This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json) Hash identifier: vhw3WDkmlXJMfp6lYkq5VbqiDWH379mhqbEbKRd2ojw= Subject key identifier: 90:30:CA:59:8D:AE:D7:27:C1:81:E4:C9:E4:11:DA:E2:6B:C0:4D:1E Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1 Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1 Certificate serial: 019AF1D1FC40A5B40C14AE897B11E747C657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft Manifest number: 0E7B Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: 7KVmsgkjt5xn7YqJGgppSsK4QoarI64KhCPgW4u3tqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fc:40:a5:b4:0c:14:ae:89:7b:11:e7:47:c6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=9030ca598daed727c181e4c9e411dae26bc04d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:58:c9:60:d0:d5:ee:7c:eb:5a:96:b8:34: 47:38:d6:61:0a:76:3d:f3:e5:5e:7a:d4:1b:62:5a: 32:f5:63:5f:05:6f:43:b1:82:84:1e:71:c8:35:f8: 89:99:1d:24:bf:5e:db:86:aa:b4:f5:17:4e:08:80: bd:5d:6f:2e:85:27:fc:40:1e:46:41:ad:01:3b:33: 64:90:96:58:9e:bb:c9:1f:8c:65:e6:a6:90:a5:e8: 32:bf:20:99:6c:06:1d:fc:cc:85:8f:7f:87:46:62: 6d:a5:e8:e2:74:78:14:52:a5:2f:8c:85:32:d8:f1: 90:a9:e2:90:f0:e7:b4:30:5d:52:bd:e4:d8:58:f7: 54:e4:cb:39:4e:f3:c0:f1:b8:99:ae:3b:78:08:aa: 75:b0:27:87:28:4f:54:92:c6:4f:d8:59:22:56:31: e9:f2:ae:cd:64:41:29:97:fa:9c:96:13:c8:42:13: a0:22:0d:49:e7:13:a6:bd:3c:92:f6:53:52:9a:33: da:36:4a:61:d5:90:44:93:ca:2d:18:d2:9f:aa:21: ae:1d:b9:6d:10:f3:e4:ef:e7:fa:c4:58:d5:6d:09: 86:9c:c3:98:36:10:2d:6b:87:f5:be:e2:81:9c:5c: f7:95:98:81:41:75:cd:0b:8e:66:6f:1a:67:2b:74: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:CA:59:8D:AE:D7:27:C1:81:E4:C9:E4:11:DA:E2:6B:C0:4D:1E X509v3 Authority Key Identifier: keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c5:61:33:58:5e:2b:d6:f8:12:f8:09:af:0e:b9:54:19:83: 2d:cb:58:0c:ed:32:f8:f9:74:41:77:6f:ed:8a:53:35:ad:31: e3:ff:6f:64:2b:a0:62:8d:a6:5a:b8:e6:59:89:59:68:d6:34: 11:51:f1:85:16:76:b6:f2:51:2c:5e:77:f5:a0:d8:28:9e:eb: 98:22:86:20:ac:5f:64:1d:85:67:ec:c3:55:95:f2:ea:42:e5: e8:c4:25:59:e3:7f:c9:99:c3:3d:30:db:d1:6e:9f:35:ba:fe: 48:57:8b:49:8a:4c:ee:e6:5a:d7:bd:40:d9:ce:41:10:b9:74: 1d:da:f8:c0:81:7f:49:77:49:26:26:32:cb:6b:51:73:59:a7: c2:1e:d0:4f:10:af:e9:99:2e:3e:12:0a:a6:20:43:fd:b3:06: 0a:35:d8:8a:8f:3e:fb:be:ad:61:1f:96:54:4a:94:2a:1b:7c: 3a:0d:36:5a:70:14:33:84:a2:5d:b9:06:e2:6f:2c:e4:78:00: 29:0c:35:9d:f1:a3:95:e7:b1:15:75:12:b5:5f:8d:40:f5:41: da:b8:7a:5b:c9:f0:7d:4f:0a:10:e0:d7:8b:8d:dc:5f:43:00: 27:0b:46:8f:f0:2b:58:31:c1:5e:a4:ee:0f:46:eb:cb:37:4a: 3d:8f:1b:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fxApbQMFK6JexHnR8ZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMDc4MjBlOGQ0MDBmM2MyNWRkZDBiZTFiNDZjNTRlOTU1 OTYwYTEwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg5MDMwY2E1OThkYWVkNzI3YzE4MWU0YzllNDExZGFlMjZiYzA0ZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qRYyWDQ1e5861qWuDRHONZhCnY9 8+VeetQbYloy9WNfBW9DsYKEHnHINfiJmR0kv17bhqq09RdOCIC9XW8uhSf8QB5G Qa0BOzNkkJZYnrvJH4xl5qaQpegyvyCZbAYd/MyFj3+HRmJtpejidHgUUqUvjIUy 2PGQqeKQ8Oe0MF1SveTYWPdU5Ms5TvPA8biZrjt4CKp1sCeHKE9UksZP2FkiVjHp 8q7NZEEpl/qclhPIQhOgIg1J5xOmvTyS9lNSmjPaNkph1ZBEk8otGNKfqiGuHblt EPPk7+f6xFjVbQmGnMOYNhAta4f1vuKBnFz3lZiBQXXNC45mbxpnK3SgywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAwylmNrtcnwYHkyeQR2uJrwE0eMB8GA1UdIwQY MBaAFGsHgg6NQA88Jd3QvhtGxU6VWWChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXdlQ0RvMUFEendsM2RDLUcwYkZUcFZaWUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iZmM2YjEtMDJhZi00Y2IxLWEwNmQt NGQ0OTMwODJkYTFjLzEvYXdlQ0RvMUFEendsM2RDLUcwYkZUcFZaWUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iZmM2YjEtMDJhZi00Y2IxLWEwNmQtNGQ0OTMwODJkYTFj LzEvYXdlQ0RvMUFEendsM2RDLUcwYkZUcFZaWUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8VhM1he K9b4EvgJrw65VBmDLctYDO0y+Pl0QXdv7YpTNa0x4/9vZCugYo2mWrjmWYlZaNY0 EVHxhRZ2tvJRLF539aDYKJ7rmCKGIKxfZB2FZ+zDVZXy6kLl6MQlWeN/yZnDPTDb 0W6fNbr+SFeLSYpM7uZa171A2c5BELl0Hdr4wIF/SXdJJiYyy2tRc1mnwh7QTxCv 6ZkuPhIKpiBD/bMGCjXYio8++76tYR+WVEqUKht8Og02WnAUM4SiXbkG4m8s5HgA KQw1nfGjleexFXUStV+NQPVB2rh6W8nwfU8KEODXi43cX0MAJwtGj/ArWDHBXqTu D0bryzdKPY8bTA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:07 2025 by rpki-client