This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json) Hash identifier: 8tSTZYOSYXYkRacxH0puhjrneJdlpy39je8YTf97ePk= Subject key identifier: 87:E1:73:CF:C8:AC:02:CD:62:9B:79:1A:73:C1:FA:95:0E:3E:E0:71 Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Certificate serial: 019B45EED0930A81ED283AEE97896B5B7CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft Manifest number: 0655 Signing time: Mon 22 Dec 2025 12:00:37 +0000 Manifest this update: Mon 22 Dec 2025 12:00:37 +0000 Manifest next update: Tue 23 Dec 2025 12:00:37 +0000 Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=) 2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: qatSrrWJUIq1pYiJLpyBy1njtzBu7gZXLShmjQ/MnBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:d0:93:0a:81:ed:28:3a:ee:97:89:6b:5b:7c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Validity Not Before: Dec 22 12:00:37 2025 GMT Not After : Dec 23 12:00:37 2025 GMT Subject: CN=87e173cfc8ac02cd629b791a73c1fa950e3ee071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:e2:f5:86:38:a8:39:1b:ed:aa:f0:e6:0a: 9b:bf:74:fa:27:20:d5:70:7a:e0:59:5b:f9:fa:9f: f7:d9:81:f4:72:f4:39:a1:a3:00:4c:da:e7:cc:b4: 6c:97:ac:54:60:76:4e:97:e1:77:6e:bf:78:db:7d: 8c:cf:60:ee:55:ee:9e:bb:2f:3d:7b:ff:05:6c:4a: ff:36:5d:39:58:9b:10:cb:53:83:f4:2b:c9:c5:6b: 18:fe:96:17:3d:53:82:33:45:fe:31:64:0c:a2:69: f6:64:12:82:58:85:56:db:29:2f:36:ce:d9:dd:88: c0:d7:48:ef:22:90:42:8c:05:1f:71:c3:2b:71:77: 9f:ad:5f:a5:d8:3f:86:64:c2:ba:6d:4f:8d:e6:26: db:a4:3d:f9:a8:67:35:99:a2:c8:7e:b1:6f:3e:57: 32:92:0f:d6:2b:dd:dd:dc:79:12:97:95:d6:c8:9d: 7c:b1:ed:8d:25:cb:0c:23:ef:94:dd:4c:f7:0f:54: 96:d7:a6:b8:d6:35:d3:51:08:ea:0e:6a:18:0c:84: 3a:7e:7c:51:99:2b:da:ef:aa:d6:1e:9c:6f:0a:5e: 5b:34:d4:9a:d8:5b:7b:cc:fb:90:c9:58:b2:31:0b: 5b:2d:24:7f:ca:a6:f1:a5:88:7e:f6:16:f6:3d:e9: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E1:73:CF:C8:AC:02:CD:62:9B:79:1A:73:C1:FA:95:0E:3E:E0:71 X509v3 Authority Key Identifier: keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:54:c7:3f:6c:ca:16:77:b9:aa:05:ea:54:86:b7:f0:2c:ad: d1:e2:c9:64:b4:45:b4:3c:59:07:6a:f0:6d:32:53:5f:1b:74: be:80:c1:00:c1:2e:ba:ac:47:98:b6:3c:4d:07:1c:55:5d:f2: ba:a2:2c:a4:43:c4:74:80:34:65:b9:5e:3e:95:32:e5:d2:a7: e4:6d:f5:7d:15:8a:92:0a:26:1a:dc:7a:5f:92:95:1d:47:ee: 2e:b2:ce:ea:89:1c:55:7e:28:12:db:53:13:d4:dd:68:5d:3d: 42:ca:c0:07:97:e7:c8:32:2a:50:8e:58:bb:2b:5d:95:8c:71: 4c:50:4b:0f:95:95:ff:32:e4:e0:71:89:b7:97:34:69:fe:6f: a7:79:5e:20:6e:3a:6b:ec:ff:18:42:09:bb:0a:ae:7e:44:46: 0d:89:90:6e:97:4f:26:fb:19:85:a2:de:a8:8d:1f:e4:53:41: 3d:b7:b6:33:fe:0d:5a:51:0f:24:db:17:d5:52:c0:5c:21:d7: d1:2d:ac:42:19:25:1f:77:cb:fe:75:1c:b5:a1:cc:7c:20:ab: 02:e0:20:83:70:e8:15:07:70:c1:03:3e:47:e3:05:4c:75:6d: d6:e2:e1:c4:1e:7b:6a:67:5a:f9:98:93:f4:95:f7:26:3b:b2: 33:18:35:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7tCTCoHtKDrul4lrW3y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDVkNDI5MWNhZTgxODVjNmMzNDJlMjVkZWU5YjdlOTIw Zjc2ZGQwHhcNMjUxMjIyMTIwMDM3WhcNMjUxMjIzMTIwMDM3WjAzMTEwLwYDVQQD Eyg4N2UxNzNjZmM4YWMwMmNkNjI5Yjc5MWE3M2MxZmE5NTBlM2VlMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLri9YY4qDkb7arw5gqbv3T6JyDV cHrgWVv5+p/32YH0cvQ5oaMATNrnzLRsl6xUYHZOl+F3br94232Mz2DuVe6euy89 e/8FbEr/Nl05WJsQy1OD9CvJxWsY/pYXPVOCM0X+MWQMomn2ZBKCWIVW2ykvNs7Z 3YjA10jvIpBCjAUfccMrcXefrV+l2D+GZMK6bU+N5ibbpD35qGc1maLIfrFvPlcy kg/WK93d3HkSl5XWyJ18se2NJcsMI++U3Uz3D1SW16a41jXTUQjqDmoYDIQ6fnxR mSva76rWHpxvCl5bNNSa2Ft7zPuQyViyMQtbLSR/yqbxpYh+9hb2PekSBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfhc8/IrALNYpt5GnPB+pUOPuBxMB8GA1UdIwQY MBaAFK8F1CkcroGFxsNC4l3um36SD3bdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAt ZTdmMDVmMDI5YTQ4LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAtZTdmMDVmMDI5YTQ4 LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1THP2zK Fne5qgXqVIa38Cyt0eLJZLRFtDxZB2rwbTJTXxt0voDBAMEuuqxHmLY8TQccVV3y uqIspEPEdIA0ZblePpUy5dKn5G31fRWKkgomGtx6X5KVHUfuLrLO6okcVX4oEttT E9TdaF09QsrAB5fnyDIqUI5YuytdlYxxTFBLD5WV/zLk4HGJt5c0af5vp3leIG46 a+z/GEIJuwqufkRGDYmQbpdPJvsZhaLeqI0f5FNBPbe2M/4NWlEPJNsX1VLAXCHX 0S2sQhklH3fL/nUctaHMfCCrAuAgg3DoFQdwwQM+R+MFTHVt1uLhxB57amda+ZiT 9JX3JjuyMxg1/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 14:07:37 2025 by rpki-client