This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json) Hash identifier: 9LUQ7ZAFPM4k//8PlX4tMZhmEg861UYxyRBHROYSlZY= Subject key identifier: F4:F6:EC:44:78:F8:EB:9A:93:FD:EC:40:51:32:87:A9:B8:D5:D6:AD Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Certificate serial: 019AF19B554AAF73ABA73253BA53B3640D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft Manifest number: 086C Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: AJvXlRXnwT+DQEI/M6Ew5/MSyjVevUO1N4mic5ihl7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:55:4a:af:73:ab:a7:32:53:ba:53:b3:64:0d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=f4f6ec4478f8eb9a93fdec40513287a9b8d5d6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:2b:b3:ae:33:2f:3e:66:7d:48:a9:5c:3a: ef:bb:ff:be:2b:25:d2:93:07:71:71:ab:4c:bc:92: 37:84:e5:38:2d:97:46:26:1c:ae:b5:fa:85:24:75: dc:a2:5c:e1:97:6a:0c:8b:7a:88:37:ec:31:4d:87: bb:85:62:18:57:f5:ff:3d:d1:3b:0a:f2:43:21:e7: 05:bd:fb:62:a2:60:fa:0b:69:ec:a3:08:e2:25:71: 89:da:56:ac:d1:56:d9:4f:cd:31:28:c8:96:01:78: c3:c6:09:9a:72:1a:b9:1d:b4:95:78:20:43:66:ba: 14:28:23:e5:73:2e:83:a5:02:26:03:64:0b:10:68: 8d:15:cc:b5:2b:c8:67:15:ec:07:25:78:b9:77:aa: c1:63:f2:23:0d:9f:23:24:a6:89:39:61:b7:54:07: b2:46:2c:66:c9:b1:a4:bb:20:2f:c9:03:a0:67:b7: 97:01:a3:61:97:fb:6b:8b:77:30:86:86:ad:25:f7: 7f:bb:c9:58:e8:ff:5a:a5:15:d5:d8:33:a8:b4:9a: bf:4b:cc:08:cf:1d:b0:4e:cf:5a:3e:31:18:9a:43: 74:b0:3e:c1:46:90:5c:9b:59:88:72:bd:dd:09:9a: 6f:d3:46:b5:7d:62:2e:e2:de:79:50:a6:1d:08:88: cf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:EC:44:78:F8:EB:9A:93:FD:EC:40:51:32:87:A9:B8:D5:D6:AD X509v3 Authority Key Identifier: keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2c:a3:13:97:c2:5d:9e:7f:47:d3:64:8d:56:af:f0:80:ca: 7b:95:cf:4c:01:18:b7:35:91:08:51:ce:59:1e:6b:15:a5:03: c2:a9:d7:af:3d:e7:80:4c:81:60:e8:95:dd:7d:2f:07:85:ec: 94:05:59:63:70:8f:0e:41:9a:87:f4:96:a8:d8:3b:42:28:f0: 28:f5:0f:0e:c4:22:44:c3:4c:bf:19:c7:cb:5a:84:76:a7:f7: 8c:c9:77:59:89:d8:00:ae:e5:a6:c1:85:b4:90:02:03:ce:52: 65:5d:d0:c9:70:bd:51:72:f1:35:c5:85:c7:3c:54:2e:f3:65: bd:27:0f:6c:e2:fc:34:4a:ed:dc:fb:97:5b:8f:93:66:ca:89: 88:2a:93:58:83:af:84:d0:d4:a9:31:a3:7a:97:bf:73:bf:63: d1:cf:8a:e0:0f:ee:49:e9:63:54:0c:23:bf:43:f9:4b:c9:71: 28:6e:d8:b9:54:23:b0:0a:4d:46:93:25:a4:45:a7:83:e7:3c: c5:00:f2:4f:2f:d9:1b:7d:b7:4e:36:e2:55:3e:62:b7:8f:df: 10:77:4b:6b:dc:21:fa:eb:b3:08:79:6f:ef:ac:f3:de:87:6f: 48:6b:3b:c7:99:4b:0f:be:0b:4c:65:22:8f:bc:b4:4d:28:e3: 81:63:41:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1VKr3OrpzJTulOzZA0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0 ZWZiMWQwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD EyhmNGY2ZWM0NDc4ZjhlYjlhOTNmZGVjNDA1MTMyODdhOWI4ZDVkNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ygrs64zLz5mfUipXDrvu/++KyXS kwdxcatMvJI3hOU4LZdGJhyutfqFJHXcolzhl2oMi3qIN+wxTYe7hWIYV/X/PdE7 CvJDIecFvftiomD6C2nsowjiJXGJ2las0VbZT80xKMiWAXjDxgmachq5HbSVeCBD ZroUKCPlcy6DpQImA2QLEGiNFcy1K8hnFewHJXi5d6rBY/IjDZ8jJKaJOWG3VAey RixmybGkuyAvyQOgZ7eXAaNhl/tri3cwhoatJfd/u8lY6P9apRXV2DOotJq/S8wI zx2wTs9aPjEYmkN0sD7BRpBcm1mIcr3dCZpv00a1fWIu4t55UKYdCIjPMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT27ER4+Ouak/3sQFEyh6m41datMB8GA1UdIwQY MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt ZDEyMDVlMGMwY2NlLzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiyjE5fC XZ5/R9NkjVav8IDKe5XPTAEYtzWRCFHOWR5rFaUDwqnXrz3ngEyBYOiV3X0vB4Xs lAVZY3CPDkGah/SWqNg7QijwKPUPDsQiRMNMvxnHy1qEdqf3jMl3WYnYAK7lpsGF tJACA85SZV3QyXC9UXLxNcWFxzxULvNlvScPbOL8NErt3PuXW4+TZsqJiCqTWIOv hNDUqTGjepe/c79j0c+K4A/uSeljVAwjv0P5S8lxKG7YuVQjsApNRpMlpEWng+c8 xQDyTy/ZG323TjbiVT5it4/fEHdLa9wh+uuzCHlv76zz3odvSGs7x5lLD74LTGUi j7y0TSjjgWNB9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:11 2025 by rpki-client