This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json) Hash identifier: OHRmVOnrIHeT14sfxR4L4Za/EtHyRdDzg1FH1oCt8Tw= Subject key identifier: A1:CB:13:B6:78:A0:2E:B8:42:D4:16:1C:A0:90:E0:F4:48:E2:5A:BA Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7 Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7 Certificate serial: 019AF12E7314D6A39D133902000C1570AF13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft Manifest number: 11D7 Signing time: Sat 06 Dec 2025 01:02:24 +0000 Manifest this update: Sat 06 Dec 2025 01:02:24 +0000 Manifest next update: Sun 07 Dec 2025 01:02:24 +0000 Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: jKXepTnAK2TOJ/wcK5lnk8cyD1bJ7AVEtttUJ2K2WQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:73:14:d6:a3:9d:13:39:02:00:0c:15:70:af:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7 Validity Not Before: Dec 6 01:02:24 2025 GMT Not After : Dec 7 01:02:24 2025 GMT Subject: CN=a1cb13b678a02eb842d4161ca090e0f448e25aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9b:6a:00:42:43:50:66:07:9b:b1:04:32:89: 19:c1:97:a2:f3:e1:26:f7:c8:d7:52:9a:b6:42:09: f4:68:24:ac:67:02:d8:ac:25:67:fc:e1:66:76:e0: 27:9c:e9:07:33:0e:c8:3e:5d:16:a5:0a:83:c9:f1: 3a:ad:2a:d0:17:b1:d6:6f:92:c7:34:ab:94:fb:e8: 61:d8:bc:c0:86:59:76:f9:94:1f:73:0d:20:0d:75: 7f:60:6f:a8:e2:59:93:99:11:13:61:95:bb:6b:55: a8:51:d1:fb:71:56:63:da:73:29:13:ab:af:d1:ae: a2:9a:dc:23:3d:47:43:28:62:ca:ab:59:14:73:f8: fa:c2:41:6e:18:3a:aa:5c:96:bb:b9:5b:7f:29:d7: 71:f8:83:ed:dc:a6:a2:10:fa:6a:ed:3e:98:ea:d2: 15:85:b8:2c:32:c2:56:ee:5f:8d:45:18:b0:32:cf: 3e:d9:d2:60:cb:79:5b:c8:97:bd:cf:d6:f9:9d:06: 5c:c2:1a:9d:ed:b2:6e:97:2c:f8:a0:3b:2b:36:3d: 0f:a7:d0:19:fb:46:37:9c:d2:87:81:d4:d3:35:61: e9:4d:f6:aa:68:9e:74:af:05:ff:7d:74:71:b6:c2: 5a:90:11:7f:a0:00:13:87:3f:41:b5:c4:62:1a:3f: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CB:13:B6:78:A0:2E:B8:42:D4:16:1C:A0:90:E0:F4:48:E2:5A:BA X509v3 Authority Key Identifier: keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f5:68:7d:de:4c:ba:cb:51:32:af:5e:3a:78:35:70:f3:25: 9e:1d:e9:5d:8c:c5:c6:06:30:eb:d3:e0:3c:3c:b7:a6:23:36: 6e:0d:96:e5:96:7e:ec:e9:f1:1a:fe:83:71:a1:df:a7:45:48: 14:f2:64:1b:a0:94:c1:5c:b6:b1:a1:b8:c3:06:45:5f:b2:a2: 73:50:7f:27:81:f9:8c:93:e2:3c:07:e5:76:2b:48:69:72:bd: 42:bc:a7:f9:88:f0:f0:c7:04:57:18:bc:c2:04:a4:58:44:dd: 5f:09:a5:89:3b:54:30:96:48:80:e3:56:b4:d7:2b:e2:c3:18: 61:58:e4:91:e9:84:d9:60:f6:ad:04:0e:7f:84:73:ab:63:14: 0d:39:5f:74:86:c9:6f:24:5e:a2:d3:50:ec:5c:76:4a:0b:0e: 14:fe:16:bf:1b:08:71:5b:a3:e7:ad:45:a8:90:c7:59:6e:ec: 88:99:46:85:71:df:79:56:9a:ad:3e:00:63:1e:3f:d3:0d:8e: 34:fa:bb:ce:18:93:a2:9e:bd:a6:3a:2e:1a:26:77:2f:f2:b0: 9b:4a:28:ee:ce:84:f9:f3:f2:7c:e8:90:fe:26:73:b0:a4:13: 8e:41:74:78:ba:68:6e:26:f7:80:77:6b:9a:ff:f7:0c:72:92: be:06:5a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnMU1qOdEzkCAAwVcK8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NmEwNmU0NTQ3ZGEwMWE1YzhiNWVmYjcxMDQwZTVlZGQx MDllZTcwHhcNMjUxMjA2MDEwMjI0WhcNMjUxMjA3MDEwMjI0WjAzMTEwLwYDVQQD EyhhMWNiMTNiNjc4YTAyZWI4NDJkNDE2MWNhMDkwZTBmNDQ4ZTI1YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ptqAEJDUGYHm7EEMokZwZei8+Em 98jXUpq2Qgn0aCSsZwLYrCVn/OFmduAnnOkHMw7IPl0WpQqDyfE6rSrQF7HWb5LH NKuU++hh2LzAhll2+ZQfcw0gDXV/YG+o4lmTmRETYZW7a1WoUdH7cVZj2nMpE6uv 0a6imtwjPUdDKGLKq1kUc/j6wkFuGDqqXJa7uVt/Kddx+IPt3KaiEPpq7T6Y6tIV hbgsMsJW7l+NRRiwMs8+2dJgy3lbyJe9z9b5nQZcwhqd7bJulyz4oDsrNj0Pp9AZ +0Y3nNKHgdTTNWHpTfaqaJ50rwX/fXRxtsJakBF/oAAThz9BtcRiGj+VGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHLE7Z4oC64QtQWHKCQ4PRI4lq6MB8GA1UdIwQY MBaAFGlqBuRUfaAaXIte+3EEDl7dEJ7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTIt NjJkZjkzYmM2NGRjLzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTItNjJkZjkzYmM2NGRj LzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPVofd5M ustRMq9eOng1cPMlnh3pXYzFxgYw69PgPDy3piM2bg2W5ZZ+7OnxGv6DcaHfp0VI FPJkG6CUwVy2saG4wwZFX7Kic1B/J4H5jJPiPAflditIaXK9Qryn+Yjw8McEVxi8 wgSkWETdXwmliTtUMJZIgONWtNcr4sMYYVjkkemE2WD2rQQOf4Rzq2MUDTlfdIbJ byReotNQ7Fx2SgsOFP4WvxsIcVuj561FqJDHWW7siJlGhXHfeVaarT4AYx4/0w2O NPq7zhiTop69pjouGiZ3L/Kwm0oo7s6E+fPyfOiQ/iZzsKQTjkF0eLpobib3gHdr mv/3DHKSvgZa1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:29 2025 by rpki-client