This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json) Hash identifier: iaal5W0M86i5cZFFTwzGV9/sFkQLIvTMDg2DRT0nkrY= Subject key identifier: EB:22:39:1F:32:21:52:DF:72:71:4E:02:D8:3D:B0:99:08:FC:8B:FD Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24 Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624 Certificate serial: 019AF1649003BE39462C85E40B37D5B9B930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: 1-V8d9umP0McsFhAezBGsGExpglU.roa (hash: CUsrGluvA/qkzyOPwb3wxAIF8Xp3/wYNAg7YgPlNKrk=) 2: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: mh23aiaLtZZjhd5lKxHXQf2Y277i8qyQhkWXuUOgZV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:90:03:be:39:46:2c:85:e4:0b:37:d5:b9:b9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624 Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=eb22391f322152df72714e02d83db09908fc8bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:d1:eb:20:94:77:b2:88:9b:40:30:19:f4: 5b:5f:3c:0a:ac:9d:22:ab:78:36:bc:36:5f:26:b5: ee:05:02:44:06:0b:45:3b:ad:68:a7:c0:ca:3f:37: ff:c4:14:68:f0:ba:27:0b:5a:b9:09:df:83:55:32: f6:a8:2a:08:2b:7f:12:b5:e2:1e:f5:3a:c7:c4:e4: 17:3f:f6:21:37:44:92:58:15:69:f6:73:10:50:4d: 9d:e3:ef:89:7c:b9:84:8a:c6:85:40:81:4d:03:6f: 6f:03:ed:f7:1c:22:39:0a:65:ac:6f:50:f0:2a:55: 58:d4:3b:b1:83:9b:d5:50:bf:76:d8:fe:f1:08:05: 35:40:83:e5:62:20:f4:b9:cb:d1:17:84:ad:ac:42: 18:ae:77:96:a9:de:75:2d:99:6b:8f:76:9f:43:0a: a0:c2:29:ea:89:6e:53:0d:25:35:c8:99:e8:68:a2: e0:88:3f:ac:28:d8:39:23:24:1f:b6:40:c5:b7:69: 7b:07:e0:65:90:66:4b:69:03:f7:0a:24:da:62:82: ca:9f:a9:76:b1:c7:8a:a7:16:ec:b4:46:aa:ac:3f: 73:65:7e:53:39:5a:dc:76:62:d4:cd:4f:18:6e:c4: 99:10:71:7e:4b:e4:60:b6:2c:81:d6:70:e1:5a:bb: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:22:39:1F:32:21:52:DF:72:71:4E:02:D8:3D:B0:99:08:FC:8B:FD X509v3 Authority Key Identifier: keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e5:e2:eb:e5:a9:b5:26:8b:58:dd:5c:f2:0c:44:b7:e3:11: 66:5d:9f:12:c3:2b:b0:0f:d4:73:83:1b:20:02:7b:48:7f:07: 65:45:36:fd:67:03:06:72:52:10:48:c6:2f:68:9d:0d:a2:45: b1:74:b4:9e:8d:7c:eb:22:f3:0d:4b:0f:b3:25:7f:ee:98:3a: 82:d9:ec:b3:db:9f:4f:65:c1:20:95:81:1d:22:18:43:66:bd: f9:74:78:e6:78:83:0d:18:a1:34:63:93:80:16:70:19:0e:a7: f6:4a:77:7b:a3:10:b4:60:42:05:89:cb:68:89:7d:4c:fc:77: 57:d7:c6:8f:75:3a:bf:de:13:4c:92:68:66:e1:bd:79:35:5b: 21:79:7a:4b:8b:16:e6:50:25:2d:ac:81:04:79:b0:6d:83:c7: e4:2a:4a:38:bf:4b:5d:d5:8f:51:cc:e1:fc:32:80:02:67:6b: 8f:4f:f3:06:52:d0:10:91:ae:06:15:6a:bb:65:74:a6:e9:4b: fb:6a:61:76:9f:3f:e3:a3:5e:aa:5d:56:47:02:c0:7e:10:54: 77:e4:62:1b:cf:22:22:73:d5:dc:33:e6:5a:64:07:5a:02:d8: 87:da:de:84:0a:5b:63:72:71:8c:98:14:72:ad:9e:a9:ac:5c: 86:1f:4e:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJADvjlGLIXkCzfVubkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNmRhZTIzZDJlMmViNjRjOTY4NTM0ODBlMDc3OGNiZDNm ZDU2MjQwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD EyhlYjIyMzkxZjMyMjE1MmRmNzI3MTRlMDJkODNkYjA5OTA4ZmM4YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk7R6yCUd7KIm0AwGfRbXzwKrJ0i q3g2vDZfJrXuBQJEBgtFO61op8DKPzf/xBRo8LonC1q5Cd+DVTL2qCoIK38SteIe 9TrHxOQXP/YhN0SSWBVp9nMQUE2d4++JfLmEisaFQIFNA29vA+33HCI5CmWsb1Dw KlVY1Duxg5vVUL922P7xCAU1QIPlYiD0ucvRF4StrEIYrneWqd51LZlrj3afQwqg winqiW5TDSU1yJnoaKLgiD+sKNg5IyQftkDFt2l7B+BlkGZLaQP3CiTaYoLKn6l2 sceKpxbstEaqrD9zZX5TOVrcdmLUzU8YbsSZEHF+S+RgtiyB1nDhWrviewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsiOR8yIVLfcnFOAtg9sJkI/Iv9MB8GA1UdIwQY MBaAFAFtriPS4utkyWhTSA4HeMvT/VYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVcydUk5TGk2MlRKYUZOSURnZDR5OVA5VmlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iNjMzMzctMzVlMy00YzVlLWEzZTIt MTgxNTk3YzMxMDdlLzEvQVcydUk5TGk2MlRKYUZOSURnZDR5OVA5VmlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iNjMzMzctMzVlMy00YzVlLWEzZTItMTgxNTk3YzMxMDdl LzEvQVcydUk5TGk2MlRKYUZOSURnZDR5OVA5VmlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquXi6+Wp tSaLWN1c8gxEt+MRZl2fEsMrsA/Uc4MbIAJ7SH8HZUU2/WcDBnJSEEjGL2idDaJF sXS0no186yLzDUsPsyV/7pg6gtnss9ufT2XBIJWBHSIYQ2a9+XR45niDDRihNGOT gBZwGQ6n9kp3e6MQtGBCBYnLaIl9TPx3V9fGj3U6v94TTJJoZuG9eTVbIXl6S4sW 5lAlLayBBHmwbYPH5CpKOL9LXdWPUczh/DKAAmdrj0/zBlLQEJGuBhVqu2V0pulL +2phdp8/46Neql1WRwLAfhBUd+RiG88iInPV3DPmWmQHWgLYh9rehApbY3JxjJgU cq2eqaxchh9O9g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:03 2025 by rpki-client