This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json) Hash identifier: ssBHRz1gX4wAWx0tgLan8G0PjmV6nbLb3PXy379bg3U= Subject key identifier: 3B:60:A9:C3:0A:80:9D:B3:44:97:8B:22:93:76:74:D3:1E:BD:69:31 Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738 Certificate serial: 019AF20971E98E312AD35D1FDE5785D0F100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft Manifest number: 0A7F Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: 2bLixyQPF5hyzEmAZtw/eL29XiyKoYLgHLPDHoNzYRs=) 2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:71:e9:8e:31:2a:d3:5d:1f:de:57:85:d0:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=3b60a9c30a809db344978b22937674d31ebd6931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:46:b7:57:da:bc:e3:48:26:22:04:8b:b1: 16:8f:ac:53:eb:a6:24:65:72:e5:3f:9d:1e:22:6d: 39:54:32:ce:84:e2:66:93:e5:9f:52:d9:9d:bc:81: 1c:11:bf:3f:72:af:c9:ef:10:1b:cc:f9:62:cc:f1: c6:46:8f:bb:3d:12:74:3b:f0:55:10:04:4b:f1:29: 58:8e:85:2c:1a:c3:18:e1:f5:5f:c6:40:3c:4c:a7: 2d:8b:35:60:e2:d9:54:df:f9:38:42:bc:53:57:40: d6:da:9c:79:f4:61:d3:e3:16:3d:b6:85:9f:6f:dc: fd:2f:6e:b1:89:4e:36:94:e6:e7:df:ff:06:c4:e3: 9d:19:aa:f2:61:6d:4a:06:03:ef:5b:4d:d2:11:c7: 14:34:f2:1b:a4:54:92:b1:69:57:8e:34:9e:82:29: c4:d0:f1:68:3a:b9:08:03:53:4b:7a:5a:22:21:33: 4e:36:70:5c:5a:6a:55:83:a5:c7:40:2d:e8:5d:2a: 7c:1c:1f:c1:fd:47:24:0e:30:9c:5d:84:3f:0b:25: 9b:c9:3e:9f:09:c6:04:09:e7:a4:2e:c7:92:a3:cc: c7:43:bf:1a:39:91:74:16:18:91:3b:47:d8:69:40: da:ec:49:42:63:59:2e:bd:02:02:4b:b6:03:fd:e1: d4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:60:A9:C3:0A:80:9D:B3:44:97:8B:22:93:76:74:D3:1E:BD:69:31 X509v3 Authority Key Identifier: keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c6:79:68:9d:5f:cd:e1:d5:24:0f:26:b0:52:d9:f0:b6:4e: 35:11:ef:5b:06:60:3d:dc:57:53:00:01:96:29:f5:de:46:55: 9d:93:00:a4:cc:49:eb:54:0a:e5:d5:14:b5:a8:92:f7:d6:ad: d6:a2:eb:af:39:7b:e4:f6:8c:a7:2a:0d:c6:94:79:71:eb:e7: da:59:bd:8c:be:d1:60:4e:bf:2a:fc:c6:81:46:a1:43:a3:49: b4:62:cf:ff:4a:79:df:87:94:bb:54:dd:94:26:72:62:c3:81: 1f:13:ee:41:8a:7d:f8:7c:04:d0:25:b3:ee:60:84:06:1b:88: 53:d3:69:d7:55:3d:89:38:73:28:e0:fb:b5:0f:39:4a:c6:c3: cd:a8:25:02:9c:9a:9a:3d:69:02:2b:8c:35:33:67:9c:a0:b4: db:33:c1:3e:3e:c0:b4:0e:24:ec:9d:28:03:ab:a6:3a:c7:9a: 68:d4:19:7a:c2:7c:d0:1b:5d:64:77:61:cf:52:73:2d:44:2d: a7:17:cd:18:78:44:28:85:1d:c6:2e:8e:17:cf:d2:9c:a0:68: 15:52:fa:69:e7:d7:eb:8b:89:9c:e4:02:2e:95:96:f0:75:93: 00:3e:db:93:ad:da:56:0a:d0:de:99:9f:77:35:eb:e6:7a:75: 4c:8a:09:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXHpjjEq010f3leF0PEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx YWU3MzgwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EygzYjYwYTljMzBhODA5ZGIzNDQ5NzhiMjI5Mzc2NzRkMzFlYmQ2OTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAtGt1favONIJiIEi7EWj6xT66Yk ZXLlP50eIm05VDLOhOJmk+WfUtmdvIEcEb8/cq/J7xAbzPlizPHGRo+7PRJ0O/BV EARL8SlYjoUsGsMY4fVfxkA8TKctizVg4tlU3/k4QrxTV0DW2px59GHT4xY9toWf b9z9L26xiU42lObn3/8GxOOdGaryYW1KBgPvW03SEccUNPIbpFSSsWlXjjSeginE 0PFoOrkIA1NLeloiITNONnBcWmpVg6XHQC3oXSp8HB/B/UckDjCcXYQ/CyWbyT6f CcYECeekLseSo8zHQ78aOZF0FhiRO0fYaUDa7ElCY1kuvQICS7YD/eHUzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtgqcMKgJ2zRJeLIpN2dNMevWkxMB8GA1UdIwQY MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt MTU3NmM2ZjU4OWM5LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5 LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8Z5aJ1f zeHVJA8msFLZ8LZONRHvWwZgPdxXUwABlin13kZVnZMApMxJ61QK5dUUtaiS99at 1qLrrzl75PaMpyoNxpR5cevn2lm9jL7RYE6/KvzGgUahQ6NJtGLP/0p534eUu1Td lCZyYsOBHxPuQYp9+HwE0CWz7mCEBhuIU9Np11U9iThzKOD7tQ85SsbDzaglApya mj1pAiuMNTNnnKC02zPBPj7AtA4k7J0oA6umOseaaNQZesJ80BtdZHdhz1JzLUQt pxfNGHhEKIUdxi6OF8/SnKBoFVL6aefX64uJnOQCLpWW8HWTAD7bk63aVgrQ3pmf dzXr5np1TIoJLg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:16 2025 by rpki-client