This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json) Hash identifier: JlQnxXvMod2sopLhiuopYAxE1Rb0AbVp5cA52jJoonI= Subject key identifier: 6A:0E:83:A7:AB:F7:4B:AC:68:76:0C:61:F3:2C:E2:60:9D:3F:D4:26 Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c Certificate serial: 019B3E6CE99C16D40B609C61D9D74F5A262C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft Manifest number: 0C58 Signing time: Sun 21 Dec 2025 01:01:23 +0000 Manifest this update: Sun 21 Dec 2025 01:01:23 +0000 Manifest next update: Mon 22 Dec 2025 01:01:23 +0000 Files and hashes: 1: bc1HzFd4K_TGK4SLLf_54MD78AY.roa (hash: tkj1ydGWI4MOgmRQ4K/5dC6Xa1S3Lun92GS8MzVs/EM=) 2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: euWNQUDi8yxdoBqjIN+i/IxryYfXyBW8KSP0eiQMd0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e9:9c:16:d4:0b:60:9c:61:d9:d7:4f:5a:26:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c Validity Not Before: Dec 21 01:01:23 2025 GMT Not After : Dec 22 01:01:23 2025 GMT Subject: CN=6a0e83a7abf74bac68760c61f32ce2609d3fd426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:db:2f:29:5a:c0:4b:db:fa:cb:b2:4b:80: cf:b8:71:0b:7e:a1:aa:1b:b2:34:de:2e:4f:62:8e: 67:02:23:59:f2:8c:41:86:2d:f5:a8:96:9b:fd:c4: 56:35:65:02:41:48:64:a6:96:85:7b:d6:88:d4:58: 3d:b7:30:f0:ea:2b:ec:c1:1a:56:53:d0:fe:7e:70: cf:33:20:09:1d:3c:e8:d4:8d:6b:11:71:ae:16:b4: 8c:a7:b7:1b:11:b3:5b:5a:48:eb:c7:14:cd:0b:98: c6:fa:72:75:dc:f8:d6:a1:65:4f:e8:c6:93:23:49: e4:bf:7d:74:82:b3:3a:f2:ef:d9:3d:d0:6d:ea:b7: 50:d0:64:41:a7:00:5e:85:cc:cd:9e:4a:18:e0:3d: f2:82:ab:ec:27:75:9c:57:b3:c1:bc:e7:f3:69:39: 81:f7:77:3b:3c:c8:eb:88:4b:1e:58:2d:0f:27:25: a4:d6:81:0e:e9:58:3b:c3:3c:fd:c2:db:77:05:77: 68:b4:8f:51:d2:c6:9e:5a:8a:59:b1:9f:f6:8d:16: ae:b7:b7:b7:00:fc:85:7b:28:03:7a:bd:d5:5c:6d: 09:50:b3:75:c5:e4:b5:ca:92:66:d1:5b:a1:18:df: 82:2c:ef:da:84:ca:94:35:68:91:8a:27:94:02:77: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0E:83:A7:AB:F7:4B:AC:68:76:0C:61:F3:2C:E2:60:9D:3F:D4:26 X509v3 Authority Key Identifier: keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:32:4c:f3:bf:c0:64:08:fe:18:2f:e7:b4:61:50:6b:88:5d: 76:ed:cb:56:c6:f4:de:d5:09:6f:fa:29:64:9a:fd:28:88:c7: a4:5c:c5:82:33:bd:3e:fc:0a:49:ec:c5:d3:a0:82:fc:85:69: 0d:c5:98:c6:58:aa:10:f3:c8:a3:df:30:97:29:ce:08:85:a7: e0:83:36:cf:0a:73:ec:37:65:2e:cd:a0:11:1e:5f:fb:ca:95: 2e:1f:7c:74:1b:49:13:a1:9d:b6:38:8c:a1:b5:72:66:31:80: 36:ba:d8:f8:96:67:7b:6e:89:99:c2:fc:e7:5e:74:c2:bb:9b: e7:1f:93:97:65:1d:b4:fa:29:4d:50:93:3b:d2:32:67:22:f7: 88:ca:38:b9:aa:7c:2f:1c:d3:8e:39:88:07:39:20:13:ad:59: d9:e5:92:44:1e:49:79:58:ae:aa:eb:3d:1f:6f:b8:05:ff:0b: 68:8f:a4:dd:a7:ca:98:0c:08:c1:9e:6f:32:e2:ea:32:e3:5e: 21:ab:12:12:fb:1e:61:82:d3:fa:43:62:c3:57:ee:4a:1c:db: bd:1d:ea:ac:9c:10:34:a3:d7:3a:63:b6:d0:8d:19:3c:1a:61: da:28:2a:47:04:c4:49:8d:21:a5:61:ff:76:20:3f:62:3d:69: 8b:e6:0f:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOmcFtQLYJxh2ddPWiYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTkzMDU4N2I0ZmQyZmVmNzI4ZjA1NmVjYTg2ODg0MjJj M2I5N2MwHhcNMjUxMjIxMDEwMTIzWhcNMjUxMjIyMDEwMTIzWjAzMTEwLwYDVQQD Eyg2YTBlODNhN2FiZjc0YmFjNjg3NjBjNjFmMzJjZTI2MDlkM2ZkNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+/bLylawEvb+suyS4DPuHELfqGq G7I03i5PYo5nAiNZ8oxBhi31qJab/cRWNWUCQUhkppaFe9aI1Fg9tzDw6ivswRpW U9D+fnDPMyAJHTzo1I1rEXGuFrSMp7cbEbNbWkjrxxTNC5jG+nJ13PjWoWVP6MaT I0nkv310grM68u/ZPdBt6rdQ0GRBpwBehczNnkoY4D3ygqvsJ3WcV7PBvOfzaTmB 93c7PMjriEseWC0PJyWk1oEO6Vg7wzz9wtt3BXdotI9R0saeWopZsZ/2jRaut7e3 APyFeygDer3VXG0JULN1xeS1ypJm0VuhGN+CLO/ahMqUNWiRiieUAndktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoOg6er90usaHYMYfMs4mCdP9QmMB8GA1UdIwQY MBaAFK2pMFh7T9L+9yjwVuyoaIQiw7l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgt Mzg5MWU2ZmVmZWE0LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgtMzg5MWU2ZmVmZWE0 LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajJM87/A ZAj+GC/ntGFQa4hddu3LVsb03tUJb/opZJr9KIjHpFzFgjO9PvwKSezF06CC/IVp DcWYxliqEPPIo98wlynOCIWn4IM2zwpz7DdlLs2gER5f+8qVLh98dBtJE6GdtjiM obVyZjGANrrY+JZne26JmcL85150wrub5x+Tl2UdtPopTVCTO9IyZyL3iMo4uap8 LxzTjjmIBzkgE61Z2eWSRB5JeViuqus9H2+4Bf8LaI+k3afKmAwIwZ5vMuLqMuNe IasSEvseYYLT+kNiw1fuShzbvR3qrJwQNKPXOmO20I0ZPBph2igqRwTESY0hpWH/ diA/Yj1pi+YP5A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:44:47 2025 by rpki-client