This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json) Hash identifier: YIGFwO72nSLFlTGgjN6WVkWIW1qJ1M/qS/Vjieu0cHc= Subject key identifier: 82:65:E4:32:CE:8E:1B:4A:AF:1B:46:DD:9E:E4:26:9E:69:1D:42:90 Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea Certificate serial: 019AF12DE4B8FB5816835CFC332D6D2D15D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft Manifest number: 0288 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: XA2Tkl4N7yKxggZWPFcGdlSzPZrbmZrcWu8Xp+v43pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e4:b8:fb:58:16:83:5c:fc:33:2d:6d:2d:15:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=8265e432ce8e1b4aaf1b46dd9ee4269e691d4290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:3f:81:f8:6e:aa:56:59:3f:3c:b8:05:87: 86:b0:1d:cf:22:0e:65:09:1e:c5:1c:ed:d4:1d:c8: b7:11:e4:33:c8:10:88:e8:6a:f8:90:67:22:61:32: 92:e4:4f:5b:37:cf:eb:3e:e1:72:a9:32:b5:ba:1e: a0:49:a4:52:f3:7c:ff:e6:76:6d:42:bf:c7:79:70: cb:7b:3c:f2:a7:48:c1:53:7e:b7:0b:ce:fd:30:9c: 9e:3a:76:89:40:a1:1d:3c:de:6a:da:cc:26:08:6e: 8c:65:e6:96:b3:37:f8:58:31:09:22:32:64:7e:27: 8d:50:7d:ee:f9:e1:9d:3e:b3:48:1f:fa:5b:c8:46: ef:33:e7:5d:44:26:05:02:e8:bb:7e:11:f8:22:61: ef:18:12:e1:2f:f8:5d:72:58:20:c5:da:ed:37:18: 2b:e2:03:01:a2:ea:16:0d:57:93:e9:d8:e1:4b:1d: ca:0b:88:e0:ca:90:e0:7f:a3:94:47:a9:ce:22:72: 54:05:0f:f3:11:76:56:f0:b7:63:8b:27:d9:a0:6b: fb:97:f1:e4:3c:f5:78:b6:e8:91:8c:0c:37:65:0f: ad:9e:6d:92:c6:3d:f6:21:0c:53:47:fb:c9:21:8d: ba:11:0b:70:55:f3:e1:88:9a:65:47:f0:12:f3:52: bf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:65:E4:32:CE:8E:1B:4A:AF:1B:46:DD:9E:E4:26:9E:69:1D:42:90 X509v3 Authority Key Identifier: keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:91:35:3d:fa:bc:28:04:fc:e7:74:9c:b4:9e:88:2b:69:80: 9d:bb:80:3a:77:75:93:36:2a:42:b4:04:53:53:e6:73:6d:5e: 26:d9:eb:8d:b6:fb:f6:cc:ae:07:95:96:d1:1d:f5:4b:7b:e2: 7a:06:39:4e:b1:6f:27:51:95:64:18:72:5e:73:9a:0e:e6:7e: f2:bb:0d:8d:85:5e:74:66:94:70:b8:b9:be:22:c8:40:db:7b: 20:1e:bf:dc:c7:19:32:4c:4c:b1:07:2d:61:17:c0:cc:b9:fe: c6:44:41:cd:73:06:40:f1:78:0f:81:8d:7f:69:ee:8b:47:34: 54:c7:35:a2:f4:67:66:af:f5:70:66:a1:33:e0:92:56:d1:96: 89:e6:d6:3e:03:2a:02:9e:d7:46:7c:df:6d:3d:15:fd:17:3f: 90:84:38:36:96:e3:fa:ba:d4:fe:61:c2:14:4c:85:47:54:c0: df:3d:d5:d4:27:20:7d:70:03:fb:91:ae:e7:d7:8e:9a:0e:89: 8a:82:a7:da:2f:27:8c:5c:a2:49:cb:81:08:fb:08:91:16:ec: c5:4c:da:ea:fc:1b:c1:fa:9b:61:a3:7b:bb:76:cd:ed:81:44: 7d:94:81:22:80:a8:15:85:47:83:67:03:a7:71:b2:56:37:70: 09:35:41:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeS4+1gWg1z8My1tLRXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTU5ODIwZGQ3MTgwMDRmYjE1Yzg1YjI3MDc5NmNiNGU4 NGE0ZWEwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD Eyg4MjY1ZTQzMmNlOGUxYjRhYWYxYjQ2ZGQ5ZWU0MjY5ZTY5MWQ0MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxU/gfhuqlZZPzy4BYeGsB3PIg5l CR7FHO3UHci3EeQzyBCI6Gr4kGciYTKS5E9bN8/rPuFyqTK1uh6gSaRS83z/5nZt Qr/HeXDLezzyp0jBU363C879MJyeOnaJQKEdPN5q2swmCG6MZeaWszf4WDEJIjJk fieNUH3u+eGdPrNIH/pbyEbvM+ddRCYFAui7fhH4ImHvGBLhL/hdclggxdrtNxgr 4gMBouoWDVeT6djhSx3KC4jgypDgf6OUR6nOInJUBQ/zEXZW8LdjiyfZoGv7l/Hk PPV4tuiRjAw3ZQ+tnm2Sxj32IQxTR/vJIY26EQtwVfPhiJplR/AS81K/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJl5DLOjhtKrxtG3Z7kJp5pHUKQMB8GA1UdIwQY MBaAFGkVmCDdcYAE+xXIWycHlstOhKTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEt Yzk0OWYwNTkxZjViLzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEtYzk0OWYwNTkxZjVi LzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpE1Pfq8 KAT853SctJ6IK2mAnbuAOnd1kzYqQrQEU1Pmc21eJtnrjbb79syuB5WW0R31S3vi egY5TrFvJ1GVZBhyXnOaDuZ+8rsNjYVedGaUcLi5viLIQNt7IB6/3McZMkxMsQct YRfAzLn+xkRBzXMGQPF4D4GNf2nui0c0VMc1ovRnZq/1cGahM+CSVtGWiebWPgMq Ap7XRnzfbT0V/Rc/kIQ4Npbj+rrU/mHCFEyFR1TA3z3V1CcgfXAD+5Gu59eOmg6J ioKn2i8njFyiScuBCPsIkRbsxUza6vwbwfqbYaN7u3bN7YFEfZSBIoCoFYVHg2cD p3GyVjdwCTVB+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:39 2025 by rpki-client