This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json) Hash identifier: SIdRNZCpMiEVDipaKRfADyoET7aPe53xDWW400sXfZ0= Subject key identifier: 3C:C7:4A:CE:D2:87:5C:6A:71:50:AC:D9:A8:C2:8E:CA:F8:9B:5B:DA Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Certificate serial: 019B4F971A9A7CE0586D0880EB0F47136588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft Manifest number: 065A Signing time: Wed 24 Dec 2025 09:01:01 +0000 Manifest this update: Wed 24 Dec 2025 09:01:01 +0000 Manifest next update: Thu 25 Dec 2025 09:01:01 +0000 Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=) 2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: UiorF57tHBp0U7EYnszsau+M+Wf9Ef6PWcWXNhAxuk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:1a:9a:7c:e0:58:6d:08:80:eb:0f:47:13:65:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Validity Not Before: Dec 24 09:01:01 2025 GMT Not After : Dec 25 09:01:01 2025 GMT Subject: CN=3cc74aced2875c6a7150acd9a8c28ecaf89b5bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:94:77:06:a4:e6:28:2c:99:a8:07:e6:d5: 8e:1d:fd:a0:b8:d5:0e:97:20:ba:e3:87:fd:2c:86: 57:a5:60:23:c4:17:42:8b:96:a6:2e:6b:5f:f7:4e: cf:c0:20:d4:ed:93:18:bf:43:fe:ff:4a:22:f1:14: 28:11:9f:e7:b1:8c:57:b2:1e:61:54:71:96:57:90: d2:ea:56:5a:66:36:1a:f1:fb:48:5a:0b:38:ef:c1: 0b:f7:19:7c:60:93:4d:5b:73:6d:b4:1a:99:6c:25: 9e:a5:42:bd:50:95:93:34:5f:e4:87:f0:9c:38:32: 8d:62:26:91:0f:40:0b:1a:e2:83:ab:d8:75:c4:64: 9b:da:7e:4d:17:c9:82:12:e9:96:65:ab:86:09:19: 2a:3c:47:9a:df:a2:af:0b:5e:43:b4:f9:8a:7e:d3: 28:8e:77:82:1d:2d:60:5d:18:7c:3c:41:90:f2:bc: d5:7f:5f:f4:e0:04:f5:e6:37:80:e3:db:6e:76:48: a2:36:1a:c0:8b:9f:ce:27:78:c7:eb:51:1e:19:23: a5:a4:1c:ed:a3:c1:ec:7a:93:c0:3b:8f:ce:da:70: cd:3c:1a:7c:14:07:78:28:43:55:bd:d3:81:4e:1c: ab:2a:51:5b:40:f1:21:da:c5:d6:66:5b:34:d4:71: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C7:4A:CE:D2:87:5C:6A:71:50:AC:D9:A8:C2:8E:CA:F8:9B:5B:DA X509v3 Authority Key Identifier: keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5d:ef:e6:c9:d8:07:c3:ca:02:b6:95:45:f1:e1:c7:54:73: 05:1a:87:bc:5b:98:ec:45:8a:9e:ac:f0:3a:7c:e2:0f:3e:16: 91:5e:75:c0:ed:0f:d5:d9:96:71:81:68:eb:cc:b5:dc:8e:cb: 9c:29:88:71:bd:60:c0:34:f7:d8:e9:4b:fd:89:ad:dc:9c:e8: ab:b2:b9:b0:f3:fa:88:bb:69:fe:dc:61:5a:7f:a7:0a:13:03: 5c:dd:b0:4b:6a:93:4a:0a:27:c5:dc:9e:b5:c3:74:05:58:57: 8b:85:3a:be:7d:0c:6c:aa:f6:b5:01:bd:8c:b9:d3:8d:3c:9e: 4a:cf:5f:e7:26:60:a6:8a:5b:6c:b9:24:30:51:d2:70:33:50: 66:69:b7:70:65:9d:71:8b:a8:65:08:b4:6c:82:d9:8e:b4:24: 54:c1:71:86:c2:6a:fc:7e:d2:49:6a:eb:3d:77:64:1d:66:b2: 83:fb:63:c8:90:89:14:8f:6c:ef:72:1e:b7:51:a7:9a:0a:bd: 74:20:71:51:cf:af:b4:9f:97:5a:c3:67:ed:84:71:87:ce:f3: a6:84:92:45:0c:6a:20:f9:30:42:f7:2d:33:b8:49:f8:40:8f: b2:b6:db:52:cc:5a:b9:96:22:53:90:3c:51:a1:3c:e7:d1:a9: ea:e3:06:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlxqafOBYbQiA6w9HE2WIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDVkNDI5MWNhZTgxODVjNmMzNDJlMjVkZWU5YjdlOTIw Zjc2ZGQwHhcNMjUxMjI0MDkwMTAxWhcNMjUxMjI1MDkwMTAxWjAzMTEwLwYDVQQD EygzY2M3NGFjZWQyODc1YzZhNzE1MGFjZDlhOGMyOGVjYWY4OWI1YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NiUdwak5igsmagH5tWOHf2guNUO lyC644f9LIZXpWAjxBdCi5amLmtf907PwCDU7ZMYv0P+/0oi8RQoEZ/nsYxXsh5h VHGWV5DS6lZaZjYa8ftIWgs478EL9xl8YJNNW3NttBqZbCWepUK9UJWTNF/kh/Cc ODKNYiaRD0ALGuKDq9h1xGSb2n5NF8mCEumWZauGCRkqPEea36KvC15DtPmKftMo jneCHS1gXRh8PEGQ8rzVf1/04AT15jeA49tudkiiNhrAi5/OJ3jH61EeGSOlpBzt o8HsepPAO4/O2nDNPBp8FAd4KENVvdOBThyrKlFbQPEh2sXWZls01HG7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzHSs7Sh1xqcVCs2ajCjsr4m1vaMB8GA1UdIwQY MBaAFK8F1CkcroGFxsNC4l3um36SD3bdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAt ZTdmMDVmMDI5YTQ4LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAtZTdmMDVmMDI5YTQ4 LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF3v5snY B8PKAraVRfHhx1RzBRqHvFuY7EWKnqzwOnziDz4WkV51wO0P1dmWcYFo68y13I7L nCmIcb1gwDT32OlL/Ymt3Jzoq7K5sPP6iLtp/txhWn+nChMDXN2wS2qTSgonxdye tcN0BVhXi4U6vn0MbKr2tQG9jLnTjTyeSs9f5yZgpopbbLkkMFHScDNQZmm3cGWd cYuoZQi0bILZjrQkVMFxhsJq/H7SSWrrPXdkHWayg/tjyJCJFI9s73Iet1Gnmgq9 dCBxUc+vtJ+XWsNn7YRxh87zpoSSRQxqIPkwQvctM7hJ+ECPsrbbUsxauZYiU5A8 UaE859Gp6uMGDQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:10:37 2025 by rpki-client