This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json) Hash identifier: DNtk5016DSLEp/ODnIymttyRt7jrp3WYpS0vfc9Ge1s= Subject key identifier: B9:73:CD:95:AF:CA:5E:C3:85:62:45:56:73:84:C9:8F:98:D5:A8:D2 Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Certificate serial: 019AF50A3B96651F6F93D7FCD6232F8C5AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft Manifest number: 070E Signing time: Sat 06 Dec 2025 19:01:19 +0000 Manifest this update: Sat 06 Dec 2025 19:01:19 +0000 Manifest next update: Sun 07 Dec 2025 19:01:19 +0000 Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: Z2oAhrID8TiOJPLe2mxr6RUKICZTAZYy3wV2eZQeRQE=) 2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3b:96:65:1f:6f:93:d7:fc:d6:23:2f:8c:5a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Validity Not Before: Dec 6 19:01:19 2025 GMT Not After : Dec 7 19:01:19 2025 GMT Subject: CN=b973cd95afca5ec3856245567384c98f98d5a8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:46:d7:82:99:d1:99:45:2b:3c:08:03:91: 44:5e:16:94:bd:68:66:e3:2b:2a:b1:f2:ef:7d:7b: 80:1c:ed:04:96:5b:6d:10:09:b9:1d:64:81:bc:92: cc:a0:86:a5:ae:15:61:18:be:54:f4:f1:2b:c9:a7: c3:32:dc:07:08:01:94:54:8d:80:16:e4:f3:1b:a6: f5:53:6e:7a:22:5c:df:53:9c:3f:a7:8d:18:dd:86: 75:74:22:c2:84:c0:d8:64:15:42:42:d6:f3:af:46: 6c:79:26:68:22:25:80:b4:84:cf:51:95:5a:62:71: d4:7f:f9:b5:07:cc:48:f5:d3:69:54:08:15:50:27: 91:15:1a:85:2c:d4:66:95:27:97:38:90:9c:2f:1f: 51:46:53:a0:97:64:59:fb:2d:26:b3:0b:c1:d3:53: 46:43:47:16:a3:63:fc:86:9a:72:17:4b:2c:bf:87: 24:82:1d:f5:d8:d7:3d:5c:ae:2a:e3:c4:76:e4:68: a3:25:c6:5d:6a:7d:a8:c1:6a:84:1f:cc:4f:29:45: ad:cb:e3:97:a9:8a:f0:85:ea:c2:41:5d:f3:78:e9: 70:af:0f:62:57:87:b2:b1:50:9c:7f:3a:d3:64:68: 32:f5:31:01:0c:fe:d0:b7:1d:71:94:91:82:ec:b5: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:CD:95:AF:CA:5E:C3:85:62:45:56:73:84:C9:8F:98:D5:A8:D2 X509v3 Authority Key Identifier: keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8f:a2:0a:19:e0:b8:13:42:f9:23:e5:fd:ad:09:53:fa:b5: b8:b1:2a:6d:03:7e:3e:8b:73:17:13:ee:ed:95:d6:c7:e6:2b: e8:a2:d4:c9:e1:20:62:fa:d1:49:3d:dd:88:f2:0b:de:34:4f: 00:f4:72:75:0a:e3:b4:da:0d:39:d2:92:0d:da:53:e8:49:eb: 7c:fe:12:c0:62:bd:b9:77:07:0a:d6:d9:97:21:be:58:cc:f9: a3:38:5c:cf:63:fd:20:bd:cb:06:8d:b8:8b:b6:43:61:2c:c4: e5:49:e5:64:34:53:f2:15:74:88:13:81:ac:de:e9:b8:ff:a4: 91:7f:cf:12:99:5c:a3:1b:01:51:39:33:4b:c6:91:23:30:53: 80:34:39:f3:26:b8:bf:cb:31:ce:34:c6:23:c8:c4:7a:82:14: f5:ce:3c:1e:b7:c3:7e:6d:e1:85:88:8e:cc:74:df:53:7a:32: 46:e3:9b:9b:3f:18:26:ac:d9:9d:40:05:6d:90:76:c5:3b:ad: 97:e1:38:cc:ba:36:6d:5a:25:97:41:21:b1:07:f3:92:a6:b4: ee:e3:c1:fc:f5:64:dd:17:48:a3:4b:dc:7a:3c:cf:b8:f2:6b: bc:96:f0:97:55:05:1e:71:ac:58:f5:51:90:72:b2:e6:ac:18: 1b:2e:ae:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjuWZR9vk9f81iMvjFr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmMzM2Q1YmE1ODUyMzRjY2NlZjhhNTdhZDg2Y2ExZWFm YzRhYTIwHhcNMjUxMjA2MTkwMTE5WhcNMjUxMjA3MTkwMTE5WjAzMTEwLwYDVQQD EyhiOTczY2Q5NWFmY2E1ZWMzODU2MjQ1NTY3Mzg0Yzk4Zjk4ZDVhOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkdG14KZ0ZlFKzwIA5FEXhaUvWhm 4ysqsfLvfXuAHO0EllttEAm5HWSBvJLMoIalrhVhGL5U9PEryafDMtwHCAGUVI2A FuTzG6b1U256IlzfU5w/p40Y3YZ1dCLChMDYZBVCQtbzr0ZseSZoIiWAtITPUZVa YnHUf/m1B8xI9dNpVAgVUCeRFRqFLNRmlSeXOJCcLx9RRlOgl2RZ+y0mswvB01NG Q0cWo2P8hppyF0ssv4ckgh312Nc9XK4q48R25GijJcZdan2owWqEH8xPKUWty+OX qYrwherCQV3zeOlwrw9iV4eysVCcfzrTZGgy9TEBDP7Qtx1xlJGC7LVmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlzzZWvyl7DhWJFVnOEyY+Y1ajSMB8GA1UdIwQY MBaAFK68M9W6WFI0zM74pXrYbKHq/EqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmIt OTZhNWI1ZGFkNjcxLzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmItOTZhNWI1ZGFkNjcx LzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApI+iChng uBNC+SPl/a0JU/q1uLEqbQN+PotzFxPu7ZXWx+Yr6KLUyeEgYvrRST3diPIL3jRP APRydQrjtNoNOdKSDdpT6EnrfP4SwGK9uXcHCtbZlyG+WMz5ozhcz2P9IL3LBo24 i7ZDYSzE5UnlZDRT8hV0iBOBrN7puP+kkX/PEplcoxsBUTkzS8aRIzBTgDQ58ya4 v8sxzjTGI8jEeoIU9c48HrfDfm3hhYiOzHTfU3oyRuObmz8YJqzZnUAFbZB2xTut l+E4zLo2bVoll0EhsQfzkqa07uPB/PVk3RdIo0vcejzPuPJrvJbwl1UFHnGsWPVR kHKy5qwYGy6u+w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:53 2025 by rpki-client