This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json) Hash identifier: ub3plb4XKI7CE11D2EXZ2VYlQz5XO5F7+rD5otoMiGM= Subject key identifier: 28:6E:34:45:A4:C8:19:77:21:C5:17:1E:F2:6E:75:91:33:00:3F:1F Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7 Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7 Certificate serial: 019B34C534F90433BCDE1BE4F9643ACB5E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft Manifest number: 0EE4 Signing time: Fri 19 Dec 2025 04:01:37 +0000 Manifest this update: Fri 19 Dec 2025 04:01:37 +0000 Manifest next update: Sat 20 Dec 2025 04:01:37 +0000 Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: UmFHc0WqbOgJvPJvWXrhT+2zt/TVaVMqzy9NROIP1PM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:34:f9:04:33:bc:de:1b:e4:f9:64:3a:cb:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7 Validity Not Before: Dec 19 04:01:37 2025 GMT Not After : Dec 20 04:01:37 2025 GMT Subject: CN=286e3445a4c8197721c5171ef26e759133003f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:26:c8:b9:d1:2c:81:57:ba:00:0c:04:76: 5f:cb:73:57:69:4d:89:93:3a:f6:06:83:14:1b:00: b6:3b:c4:b3:c7:4a:b2:6d:79:96:63:e5:22:20:4d: 56:d2:82:9d:0c:9c:d3:dc:ae:18:b3:1e:57:87:19: 87:e3:4c:ec:d9:65:b1:d4:59:52:51:fc:0b:40:73: f1:6e:dd:2b:9f:66:23:32:43:02:e0:53:03:db:bf: 65:c7:ab:0d:9c:10:51:01:a0:08:5d:49:23:92:0a: 61:f9:52:1a:85:bd:ae:1e:b6:ad:d0:5a:66:c7:e2: d4:e8:83:3d:5c:35:e0:d3:22:93:f7:0a:83:5d:1e: 49:79:94:f2:45:19:65:c1:45:21:f5:cd:24:f4:29: 24:ca:59:b7:5e:99:b8:46:6f:48:a4:41:ee:02:8f: 8c:7c:53:13:be:2b:ce:e2:d1:e8:38:65:a1:5a:f8: 9d:ab:e7:3e:4a:c5:b2:cf:49:b9:6f:3c:7c:6d:76: 0b:9c:2c:fd:54:ad:56:ca:b0:09:35:81:ca:34:06: 6a:f5:f5:7d:8f:e7:d1:61:c9:91:5e:69:a9:34:a8: a9:cd:55:81:23:40:4e:ff:28:72:29:ac:ab:c0:6a: 7f:1d:e5:4c:99:e0:2b:77:fa:e4:ab:13:81:62:fe: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6E:34:45:A4:C8:19:77:21:C5:17:1E:F2:6E:75:91:33:00:3F:1F X509v3 Authority Key Identifier: keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f8:25:71:b3:e6:fe:e1:7f:63:5d:fe:98:9a:de:19:8b:48: 9b:3e:c7:65:c0:16:30:2d:9f:67:9c:3a:ab:b1:94:2e:49:e0: 97:d6:4d:b2:4b:26:74:71:c9:1b:b2:bb:3a:9c:5c:c7:ae:c2: 13:99:5f:92:45:b1:6f:be:99:eb:f6:b5:7a:3d:dd:2f:44:b2: 5c:62:0a:20:c6:04:a5:b4:89:37:27:fd:61:f2:17:16:a3:e8: 36:99:80:88:41:65:c6:f6:4c:35:61:6c:29:49:23:52:b0:ac: 69:89:da:3c:b0:3a:18:69:da:6e:7b:02:61:7a:a8:2d:82:3e: 3f:85:ac:f4:8e:05:26:aa:d6:cc:78:ed:31:db:22:ca:63:6d: 5d:56:52:b2:df:c8:47:ed:48:05:18:37:9d:5d:a6:09:55:b0: be:69:0b:a9:4a:44:b3:ed:46:52:92:e0:e8:ed:eb:f8:29:69: 3a:14:fa:b1:74:07:01:6d:80:d3:a4:82:de:46:b3:b3:c5:6a: 53:16:88:c6:0b:fa:73:c9:7a:b3:4c:89:e2:9d:76:ca:18:3b: 0a:af:fa:05:d9:00:0c:8e:54:36:19:e3:55:b0:5e:bc:51:ca: 8a:ec:b2:33:6a:3d:94:d5:42:e5:f7:ea:f6:8a:82:b6:d3:c6: 88:bf:7a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xTT5BDO83hvk+WQ6y149MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjY3ZTUxYWI4MTU1NjdhZDY3Y2JiNWQxYjg4OTYzODM1 ZmE5ZjcwHhcNMjUxMjE5MDQwMTM3WhcNMjUxMjIwMDQwMTM3WjAzMTEwLwYDVQQD EygyODZlMzQ0NWE0YzgxOTc3MjFjNTE3MWVmMjZlNzU5MTMzMDAzZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPImyLnRLIFXugAMBHZfy3NXaU2J kzr2BoMUGwC2O8Szx0qybXmWY+UiIE1W0oKdDJzT3K4Ysx5XhxmH40zs2WWx1FlS UfwLQHPxbt0rn2YjMkMC4FMD279lx6sNnBBRAaAIXUkjkgph+VIahb2uHrat0Fpm x+LU6IM9XDXg0yKT9wqDXR5JeZTyRRllwUUh9c0k9Ckkylm3Xpm4Rm9IpEHuAo+M fFMTvivO4tHoOGWhWvidq+c+SsWyz0m5bzx8bXYLnCz9VK1WyrAJNYHKNAZq9fV9 j+fRYcmRXmmpNKipzVWBI0BO/yhyKayrwGp/HeVMmeArd/rkqxOBYv76IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChuNEWkyBl3IcUXHvJudZEzAD8fMB8GA1UdIwQY MBaAFGlmflGrgVVnrWfLtdG4iWODX6n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZWM2OTItYTNlNC00Mzc5LWExYzct YTdlM2M2YTg5MmVjLzEvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZWM2OTItYTNlNC00Mzc5LWExYzctYTdlM2M2YTg5MmVj LzEvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPglcbPm /uF/Y13+mJreGYtImz7HZcAWMC2fZ5w6q7GULkngl9ZNsksmdHHJG7K7Opxcx67C E5lfkkWxb76Z6/a1ej3dL0SyXGIKIMYEpbSJNyf9YfIXFqPoNpmAiEFlxvZMNWFs KUkjUrCsaYnaPLA6GGnabnsCYXqoLYI+P4Ws9I4FJqrWzHjtMdsiymNtXVZSst/I R+1IBRg3nV2mCVWwvmkLqUpEs+1GUpLg6O3r+ClpOhT6sXQHAW2A06SC3kazs8Vq UxaIxgv6c8l6s0yJ4p12yhg7Cq/6BdkADI5UNhnjVbBevFHKiuyyM2o9lNVC5ffq 9oqCttPGiL96CQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:21:39 2025 by rpki-client