This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json) Hash identifier: snJVtJg8tx2Vkm2X0iwuXkeK10D/I3T5U4SmdrgWlEU= Subject key identifier: 73:2A:0D:4F:EE:49:86:8D:4D:76:27:45:39:8F:E0:9D:90:A9:5B:D8 Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d Certificate serial: 019AF389517BF76691F84F48943E81A9C57D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft Manifest number: 0598 Signing time: Sat 06 Dec 2025 12:00:54 +0000 Manifest this update: Sat 06 Dec 2025 12:00:54 +0000 Manifest next update: Sun 07 Dec 2025 12:00:54 +0000 Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=) 2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: bTOcPf3aYP+s0Q19YVEmwJTegdL6sKoaFPil72uubzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:51:7b:f7:66:91:f8:4f:48:94:3e:81:a9:c5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d Validity Not Before: Dec 6 12:00:54 2025 GMT Not After : Dec 7 12:00:54 2025 GMT Subject: CN=732a0d4fee49868d4d762745398fe09d90a95bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:bc:78:14:3b:8c:ea:29:d7:8e:0a:f5:da: 44:2c:3b:db:5c:ec:9a:24:5a:4e:b6:e8:30:a6:28: 70:2d:32:c7:14:00:d6:d7:fe:65:71:16:35:f1:75: ad:54:bf:b8:89:05:54:60:bc:43:23:c5:fc:b2:3e: 61:4b:ff:87:5e:b8:7d:e1:48:e6:42:95:8a:0c:46: eb:da:1a:4b:e4:2b:8f:3a:95:72:79:72:9b:f2:c2: 78:8e:83:8e:3b:ce:82:f8:99:2c:ca:6a:47:58:ed: eb:31:d6:4b:71:a0:06:65:16:5a:57:7b:16:ab:cd: f3:52:8b:5f:c9:d8:a4:51:a6:7e:3c:ce:27:26:1a: 35:04:04:13:f2:18:4e:f5:7e:e3:aa:87:32:91:1a: f6:32:e7:18:3b:86:01:88:31:3b:76:9c:e4:ae:d7: 60:1a:d7:21:9b:0f:8c:ae:47:9f:0a:2d:b3:eb:6d: e1:94:27:20:66:89:5d:6f:4f:38:08:a3:f4:0e:79: ac:f2:c5:bd:29:6e:73:46:4d:15:c7:d5:ba:04:3e: 9d:a0:1c:5a:77:a2:46:c7:69:e8:bc:02:89:75:08: 0f:12:3a:2f:7b:46:f9:93:84:d8:6a:cf:b8:1f:7d: f1:8d:9b:da:f2:98:93:fa:3a:4f:87:2d:3e:f7:c5: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2A:0D:4F:EE:49:86:8D:4D:76:27:45:39:8F:E0:9D:90:A9:5B:D8 X509v3 Authority Key Identifier: keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:37:be:47:42:9d:3d:21:6c:19:ec:f1:df:02:64:0a:83:a8: 6d:80:c1:5f:72:c7:11:95:42:d3:ab:7d:78:c8:29:ff:f9:f5: f1:cf:91:38:ce:8f:bb:58:20:0f:4e:05:48:bd:d5:99:55:b8: f5:79:1b:a7:54:5b:bb:e3:1a:b6:2d:87:e9:cb:a0:b0:85:b3: 9c:63:08:58:3d:67:2b:73:ee:84:98:2b:7d:98:50:73:43:7e: 90:b4:8a:3d:ef:49:a2:7c:2e:9a:e8:17:05:00:4c:b5:bd:d9: 2b:03:4b:c3:16:b1:14:4a:82:3a:4c:c5:6f:fb:c5:09:2e:8c: ea:b8:81:dd:8e:81:41:be:a6:75:33:69:fb:d4:61:0e:44:59: db:cb:15:37:92:de:26:9b:c4:0d:70:e1:95:b5:f8:03:f6:5a: d3:f4:33:aa:d1:c6:06:50:24:89:17:25:6a:70:00:38:d8:5b: af:91:98:82:4a:ad:d7:13:04:3a:ae:f9:59:81:6e:5f:fa:25: 2f:f9:c7:df:c9:5f:b9:d5:90:91:53:0d:12:b6:c0:c7:05:59: b9:fe:69:3e:25:39:53:6b:7a:6f:2f:9c:ec:2a:43:68:49:c1: 31:b4:9a:fe:b2:a6:2b:a7:04:1c:c9:ec:6a:d6:56:e9:cd:6c: 49:e4:a5:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVF792aR+E9IlD6BqcV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDMwZDNiNGM1ODllOTRhM2VmNjFkZGQ1NDAxYThmM2Zm NzliNmQwHhcNMjUxMjA2MTIwMDU0WhcNMjUxMjA3MTIwMDU0WjAzMTEwLwYDVQQD Eyg3MzJhMGQ0ZmVlNDk4NjhkNGQ3NjI3NDUzOThmZTA5ZDkwYTk1YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor+8eBQ7jOop144K9dpELDvbXOya JFpOtugwpihwLTLHFADW1/5lcRY18XWtVL+4iQVUYLxDI8X8sj5hS/+HXrh94Ujm QpWKDEbr2hpL5CuPOpVyeXKb8sJ4joOOO86C+JksympHWO3rMdZLcaAGZRZaV3sW q83zUotfydikUaZ+PM4nJho1BAQT8hhO9X7jqocykRr2MucYO4YBiDE7dpzkrtdg Gtchmw+MrkefCi2z623hlCcgZoldb084CKP0Dnms8sW9KW5zRk0Vx9W6BD6doBxa d6JGx2novAKJdQgPEjove0b5k4TYas+4H33xjZva8piT+jpPhy0+98XFGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMqDU/uSYaNTXYnRTmP4J2QqVvYMB8GA1UdIwQY MBaAFK8DDTtMWJ6Uo+9h3dVAGo8/95ttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEt OTI0NWE5YWI5NzhiLzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEtOTI0NWE5YWI5Nzhi LzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUze+R0Kd PSFsGezx3wJkCoOobYDBX3LHEZVC06t9eMgp//n18c+ROM6Pu1ggD04FSL3VmVW4 9Xkbp1Rbu+Mati2H6cugsIWznGMIWD1nK3PuhJgrfZhQc0N+kLSKPe9JonwumugX BQBMtb3ZKwNLwxaxFEqCOkzFb/vFCS6M6riB3Y6BQb6mdTNp+9RhDkRZ28sVN5Le JpvEDXDhlbX4A/Za0/QzqtHGBlAkiRclanAAONhbr5GYgkqt1xMEOq75WYFuX/ol L/nH38lfudWQkVMNErbAxwVZuf5pPiU5U2t6by+c7CpDaEnBMbSa/rKmK6cEHMns atZW6c1sSeSliA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:12:27 2025 by rpki-client