This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json) Hash identifier: S+eMYAUwp4QRrymBJr0Lt4gvxhT9wAKOhXsSWddAsR8= Subject key identifier: 82:AA:40:33:C0:4B:EA:23:EA:01:86:9B:58:F8:72:0D:4E:E4:C9:3B Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd Certificate serial: 019AF12ECB01BDF7A10F4FBC92E4F18C131A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft Manifest number: 1159 Signing time: Sat 06 Dec 2025 01:02:46 +0000 Manifest this update: Sat 06 Dec 2025 01:02:46 +0000 Manifest next update: Sun 07 Dec 2025 01:02:46 +0000 Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: wj2wHtcr+84dm/PBf1hmf2bUoLpFtt7DclFmwZ9/rSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cb:01:bd:f7:a1:0f:4f:bc:92:e4:f1:8c:13:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd Validity Not Before: Dec 6 01:02:46 2025 GMT Not After : Dec 7 01:02:46 2025 GMT Subject: CN=82aa4033c04bea23ea01869b58f8720d4ee4c93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e0:a4:b6:43:ff:16:89:42:24:36:a2:14:ed: d9:24:9b:f7:c7:02:99:b7:f4:f6:d3:b2:6e:d6:5d: c8:db:ca:dd:6d:1d:74:59:5e:20:39:0b:ba:15:a4: eb:08:b3:c5:22:50:79:c5:18:d1:66:c2:02:76:b0: ab:8d:f8:83:ac:92:42:90:28:5c:65:02:1e:37:84: cd:82:08:fe:d6:6f:a1:ed:47:8a:d2:7e:61:9b:72: 32:44:fc:0d:15:0f:d7:2b:7e:d6:f9:4e:be:c9:f6: ba:b1:59:a8:26:eb:14:3b:06:7e:7a:8b:40:79:a8: 63:56:ed:d5:1f:14:61:b9:61:ff:06:3f:6a:5e:0b: cc:9a:c1:b0:37:55:31:33:05:90:24:4e:7c:f4:0e: 51:52:2c:72:9a:e5:50:a2:88:d5:75:ea:21:ea:22: de:ba:38:be:d9:68:4d:63:1b:49:fb:f3:64:5d:39: 0e:f6:ea:b5:42:89:da:af:35:9e:8c:5c:15:be:c9: 6f:24:db:b4:45:f9:78:27:4d:9f:2b:61:1b:0e:1b: 7b:0b:72:a5:67:03:24:5d:b6:9c:42:96:78:98:db: 1a:68:50:92:8b:4a:9f:44:1d:6c:b0:69:6b:ae:45: 7f:e8:db:b9:73:8b:b4:b3:65:b7:c4:61:ba:ed:ee: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AA:40:33:C0:4B:EA:23:EA:01:86:9B:58:F8:72:0D:4E:E4:C9:3B X509v3 Authority Key Identifier: keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:9a:ff:ce:58:33:f6:a6:d1:49:5d:0b:a4:ed:bd:d0:d1:ef: 9a:db:30:77:56:a7:f2:69:ba:54:e0:92:7b:65:85:d6:84:d8: 4b:ca:2f:3f:6e:da:ff:de:1e:46:af:44:6e:b7:fb:4d:28:dd: b3:15:5b:c7:b6:f2:20:bf:65:d2:56:94:9d:78:ee:65:83:28: c1:79:49:6f:be:5f:38:39:d5:a0:8c:aa:51:a8:43:30:ec:d8: eb:0f:dd:80:cd:0e:52:a7:5f:38:e2:e7:9a:97:63:fb:41:1f: ea:99:5a:82:ac:a1:60:60:2d:99:25:e3:db:1c:5c:85:84:c7: 4e:6c:3d:22:b7:b8:df:b3:74:fd:55:81:fb:f0:aa:48:06:82: 04:af:d6:c2:0b:d1:b7:06:fa:29:3b:43:fa:91:5e:48:2b:12: a0:bd:f3:c3:09:47:85:1c:06:22:a5:6c:d4:42:43:66:0e:4a: a7:30:07:e8:2d:12:4b:76:bc:76:0c:b2:ec:cb:bc:2b:08:6a: 69:c5:4e:b5:3d:e3:e9:5a:b4:d8:39:9a:1d:99:40:e7:44:44: 49:0a:f6:fd:f4:66:ec:1f:8d:e2:18:94:0c:83:08:a8:f1:3f: 16:72:e3:af:7f:3d:93:b0:05:cb:d2:c5:91:58:55:97:de:ba: 71:c2:ed:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLssBvfehD0+8kuTxjBMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMGJlOTEzMjEwNzQ0MzRjOWU4MjBkYjY2MWM5MWNhNjJj Y2IwZmQwHhcNMjUxMjA2MDEwMjQ2WhcNMjUxMjA3MDEwMjQ2WjAzMTEwLwYDVQQD Eyg4MmFhNDAzM2MwNGJlYTIzZWEwMTg2OWI1OGY4NzIwZDRlZTRjOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uCktkP/FolCJDaiFO3ZJJv3xwKZ t/T207Ju1l3I28rdbR10WV4gOQu6FaTrCLPFIlB5xRjRZsICdrCrjfiDrJJCkChc ZQIeN4TNggj+1m+h7UeK0n5hm3IyRPwNFQ/XK37W+U6+yfa6sVmoJusUOwZ+eotA eahjVu3VHxRhuWH/Bj9qXgvMmsGwN1UxMwWQJE589A5RUixymuVQoojVdeoh6iLe uji+2WhNYxtJ+/NkXTkO9uq1QonarzWejFwVvslvJNu0Rfl4J02fK2EbDht7C3Kl ZwMkXbacQpZ4mNsaaFCSi0qfRB1ssGlrrkV/6Nu5c4u0s2W3xGG67e4FgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKqQDPAS+oj6gGGm1j4cg1O5Mk7MB8GA1UdIwQY MBaAFAML6RMhB0Q0yegg22YckcpizLD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUt MmM0MGQ4MTFmZDRlLzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUtMmM0MGQ4MTFmZDRl LzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZr/zlgz 9qbRSV0LpO290NHvmtswd1an8mm6VOCSe2WF1oTYS8ovP27a/94eRq9Ebrf7TSjd sxVbx7byIL9l0laUnXjuZYMowXlJb75fODnVoIyqUahDMOzY6w/dgM0OUqdfOOLn mpdj+0Ef6plagqyhYGAtmSXj2xxchYTHTmw9Ire437N0/VWB+/CqSAaCBK/WwgvR twb6KTtD+pFeSCsSoL3zwwlHhRwGIqVs1EJDZg5KpzAH6C0SS3a8dgyy7Mu8Kwhq acVOtT3j6Vq02DmaHZlA50RESQr2/fRm7B+N4hiUDIMIqPE/FnLjr389k7AFy9LF kVhVl966ccLtvw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:13 2025 by rpki-client