This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json) Hash identifier: 3/GEs5SYTZ7CePQOoRMTM2hLYMxRqscdKbs9KkHtbps= Subject key identifier: 18:C8:F4:14:89:F4:41:F1:A2:5F:A1:80:C0:B8:C8:4F:4F:4B:37:C0 Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Certificate serial: 019AF0F5F2B84BCA7D3302CB14948CB039D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft Manifest number: 0629 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=) 2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: TaqCMv0DVEurJVQDoJaC0gM2eE98NYjdD5/jenoUts8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f2:b8:4b:ca:7d:33:02:cb:14:94:8c:b0:39:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=18c8f41489f441f1a25fa180c0b8c84f4f4b37c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:1e:6d:da:94:32:59:fc:3f:7b:8b:8d:ff: a0:47:4d:d9:75:68:a6:46:48:60:6d:57:46:0e:85: 56:22:c2:d0:43:21:2b:98:40:34:61:33:4d:f7:85: e4:15:72:ba:4f:a3:7f:7f:5e:30:62:b6:e8:ff:83: fc:81:83:70:c8:e8:83:b5:da:5e:90:09:82:70:ae: 3a:5f:03:ae:28:56:46:d8:3d:e3:6d:63:a2:a4:83: 27:19:f5:5a:67:ea:19:dc:a8:de:dd:e9:14:de:a5: 8e:a9:c5:9d:05:1b:6a:86:2d:6f:54:0a:04:96:4f: cb:64:f4:90:58:8f:ea:59:62:70:d6:60:05:a2:7e: 6e:c2:92:bc:b5:91:4f:dc:96:8f:9c:2b:a8:09:fd: 77:02:b7:b2:b3:a9:5b:79:a4:35:01:c5:ae:a9:3b: 36:0b:b9:f8:be:2e:22:d9:b7:7e:b8:55:6f:d2:f7: 95:76:85:f0:0b:86:68:df:4e:7a:f7:98:d9:ce:85: dd:ad:50:13:4a:89:06:c2:0d:db:d6:4c:dd:99:f1: 02:9b:2e:f2:e1:18:68:46:9c:37:2d:cd:d2:3a:c9: 03:37:72:ca:e5:3d:8b:35:56:d6:51:93:13:c7:08: 1d:e0:de:57:b8:9c:e7:2e:74:61:2a:d9:6a:31:13: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C8:F4:14:89:F4:41:F1:A2:5F:A1:80:C0:B8:C8:4F:4F:4B:37:C0 X509v3 Authority Key Identifier: keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:01:be:6b:f0:b7:04:6c:ab:b6:63:36:23:57:17:d1:39:a7: 6c:60:40:55:b7:55:f3:84:ea:1f:de:1a:46:41:3c:a7:77:54: 88:22:c5:bb:10:fe:15:ac:f4:0f:01:ad:02:86:47:3f:30:aa: 56:92:60:51:9e:3b:55:cb:69:3d:9f:71:fa:06:0c:4b:7e:3c: 89:b8:ac:d2:68:6d:67:7d:80:ee:2e:51:ce:8a:02:f4:ef:27: 23:89:32:04:7a:ff:7e:93:b6:da:8f:23:91:90:a3:86:88:dd: 5e:4e:82:be:da:ba:23:ff:2f:ae:b2:54:04:39:cb:14:e6:4c: c9:47:1a:10:8e:ce:f8:f5:0c:fe:31:ed:a9:c7:3d:39:d7:96: 5b:c9:17:7f:4b:88:f4:08:1f:25:b9:1b:ba:67:41:e2:27:d0: f6:c8:5f:95:ae:93:ce:4d:4c:ca:9a:d3:71:68:9c:76:e5:4d: 3b:68:6f:48:75:dd:f3:56:16:90:d9:2c:80:1a:48:91:b3:0a: cf:d9:93:5e:1d:6e:19:da:f4:56:94:5d:9e:03:02:91:1a:a0: a1:fd:81:d9:56:7b:38:a9:75:41:4b:6c:2d:13:9b:0b:9c:b1: 19:01:46:95:80:66:d8:ae:8c:94:23:41:87:ab:37:2b:26:b6: b7:14:07:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fK4S8p9MwLLFJSMsDnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDVkNDI5MWNhZTgxODVjNmMzNDJlMjVkZWU5YjdlOTIw Zjc2ZGQwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EygxOGM4ZjQxNDg5ZjQ0MWYxYTI1ZmExODBjMGI4Yzg0ZjRmNGIzN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpIebdqUMln8P3uLjf+gR03ZdWim RkhgbVdGDoVWIsLQQyErmEA0YTNN94XkFXK6T6N/f14wYrbo/4P8gYNwyOiDtdpe kAmCcK46XwOuKFZG2D3jbWOipIMnGfVaZ+oZ3Kje3ekU3qWOqcWdBRtqhi1vVAoE lk/LZPSQWI/qWWJw1mAFon5uwpK8tZFP3JaPnCuoCf13Areys6lbeaQ1AcWuqTs2 C7n4vi4i2bd+uFVv0veVdoXwC4Zo305695jZzoXdrVATSokGwg3b1kzdmfECmy7y 4RhoRpw3Lc3SOskDN3LK5T2LNVbWUZMTxwgd4N5XuJznLnRhKtlqMROOAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjI9BSJ9EHxol+hgMC4yE9PSzfAMB8GA1UdIwQY MBaAFK8F1CkcroGFxsNC4l3um36SD3bdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAt ZTdmMDVmMDI5YTQ4LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAtZTdmMDVmMDI5YTQ4 LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwG+a/C3 BGyrtmM2I1cX0TmnbGBAVbdV84TqH94aRkE8p3dUiCLFuxD+Faz0DwGtAoZHPzCq VpJgUZ47VctpPZ9x+gYMS348ibis0mhtZ32A7i5RzooC9O8nI4kyBHr/fpO22o8j kZCjhojdXk6Cvtq6I/8vrrJUBDnLFOZMyUcaEI7O+PUM/jHtqcc9OdeWW8kXf0uI 9AgfJbkbumdB4ifQ9shfla6Tzk1MyprTcWicduVNO2hvSHXd81YWkNksgBpIkbMK z9mTXh1uGdr0VpRdngMCkRqgof2B2VZ7OKl1QUtsLRObC5yxGQFGlYBm2K6MlCNB h6s3Kya2txQHpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:39 2025 by rpki-client