This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft File: AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json) Hash identifier: 0cfp+lWjXr9qAiYetCb6IZ3qIbX0fNpcCgbd0zcUdnw= Subject key identifier: 52:1C:C4:A8:C3:C3:7B:EA:94:D5:61:60:2F:76:39:38:B1:EC:59:B8 Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13 Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513 Certificate serial: 019B2B53B3AAAEC8AA40A6CD396BE0B13394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft Manifest number: 1615 Signing time: Wed 17 Dec 2025 08:01:04 +0000 Manifest this update: Wed 17 Dec 2025 08:01:04 +0000 Manifest next update: Thu 18 Dec 2025 08:01:04 +0000 Files and hashes: 1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: LTCyUoWADbxPCko10jiXEt6Ykdt1ntKhtE9Zwd3iIA8=) 2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:b3:aa:ae:c8:aa:40:a6:cd:39:6b:e0:b1:33:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513 Validity Not Before: Dec 17 08:01:04 2025 GMT Not After : Dec 18 08:01:04 2025 GMT Subject: CN=521cc4a8c3c37bea94d561602f763938b1ec59b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:83:07:36:8c:b0:cf:36:46:2d:ef:e4:71:cf: da:e0:bb:f8:0d:36:db:b8:8b:e1:f2:53:4c:9a:13: ae:0f:0f:ae:cb:e5:e1:ed:bf:a1:7e:1f:ad:be:a0: e9:e6:7d:1f:ad:47:59:99:66:de:ed:4c:ab:dd:e0: 0b:91:bd:c0:88:00:1f:4c:50:06:05:1b:ab:4b:1f: ea:9f:b3:5c:90:c8:9e:fa:07:5d:c2:69:50:16:05: ca:08:92:67:9a:1b:d2:19:eb:ad:bd:54:c6:26:52: 6a:a7:5a:ea:8a:d4:69:0c:23:ed:33:2f:a7:96:e5: 9c:25:7d:45:45:7d:4c:8a:e8:53:c2:1e:61:9b:aa: 00:98:93:e5:8d:f9:07:98:b5:53:40:63:d1:63:03: 44:79:37:b5:d1:d6:51:6f:48:05:d8:b1:07:12:8e: 50:5e:f6:24:16:50:8b:2d:76:73:cd:78:77:cf:10: 64:ef:a5:0f:2e:3f:0a:62:93:24:b0:48:d3:41:7e: e8:b2:66:a1:f5:d2:21:08:da:7a:03:b3:ce:81:ee: 35:98:4f:84:a5:72:31:3a:5a:b6:76:47:d6:ca:25: de:05:a4:d5:79:6a:d1:ac:ba:a2:89:80:ec:9d:7c: 03:ba:30:5e:53:23:8a:1c:5b:5c:c4:05:61:7e:b7: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1C:C4:A8:C3:C3:7B:EA:94:D5:61:60:2F:76:39:38:B1:EC:59:B8 X509v3 Authority Key Identifier: keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8f:81:27:08:42:97:f9:e0:2b:4e:19:ad:ad:39:8f:a5:6f: d9:b1:c6:9b:0f:aa:8c:34:90:bc:d4:e5:8a:f3:09:36:85:41: e0:03:3e:0c:1b:ff:15:ed:cb:5c:de:c0:2c:19:d7:54:6b:40: c0:9b:8e:6e:c2:61:c1:11:94:99:31:61:5e:78:42:74:f6:84: af:83:ff:70:26:fc:08:0a:b1:8e:71:df:7d:36:ef:e8:78:1d: b4:b9:bf:a8:25:63:84:f3:2e:17:8d:21:04:c4:80:c1:3d:45: d9:0a:8f:82:c0:75:61:92:38:ca:13:0f:71:97:72:2c:b8:6b: 4c:81:f2:dc:08:a5:fe:f8:3d:19:6f:89:02:93:55:45:73:99: ca:df:44:2a:5b:5e:f2:d3:04:be:f0:40:24:61:cb:7a:5c:29: a8:87:94:d5:2a:ad:5e:ab:55:f4:68:9e:01:ea:e7:1b:2d:ac: f9:68:66:01:08:1e:e5:d6:43:b0:07:ac:89:64:68:7b:4a:8f: e3:f6:a4:7b:a4:aa:9a:61:71:d2:58:38:05:eb:fc:ba:f7:a3: 33:e5:43:8b:31:8f:cb:b3:58:7b:42:06:a0:53:69:a4:53:d9: b9:d3:25:d6:46:e5:4c:3b:6d:4f:27:f9:93:fb:2d:3b:45:7e: bf:8d:c6:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU7OqrsiqQKbNOWvgsTOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMDU4MWVhYTk2OTAzNmMzM2Y5MmViYzQ4NDRkYzIyYzU1 ZTc1MTMwHhcNMjUxMjE3MDgwMTA0WhcNMjUxMjE4MDgwMTA0WjAzMTEwLwYDVQQD Eyg1MjFjYzRhOGMzYzM3YmVhOTRkNTYxNjAyZjc2MzkzOGIxZWM1OWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YMHNoywzzZGLe/kcc/a4Lv4DTbb uIvh8lNMmhOuDw+uy+Xh7b+hfh+tvqDp5n0frUdZmWbe7Uyr3eALkb3AiAAfTFAG BRurSx/qn7NckMie+gddwmlQFgXKCJJnmhvSGeutvVTGJlJqp1rqitRpDCPtMy+n luWcJX1FRX1MiuhTwh5hm6oAmJPljfkHmLVTQGPRYwNEeTe10dZRb0gF2LEHEo5Q XvYkFlCLLXZzzXh3zxBk76UPLj8KYpMksEjTQX7osmah9dIhCNp6A7POge41mE+E pXIxOlq2dkfWyiXeBaTVeWrRrLqiiYDsnXwDujBeUyOKHFtcxAVhfrcVDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIcxKjDw3vqlNVhYC92OTix7Fm4MB8GA1UdIwQY MBaAFAMFgeqpaQNsM/kuvEhE3CLFXnUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEt ZDg0YjJiMWU5MTMzLzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEtZDg0YjJiMWU5MTMz LzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAko+BJwhC l/ngK04Zra05j6Vv2bHGmw+qjDSQvNTlivMJNoVB4AM+DBv/Fe3LXN7ALBnXVGtA wJuObsJhwRGUmTFhXnhCdPaEr4P/cCb8CAqxjnHffTbv6HgdtLm/qCVjhPMuF40h BMSAwT1F2QqPgsB1YZI4yhMPcZdyLLhrTIHy3Ail/vg9GW+JApNVRXOZyt9EKlte 8tMEvvBAJGHLelwpqIeU1SqtXqtV9GieAernGy2s+WhmAQge5dZDsAesiWRoe0qP 4/ake6SqmmFx0lg4Bev8uvejM+VDizGPy7NYe0IGoFNppFPZudMl1kblTDttTyf5 k/stO0V+v43GSA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:14 2025 by rpki-client