This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft File: AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json) Hash identifier: EVEV3rlP3S23OO89Zi8Jzfs21wOgL/orT+ZitQLBj9k= Subject key identifier: 8D:1D:94:45:DB:E9:77:8F:A8:B1:CC:CB:F6:A1:D0:8C:55:A3:8E:C3 Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13 Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513 Certificate serial: 019B2F3050D6CE785991DBDF48A3586CE5FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft Manifest number: 1617 Signing time: Thu 18 Dec 2025 02:00:54 +0000 Manifest this update: Thu 18 Dec 2025 02:00:54 +0000 Manifest next update: Fri 19 Dec 2025 02:00:54 +0000 Files and hashes: 1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: xXNueWht80RWRUD031VCY2CiKKq0o7/a8+8FzpzXGgM=) 2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:50:d6:ce:78:59:91:db:df:48:a3:58:6c:e5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513 Validity Not Before: Dec 18 02:00:54 2025 GMT Not After : Dec 19 02:00:54 2025 GMT Subject: CN=8d1d9445dbe9778fa8b1cccbf6a1d08c55a38ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:f1:91:24:ae:5b:f8:41:0a:3b:b1:b5:97: 22:74:e7:7a:0c:1e:b6:b4:12:b9:d5:4a:d4:c8:99: bd:ed:6d:e0:62:5e:27:47:6e:ff:99:7b:25:c8:83: 8e:08:5e:61:58:f9:21:70:c4:7a:fb:27:df:b0:1f: 6c:77:7f:0f:4c:14:82:e0:c5:86:1e:76:61:10:13: 0a:da:84:ff:0b:c9:ee:69:55:58:2a:cd:25:34:20: 6c:a6:b5:79:e8:f5:fd:1d:0e:a7:21:c0:33:7d:aa: 2e:07:0e:cc:d6:87:71:2d:7b:7c:24:ce:12:a8:8d: 6c:0a:48:38:0c:38:81:64:e3:a0:d5:e6:68:be:84: e6:b0:d8:36:87:eb:58:73:0a:1e:26:90:d9:c5:e0: f2:0a:82:f5:9a:13:fd:e0:df:a5:e1:00:f0:b8:78: 2e:45:a0:2b:64:54:be:88:72:93:da:6c:13:47:80: 46:49:6b:60:82:70:d3:80:40:29:89:8a:59:51:4c: bf:6a:f7:0e:42:d0:d9:e4:fb:fc:6d:54:1c:c8:f6: 1f:52:89:e3:68:32:7a:cc:ef:49:c9:55:ee:0f:77: b2:1a:11:c6:4b:8c:d7:c1:3f:a6:11:6f:08:34:32: 17:44:7f:af:08:f4:52:80:9b:bd:e9:a9:f3:c5:45: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:94:45:DB:E9:77:8F:A8:B1:CC:CB:F6:A1:D0:8C:55:A3:8E:C3 X509v3 Authority Key Identifier: keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4e:3f:a3:91:12:c9:dc:9a:35:d8:7c:64:df:af:1b:4b:0c: d0:3f:51:a0:69:45:f8:29:bd:3e:3c:0e:bc:28:4f:74:fa:7b: 28:bd:81:ef:7d:d3:d5:84:64:8b:39:d5:e0:19:d1:38:8e:e1: ba:e4:f3:9f:a1:a9:3d:95:2a:bb:8a:01:ad:b8:99:a6:bb:2c: 8e:5c:c8:d5:76:5b:63:c3:7d:a4:cc:ee:2c:86:2f:98:4c:70: 32:6c:24:13:96:b8:05:21:3e:37:0b:d6:e8:d7:0c:17:0d:65: 9c:0c:71:73:90:da:07:a7:42:9b:bb:15:7f:1e:43:e3:87:b5: 7b:78:54:22:1d:ad:e6:c5:47:e3:39:08:c3:98:c2:de:96:97: a5:57:b2:27:33:40:53:00:f3:b4:9d:8c:5c:0a:8f:35:8e:00: 8f:7d:71:56:9f:3c:49:fc:e1:0c:da:f3:f1:c0:54:8a:a1:4f: 5b:f7:88:f7:e7:94:50:11:63:c3:6c:24:9e:77:72:95:f8:ed: 20:49:ee:61:c3:b7:92:04:d9:c1:0c:a3:8a:6e:4b:e4:10:59: 0b:1f:66:5c:b3:95:04:9e:40:01:d9:56:d6:be:71:b5:ae:fc: 07:fd:62:a8:3e:5e:53:e6:78:ed:dd:29:8a:1f:01:e5:ae:21: 3b:bf:14:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMFDWznhZkdvfSKNYbOX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMDU4MWVhYTk2OTAzNmMzM2Y5MmViYzQ4NDRkYzIyYzU1 ZTc1MTMwHhcNMjUxMjE4MDIwMDU0WhcNMjUxMjE5MDIwMDU0WjAzMTEwLwYDVQQD Eyg4ZDFkOTQ0NWRiZTk3NzhmYThiMWNjY2JmNmExZDA4YzU1YTM4ZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN/xkSSuW/hBCjuxtZcidOd6DB62 tBK51UrUyJm97W3gYl4nR27/mXslyIOOCF5hWPkhcMR6+yffsB9sd38PTBSC4MWG HnZhEBMK2oT/C8nuaVVYKs0lNCBsprV56PX9HQ6nIcAzfaouBw7M1odxLXt8JM4S qI1sCkg4DDiBZOOg1eZovoTmsNg2h+tYcwoeJpDZxeDyCoL1mhP94N+l4QDwuHgu RaArZFS+iHKT2mwTR4BGSWtggnDTgEApiYpZUUy/avcOQtDZ5Pv8bVQcyPYfUonj aDJ6zO9JyVXuD3eyGhHGS4zXwT+mEW8INDIXRH+vCPRSgJu96anzxUXs0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0dlEXb6XePqLHMy/ah0IxVo47DMB8GA1UdIwQY MBaAFAMFgeqpaQNsM/kuvEhE3CLFXnUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEt ZDg0YjJiMWU5MTMzLzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEtZDg0YjJiMWU5MTMz LzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACk4/o5ES ydyaNdh8ZN+vG0sM0D9RoGlF+Cm9PjwOvChPdPp7KL2B733T1YRkiznV4BnROI7h uuTzn6GpPZUqu4oBrbiZprssjlzI1XZbY8N9pMzuLIYvmExwMmwkE5a4BSE+NwvW 6NcMFw1lnAxxc5DaB6dCm7sVfx5D44e1e3hUIh2t5sVH4zkIw5jC3paXpVeyJzNA UwDztJ2MXAqPNY4Aj31xVp88SfzhDNrz8cBUiqFPW/eI9+eUUBFjw2wknndylfjt IEnuYcO3kgTZwQyjim5L5BBZCx9mXLOVBJ5AAdlW1r5xta78B/1iqD5eU+Z47d0p ih8B5a4hO78U6g== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:01 2025 by rpki-client