This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json) Hash identifier: 3ON0Ahh/v9YCHGmPAnEw/IxUQqVR9OKclk0/T0mhl64= Subject key identifier: 1C:95:93:3A:95:F6:E4:BB:A3:47:A5:96:2F:A3:2F:5A:D4:4D:E4:E3 Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Certificate serial: 019AF2E43B93C0B0EC2A11B838153D15DEAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 09:00:34 +0000 Manifest this update: Sat 06 Dec 2025 09:00:34 +0000 Manifest next update: Sun 07 Dec 2025 09:00:34 +0000 Files and hashes: 1: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: QLfx0f/M+wRGrIiT+2aFEGs+9NmtnV9k6GHfoReateM=) 2: wzgPBQF88-_CiYEBssnryfMBX2w.roa (hash: YBjh+lwXHnu03g8De0628UnV8ZQfh0OnAO4LQ244jes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3b:93:c0:b0:ec:2a:11:b8:38:15:3d:15:de:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Validity Not Before: Dec 6 09:00:34 2025 GMT Not After : Dec 7 09:00:34 2025 GMT Subject: CN=1c95933a95f6e4bba347a5962fa32f5ad44de4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:a9:c7:a5:dc:f7:55:26:41:41:d3:94:73: 0d:eb:68:51:e9:52:94:36:5d:de:04:f8:82:34:6c: 80:9f:21:ec:71:ad:63:a7:a8:e3:f9:94:77:fe:5f: d6:fe:89:59:c9:ce:dd:d8:63:de:fa:bc:70:8b:0e: 9f:f6:3b:f4:a2:ef:37:a0:ad:c1:c2:9c:38:90:3a: da:2c:0f:87:40:ca:8f:5b:7f:cf:db:34:4e:d1:6a: 3c:0d:4a:19:4a:d0:ab:08:7f:d7:70:5b:67:5c:5b: 15:da:b3:93:2a:36:8e:18:1a:f0:4d:fc:10:e3:1b: 8f:15:bf:e2:d2:f2:cc:48:a5:52:1f:d6:4a:14:65: 85:b0:a4:62:40:ab:03:4a:16:e2:92:95:76:13:34: 4b:3e:74:78:5b:2b:5e:13:e6:22:25:ab:9e:a1:72: e1:6a:8b:3a:5f:24:80:f1:31:a6:22:50:53:a7:ff: 34:11:88:c7:47:e6:02:19:25:96:e5:ce:4d:3c:07: 94:7f:9a:30:b3:58:e1:8d:19:fa:87:cb:67:ce:5d: 5e:08:02:29:2a:54:19:93:b0:5e:86:0f:37:d3:2a: 4d:02:94:d6:89:7d:8b:e4:a4:e3:51:09:26:8d:a9: d2:67:dc:e5:e6:a0:f1:6e:2d:3a:a5:86:3e:7e:fe: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:95:93:3A:95:F6:E4:BB:A3:47:A5:96:2F:A3:2F:5A:D4:4D:E4:E3 X509v3 Authority Key Identifier: keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b7:a0:29:02:e7:cf:07:24:9b:53:6c:60:cc:df:d4:7c:f4: 98:28:98:76:23:3e:ed:4f:15:de:4c:4b:a9:58:7c:48:e2:c4: 64:85:4e:71:3b:37:8b:df:3a:10:ee:ac:bd:e7:ff:a8:80:40: 66:a7:45:cb:8f:a4:cb:42:7a:51:7c:5e:41:72:83:83:e8:2c: e1:4f:e8:62:fb:04:eb:ea:ec:ff:38:ec:bb:36:39:ce:76:cb: e4:98:6d:34:bf:bb:89:0e:67:6c:99:e6:db:9f:3f:bd:7d:2c: 8a:ca:93:2f:d4:ea:0b:f6:3c:63:9a:1f:1c:d7:65:76:2f:1b: 80:51:3f:de:1c:e0:ef:75:19:ea:56:97:45:4c:a3:dd:a4:ed: f5:a6:af:e4:7c:51:8b:80:fa:65:f8:81:c3:f7:4c:ba:d3:fb: 51:e5:bc:4b:56:79:62:40:36:5c:ae:2d:91:e4:86:4a:18:a0: 25:1e:62:67:c3:d4:4e:e8:d3:fd:4b:16:b2:35:8b:84:88:87: f8:48:03:ed:32:5c:0b:28:c9:31:c4:dc:8b:3a:52:27:8b:33: de:d9:df:7f:d1:8f:3f:51:5e:c0:9a:cc:16:0a:f4:02:da:cd: 3e:5c:bd:f3:59:64:68:dc:99:63:c5:33:b2:04:16:8c:ec:14: b0:5b:f8:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DuTwLDsKhG4OBU9Fd6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1 ZDFmODkwHhcNMjUxMjA2MDkwMDM0WhcNMjUxMjA3MDkwMDM0WjAzMTEwLwYDVQQD EygxYzk1OTMzYTk1ZjZlNGJiYTM0N2E1OTYyZmEzMmY1YWQ0NGRlNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2qpx6Xc91UmQUHTlHMN62hR6VKU Nl3eBPiCNGyAnyHsca1jp6jj+ZR3/l/W/olZyc7d2GPe+rxwiw6f9jv0ou83oK3B wpw4kDraLA+HQMqPW3/P2zRO0Wo8DUoZStCrCH/XcFtnXFsV2rOTKjaOGBrwTfwQ 4xuPFb/i0vLMSKVSH9ZKFGWFsKRiQKsDShbikpV2EzRLPnR4WyteE+YiJaueoXLh aos6XySA8TGmIlBTp/80EYjHR+YCGSWW5c5NPAeUf5ows1jhjRn6h8tnzl1eCAIp KlQZk7Behg830ypNApTWiX2L5KTjUQkmjanSZ9zl5qDxbi06pYY+fv7OwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByVkzqV9uS7o0elli+jL1rUTeTjMB8GA1UdIwQY MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt MWU2OTVlZjQ5YzEwLzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLegKQLn zwckm1NsYMzf1Hz0mCiYdiM+7U8V3kxLqVh8SOLEZIVOcTs3i986EO6svef/qIBA ZqdFy4+ky0J6UXxeQXKDg+gs4U/oYvsE6+rs/zjsuzY5znbL5JhtNL+7iQ5nbJnm 258/vX0sisqTL9TqC/Y8Y5ofHNdldi8bgFE/3hzg73UZ6laXRUyj3aTt9aav5HxR i4D6ZfiBw/dMutP7UeW8S1Z5YkA2XK4tkeSGShigJR5iZ8PUTujT/UsWsjWLhIiH +EgD7TJcCyjJMcTcizpSJ4sz3tnff9GPP1FewJrMFgr0AtrNPly981lkaNyZY8Uz sgQWjOwUsFv44w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:34 2025 by rpki-client