This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft File: awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json) Hash identifier: TwCjg+BlVLPtWOKt18WvL8MbjKAcVrWJK2u1Gq9CJXU= Subject key identifier: 13:14:9D:A1:C7:FF:A3:51:34:FD:F3:E8:4C:79:FC:43:D5:D5:D9:41 Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03 Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03 Certificate serial: 019B9553AA1C03227248C5EBE2153E9BA7C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft Manifest number: 17B8 Signing time: Tue 06 Jan 2026 22:00:46 +0000 Manifest this update: Tue 06 Jan 2026 22:00:46 +0000 Manifest next update: Wed 07 Jan 2026 22:00:46 +0000 Files and hashes: 1: PTCMrplImxOgq7lJht86Y-t_Eak.roa (hash: 9R2VT/PVVrXj1Rc0/sfW6xX45E2jhiDWxXoT3COdeoA=) 2: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: EHxfcae97QbwA5d+70MesMgu61lCuLM39yKAVvT9W+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:53:aa:1c:03:22:72:48:c5:eb:e2:15:3e:9b:a7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03 Validity Not Before: Jan 6 22:00:46 2026 GMT Not After : Jan 7 22:00:46 2026 GMT Subject: CN=13149da1c7ffa35134fdf3e84c79fc43d5d5d941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a1:24:a2:75:52:09:50:7a:82:3f:c0:58:00: bb:7c:32:c7:5a:e4:bc:f5:a1:41:5f:68:cd:c9:4d: 1d:62:c8:34:57:c6:3e:8a:71:4a:fb:91:0e:88:fc: 61:a5:49:ef:7e:42:a1:2c:78:fb:4f:f1:30:d9:6f: f1:66:82:c3:92:e4:61:aa:d7:15:a1:d9:6c:b8:da: bc:a8:a4:2f:9b:e7:45:55:13:12:54:d9:84:6f:b9: 9c:19:79:87:58:36:a0:08:35:23:23:a8:05:06:2e: a3:f1:18:15:01:7c:15:10:71:85:fa:4d:80:e6:ca: 82:7e:ce:6c:1a:4c:9f:25:ba:40:03:f4:7c:1b:68: dc:66:74:75:c3:fa:d2:01:bf:17:45:3b:c1:a7:7f: 4e:6f:95:b1:50:06:0e:1a:95:69:89:3c:9c:02:3a: 78:a5:3f:2a:6f:07:fa:99:65:a5:13:ae:5d:e6:aa: 8e:ea:d3:99:5b:c9:28:e3:2f:9a:e6:29:08:f6:96: 40:34:f7:5b:bd:8c:d6:fb:cb:c3:ff:44:79:36:54: 2d:70:89:dc:fd:31:0b:a7:b8:d6:a8:b5:f9:c2:96: 27:c2:68:83:df:d5:e1:4e:f0:1e:72:eb:d4:ae:aa: 7a:1d:91:96:55:03:75:8d:8e:44:13:53:37:de:25: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:9D:A1:C7:FF:A3:51:34:FD:F3:E8:4C:79:FC:43:D5:D5:D9:41 X509v3 Authority Key Identifier: keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0b:11:b6:76:f8:ca:61:28:89:a1:1f:9b:57:0a:f3:73:a6: fd:59:3f:40:51:61:cc:cf:9b:47:cf:c4:77:6a:e3:ef:17:e3: 7c:b5:df:37:79:ab:b3:2a:31:05:02:e0:36:67:2b:e9:4a:67: 04:0e:80:f0:5e:06:da:ab:f0:8b:8e:c9:e2:61:0f:1f:4b:c7: 8c:7d:60:01:ac:7e:cb:18:14:f4:98:46:7f:97:6a:90:92:4b: 2a:cb:50:62:a5:15:35:d0:19:2b:71:30:53:44:37:ed:ca:55: 3a:67:c6:15:6f:5b:a1:4d:1f:7a:70:15:50:b8:a4:6a:25:08: f0:ec:ee:45:5d:5c:b1:9c:b5:ce:8b:fc:6d:ae:29:25:5f:4d: 4a:c7:b8:2a:d3:b1:a6:34:57:ef:fb:a8:5f:c8:39:bf:6b:43: cc:05:d4:0a:b7:59:db:9c:db:47:02:3b:1d:30:17:77:1f:82: 7c:cd:ba:f5:c7:94:b6:0f:58:ad:99:c3:c0:36:14:02:68:e4: 80:cb:fa:31:12:b0:cb:2e:dd:ed:c1:f7:77:31:c6:57:62:fb: a5:07:ca:80:8b:3c:d3:38:3a:d9:b4:d4:96:75:c7:15:09:58: 0b:75:48:dc:b5:45:98:81:a6:2a:a7:33:d4:7f:8b:f2:57:8c: bc:d1:f6:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVU6ocAyJySMXr4hU+m6fIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMDM1ODRiY2U1NDJlNTU0ZTMyMjc5MDk0NDNmNjgyMmMz ZTRmMDMwHhcNMjYwMTA2MjIwMDQ2WhcNMjYwMTA3MjIwMDQ2WjAzMTEwLwYDVQQD EygxMzE0OWRhMWM3ZmZhMzUxMzRmZGYzZTg0Yzc5ZmM0M2Q1ZDVkOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KEkonVSCVB6gj/AWAC7fDLHWuS8 9aFBX2jNyU0dYsg0V8Y+inFK+5EOiPxhpUnvfkKhLHj7T/Ew2W/xZoLDkuRhqtcV odlsuNq8qKQvm+dFVRMSVNmEb7mcGXmHWDagCDUjI6gFBi6j8RgVAXwVEHGF+k2A 5sqCfs5sGkyfJbpAA/R8G2jcZnR1w/rSAb8XRTvBp39Ob5WxUAYOGpVpiTycAjp4 pT8qbwf6mWWlE65d5qqO6tOZW8ko4y+a5ikI9pZANPdbvYzW+8vD/0R5NlQtcInc /TELp7jWqLX5wpYnwmiD39XhTvAecuvUrqp6HZGWVQN1jY5EE1M33iVSXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMUnaHH/6NRNP3z6Ex5/EPV1dlBMB8GA1UdIwQY MBaAFGsDWEvOVC5VTjInkJRD9oIsPk8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEt MzViMTljZjkyZGY5LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEtMzViMTljZjkyZGY5 LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgsRtnb4 ymEoiaEfm1cK83Om/Vk/QFFhzM+bR8/Ed2rj7xfjfLXfN3mrsyoxBQLgNmcr6Upn BA6A8F4G2qvwi47J4mEPH0vHjH1gAax+yxgU9JhGf5dqkJJLKstQYqUVNdAZK3Ew U0Q37cpVOmfGFW9boU0fenAVULikaiUI8OzuRV1csZy1zov8ba4pJV9NSse4KtOx pjRX7/uoX8g5v2tDzAXUCrdZ25zbRwI7HTAXdx+CfM269ceUtg9YrZnDwDYUAmjk gMv6MRKwyy7d7cH3dzHGV2L7pQfKgIs80zg62bTUlnXHFQlYC3VI3LVFmIGmKqcz 1H+L8leMvNH2vw== -----END CERTIFICATE-----Generated at Wed Jan 7 07:20:03 2026 by rpki-client