWNiMzEwY2UwZTcxODlkMzFkYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PwWry48d4OOdtkPpPF+PTOlQMzU lzYKd+qBSFv30CBNbRK5W0m3wKW7HUjMaQi1SEHdKhEBgL3k0O3+C4pbCS6jJggr h3XOYIE6E0G+NLa8iSEU1f2oIfWiEimo2Gzbfvl7vjpuM7+NPaDWNQNGIIRX5+RY AC5WxsKEaEjCMTMdB4uZ6uQQ1JobUr5EhTq4V24th5WpZYtCyj3zJIDXucf49Y4l F/jvnXhajELLWUvWQKBxE8B4H2oQJ8PngIDHesymB1oAuM7W0tAHMZTyB2iDjcbn JVYM1WHA6pwiPDFsgWiBigWb1U3SwTQfjCAPEPKeZovLzEGMOCWcpSgavwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF3ulRrZZHpZKrLMQzg5xidMdp1MB8GA1UdIwQY MBaAFEcLwCG2V6WU7ljZ022NkYMdCFF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQt M2JlY2RkZmNjYWU2LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQtM2JlY2RkZmNjYWU2 LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjJz1TU4 KU9zawR3UCmS5XLYTPBxTKA8RLZK21TO/XaexPi4aeQeYVqMGzvQWlLV4q8/MJQ1 d8+n57d07yOLFIAxXrFS4BS1KNXjPGLvIt9Go03fHRviq/rg3UzNlevr2jW/8TxF wU8TDzrHXjgrzzbHYmbV0X6IMM06BKC/b0G/yZODawnvKoGXWND7HKjXp2+Wn+wT IqA0zD7cCMpP0ltfqTQdT6k2CSnYdtZu8/oBwC0qTHkR1hcrjHEaOYXDiczEEFZm ZnMaKGFjgKcNtfTlNsU9KeTBWGdaxHwUOJK2YVi/2OfMPjJzO1YljMzubJyWKU+J t2KG7kRgivHORg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:07:14 2025 by rpki-client