This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json) Hash identifier: W9PTnx6462qG4jwXEi6JG0gqgWc7PfCGSrwYyZKJEVQ= Subject key identifier: 6A:9D:75:B2:C4:BC:BB:84:31:C9:80:EC:56:78:38:55:E2:59:93:D2 Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738 Certificate serial: 019B5298B2443A9383210E1FE803EC2FBC61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft Manifest number: 0AB1 Signing time: Wed 24 Dec 2025 23:01:37 +0000 Manifest this update: Wed 24 Dec 2025 23:01:37 +0000 Manifest next update: Thu 25 Dec 2025 23:01:37 +0000 Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: 63srXSwGOqjKtWvXLKOPlUsbQPuPWAoRmFHqCcfksnk=) 2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:b2:44:3a:93:83:21:0e:1f:e8:03:ec:2f:bc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738 Validity Not Before: Dec 24 23:01:37 2025 GMT Not After : Dec 25 23:01:37 2025 GMT Subject: CN=6a9d75b2c4bcbb8431c980ec56783855e25993d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:25:6f:14:91:33:8c:78:87:f4:00:98:c7: c7:56:6a:bd:c5:f3:94:6b:87:9f:24:41:8a:22:45: b6:f9:b5:11:10:5c:dd:31:14:bf:ab:26:5a:fb:34: 9e:0a:5d:fa:98:50:b9:72:ad:a9:0b:48:71:01:3b: cf:b0:16:71:2c:99:ce:78:c4:45:0f:b1:57:0a:00: c3:48:c6:53:6d:02:c2:8d:18:84:35:58:99:f4:3f: 40:cc:36:f3:4c:d8:22:80:a1:f4:7e:40:64:d7:f2: 53:1f:5f:3f:4b:3e:14:50:c8:c0:17:37:be:15:1f: b0:59:30:73:25:21:cb:50:ad:32:97:9b:11:c7:cf: 47:92:cc:c7:37:9e:a4:bb:93:44:5c:e5:e3:f8:ae: 5e:90:b2:6c:f6:ab:43:5e:5b:cb:ad:9a:29:6d:31: 20:89:18:12:28:b3:dc:6b:46:9b:2a:49:41:bf:21: e1:5e:aa:e5:2f:7f:a8:2f:78:9f:4d:74:08:6e:d9: 28:bc:b8:de:0b:1e:a1:95:3f:9f:cc:cd:fd:f5:c7: 2a:2c:13:11:79:ee:20:57:25:11:4d:33:f7:9d:74: f6:10:95:0f:77:c1:de:c9:c5:d6:f7:34:2e:f7:ba: 16:fa:e4:8f:d4:94:70:0c:5f:9b:d9:ff:85:46:ee: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9D:75:B2:C4:BC:BB:84:31:C9:80:EC:56:78:38:55:E2:59:93:D2 X509v3 Authority Key Identifier: keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:33:df:34:a1:41:a3:c5:71:85:55:a7:50:9f:38:d9:35:9b: 43:69:f4:e0:9f:83:ab:2d:df:f8:5a:65:af:25:da:5a:2e:11: 45:1b:b1:a0:ab:aa:b4:9f:c0:d0:b3:66:ee:5d:62:40:2c:ec: 6f:66:f3:14:bf:8d:4f:d2:43:84:2d:02:02:d1:b2:49:35:59: 5c:b6:40:6f:ec:23:12:49:c0:05:b6:a3:c3:37:f3:b4:02:68: 56:df:48:79:91:46:e2:ff:03:29:07:15:37:d8:5e:2a:86:36: 83:61:33:a3:91:01:ad:25:34:e5:9b:0f:5a:c8:ab:9f:91:28: 88:36:54:e9:28:7f:60:35:41:d4:ca:76:25:36:45:bd:f3:83: 9d:8f:0e:4d:63:d1:0f:16:64:5f:58:fd:0a:85:08:06:56:cd: 91:33:9f:39:68:5f:68:28:f5:e3:3d:4a:2a:e4:8a:80:fd:99: 1a:4d:2f:7e:06:33:da:e1:29:d5:4a:56:dc:d8:75:27:5a:e3: 82:41:de:3b:01:45:08:93:37:ad:65:25:c9:2e:53:b9:a3:f4: f9:1f:ea:f7:8c:c7:96:a6:ef:6c:8e:08:68:3c:9c:36:1b:cc: 72:2a:6e:81:8e:30:ab:32:ca:03:79:d8:73:f2:83:94:90:87: 42:eb:1b:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmLJEOpODIQ4f6APsL7xhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx YWU3MzgwHhcNMjUxMjI0MjMwMTM3WhcNMjUxMjI1MjMwMTM3WjAzMTEwLwYDVQQD Eyg2YTlkNzViMmM0YmNiYjg0MzFjOTgwZWM1Njc4Mzg1NWUyNTk5M2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoElbxSRM4x4h/QAmMfHVmq9xfOU a4efJEGKIkW2+bUREFzdMRS/qyZa+zSeCl36mFC5cq2pC0hxATvPsBZxLJnOeMRF D7FXCgDDSMZTbQLCjRiENViZ9D9AzDbzTNgigKH0fkBk1/JTH18/Sz4UUMjAFze+ FR+wWTBzJSHLUK0yl5sRx89HkszHN56ku5NEXOXj+K5ekLJs9qtDXlvLrZopbTEg iRgSKLPca0abKklBvyHhXqrlL3+oL3ifTXQIbtkovLjeCx6hlT+fzM399ccqLBMR ee4gVyURTTP3nXT2EJUPd8HeycXW9zQu97oW+uSP1JRwDF+b2f+FRu7wIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqddbLEvLuEMcmA7FZ4OFXiWZPSMB8GA1UdIwQY MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5 LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTPfNKFB o8VxhVWnUJ842TWbQ2n04J+Dqy3f+FplryXaWi4RRRuxoKuqtJ/A0LNm7l1iQCzs b2bzFL+NT9JDhC0CAtGySTVZXLZAb+wjEknABbajwzfztAJoVt9IeZFG4v8DKQcV N9heKoY2g2Ezo5EBrSU05ZsPWsirn5EoiDZU6Sh/YDVB1Mp2JTZFvfODnY8OTWPR DxZkX1j9CoUIBlbNkTOfOWhfaCj14z1KKuSKgP2ZGk0vfgYz2uEp1UpW3Nh1J1rj gkHeOwFFCJM3rWUlyS5TuaP0+R/q94zHlqbvbI4IaDycNhvMcipugY4wqzLKA3nY c/KDlJCHQusbvw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:14:15 2025 by rpki-client