This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft File: aMwyXIrZdpobVNopYwX-DDZXN3U.mft (raw, json) Hash identifier: yztEpvrvO0WPRRAt9duXAPCKPDitTkyRk/XmI94bXv0= Subject key identifier: 07:AF:DA:D4:E9:4D:44:5E:63:EB:0A:F9:57:4A:78:33:32:54:B1:BD Authority key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75 Certificate issuer: /CN=68cc325c8ad9769a1b54da296305fe0c36573775 Certificate serial: 019AF12D843AE249E69A59C7B8F0AE6A4821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft Manifest number: 0AA1 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: 8SXa1LGEgRchazaJtCn45wimFzI.roa (hash: aarcdMLMUD+vhP2Nt/G/Xfb4TI1KlOo20WqPIWfHmGk=) 2: 9h0zhhREd-POjncfc-zEp4ug01M.roa (hash: JFrWYEIaG5U63hgpJ7xXhrCvo1w1GUW7UsCloYFy5DI=) 3: aMwyXIrZdpobVNopYwX-DDZXN3U.crl (hash: j0hN5Q+S10rWAeJ4GIfzluyu7bdY97lu+Otj4dbhgjk=) 4: hOg_cmo_1iPWo-TSIDavHMMiNf0.roa (hash: x2NoBu31Yw8pVlDgk5TVKt6dy/zU3kvxFv7RpieFwqA=) 5: mrLaA1eR5ZA6ZP7iWY4b8XRMWTY.roa (hash: jJecCTBKKFO9xnb082mcb8oh5M5FNk8lCFd2JS7Xlls=) 6: zZ03RoGozbT1HFe4mhpawTrExsc.roa (hash: lLn9Wn1De0ejD1AHiJO5yX30r5UE6GRrj/0NmZ5bxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:84:3a:e2:49:e6:9a:59:c7:b8:f0:ae:6a:48:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68cc325c8ad9769a1b54da296305fe0c36573775 Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=07afdad4e94d445e63eb0af9574a78333254b1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:94:72:93:be:bb:cd:65:c7:7b:86:17:0e: cb:68:10:c7:78:19:37:16:bb:a7:58:bf:05:b1:83: d8:1f:ce:47:1e:a3:5e:05:0d:90:d1:20:c5:7a:49: 37:da:39:82:6a:f5:56:02:6c:eb:64:1f:5f:a0:53: 02:cf:a4:d1:e0:73:74:3e:db:c5:7a:6a:1d:d2:ab: f7:fa:10:28:7b:e2:b3:49:d9:6b:79:aa:ac:da:83: f7:77:d4:ea:71:28:29:8a:63:e7:22:ac:a9:69:d6: e5:0e:fe:35:72:8e:91:d9:c1:0a:89:a8:b6:53:1d: 26:20:fd:de:33:c4:99:89:2b:e9:de:e8:9d:f7:7b: a6:7b:e1:49:3e:ff:2e:b0:b6:1f:7b:bc:b8:8f:e9: 69:04:29:68:cc:c5:a2:ec:88:cb:c8:ac:89:be:de: 02:55:76:06:ad:b0:7a:71:f0:e4:39:96:5d:c9:a0: a8:08:df:4b:8c:8e:0d:d0:30:20:95:55:a5:d3:72: 90:32:7e:f3:f1:f4:b9:78:27:6c:e4:9f:0f:f9:bd: eb:00:18:e6:9a:08:e9:0a:3a:d0:8c:e8:62:61:be: 80:00:4c:20:ef:bc:bc:7c:d8:d4:ec:fd:54:99:c8: 48:7e:df:5b:d2:b5:d1:04:c8:b8:76:a8:4a:4a:c7: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AF:DA:D4:E9:4D:44:5E:63:EB:0A:F9:57:4A:78:33:32:54:B1:BD X509v3 Authority Key Identifier: keyid:68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f9:54:eb:8e:4f:74:48:a9:66:07:ec:f7:29:c2:3e:66:9c: 9a:44:68:44:1a:0e:6d:0d:1d:c4:93:8d:42:3d:1d:3a:66:01: 38:0f:a9:a7:36:06:25:b5:01:b1:69:df:6a:72:34:4a:45:c3: 9f:06:f0:b0:f9:16:4b:f4:ff:f5:da:c4:00:00:a2:b2:38:2c: ca:69:0c:ab:f4:ce:f0:b0:69:c2:ad:10:6c:87:44:67:25:c1: f6:e5:4b:54:07:6f:c8:b7:00:a8:d8:b8:9f:3b:a2:c9:e1:65: f6:78:e1:6e:19:a3:b1:49:77:4d:22:ac:f3:53:2e:11:2c:42: 99:71:64:9b:74:8b:21:59:67:c1:81:87:8c:3d:94:88:eb:87: 31:ab:a2:f7:55:91:0e:70:22:95:e5:4d:4c:62:f3:95:41:1d: 89:3c:ab:fe:22:49:35:77:e9:3a:45:56:41:b7:8b:0b:07:b6: 0f:eb:af:5a:21:3b:7c:eb:9c:5f:0e:dd:67:80:a0:9e:a3:a2: 1c:23:3e:6c:3d:2e:80:13:05:66:9f:d0:80:25:85:27:08:95: fc:1e:16:83:f4:ee:fc:f8:d1:99:3a:dc:4c:df:ad:73:12:86: 27:b4:1f:cc:1f:a8:e7:27:a1:ec:9d:20:9a:ad:a8:7d:14:60: 54:90:16:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYQ64knmmlnHuPCuakghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Y2MzMjVjOGFkOTc2OWExYjU0ZGEyOTYzMDVmZTBjMzY1 NzM3NzUwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EygwN2FmZGFkNGU5NGQ0NDVlNjNlYjBhZjk1NzRhNzgzMzMyNTRiMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZiUcpO+u81lx3uGFw7LaBDHeBk3 FrunWL8FsYPYH85HHqNeBQ2Q0SDFekk32jmCavVWAmzrZB9foFMCz6TR4HN0PtvF emod0qv3+hAoe+KzSdlreaqs2oP3d9TqcSgpimPnIqypadblDv41co6R2cEKiai2 Ux0mIP3eM8SZiSvp3uid93ume+FJPv8usLYfe7y4j+lpBClozMWi7IjLyKyJvt4C VXYGrbB6cfDkOZZdyaCoCN9LjI4N0DAglVWl03KQMn7z8fS5eCds5J8P+b3rABjm mgjpCjrQjOhiYb6AAEwg77y8fNjU7P1UmchIft9b0rXRBMi4dqhKSse9YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAev2tTpTUReY+sK+VdKeDMyVLG9MB8GA1UdIwQY MBaAFGjMMlyK2XaaG1TaKWMF/gw2Vzd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU13eVhJclpkcG9iVk5vcFl3WC1ERFpYTjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MTc3NzgtOWYzMS00NzViLTg0ZmEt NzRjOTc5YTY1MzZlLzEvYU13eVhJclpkcG9iVk5vcFl3WC1ERFpYTjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82MTc3NzgtOWYzMS00NzViLTg0ZmEtNzRjOTc5YTY1MzZl LzEvYU13eVhJclpkcG9iVk5vcFl3WC1ERFpYTjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/lU645P dEipZgfs9ynCPmacmkRoRBoObQ0dxJONQj0dOmYBOA+ppzYGJbUBsWnfanI0SkXD nwbwsPkWS/T/9drEAACisjgsymkMq/TO8LBpwq0QbIdEZyXB9uVLVAdvyLcAqNi4 nzuiyeFl9njhbhmjsUl3TSKs81MuESxCmXFkm3SLIVlnwYGHjD2UiOuHMaui91WR DnAileVNTGLzlUEdiTyr/iJJNXfpOkVWQbeLCwe2D+uvWiE7fOucXw7dZ4CgnqOi HCM+bD0ugBMFZp/QgCWFJwiV/B4Wg/Tu/PjRmTrcTN+tcxKGJ7QfzB+o5yeh7J0g mq2ofRRgVJAWMw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:24:50 2025 by rpki-client