This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json) Hash identifier: XHLvMNJIJa5R+DUCOzHvIdinsoUXLotRypZzn9VJ3f8= Subject key identifier: 06:42:B3:49:31:D7:3A:8A:2F:88:3F:83:0B:9F:09:63:3F:08:5B:AF Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5 Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5 Certificate serial: 019B35D7052B080134D1B2427C3DC4ECD0AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft Manifest number: 06D0 Signing time: Fri 19 Dec 2025 09:00:42 +0000 Manifest this update: Fri 19 Dec 2025 09:00:42 +0000 Manifest next update: Sat 20 Dec 2025 09:00:42 +0000 Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: Xv4SLLWgSOA4y5uL0MnhtNNH6MQ+5R1NhmPIKygfL8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:05:2b:08:01:34:d1:b2:42:7c:3d:c4:ec:d0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696193e55638864ed69cd947b750f321674a64a5 Validity Not Before: Dec 19 09:00:42 2025 GMT Not After : Dec 20 09:00:42 2025 GMT Subject: CN=0642b34931d73a8a2f883f830b9f09633f085baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:95:9a:6a:a3:4c:ad:f6:47:65:e0:e9:f9: a6:d8:ac:ba:3c:c4:74:38:c4:58:ad:4a:cc:c0:f2: 8b:39:f0:38:0d:6a:ad:cc:68:43:81:97:93:9c:1d: 5c:25:e2:ea:92:31:70:0d:d0:e7:0f:6a:68:77:25: b8:e8:e4:f5:22:99:46:61:ed:93:cb:27:de:47:0f: 60:01:10:a7:95:83:2e:ff:9b:88:e1:c9:da:17:20: 12:33:b0:99:f5:22:58:24:14:6f:cf:e6:4e:4c:1b: 86:49:44:f1:f9:89:99:5f:61:3d:70:56:89:75:80: 6f:9b:35:08:44:60:7d:4d:0d:65:1c:ea:bc:66:61: 8e:3a:65:36:a7:b1:9f:59:f2:61:46:cf:52:fb:d7: c5:8d:75:76:90:88:8c:4c:92:30:77:20:92:04:3f: 2a:97:1b:e7:6d:e1:2e:2b:cc:19:2d:04:62:77:ba: 57:89:91:d1:f3:1b:ba:2f:ff:6a:00:7c:d4:af:4e: ae:da:01:bd:32:70:61:1d:92:f2:61:70:b9:ba:11: 9d:c4:d4:85:41:a4:e7:3c:ad:be:49:28:e6:21:de: 2a:48:da:5c:6d:88:1a:fa:8f:fe:96:5c:af:9b:58: 61:c4:fc:7d:ed:77:90:25:d6:b6:86:4f:39:e5:21: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:42:B3:49:31:D7:3A:8A:2F:88:3F:83:0B:9F:09:63:3F:08:5B:AF X509v3 Authority Key Identifier: keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d6:9c:8b:4a:0c:b7:03:d1:cc:91:6f:96:eb:74:84:a6:98: ee:a7:f9:4c:22:68:9e:73:ad:f8:77:66:d8:80:58:b1:24:50: 9f:0d:cf:48:05:ab:19:04:e6:16:17:51:de:fd:aa:da:43:81: b8:19:d3:cc:fb:f1:4c:26:15:96:53:d5:c6:c7:34:b3:c3:35: 5f:93:be:7c:3a:6d:71:46:80:00:25:4e:9c:a7:18:2c:e5:6d: 56:0c:a9:d9:88:f8:6a:3e:e8:da:b8:4f:a2:c4:03:2a:9a:b4: 8a:17:f3:ab:20:25:5c:31:69:62:c1:57:ef:de:ff:53:24:81: 46:35:0a:ee:49:fd:54:9e:e9:31:9a:d2:98:cd:e1:c3:22:8e: 77:87:19:a6:89:ff:b9:e1:f6:e7:e8:f2:3e:16:91:ee:b7:5d: c3:04:cf:db:29:d5:4c:2a:52:d4:c1:12:52:68:7e:9f:e5:3d: 3e:b8:c5:a2:a8:ce:90:b7:47:e3:ef:12:e3:7a:60:f2:69:51: 97:dc:34:90:25:e8:d9:77:26:5d:bf:ef:96:b4:d2:1b:91:b8: c4:14:71:b3:6c:8d:a9:e3:9d:dc:17:6d:68:99:20:e2:19:d8: 06:a6:8e:60:0e:ac:0a:da:05:42:de:0c:72:a3:bf:73:96:05: 93:8a:27:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11wUrCAE00bJCfD3E7NCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjE5M2U1NTYzODg2NGVkNjljZDk0N2I3NTBmMzIxNjc0 YTY0YTUwHhcNMjUxMjE5MDkwMDQyWhcNMjUxMjIwMDkwMDQyWjAzMTEwLwYDVQQD EygwNjQyYjM0OTMxZDczYThhMmY4ODNmODMwYjlmMDk2MzNmMDg1YmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HuVmmqjTK32R2Xg6fmm2Ky6PMR0 OMRYrUrMwPKLOfA4DWqtzGhDgZeTnB1cJeLqkjFwDdDnD2podyW46OT1IplGYe2T yyfeRw9gARCnlYMu/5uI4cnaFyASM7CZ9SJYJBRvz+ZOTBuGSUTx+YmZX2E9cFaJ dYBvmzUIRGB9TQ1lHOq8ZmGOOmU2p7GfWfJhRs9S+9fFjXV2kIiMTJIwdyCSBD8q lxvnbeEuK8wZLQRid7pXiZHR8xu6L/9qAHzUr06u2gG9MnBhHZLyYXC5uhGdxNSF QaTnPK2+SSjmId4qSNpcbYga+o/+llyvm1hhxPx97XeQJda2hk855SGsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZCs0kx1zqKL4g/gwufCWM/CFuvMB8GA1UdIwQY MBaAFGlhk+VWOIZO1pzZR7dQ8yFnSmSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMt N2Q0M2IzMzU3Y2Q3LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMtN2Q0M2IzMzU3Y2Q3 LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtaci0oM twPRzJFvlut0hKaY7qf5TCJonnOt+Hdm2IBYsSRQnw3PSAWrGQTmFhdR3v2q2kOB uBnTzPvxTCYVllPVxsc0s8M1X5O+fDptcUaAACVOnKcYLOVtVgyp2Yj4aj7o2rhP osQDKpq0ihfzqyAlXDFpYsFX797/UySBRjUK7kn9VJ7pMZrSmM3hwyKOd4cZpon/ ueH25+jyPhaR7rddwwTP2ynVTCpS1MESUmh+n+U9PrjFoqjOkLdH4+8S43pg8mlR l9w0kCXo2XcmXb/vlrTSG5G4xBRxs2yNqeOd3BdtaJkg4hnYBqaOYA6sCtoFQt4M cqO/c5YFk4onpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:24 2025 by rpki-client