This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json) Hash identifier: +SMihFdgRu7U/44cGKjNHZUYYvA0V/Me2Rv0fu3ZfNE= Subject key identifier: 1A:51:F5:F6:D8:35:D9:BD:CA:DA:CC:53:2F:8D:74:83:EF:3B:58:48 Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea Certificate serial: 019B3CB518B4E5E989A71E8E5AE010B0E8EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft Manifest number: 02B0 Signing time: Sat 20 Dec 2025 17:00:59 +0000 Manifest this update: Sat 20 Dec 2025 17:00:59 +0000 Manifest next update: Sun 21 Dec 2025 17:00:59 +0000 Files and hashes: 1: OaTUQuWzfS_XZHCe_x2P_axi78M.roa (hash: Q0N03WD0sCw/QoQfv4FCs+8GpuZ94pPLAh6lH5jdwNQ=) 2: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: RQB3gZOlO23uin53HreXKNGe9sPXfv+dOqNLeS82WjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:18:b4:e5:e9:89:a7:1e:8e:5a:e0:10:b0:e8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea Validity Not Before: Dec 20 17:00:59 2025 GMT Not After : Dec 21 17:00:59 2025 GMT Subject: CN=1a51f5f6d835d9bdcadacc532f8d7483ef3b5848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:cb:66:8b:b8:97:a6:df:ec:f9:4f:ab:ef: 9d:73:b1:8d:86:b3:44:fd:27:2e:1d:00:15:6c:b9: f4:77:9e:9d:01:ab:b7:a0:cd:73:fb:26:57:f6:7f: 9b:5b:de:03:8b:bd:69:52:d2:12:fd:21:56:ed:03: a7:62:3a:a9:b5:ca:b9:cb:31:62:49:d9:2d:c8:d7: b5:70:9b:f1:b1:88:ce:c2:be:f3:e7:67:45:0a:a8: 6a:7d:fe:34:08:9f:3a:8a:90:8c:f0:b4:f9:fa:a4: b3:47:b9:6d:ea:15:59:5f:81:48:5d:c9:9b:97:40: e1:21:d5:e7:cb:9c:0e:bd:3f:11:80:f6:44:e7:60: 85:2f:22:1c:11:b9:9a:47:74:a6:52:2d:f0:5e:5d: 01:cd:06:be:da:42:54:69:eb:f2:2b:ec:15:96:2f: 75:9e:7f:c8:00:e2:bb:cc:d3:64:69:be:71:23:0c: 65:d2:a9:27:90:5e:63:1e:35:cf:37:09:9f:d0:c8: 02:26:83:59:c1:46:2c:f9:18:3f:0b:68:08:5e:68: 39:2d:97:3e:02:0f:17:56:0b:c7:a3:93:d8:dc:a5: f0:71:e8:d7:5f:ed:16:73:8e:1a:60:87:97:7a:52: ec:6f:a9:0e:ca:47:f2:a6:73:58:21:08:9f:3e:47: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:51:F5:F6:D8:35:D9:BD:CA:DA:CC:53:2F:8D:74:83:EF:3B:58:48 X509v3 Authority Key Identifier: keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bf:9e:a6:b3:0f:63:9b:2c:50:ed:70:1e:e4:94:cb:6b:5a: be:2c:e6:05:86:cc:e8:49:a0:d7:12:4e:76:e0:7e:fa:c3:b5: 00:c9:fd:aa:91:72:49:55:c5:60:86:ec:aa:a7:30:dd:a3:24: 09:80:29:e7:bd:3e:6b:30:94:72:75:01:8b:60:3c:e3:fc:e7: b7:66:1b:82:82:9a:cf:88:08:f1:a0:45:14:cd:fc:67:c9:f7: 20:14:d5:c0:d1:13:9e:a1:a7:7d:4a:5c:ce:d7:7f:3d:a6:91: 89:4e:8f:81:b0:fe:aa:18:d4:d1:49:95:c0:56:ea:06:54:16: f2:2b:f3:24:06:b0:7e:36:80:1b:af:05:81:b3:2c:ca:f6:a2: 71:b0:56:13:e9:73:26:1e:21:c7:4a:2d:a9:97:b1:00:b3:d7: 15:f7:d5:a3:d8:8e:37:36:a0:e7:aa:58:6a:89:d4:64:ea:bd: 2b:ab:d9:2d:5e:e2:de:8d:a2:2c:71:dc:98:c2:9e:80:6b:a1: e8:69:65:9b:9e:9c:f3:5a:bc:6b:3f:0a:ec:bc:51:6c:e0:35: c9:44:c6:0e:ee:ba:91:79:4b:c1:eb:f8:c3:5e:e0:cc:63:fd: c9:7d:c4:9a:70:dc:8b:e4:24:3c:0d:4e:d6:e7:4d:7d:1f:07: d7:67:f0:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRi05emJpx6OWuAQsOjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTU5ODIwZGQ3MTgwMDRmYjE1Yzg1YjI3MDc5NmNiNGU4 NGE0ZWEwHhcNMjUxMjIwMTcwMDU5WhcNMjUxMjIxMTcwMDU5WjAzMTEwLwYDVQQD EygxYTUxZjVmNmQ4MzVkOWJkY2FkYWNjNTMyZjhkNzQ4M2VmM2I1ODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptPLZou4l6bf7PlPq++dc7GNhrNE /ScuHQAVbLn0d56dAau3oM1z+yZX9n+bW94Di71pUtIS/SFW7QOnYjqptcq5yzFi SdktyNe1cJvxsYjOwr7z52dFCqhqff40CJ86ipCM8LT5+qSzR7lt6hVZX4FIXcmb l0DhIdXny5wOvT8RgPZE52CFLyIcEbmaR3SmUi3wXl0BzQa+2kJUaevyK+wVli91 nn/IAOK7zNNkab5xIwxl0qknkF5jHjXPNwmf0MgCJoNZwUYs+Rg/C2gIXmg5LZc+ Ag8XVgvHo5PY3KXwcejXX+0Wc44aYIeXelLsb6kOykfypnNYIQifPkflcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpR9fbYNdm9ytrMUy+NdIPvO1hIMB8GA1UdIwQY MBaAFGkVmCDdcYAE+xXIWycHlstOhKTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEt Yzk0OWYwNTkxZjViLzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEtYzk0OWYwNTkxZjVi LzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHL+eprMP Y5ssUO1wHuSUy2tavizmBYbM6Emg1xJOduB++sO1AMn9qpFySVXFYIbsqqcw3aMk CYAp570+azCUcnUBi2A84/znt2YbgoKaz4gI8aBFFM38Z8n3IBTVwNETnqGnfUpc ztd/PaaRiU6PgbD+qhjU0UmVwFbqBlQW8ivzJAawfjaAG68FgbMsyvaicbBWE+lz Jh4hx0otqZexALPXFffVo9iONzag56pYaonUZOq9K6vZLV7i3o2iLHHcmMKegGuh 6Gllm56c81q8az8K7LxRbOA1yUTGDu66kXlLwev4w17gzGP9yX3EmnDci+QkPA1O 1udNfR8H12fwdw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:44 2025 by rpki-client