This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json) Hash identifier: HSe0dwir7KV01b91bx9ONBY5tjB8qQhn8eTEo0Oh8qI= Subject key identifier: 17:0E:65:81:69:40:03:28:9E:C8:B8:99:CB:D4:D0:95:B6:CC:B2:0E Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Certificate serial: 019B3CEC7951291FD59803A3513DABBF9DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 18:01:29 +0000 Manifest this update: Sat 20 Dec 2025 18:01:29 +0000 Manifest next update: Sun 21 Dec 2025 18:01:29 +0000 Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: VSHUrFVIo07uW7CXrF3nepWJShSJ7vgVR7haclgsr9E=) 2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:79:51:29:1f:d5:98:03:a3:51:3d:ab:bf:9d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Validity Not Before: Dec 20 18:01:29 2025 GMT Not After : Dec 21 18:01:29 2025 GMT Subject: CN=170e6581694003289ec8b899cbd4d095b6ccb20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:fc:37:45:58:f2:1f:e9:8b:73:66:7f:14: 83:b7:dd:d6:12:4c:a0:d0:51:a2:6b:54:f6:81:93: 67:f8:f7:c2:f0:10:b0:43:b8:bf:4b:01:36:ea:0c: 34:f9:2e:35:3d:03:c0:ef:62:82:77:19:cf:0a:ca: d0:22:8b:b4:92:92:04:31:15:e4:3c:89:e0:d8:e4: 62:34:27:e5:a5:dd:4f:c4:1c:48:8c:44:0b:07:bd: 6c:95:14:4a:e3:c4:91:82:fe:12:7c:72:ac:e7:e8: 34:16:82:6d:e5:2b:c7:1b:a8:00:e1:dd:4d:ef:65: a6:fa:fd:24:e8:43:79:ce:a3:6a:de:f3:83:b7:ef: 58:5f:24:9d:7e:45:77:6f:bc:15:9e:40:96:df:2d: 47:0f:0f:cb:ce:8f:87:8b:44:31:35:73:f5:43:d0: bc:9e:bc:cb:44:14:1a:9d:f2:e8:c4:8f:7c:7d:1d: 3f:59:b2:5b:d7:58:f6:2b:a7:df:c2:1c:b7:d0:75: 52:83:07:78:bf:a0:b2:bb:5f:00:ca:b3:21:b4:a8: e0:ec:c2:c9:5c:42:8d:a4:9d:d8:1a:00:fe:3f:0b: 3c:46:8c:44:85:0f:92:af:c3:3e:50:2a:70:17:1a: 3b:79:49:c7:fe:87:52:9c:cd:8b:91:11:5b:02:5b: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0E:65:81:69:40:03:28:9E:C8:B8:99:CB:D4:D0:95:B6:CC:B2:0E X509v3 Authority Key Identifier: keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:33:9f:2e:6b:b2:25:b4:15:a6:95:da:93:28:d5:1d:b5:c8: 47:11:e2:1b:38:8d:8b:6d:fb:bf:28:69:79:ad:05:99:94:ad: c5:7f:d3:89:52:b8:f2:52:97:1a:0a:24:7b:8c:61:ea:5e:62: 1a:d7:7d:37:5c:14:f3:5b:8a:9c:26:6c:95:ce:fc:9a:e2:ab: 05:0e:81:03:91:e1:1c:fe:46:47:8b:47:ab:44:ce:ac:81:4b: c4:83:e4:9e:f7:e9:95:fa:d1:4b:b0:09:8e:83:c5:82:1e:54: 2a:8c:1c:0f:67:2a:b5:1e:f1:00:53:e1:fe:9a:96:d0:86:4a: de:f2:5c:06:fe:43:b4:58:e3:97:43:3d:20:db:06:c9:2b:85: a2:16:c7:59:9a:bc:05:f0:d2:40:2a:ff:7d:5f:bb:0c:4b:43: fb:20:52:a7:f1:33:71:3d:05:80:85:3c:f6:39:46:bd:f7:cf: be:74:87:15:db:e6:4e:3b:17:e6:19:a3:00:0b:6f:f5:06:dd: 0c:18:bd:9b:b5:95:1c:1f:25:b5:8c:c0:9c:ec:00:a9:90:54: 12:0c:13:33:8a:2d:5a:ac:58:22:46:81:15:2d:2d:9f:28:a2: c4:7c:58:3c:45:3d:25:00:d7:82:7c:dd:49:3f:de:15:13:e6: 5e:f2:a0:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HlRKR/VmAOjUT2rv537MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw YTViNmMwHhcNMjUxMjIwMTgwMTI5WhcNMjUxMjIxMTgwMTI5WjAzMTEwLwYDVQQD EygxNzBlNjU4MTY5NDAwMzI4OWVjOGI4OTljYmQ0ZDA5NWI2Y2NiMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVX8N0VY8h/pi3NmfxSDt93WEkyg 0FGia1T2gZNn+PfC8BCwQ7i/SwE26gw0+S41PQPA72KCdxnPCsrQIou0kpIEMRXk PIng2ORiNCflpd1PxBxIjEQLB71slRRK48SRgv4SfHKs5+g0FoJt5SvHG6gA4d1N 72Wm+v0k6EN5zqNq3vODt+9YXySdfkV3b7wVnkCW3y1HDw/Lzo+Hi0QxNXP1Q9C8 nrzLRBQanfLoxI98fR0/WbJb11j2K6ffwhy30HVSgwd4v6Cyu18AyrMhtKjg7MLJ XEKNpJ3YGgD+Pws8RoxEhQ+Sr8M+UCpwFxo7eUnH/odSnM2LkRFbAlvntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcOZYFpQAMonsi4mcvU0JW2zLIOMB8GA1UdIwQY MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt MTFkZmZlMTA4MTQ3LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3 LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczOfLmuy JbQVppXakyjVHbXIRxHiGziNi237vyhpea0FmZStxX/TiVK48lKXGgoke4xh6l5i Gtd9N1wU81uKnCZslc78muKrBQ6BA5HhHP5GR4tHq0TOrIFLxIPknvfplfrRS7AJ joPFgh5UKowcD2cqtR7xAFPh/pqW0IZK3vJcBv5DtFjjl0M9INsGySuFohbHWZq8 BfDSQCr/fV+7DEtD+yBSp/EzcT0FgIU89jlGvffPvnSHFdvmTjsX5hmjAAtv9Qbd DBi9m7WVHB8ltYzAnOwAqZBUEgwTM4otWqxYIkaBFS0tnyiixHxYPEU9JQDXgnzd ST/eFRPmXvKgHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:24 2025 by rpki-client