This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json) Hash identifier: PU20Ht9mAU1xazKYWVEMnU4BN1ntQDXMtBN6oTanPzw= Subject key identifier: 0C:70:16:2A:8E:6C:AE:86:25:6B:F2:C5:46:07:30:5F:82:91:EA:EC Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Certificate serial: 019AFB437A0E7537AFFAE5C72DAC9203EA94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft Manifest number: 176B Signing time: Mon 08 Dec 2025 00:01:34 +0000 Manifest this update: Mon 08 Dec 2025 00:01:34 +0000 Manifest next update: Tue 09 Dec 2025 00:01:34 +0000 Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: VlVsS2wqZh2/whv+U4H1fqNlqpVUfDOsvaulD5pWB5o=) 2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:7a:0e:75:37:af:fa:e5:c7:2d:ac:92:03:ea:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Validity Not Before: Dec 8 00:01:34 2025 GMT Not After : Dec 9 00:01:34 2025 GMT Subject: CN=0c70162a8e6cae86256bf2c54607305f8291eaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6f:d0:5e:40:28:88:1f:07:39:e3:67:d7:63: 2b:96:77:5a:23:6a:b3:84:32:e4:51:7a:d0:72:d9: bb:17:1c:0b:9f:3e:93:23:09:d8:a8:78:1f:07:01: 6e:35:24:b9:38:8a:85:ea:38:61:86:9b:ef:a4:a9: 3b:09:6f:3e:4c:ff:8f:09:71:f6:90:a2:e0:23:03: a2:ef:0b:01:45:57:90:92:63:d1:72:24:3b:80:b5: 5b:6b:28:5d:ef:89:cf:dc:35:10:c9:aa:23:cd:3f: 21:fa:14:2c:07:a2:ce:3d:b2:82:4f:3d:b7:84:ce: 88:9a:ed:a3:48:38:06:73:37:82:2b:0b:22:49:a5: b5:be:6c:fd:19:d1:94:e1:f5:93:ae:d6:fc:b5:90: 40:3c:b9:98:ba:9e:9c:4e:1e:69:70:d9:03:eb:8b: 34:8b:71:f0:32:e5:83:e6:d6:64:3d:d3:b1:9c:4a: f8:a3:b3:87:20:b0:da:78:9f:e1:45:e3:52:0c:8f: 5b:bd:e5:c5:ad:eb:2a:39:8a:65:a5:51:56:bd:5c: 7f:6f:05:a8:59:9f:d2:ed:d2:df:9b:82:bf:8a:2e: 42:61:1d:db:6d:93:f9:e3:af:7f:e6:8a:f4:0c:fe: 03:8e:ad:77:ab:99:42:30:e9:64:10:c5:e9:ae:38: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:16:2A:8E:6C:AE:86:25:6B:F2:C5:46:07:30:5F:82:91:EA:EC X509v3 Authority Key Identifier: keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:97:8a:f8:ac:8e:1a:a8:fb:31:b4:36:bd:98:a3:61:a2:dd: 32:1c:5e:95:d2:74:e7:16:3d:95:47:e4:12:89:b4:d9:53:ef: 0a:7b:fd:56:bc:ef:d1:58:f3:ed:0c:ec:15:c1:e3:96:99:37: c0:68:4a:ab:b3:b4:04:1f:d5:e6:65:91:4a:64:82:05:58:d9: b5:5e:e0:8e:6e:84:5a:08:ee:29:a4:b7:53:6e:b6:25:c4:26: 3c:aa:9e:31:03:b4:5b:a7:05:cc:7d:53:9e:05:83:97:8f:11: 90:a2:11:52:e2:5d:f2:fc:74:81:01:43:df:9f:4e:ad:84:86: e7:c4:a7:11:e3:64:cb:a3:b4:71:39:5c:5a:24:c6:56:15:29: 93:e0:f3:31:d4:f1:f3:a7:9e:f2:ee:0f:56:e7:98:7a:5a:c2: 46:47:b0:7c:2d:ac:63:b7:fb:cc:91:23:2f:ba:43:7a:06:8e: 8b:0f:d0:41:f7:06:75:81:12:24:0e:d5:65:9a:aa:a3:76:29: 1b:85:f4:1f:aa:fe:75:40:fd:da:12:c5:a9:4d:2a:57:26:c8: c8:75:3c:6f:ea:06:c1:7e:cd:26:2d:2c:14:11:24:1c:15:38: 4b:50:af:78:39:61:70:b4:19:c6:6a:14:41:b4:b1:86:f6:21: 55:7a:5f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7Q3oOdTev+uXHLaySA+qUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw YTViNmMwHhcNMjUxMjA4MDAwMTM0WhcNMjUxMjA5MDAwMTM0WjAzMTEwLwYDVQQD EygwYzcwMTYyYThlNmNhZTg2MjU2YmYyYzU0NjA3MzA1ZjgyOTFlYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52/QXkAoiB8HOeNn12MrlndaI2qz hDLkUXrQctm7FxwLnz6TIwnYqHgfBwFuNSS5OIqF6jhhhpvvpKk7CW8+TP+PCXH2 kKLgIwOi7wsBRVeQkmPRciQ7gLVbayhd74nP3DUQyaojzT8h+hQsB6LOPbKCTz23 hM6Imu2jSDgGczeCKwsiSaW1vmz9GdGU4fWTrtb8tZBAPLmYup6cTh5pcNkD64s0 i3HwMuWD5tZkPdOxnEr4o7OHILDaeJ/hReNSDI9bveXFresqOYplpVFWvVx/bwWo WZ/S7dLfm4K/ii5CYR3bbZP5469/5or0DP4Djq13q5lCMOlkEMXprjiV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxwFiqObK6GJWvyxUYHMF+CkersMB8GA1UdIwQY MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt MTFkZmZlMTA4MTQ3LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3 LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5eK+KyO Gqj7MbQ2vZijYaLdMhxeldJ05xY9lUfkEom02VPvCnv9Vrzv0Vjz7QzsFcHjlpk3 wGhKq7O0BB/V5mWRSmSCBVjZtV7gjm6EWgjuKaS3U262JcQmPKqeMQO0W6cFzH1T ngWDl48RkKIRUuJd8vx0gQFD359OrYSG58SnEeNky6O0cTlcWiTGVhUpk+DzMdTx 86ee8u4PVueYelrCRkewfC2sY7f7zJEjL7pDegaOiw/QQfcGdYESJA7VZZqqo3Yp G4X0H6r+dUD92hLFqU0qVybIyHU8b+oGwX7NJi0sFBEkHBU4S1CveDlhcLQZxmoU QbSxhvYhVXpf8A== -----END CERTIFICATE-----Generated at Mon Dec 8 01:58:10 2025 by rpki-client