This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json) Hash identifier: I7poWX6l4FfzhIsLtY90Y/59x0m1++9M/YFS3bDKreg= Subject key identifier: 40:0D:63:83:5C:57:19:5B:77:B5:A7:68:DC:92:A9:38:A1:BD:F6:4A Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5 Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5 Certificate serial: 019B3C7EDA2F5C450C89EC36A44C16B459DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:01:44 +0000 Manifest this update: Sat 20 Dec 2025 16:01:44 +0000 Manifest next update: Sun 21 Dec 2025 16:01:44 +0000 Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: TA0pAvKivjBGf0NJ16GGVbSIVInmZ/S5iip4FVHTLPY=) 2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:da:2f:5c:45:0c:89:ec:36:a4:4c:16:b4:59:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5 Validity Not Before: Dec 20 16:01:44 2025 GMT Not After : Dec 21 16:01:44 2025 GMT Subject: CN=400d63835c57195b77b5a768dc92a938a1bdf64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:e5:7e:c9:e0:ee:b7:77:c6:05:3c:80:08: 4c:9d:a9:14:9b:e1:02:cf:4e:ef:5d:12:4b:a7:7b: 4f:d5:c0:6e:11:51:12:4a:d8:3a:61:64:82:96:7a: 3c:ca:c4:1d:4e:07:23:f2:60:bb:eb:c5:50:bc:48: 8e:07:4f:74:a3:99:b5:cb:f4:ae:93:5a:d4:6b:6f: fd:72:32:ef:08:f9:30:7c:7d:be:9b:0d:c0:75:c5: c8:ec:2d:85:de:a4:18:71:b8:f0:79:37:c3:85:de: b3:0c:44:ed:bd:9d:eb:3f:93:9e:c1:6b:5c:78:f5: a8:54:07:e6:76:dc:f6:85:18:ef:c4:a1:31:5b:97: 70:d2:a3:b6:77:f9:00:de:19:36:45:b7:62:af:a8: 53:ae:6c:4e:1b:30:a5:25:46:3c:e8:9a:22:65:43: 50:91:1b:e3:79:d2:c4:0a:99:7a:06:a7:7e:83:49: ee:47:16:4a:05:34:56:2d:27:34:68:e1:6a:41:58: 88:fb:0b:c4:f9:3a:bb:57:0c:a8:f9:f1:1f:69:1e: d1:9b:63:22:24:33:c5:7d:87:08:10:d8:4c:5a:3f: 2d:d6:dd:32:61:da:04:97:f2:f8:d4:de:29:48:e0: af:5f:be:ac:3b:21:00:a4:c6:61:8f:a0:af:27:bf: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0D:63:83:5C:57:19:5B:77:B5:A7:68:DC:92:A9:38:A1:BD:F6:4A X509v3 Authority Key Identifier: keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e2:9b:d9:f6:02:d5:90:e9:51:e8:db:80:83:35:74:5e:cb: 30:0a:bd:be:77:fe:88:bd:66:e2:bb:7a:b3:6b:69:aa:72:21: 8f:59:44:bf:bc:4c:4f:1a:4d:47:0f:89:1e:d5:51:90:99:31: 13:5b:3e:31:af:33:fa:c9:60:97:6e:36:ab:c5:65:60:57:8e: f0:da:8b:d6:68:5e:ee:c6:4c:e4:e5:64:4e:cc:45:6b:80:0a: 7d:5a:a7:f8:6d:d9:b1:e0:81:90:64:04:b5:5a:c4:fe:69:a3: ef:09:6c:95:8e:21:87:64:74:3d:91:93:00:40:30:35:09:7c: 47:fb:7f:cb:5c:c3:57:ac:4e:87:b0:0f:c5:23:e9:fd:da:db: 14:46:db:f3:b4:f5:d4:2b:9e:b0:9b:36:dd:8b:89:bb:17:cf: 61:0f:e4:9b:1f:f4:c1:06:ef:97:d7:51:ee:7b:d6:4a:d6:eb: 77:2c:75:65:43:2a:dc:a4:b9:2b:b9:1b:92:70:e8:41:f5:8c: d5:ab:ac:bb:a9:43:bc:61:81:7f:4d:b5:54:c2:b3:ed:b6:61: 83:4c:76:95:d8:73:fd:3c:fe:62:36:35:73:64:3d:2a:a7:f1: 96:cf:b1:25:fa:92:60:f5:e1:ff:b9:00:1b:d1:6c:2b:54:72: cb:fa:be:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ftovXEUMiew2pEwWtFnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNmU1ZTMxZmE4NzE2YWFhNTRlMThmY2RjZmVkM2ZjOTRk YjkwYjUwHhcNMjUxMjIwMTYwMTQ0WhcNMjUxMjIxMTYwMTQ0WjAzMTEwLwYDVQQD Eyg0MDBkNjM4MzVjNTcxOTViNzdiNWE3NjhkYzkyYTkzOGExYmRmNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutHlfsng7rd3xgU8gAhMnakUm+EC z07vXRJLp3tP1cBuEVESStg6YWSClno8ysQdTgcj8mC768VQvEiOB090o5m1y/Su k1rUa2/9cjLvCPkwfH2+mw3AdcXI7C2F3qQYcbjweTfDhd6zDETtvZ3rP5OewWtc ePWoVAfmdtz2hRjvxKExW5dw0qO2d/kA3hk2Rbdir6hTrmxOGzClJUY86JoiZUNQ kRvjedLECpl6Bqd+g0nuRxZKBTRWLSc0aOFqQViI+wvE+Tq7Vwyo+fEfaR7Rm2Mi JDPFfYcIENhMWj8t1t0yYdoEl/L41N4pSOCvX76sOyEApMZhj6CvJ78hVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEANY4NcVxlbd7WnaNySqTihvfZKMB8GA1UdIwQY MBaAFAFuXjH6hxaqpU4Y/Nz+0/yU25C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYt Yzk2YzJjZTg1OWU1LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYtYzk2YzJjZTg1OWU1 LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeKb2fYC 1ZDpUejbgIM1dF7LMAq9vnf+iL1m4rt6s2tpqnIhj1lEv7xMTxpNRw+JHtVRkJkx E1s+Ma8z+slgl242q8VlYFeO8NqL1mhe7sZM5OVkTsxFa4AKfVqn+G3ZseCBkGQE tVrE/mmj7wlslY4hh2R0PZGTAEAwNQl8R/t/y1zDV6xOh7APxSPp/drbFEbb87T1 1CuesJs23YuJuxfPYQ/kmx/0wQbvl9dR7nvWStbrdyx1ZUMq3KS5K7kbknDoQfWM 1ausu6lDvGGBf021VMKz7bZhg0x2ldhz/Tz+YjY1c2Q9Kqfxls+xJfqSYPXh/7kA G9FsK1Ryy/q+WQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:46:59 2025 by rpki-client