This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json) Hash identifier: YuxXfD8cdj4NaDlCLkpJUJCnD4pTbXHz3UDdmDdhdDA= Subject key identifier: 91:D1:1A:33:9B:16:81:48:53:1C:82:1D:69:8F:CF:AE:CF:5E:21:5F Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Certificate serial: 019B4FCFA48DCC498727255EEAB4FD612A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft Manifest number: 14A9 Signing time: Wed 24 Dec 2025 10:02:46 +0000 Manifest this update: Wed 24 Dec 2025 10:02:46 +0000 Manifest next update: Thu 25 Dec 2025 10:02:46 +0000 Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=) 2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=) 3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=) 4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: Ai3q0jiTN5UdgW+8N2kxUTZcTQG/b5BNwyOd9c7g9CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:a4:8d:cc:49:87:27:25:5e:ea:b4:fd:61:2a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Validity Not Before: Dec 24 10:02:46 2025 GMT Not After : Dec 25 10:02:46 2025 GMT Subject: CN=91d11a339b168148531c821d698fcfaecf5e215f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:a8:0e:1d:17:56:95:8d:f7:29:79:25:dc: 7c:85:30:f4:01:22:10:61:3a:6a:2d:1f:94:85:7b: 63:46:c3:f3:34:2c:79:37:99:67:1c:25:d6:23:55: bd:d5:df:72:17:2e:18:22:ba:83:65:42:9a:dd:0b: e8:f6:18:df:0d:5a:5b:f0:27:d4:51:2d:d6:b7:15: 49:95:5d:90:ab:56:f3:88:9f:bd:ec:a5:1d:42:5e: 84:b2:b6:ae:53:97:d6:9a:64:8b:7c:c7:27:94:ba: ec:db:0d:18:1b:47:b5:52:00:93:da:64:a3:4a:1c: c7:b9:0d:f5:ee:61:a5:f8:10:09:dc:60:f9:54:51: 0c:16:fe:1e:5f:62:05:8c:7f:12:98:d3:49:1e:8d: 5e:ba:33:7b:9c:e3:76:94:72:0a:d7:22:73:ce:b1: 3b:3f:40:8a:f3:bb:64:45:91:ef:2d:55:73:cb:64: b2:93:75:b2:e6:9b:06:17:20:b7:0c:e9:f0:07:75: 13:2c:34:45:0c:c2:67:b0:cf:8f:bf:b0:eb:65:bb: a5:31:bc:26:1b:65:c0:46:b1:0c:af:6c:01:d7:97: f7:6e:45:46:87:ce:2d:69:fb:b5:35:9a:32:10:58: 11:83:91:24:7a:7c:d0:08:c7:cf:0c:26:fd:01:cd: 25:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:1A:33:9B:16:81:48:53:1C:82:1D:69:8F:CF:AE:CF:5E:21:5F X509v3 Authority Key Identifier: keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:53:57:44:fa:34:62:2a:c5:76:08:ac:a9:55:dd:6a:88: 45:2e:3a:c1:02:2c:ba:66:73:a6:73:13:4d:89:ec:34:e6:43: 7b:05:66:b7:dd:c3:9e:31:f3:1a:c4:ac:64:7e:8d:ef:fe:16: 5d:76:40:5c:9b:0a:63:f4:82:b3:24:61:b4:43:3f:55:7e:8b: 79:5b:96:5d:07:2b:78:85:6d:e0:94:80:52:43:87:c7:49:dd: 24:cd:c2:8f:ae:4a:3a:56:f8:57:10:fb:c8:ae:60:96:63:dc: 25:7b:be:8e:e2:5a:91:45:0c:f1:dd:92:31:dc:3c:ea:96:87: b9:c0:20:4a:b9:b5:1d:07:72:35:b5:89:58:73:7c:7f:63:e5: 0b:a5:c0:f8:4f:6c:1b:9f:de:9e:48:1b:99:83:5e:95:57:1d: e8:1e:c8:1b:ec:1c:a3:53:1b:54:1e:a8:ea:9c:d6:3c:8c:ce: ea:bd:22:00:35:28:ad:3d:78:80:51:8f:58:bb:f9:4c:3f:42: 3a:60:4b:de:15:be:2b:4a:cc:c8:bd:d2:a4:a8:a9:e4:40:c3: 3a:7c:11:43:7d:51:71:45:16:8a:80:2e:2f:2d:36:c5:9d:f3: cd:89:e7:f2:2f:c6:86:47:3c:e7:d0:41:3f:22:45:57:8a:76: 14:0f:00:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz6SNzEmHJyVe6rT9YSp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl OTFhNGQwHhcNMjUxMjI0MTAwMjQ2WhcNMjUxMjI1MTAwMjQ2WjAzMTEwLwYDVQQD Eyg5MWQxMWEzMzliMTY4MTQ4NTMxYzgyMWQ2OThmY2ZhZWNmNWUyMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OWoDh0XVpWN9yl5Jdx8hTD0ASIQ YTpqLR+UhXtjRsPzNCx5N5lnHCXWI1W91d9yFy4YIrqDZUKa3Qvo9hjfDVpb8CfU US3WtxVJlV2Qq1bziJ+97KUdQl6EsrauU5fWmmSLfMcnlLrs2w0YG0e1UgCT2mSj ShzHuQ317mGl+BAJ3GD5VFEMFv4eX2IFjH8SmNNJHo1eujN7nON2lHIK1yJzzrE7 P0CK87tkRZHvLVVzy2Syk3Wy5psGFyC3DOnwB3UTLDRFDMJnsM+Pv7DrZbulMbwm G2XARrEMr2wB15f3bkVGh84tafu1NZoyEFgRg5EkenzQCMfPDCb9Ac0lUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHRGjObFoFIUxyCHWmPz67PXiFfMB8GA1UdIwQY MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt M2FjM2I2NzM3MDQyLzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGM9TV0T6 NGIqxXYIrKlV3WqIRS46wQIsumZzpnMTTYnsNOZDewVmt93DnjHzGsSsZH6N7/4W XXZAXJsKY/SCsyRhtEM/VX6LeVuWXQcreIVt4JSAUkOHx0ndJM3Cj65KOlb4VxD7 yK5glmPcJXu+juJakUUM8d2SMdw86paHucAgSrm1HQdyNbWJWHN8f2PlC6XA+E9s G5/enkgbmYNelVcd6B7IG+wco1MbVB6o6pzWPIzO6r0iADUorT14gFGPWLv5TD9C OmBL3hW+K0rMyL3SpKip5EDDOnwRQ31RcUUWioAuLy02xZ3zzYnn8i/Ghkc859BB PyJFV4p2FA8AHw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:44:13 2025 by rpki-client