This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json) Hash identifier: O8IP8/p/WJ3OgYJc4Hz5dhOsSah+0jE0QgaAWSqKLcQ= Subject key identifier: 1D:46:7D:DB:66:BE:B0:9C:12:CA:53:5C:E1:34:A7:89:05:CB:CE:5B Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74 Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174 Certificate serial: 019AF208B0B28B9DE2F570F02CF2FB23C282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft Manifest number: 0B6E Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: u/qjSgRd/ATQk4MFlFfUw+rUM8BSDrKVK6oy67RRAIo=) 2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b0:b2:8b:9d:e2:f5:70:f0:2c:f2:fb:23:c2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=1d467ddb66beb09c12ca535ce134a78905cbce5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:09:f3:fc:0c:64:a0:e9:d2:2d:dd:49:ec: 7c:39:63:dc:fb:17:53:06:11:60:e7:32:fe:cd:ef: b2:a2:42:88:38:3b:14:4c:8c:c8:2d:18:77:08:65: 0e:5f:32:a2:f3:f1:3c:4d:66:ab:cb:8b:67:b6:e8: dd:61:b7:2d:c6:3a:aa:ee:2a:38:96:30:80:b4:90: b6:f1:c9:25:71:0c:8e:d4:03:5c:23:ab:b5:b4:b6: fe:cb:47:46:72:3a:04:19:a4:b9:74:2c:71:e2:cc: 80:9c:fb:f0:62:5b:32:e0:3b:40:4b:0d:8d:e7:b9: 9b:f1:ca:92:f5:67:de:60:47:29:e1:56:ac:48:16: 72:c9:63:66:fb:a7:e4:1a:fe:37:2d:57:da:18:f1: de:a0:a0:d5:f1:49:a5:8c:7c:8b:af:c1:77:f4:97: d4:b0:80:9b:57:48:f8:33:8e:1a:e1:58:ae:66:d7: ec:9e:1a:8b:59:ff:ec:c2:7c:21:46:68:f4:59:69: 9d:c6:ef:e6:3b:1b:92:86:fc:cf:31:41:5b:a3:ec: c6:73:ac:cf:7c:ca:6d:07:24:47:cf:e7:b9:79:80: 2b:ea:52:1c:a1:7a:16:a4:44:71:cc:81:f6:41:4b: 3f:ff:df:6d:dc:24:bf:b1:27:f2:f2:2a:33:6c:a9: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:46:7D:DB:66:BE:B0:9C:12:CA:53:5C:E1:34:A7:89:05:CB:CE:5B X509v3 Authority Key Identifier: keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5f:2e:b8:9d:c5:74:94:7b:ed:30:e5:48:02:e0:c1:13:54: 04:bb:4f:65:b9:88:9c:a8:55:23:27:89:1c:30:86:16:01:ba: ce:59:49:9d:78:96:b4:60:7c:a7:a9:29:6c:73:1f:22:92:56: 97:36:c1:f4:b4:69:5f:48:54:38:df:84:41:89:b1:af:00:82: 95:9c:95:4b:dc:00:ec:ea:fb:7f:22:81:f8:15:3c:49:32:b2: eb:c8:14:bf:00:9c:99:75:ec:41:a6:4f:9d:d6:e9:8a:fc:74: e0:f4:7b:71:7c:cd:c3:be:88:e2:55:64:12:2a:08:eb:28:ce: cf:7d:55:1e:a3:69:c6:dd:87:26:5b:62:d3:6e:0c:c2:ff:e4: 99:cc:b9:aa:e2:71:d4:11:83:08:33:31:f3:59:77:dc:97:31: 2d:dc:af:12:a7:0f:3a:f1:dd:bd:a5:b6:23:36:51:0d:56:97: d3:93:af:43:e0:40:d2:3b:7c:e6:8c:2a:29:3d:ef:f7:ec:86: 61:81:a8:26:be:0d:d8:08:64:b4:27:09:eb:bf:45:3e:bc:61: 64:21:90:5f:8e:1c:1e:99:a9:3f:d0:b5:fe:a0:78:7d:cd:78: ad:2b:3b:9e:3a:0d:d4:b6:92:0d:04:65:a5:2d:06:e1:06:ea: d3:c6:16:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLCyi53i9XDwLPL7I8KCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJjMDIxYjY1N2E1OTRlZTU4ZDlkMzZkOGQ5MTgzMWQw ODUxNzQwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EygxZDQ2N2RkYjY2YmViMDljMTJjYTUzNWNlMTM0YTc4OTA1Y2JjZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmecJ8/wMZKDp0i3dSex8OWPc+xdT BhFg5zL+ze+yokKIODsUTIzILRh3CGUOXzKi8/E8TWary4tntujdYbctxjqq7io4 ljCAtJC28cklcQyO1ANcI6u1tLb+y0dGcjoEGaS5dCxx4syAnPvwYlsy4DtASw2N 57mb8cqS9WfeYEcp4VasSBZyyWNm+6fkGv43LVfaGPHeoKDV8UmljHyLr8F39JfU sICbV0j4M44a4ViuZtfsnhqLWf/swnwhRmj0WWmdxu/mOxuShvzPMUFbo+zGc6zP fMptByRHz+e5eYAr6lIcoXoWpERxzIH2QUs//99t3CS/sSfy8iozbKnk9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1GfdtmvrCcEspTXOE0p4kFy85bMB8GA1UdIwQY MBaAFEcLwCG2V6WU7ljZ022NkYMdCFF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQt M2JlY2RkZmNjYWU2LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kNGY5MmItMmQxMy00ZjJjLWFkNTQtM2JlY2RkZmNjYWU2 LzEvUnd2QUliWlhwWlR1V05uVGJZMlJneDBJVVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe18uuJ3F dJR77TDlSALgwRNUBLtPZbmInKhVIyeJHDCGFgG6zllJnXiWtGB8p6kpbHMfIpJW lzbB9LRpX0hUON+EQYmxrwCClZyVS9wA7Or7fyKB+BU8STKy68gUvwCcmXXsQaZP ndbpivx04PR7cXzNw76I4lVkEioI6yjOz31VHqNpxt2HJlti024Mwv/kmcy5quJx 1BGDCDMx81l33JcxLdyvEqcPOvHdvaW2IzZRDVaX05OvQ+BA0jt85owqKT3v9+yG YYGoJr4N2AhktCcJ679FPrxhZCGQX44cHpmpP9C1/qB4fc14rSs7njoN1LaSDQRl pS0G4Qbq08YWKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:54 2025 by rpki-client