This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json) Hash identifier: u4qAJ0VfN5KGELrwcRqdfiVZRsnYST2xttY8GlmM71E= Subject key identifier: 0E:33:6F:AE:2B:86:9E:6D:10:28:AA:53:D4:56:B1:5A:BB:1C:C0:68 Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7 Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7 Certificate serial: 019AF12EA6C507258DE810347CBDD6AEBECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft Manifest number: 0EC1 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: BMxYmAeoUs6XIVRlhzoUEVEMSAPBefBPYDFam5J8p7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a6:c5:07:25:8d:e8:10:34:7c:bd:d6:ae:be:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=0e336fae2b869e6d1028aa53d456b15abb1cc068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:7f:61:d3:35:39:21:fb:74:3b:53:02:83: 04:0e:33:bf:1f:52:6e:13:1a:04:e0:fe:89:1d:19: 30:eb:4e:26:42:4c:cc:4b:75:2c:f1:91:77:86:db: 41:7e:54:bf:3e:c8:b6:ad:fa:5f:16:50:7e:38:f4: 7d:96:b8:9f:98:84:24:97:d3:5d:30:19:d2:39:2a: 64:10:8f:8c:45:1a:15:ca:72:8e:f0:32:05:93:72: b7:4a:92:5d:85:19:49:64:6f:3c:c4:5d:f3:2f:70: fc:b9:a7:eb:71:15:6b:d4:ca:6e:9c:89:ba:ac:c9: 2b:b3:41:e8:9c:0f:8b:72:e6:7d:27:9d:d6:1b:b0: 3f:5c:b8:98:8e:83:e3:7a:de:6d:f0:f8:6b:19:8e: 4b:3c:63:50:4c:9a:f4:9d:61:7c:2a:08:4e:0f:1f: 5b:95:f5:31:59:14:b7:a1:13:b4:93:65:e2:76:6f: dc:1d:d0:36:56:ba:e4:2d:30:f9:b3:46:7e:23:87: 8a:2a:a0:5e:9a:85:da:a6:ac:e8:14:5e:9b:d6:d1: 8b:d2:da:8f:a5:a4:da:3c:9c:ca:ca:94:91:55:93: 6b:c6:d4:8a:1d:fc:11:93:08:25:e2:a4:88:ba:46: 7d:f4:7b:ea:33:98:fb:39:16:ad:e9:5b:e7:79:81: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:33:6F:AE:2B:86:9E:6D:10:28:AA:53:D4:56:B1:5A:BB:1C:C0:68 X509v3 Authority Key Identifier: keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3f:80:79:8a:5e:40:ac:93:e7:e0:04:ae:13:87:d2:14:63: 29:f5:1b:95:ff:01:47:0b:ea:d2:07:09:a7:49:8d:c5:03:7f: 14:b9:f4:6c:e4:f2:61:d2:78:61:d5:60:44:b7:e6:93:d7:ea: 37:d9:5e:97:27:94:ed:97:25:07:ca:e3:6e:b9:a4:8d:5c:ca: d3:15:b4:ce:b6:5f:d7:73:12:d1:9a:6e:89:3b:03:a2:46:86: 22:07:96:e5:4b:54:f9:af:e7:57:42:a9:76:71:39:f2:36:ff: a8:d5:5d:04:f8:19:c1:28:b4:3d:6e:72:2b:40:22:6b:bf:23: d2:f8:89:71:7f:4b:9f:4d:a8:3e:46:c0:cb:12:38:87:0d:07: 94:07:71:e0:ab:dc:6b:09:b7:18:b9:d3:38:6a:a4:d2:1c:20: 9a:bf:3b:6c:e5:a0:17:92:1c:5c:d1:ec:fe:b3:19:df:74:d2: 3a:37:a5:d5:86:cd:29:50:18:8f:b0:e0:2c:d1:6b:7f:cd:2b: fa:dd:bb:1f:94:41:8a:a0:7d:73:42:20:e0:37:a5:ec:6a:49: 92:41:a4:3e:88:f0:f6:9a:5a:6f:89:98:27:b6:a9:88:6f:3f: 8a:7d:74:42:bb:c0:be:df:9a:83:b5:da:a2:c1:81:2a:5e:95: 8a:8a:64:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqbFByWN6BA0fL3Wrr7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjY3ZTUxYWI4MTU1NjdhZDY3Y2JiNWQxYjg4OTYzODM1 ZmE5ZjcwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD EygwZTMzNmZhZTJiODY5ZTZkMTAyOGFhNTNkNDU2YjE1YWJiMWNjMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvJ/YdM1OSH7dDtTAoMEDjO/H1Ju ExoE4P6JHRkw604mQkzMS3Us8ZF3httBflS/Psi2rfpfFlB+OPR9lrifmIQkl9Nd MBnSOSpkEI+MRRoVynKO8DIFk3K3SpJdhRlJZG88xF3zL3D8uafrcRVr1MpunIm6 rMkrs0HonA+LcuZ9J53WG7A/XLiYjoPjet5t8PhrGY5LPGNQTJr0nWF8KghODx9b lfUxWRS3oRO0k2Xidm/cHdA2VrrkLTD5s0Z+I4eKKqBemoXapqzoFF6b1tGL0tqP paTaPJzKypSRVZNrxtSKHfwRkwgl4qSIukZ99HvqM5j7ORat6VvneYEU8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4zb64rhp5tECiqU9RWsVq7HMBoMB8GA1UdIwQY MBaAFGlmflGrgVVnrWfLtdG4iWODX6n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZWM2OTItYTNlNC00Mzc5LWExYzct YTdlM2M2YTg5MmVjLzEvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZWM2OTItYTNlNC00Mzc5LWExYzctYTdlM2M2YTg5MmVj LzEvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET+AeYpe QKyT5+AErhOH0hRjKfUblf8BRwvq0gcJp0mNxQN/FLn0bOTyYdJ4YdVgRLfmk9fq N9lelyeU7ZclB8rjbrmkjVzK0xW0zrZf13MS0ZpuiTsDokaGIgeW5UtU+a/nV0Kp dnE58jb/qNVdBPgZwSi0PW5yK0Aia78j0viJcX9Ln02oPkbAyxI4hw0HlAdx4Kvc awm3GLnTOGqk0hwgmr87bOWgF5IcXNHs/rMZ33TSOjel1YbNKVAYj7DgLNFrf80r +t27H5RBiqB9c0Ig4Del7GpJkkGkPojw9ppab4mYJ7apiG8/in10QrvAvt+ag7Xa osGBKl6ViopkyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:30 2025 by rpki-client