This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json) Hash identifier: ZuhBtEwnEvtZXU90YfYJVouYwhVX2FecwiaV1De40Tc= Subject key identifier: D1:54:C4:1F:D6:D7:FB:59:47:98:51:8C:7B:E7:98:B4:B2:7D:BA:8D Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b Certificate serial: 019AF276BBF12E04D83E54B9F2E7C63BBF6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft Manifest number: 033A Signing time: Sat 06 Dec 2025 07:00:58 +0000 Manifest this update: Sat 06 Dec 2025 07:00:58 +0000 Manifest next update: Sun 07 Dec 2025 07:00:58 +0000 Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: OdAE8SXYuui4mX0vUeI1x7gkrvtqCi+y9TAqv4+EPqc=) 2: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (hash: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bb:f1:2e:04:d8:3e:54:b9:f2:e7:c6:3b:bf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030b00e6074502e6538391feab18358281a3279b Validity Not Before: Dec 6 07:00:58 2025 GMT Not After : Dec 7 07:00:58 2025 GMT Subject: CN=d154c41fd6d7fb594798518c7be798b4b27dba8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:fc:26:de:4e:8c:94:d5:90:1e:1b:5d:74: f1:f9:ff:64:26:a0:ae:9d:b9:25:1f:cd:a4:20:be: a7:b5:93:d1:34:ee:08:4d:ae:29:9e:63:34:89:8a: b5:5f:1f:c0:92:69:79:b1:57:00:ee:15:f5:b1:dd: 2a:d4:ae:4f:e1:72:2e:2e:eb:b3:38:09:80:d4:3f: f9:cc:73:41:fd:69:c6:d8:07:e5:5b:38:7e:d8:50: 82:b9:5b:c0:68:c9:89:9d:50:9a:c0:9c:6d:4c:de: a3:41:c0:66:03:8d:4c:42:93:c7:c1:fb:3d:19:d0: 56:00:fd:f7:6c:3c:24:74:eb:0b:1a:ca:96:11:bd: 64:e5:b7:89:49:af:89:00:57:61:c4:7e:71:74:b5: 13:55:31:92:c9:1b:8f:d2:4d:fb:4a:9e:75:f5:67: 10:2a:c0:4c:5b:4c:08:72:8d:55:55:fb:5c:5c:8f: 8b:a6:c4:97:b8:25:65:89:bc:ea:a1:fa:cf:c7:1a: 15:e1:6f:80:b1:9f:3b:f2:80:6d:16:b0:93:97:f1: 1e:94:2d:31:04:78:ef:2f:49:d4:9c:0a:38:d3:3e: 7e:f0:7d:24:1b:d1:9a:44:19:72:d3:13:51:bf:d7: 25:de:7f:7d:e1:aa:3e:07:2c:dd:69:fa:86:e4:5b: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:54:C4:1F:D6:D7:FB:59:47:98:51:8C:7B:E7:98:B4:B2:7D:BA:8D X509v3 Authority Key Identifier: keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:78:55:4c:ff:42:af:64:9d:ff:f0:ff:39:a7:05:08:8f:b4: 55:41:04:18:0a:58:9b:94:35:1e:e5:10:08:87:c5:7c:4c:66: a7:25:8e:9a:6e:15:5d:f2:e4:12:b6:c6:8a:1b:5b:66:09:e7: 4e:e3:1a:bd:9a:38:76:b7:aa:ee:ef:55:3e:d3:92:30:58:6c: 56:58:47:a3:85:05:16:83:fd:d0:65:fb:3e:cf:a7:01:f2:38: 71:92:67:27:7a:b8:b4:b8:6a:a7:90:06:c3:2c:35:e0:38:ca: a5:b0:ce:d2:5c:ec:73:1e:69:4c:b5:ae:27:82:7a:7e:d4:b4: 0d:18:b3:56:e5:95:ca:fc:f1:a2:6b:06:a8:0d:41:92:5b:0c: 57:84:f8:be:2a:05:77:b5:03:73:1e:bf:82:cc:7b:44:2d:aa: 6f:2e:cf:d5:42:01:41:1b:ce:51:83:01:e4:ad:7d:65:0b:76: 89:56:c3:1b:81:76:dd:54:5a:18:52:ac:31:ab:29:7a:a4:35: 39:1f:b4:a1:91:05:3e:19:5e:95:ea:0d:10:88:3a:65:d5:a0: 2f:df:02:4d:04:0b:5b:07:78:00:e7:f9:a3:59:43:0b:cc:85: 6a:56:d3:81:2f:44:f6:30:a9:3e:46:a0:2d:be:3a:e9:9b:58: 71:a7:e7:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrvxLgTYPlS58ufGO79uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMGIwMGU2MDc0NTAyZTY1MzgzOTFmZWFiMTgzNTgyODFh MzI3OWIwHhcNMjUxMjA2MDcwMDU4WhcNMjUxMjA3MDcwMDU4WjAzMTEwLwYDVQQD EyhkMTU0YzQxZmQ2ZDdmYjU5NDc5ODUxOGM3YmU3OThiNGIyN2RiYThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dr8Jt5OjJTVkB4bXXTx+f9kJqCu nbklH82kIL6ntZPRNO4ITa4pnmM0iYq1Xx/Akml5sVcA7hX1sd0q1K5P4XIuLuuz OAmA1D/5zHNB/WnG2AflWzh+2FCCuVvAaMmJnVCawJxtTN6jQcBmA41MQpPHwfs9 GdBWAP33bDwkdOsLGsqWEb1k5beJSa+JAFdhxH5xdLUTVTGSyRuP0k37Sp519WcQ KsBMW0wIco1VVftcXI+LpsSXuCVlibzqofrPxxoV4W+AsZ878oBtFrCTl/EelC0x BHjvL0nUnAo40z5+8H0kG9GaRBly0xNRv9cl3n994ao+ByzdafqG5FvTuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFUxB/W1/tZR5hRjHvnmLSyfbqNMB8GA1UdIwQY MBaAFAMLAOYHRQLmU4OR/qsYNYKBoyebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2Et Nzc1NjQzODU0NGNhLzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2EtNzc1NjQzODU0NGNh LzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXhVTP9C r2Sd//D/OacFCI+0VUEEGApYm5Q1HuUQCIfFfExmpyWOmm4VXfLkErbGihtbZgnn TuMavZo4dreq7u9VPtOSMFhsVlhHo4UFFoP90GX7Ps+nAfI4cZJnJ3q4tLhqp5AG wyw14DjKpbDO0lzscx5pTLWuJ4J6ftS0DRizVuWVyvzxomsGqA1BklsMV4T4vioF d7UDcx6/gsx7RC2qby7P1UIBQRvOUYMB5K19ZQt2iVbDG4F23VRaGFKsMaspeqQ1 OR+0oZEFPhleleoNEIg6ZdWgL98CTQQLWwd4AOf5o1lDC8yFalbTgS9E9jCpPkag Lb466ZtYcafngg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:16 2025 by rpki-client