This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json) Hash identifier: YMKAb/qC7Usw3TEUZIRSwn1ImBCyWfexvo71MYbbK2U= Subject key identifier: 4C:53:E9:0D:39:8E:13:84:B6:9B:D0:5E:02:B0:96:73:9B:C2:CD:E3 Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Certificate serial: 019B4DA87F23D41D322E6BF305213BA6A206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 00:00:46 +0000 Manifest this update: Wed 24 Dec 2025 00:00:46 +0000 Manifest next update: Thu 25 Dec 2025 00:00:46 +0000 Files and hashes: 1: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: /wY4DZ2Ya+jdCmGfpXepXNFM9fu/4EN8jEfSHooBd/8=) 2: wzgPBQF88-_CiYEBssnryfMBX2w.roa (hash: YBjh+lwXHnu03g8De0628UnV8ZQfh0OnAO4LQ244jes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:a8:7f:23:d4:1d:32:2e:6b:f3:05:21:3b:a6:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Validity Not Before: Dec 24 00:00:46 2025 GMT Not After : Dec 25 00:00:46 2025 GMT Subject: CN=4c53e90d398e1384b69bd05e02b096739bc2cde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:d9:8d:7c:d4:8a:4c:33:36:0e:65:06:6c: de:f5:27:74:92:ae:ab:61:36:0c:e1:17:e0:9f:16: 20:e7:8b:f4:57:07:57:a4:5e:07:26:38:f9:6e:06: 8d:d6:a2:a5:f3:67:95:66:1e:19:ac:7e:26:08:b1: be:78:30:55:88:ae:27:29:7e:d2:02:e7:b3:c8:80: 27:7f:79:bf:ea:62:97:f9:9b:a3:cc:27:6d:ef:a5: 07:85:ae:7d:4e:60:58:a4:cf:31:49:fe:75:f8:e7: 9c:93:ec:50:af:1e:34:12:0c:92:c2:d6:33:29:73: 23:6e:5c:2f:7b:4c:2e:7c:46:fa:2a:c7:de:31:70: cf:31:b1:ef:4f:70:93:46:6c:5b:bd:8f:76:f3:8d: af:72:95:e5:76:82:f3:27:76:49:ba:73:35:14:d9: 49:c4:3d:73:08:be:ae:e0:26:dd:f4:3f:ea:6b:c3: eb:6f:16:ff:71:82:e2:d5:36:cc:e4:fb:dc:18:c3: 8b:50:dd:71:1b:26:93:9c:d1:e0:4b:ea:eb:d9:82: 36:aa:74:ef:13:84:5c:3c:87:1f:f3:6d:bb:db:a7: 22:e9:08:74:9d:75:00:49:14:ef:0f:d1:21:8c:9e: 6d:ea:24:8d:4e:6a:31:e3:e9:a7:28:b6:17:55:50: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:E9:0D:39:8E:13:84:B6:9B:D0:5E:02:B0:96:73:9B:C2:CD:E3 X509v3 Authority Key Identifier: keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a7:3d:bb:b2:fc:86:c9:78:69:6e:13:8f:f4:11:a5:71:41: 40:dc:ea:e4:27:e3:6e:f0:f6:01:25:7d:e4:5a:46:e6:32:15: c6:bb:03:99:b4:ab:aa:cf:78:8d:67:ae:aa:53:c2:d9:17:e4: 69:bb:27:ff:3f:2f:2d:28:e1:5e:8a:38:fe:8d:ce:3c:3d:a5: 34:3c:38:9f:d5:94:6a:69:46:bd:c4:e8:de:d4:e2:1b:98:83: 6c:2f:c3:a3:ee:b1:bf:a5:56:3b:52:82:6f:11:3f:44:13:36: e9:e6:62:18:5e:36:4f:5e:b0:d9:5d:77:4e:8f:6c:9f:ee:f8: fc:59:79:e9:60:44:75:86:29:79:0f:67:d0:d6:97:b5:21:c0: a5:72:70:f2:f0:b4:75:76:4d:c3:b4:7f:53:51:26:65:0a:58: b8:33:62:ad:fe:54:9c:de:6a:6a:d2:c2:33:a8:49:83:9c:57: b8:07:c9:eb:3f:c0:04:f8:65:ae:d9:6d:57:c1:df:c5:cd:c0: 98:d0:4c:a6:50:72:f5:4a:ba:f4:95:0e:83:c1:c5:70:b8:c2: 25:02:ba:a5:77:99:cc:bd:2e:91:cd:c0:74:9d:2b:0f:8c:c5: 21:ea:72:66:8a:17:b6:c0:94:f0:38:43:50:f4:95:8a:74:07: c3:ef:7c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNqH8j1B0yLmvzBSE7pqIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1 ZDFmODkwHhcNMjUxMjI0MDAwMDQ2WhcNMjUxMjI1MDAwMDQ2WjAzMTEwLwYDVQQD Eyg0YzUzZTkwZDM5OGUxMzg0YjY5YmQwNWUwMmIwOTY3MzliYzJjZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPnZjXzUikwzNg5lBmze9Sd0kq6r YTYM4RfgnxYg54v0VwdXpF4HJjj5bgaN1qKl82eVZh4ZrH4mCLG+eDBViK4nKX7S AuezyIAnf3m/6mKX+ZujzCdt76UHha59TmBYpM8xSf51+Oeck+xQrx40EgySwtYz KXMjblwve0wufEb6KsfeMXDPMbHvT3CTRmxbvY92842vcpXldoLzJ3ZJunM1FNlJ xD1zCL6u4Cbd9D/qa8Prbxb/cYLi1TbM5PvcGMOLUN1xGyaTnNHgS+rr2YI2qnTv E4RcPIcf822726ci6Qh0nXUASRTvD9EhjJ5t6iSNTmox4+mnKLYXVVAV+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExT6Q05jhOEtpvQXgKwlnObws3jMB8GA1UdIwQY MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt MWU2OTVlZjQ5YzEwLzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKc9u7L8 hsl4aW4Tj/QRpXFBQNzq5CfjbvD2ASV95FpG5jIVxrsDmbSrqs94jWeuqlPC2Rfk absn/z8vLSjhXoo4/o3OPD2lNDw4n9WUamlGvcTo3tTiG5iDbC/Do+6xv6VWO1KC bxE/RBM26eZiGF42T16w2V13To9sn+74/Fl56WBEdYYpeQ9n0NaXtSHApXJw8vC0 dXZNw7R/U1EmZQpYuDNirf5UnN5qatLCM6hJg5xXuAfJ6z/ABPhlrtltV8Hfxc3A mNBMplBy9Uq69JUOg8HFcLjCJQK6pXeZzL0ukc3AdJ0rD4zFIepyZooXtsCU8DhD UPSVinQHw+98bw== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:39 2025 by rpki-client