This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json) Hash identifier: GdFnmg/FfHPns/5Rg40vltH1Rcspv6ZO+ib5WuXX73g= Subject key identifier: 1F:C9:0A:55:2F:04:B1:D4:78:FC:36:6D:A7:FB:B5:EA:EE:98:EB:FB Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6 Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6 Certificate serial: 019AF577E167E61F476863D697B03C717692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft Manifest number: 051B Signing time: Sat 06 Dec 2025 21:01:05 +0000 Manifest this update: Sat 06 Dec 2025 21:01:05 +0000 Manifest next update: Sun 07 Dec 2025 21:01:05 +0000 Files and hashes: 1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: iFja6ELC/YugGMpUVL1mt/4c5tJRE5di8zZkWqBnrXo=) 2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:e1:67:e6:1f:47:68:63:d6:97:b0:3c:71:76:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6 Validity Not Before: Dec 6 21:01:05 2025 GMT Not After : Dec 7 21:01:05 2025 GMT Subject: CN=1fc90a552f04b1d478fc366da7fbb5eaee98ebfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:28:71:86:14:e9:19:0a:fc:17:5a:5f:11: d4:30:96:4c:3a:d4:7a:3a:14:c1:ee:d7:6b:c6:19: b7:c6:60:13:86:e9:72:d7:3c:51:6b:0f:cd:e4:2e: 0b:84:81:0e:6f:ab:cf:65:cb:14:fe:43:a7:8f:47: 53:9c:dd:6b:f4:99:83:04:a4:f3:8f:0e:23:df:ac: 91:c7:e5:55:9a:b1:34:6d:40:e2:6d:e1:72:02:c7: b1:f3:68:ac:c2:68:f5:82:0f:82:52:59:06:aa:a0: 99:cf:68:bb:eb:31:d4:16:9a:ed:27:c9:8c:27:a1: 9f:93:0d:39:c4:0a:ea:b5:54:5c:b1:53:54:be:66: ba:7a:4c:db:2e:d7:0a:52:a8:9a:22:09:75:bc:ec: 0a:67:6b:f9:2a:41:52:43:08:a9:b4:6c:7e:78:d6: fe:eb:03:1b:db:b8:7e:ff:c2:6a:3e:df:06:2b:07: 2e:ce:f9:10:42:29:eb:cc:29:e7:a0:b4:21:6c:05: ab:c5:0c:0e:e4:3b:a3:a1:bb:0f:74:cf:30:17:15: 44:54:20:17:0a:7e:7b:ea:bf:ba:93:2b:78:79:b7: 1a:a2:3a:c2:ae:01:b4:30:7a:c0:5a:aa:7b:13:80: 6e:c0:5f:85:ea:df:58:fa:d2:d4:37:23:de:b1:4e: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C9:0A:55:2F:04:B1:D4:78:FC:36:6D:A7:FB:B5:EA:EE:98:EB:FB X509v3 Authority Key Identifier: keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:a5:5c:47:95:ed:35:37:8f:ff:12:fb:e2:81:bf:ff:96: b1:a3:18:01:3c:f3:8b:03:d4:8d:77:8d:a9:2d:73:a8:93:44: 1e:36:c7:34:89:fe:62:0f:65:b8:8c:ee:7d:26:70:a1:b0:74: 84:97:82:79:6a:d6:f2:ef:06:e7:05:f5:f2:c2:3b:48:e2:10: a4:ed:04:db:8d:c9:9a:9d:8a:99:be:5f:a5:b1:86:c5:ee:3c: de:f2:20:3a:29:c1:76:a0:8c:d1:16:29:f6:64:27:81:da:11: d8:dc:6b:95:d2:f5:5d:0e:c8:ba:4c:67:d0:73:a5:3d:97:ea: 3e:7e:8c:a0:e7:3d:83:6c:bf:2e:5e:ca:60:54:ab:91:6a:19: 2a:da:40:27:a4:52:bd:ba:e2:2b:48:b2:3e:fc:1d:e9:4b:42: 6a:e3:99:ce:1e:64:f1:72:b9:3a:43:fc:e5:46:3b:89:d6:55: 93:1c:d7:e6:a6:b7:bf:21:9c:19:de:f3:cb:d7:e6:44:2c:3e: db:24:d5:36:48:3f:08:2f:49:f3:2b:84:83:f4:12:eb:8b:06: 07:ff:57:d0:f4:27:5e:16:18:77:80:78:28:c9:a8:af:aa:a7: 4d:69:2f:de:61:98:11:a3:ef:bf:e2:f4:5e:4c:f7:e4:32:71: 7d:74:3b:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+Fn5h9HaGPWl7A8cXaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMDQ5NjA0NzM3Yzc4YmQyNGRiYjI1ZWIzMzZmNGE0MTZl NjQ1ZjYwHhcNMjUxMjA2MjEwMTA1WhcNMjUxMjA3MjEwMTA1WjAzMTEwLwYDVQQD EygxZmM5MGE1NTJmMDRiMWQ0NzhmYzM2NmRhN2ZiYjVlYWVlOThlYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k8ocYYU6RkK/BdaXxHUMJZMOtR6 OhTB7tdrxhm3xmAThuly1zxRaw/N5C4LhIEOb6vPZcsU/kOnj0dTnN1r9JmDBKTz jw4j36yRx+VVmrE0bUDibeFyAsex82iswmj1gg+CUlkGqqCZz2i76zHUFprtJ8mM J6Gfkw05xArqtVRcsVNUvma6ekzbLtcKUqiaIgl1vOwKZ2v5KkFSQwiptGx+eNb+ 6wMb27h+/8JqPt8GKwcuzvkQQinrzCnnoLQhbAWrxQwO5DujobsPdM8wFxVEVCAX Cn576r+6kyt4ebcaojrCrgG0MHrAWqp7E4BuwF+F6t9Y+tLUNyPesU7AqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/JClUvBLHUePw2baf7terumOv7MB8GA1UdIwQY MBaAFAMElgRzfHi9JNuyXrM29KQW5kX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEt MTY5ZTUzN2E4OTBjLzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEtMTY5ZTUzN2E4OTBj LzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFGlXEeV 7TU3j/8S++KBv/+WsaMYATzziwPUjXeNqS1zqJNEHjbHNIn+Yg9luIzufSZwobB0 hJeCeWrW8u8G5wX18sI7SOIQpO0E243Jmp2Kmb5fpbGGxe483vIgOinBdqCM0RYp 9mQngdoR2NxrldL1XQ7Iukxn0HOlPZfqPn6MoOc9g2y/Ll7KYFSrkWoZKtpAJ6RS vbriK0iyPvwd6UtCauOZzh5k8XK5OkP85UY7idZVkxzX5qa3vyGcGd7zy9fmRCw+ 2yTVNkg/CC9J8yuEg/QS64sGB/9X0PQnXhYYd4B4KMmor6qnTWkv3mGYEaPvv+L0 Xkz35DJxfXQ7uw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:08 2025 by rpki-client