This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json) Hash identifier: ThXbdRQYtyOb9vYfEniQNhtFbH2DqLCOX+Vwi9LFAT8= Subject key identifier: 42:B1:51:42:6B:51:9D:2C:25:17:BC:2A:FE:1C:75:A3:AD:96:54:97 Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5 Certificate serial: 019AF12DEB18342E75ABCAA65C6A91CC8DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft Manifest number: 0F5C Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=) 2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: dZ56g933k2OBQsdXb9zoyDxddqwwW9utGOBv9sgvXH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:eb:18:34:2e:75:ab:ca:a6:5c:6a:91:cc:8d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5 Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=42b151426b519d2c2517bc2afe1c75a3ad965497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:40:7c:79:0b:96:6e:b5:be:b9:95:fb:74: 20:3f:04:b1:36:1e:80:3b:c1:fb:28:8b:78:72:87: 98:ca:88:1a:fc:38:85:4c:8a:e6:3c:ce:4c:04:fe: b8:d8:a6:1d:75:b8:32:3f:d8:fa:0f:eb:d6:29:bd: d4:84:8d:d3:94:8e:87:ad:67:9c:65:70:c8:02:cf: bc:a0:15:51:91:23:86:e0:d3:33:b6:6b:b8:75:a7: a5:1b:a8:93:77:e0:2d:0e:62:13:83:89:79:34:93: ec:49:1c:d3:35:3c:03:16:07:14:1f:c3:d9:16:05: 31:7a:ba:33:f2:6d:32:ff:5c:eb:50:7e:cf:75:f2: 9a:cc:c3:57:bd:50:db:bb:6c:ae:93:85:ed:63:96: 7d:70:ad:7f:34:9b:d8:52:4a:5d:62:ff:9b:5e:1b: 5e:ae:64:c5:84:17:11:d4:a9:7f:d9:91:ba:ce:dd: 9b:4f:5f:86:b1:00:80:be:6a:23:2f:2e:c4:04:09: 9e:99:71:28:bd:07:5a:66:6b:cd:73:95:99:56:c6: 47:ab:e8:fb:c8:3b:ee:30:42:81:89:95:00:89:86: 79:9c:07:45:ee:c2:e7:8c:19:81:ed:4c:e3:41:49: bc:8a:a1:23:05:fc:74:7d:83:92:2b:a1:cc:c4:33: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:51:42:6B:51:9D:2C:25:17:BC:2A:FE:1C:75:A3:AD:96:54:97 X509v3 Authority Key Identifier: keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1f:fe:99:34:83:5f:6d:ef:4d:ea:47:34:af:4a:54:e4:e1: ab:92:c9:57:f5:3f:23:c0:d4:cd:da:1f:3d:31:06:f6:87:85: b1:b0:05:13:da:9f:47:e3:20:c3:0a:14:9b:f2:93:8f:73:d2: 60:32:e8:68:76:a4:9e:41:53:92:3e:a9:c2:e7:8b:06:c8:41: 86:d0:2b:56:63:80:d6:1d:2f:10:6a:6e:76:4f:2a:60:3b:e4: 1a:e8:05:3b:39:f4:2b:e6:ac:95:74:ff:25:7f:b7:41:b4:f8: 9d:70:71:fe:b8:8c:a0:74:8d:0f:13:3a:be:54:65:c5:2e:59: 4b:11:aa:fb:70:2d:eb:07:fc:ee:6b:93:c0:23:7b:19:2c:3d: 4d:e8:52:51:f5:21:93:7b:a8:85:9d:b3:b3:18:02:a1:8c:d7: 45:36:ce:1a:8c:48:b8:5d:ea:6e:ae:f7:08:4f:34:a9:b5:55: e8:7d:72:d1:a2:54:bc:3f:6f:21:10:43:ce:53:e2:36:fb:15: 58:5f:23:c7:35:99:f9:80:77:c5:d3:30:e8:2c:24:3c:19:62: bd:fa:04:db:be:b6:d2:04:92:d1:3b:d7:f3:13:3d:99:79:67: a5:53:13:2a:16:98:8d:78:fc:ba:2f:85:9e:a4:91:6d:1f:5c: d1:17:95:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLesYNC51q8qmXGqRzI3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDJmYjU2YjQ1OWM3YTIxYTc5YjY4YjRlMTE4YWI4NzZm Yzk2YTUwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD Eyg0MmIxNTE0MjZiNTE5ZDJjMjUxN2JjMmFmZTFjNzVhM2FkOTY1NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCxAfHkLlm61vrmV+3QgPwSxNh6A O8H7KIt4coeYyoga/DiFTIrmPM5MBP642KYddbgyP9j6D+vWKb3UhI3TlI6HrWec ZXDIAs+8oBVRkSOG4NMztmu4daelG6iTd+AtDmITg4l5NJPsSRzTNTwDFgcUH8PZ FgUxeroz8m0y/1zrUH7PdfKazMNXvVDbu2yuk4XtY5Z9cK1/NJvYUkpdYv+bXhte rmTFhBcR1Kl/2ZG6zt2bT1+GsQCAvmojLy7EBAmemXEovQdaZmvNc5WZVsZHq+j7 yDvuMEKBiZUAiYZ5nAdF7sLnjBmB7UzjQUm8iqEjBfx0fYOSK6HMxDPTfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKxUUJrUZ0sJRe8Kv4cdaOtllSXMB8GA1UdIwQY MBaAFK8C+1a0WceiGnm2i04Rirh2/JalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEt MGMxOGQ4NTk3MzI4LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEtMGMxOGQ4NTk3MzI4 LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR/+mTSD X23vTepHNK9KVOThq5LJV/U/I8DUzdofPTEG9oeFsbAFE9qfR+MgwwoUm/KTj3PS YDLoaHaknkFTkj6pwueLBshBhtArVmOA1h0vEGpudk8qYDvkGugFOzn0K+aslXT/ JX+3QbT4nXBx/riMoHSNDxM6vlRlxS5ZSxGq+3At6wf87muTwCN7GSw9TehSUfUh k3uohZ2zsxgCoYzXRTbOGoxIuF3qbq73CE80qbVV6H1y0aJUvD9vIRBDzlPiNvsV WF8jxzWZ+YB3xdMw6CwkPBlivfoE27620gSS0TvX8xM9mXlnpVMTKhaYjXj8ui+F nqSRbR9c0ReV9w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:09 2025 by rpki-client