This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft File: awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json) Hash identifier: kuLbV4PFSdOCM8ndabwIEkCDaRmQl+oFusspxTUlA+g= Subject key identifier: 67:2C:5D:5B:51:BC:94:83:E2:6C:15:80:57:1C:EC:A6:A5:D9:54:1D Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03 Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03 Certificate serial: 019AF12EAF980319332B1D5EAE9FC2314CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: ZjkgQz4lcFo3T+FFwj4K/ATXvARvCiPplHQTORDYkQk=) 2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:af:98:03:19:33:2b:1d:5e:ae:9f:c2:31:4c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=672c5d5b51bc9483e26c1580571ceca6a5d9541d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:28:30:a7:86:b2:f8:8a:a3:64:29:d0:a8: 97:e5:56:bc:48:36:2d:45:f1:5c:63:3c:d6:b3:0a: 4c:97:a3:70:1d:03:ed:aa:0a:4d:17:50:fb:1c:71: d0:27:0a:b6:b3:67:10:23:92:a9:fb:bc:54:7e:68: 1b:ce:4e:32:ad:ee:04:aa:9d:73:cc:04:15:80:fb: f6:f8:0d:2f:4b:e8:d0:f2:4a:c3:73:d8:90:d8:17: 38:5d:d9:0c:6d:dc:90:9a:11:3a:42:b7:83:a3:40: 68:fe:7f:c5:80:a6:b7:53:be:4e:e7:62:ce:b7:28: d3:ca:7f:81:71:5a:79:5a:4d:dc:7b:2e:e9:08:d2: 95:ea:29:f2:5e:3e:ad:b3:36:8c:46:eb:88:88:9f: 61:b5:42:33:0b:4d:51:8b:3a:33:4f:1b:6c:ba:50: 67:39:e3:45:4d:6b:00:13:f4:7a:96:10:2e:6e:ff: 5d:5f:d4:0f:86:de:ae:70:d5:78:29:cb:64:c6:9c: fb:6d:1d:70:0d:d7:3b:c4:86:f3:ba:eb:ae:e4:d0: 73:bb:4f:be:95:97:7e:ed:5e:45:6f:dd:a1:4c:d0: 82:2f:24:eb:51:9b:67:e8:44:42:0c:da:d7:87:c9: 2c:87:3a:37:cb:3a:01:f4:ef:b0:25:e2:12:c6:cd: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:5D:5B:51:BC:94:83:E2:6C:15:80:57:1C:EC:A6:A5:D9:54:1D X509v3 Authority Key Identifier: keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:fb:d7:33:34:b6:e0:ff:55:f7:0d:4e:43:20:ae:74:15:c7: 9f:b6:5c:bf:0f:b5:42:fa:be:7f:bf:ad:b8:50:7d:bd:86:2f: 68:d3:ed:eb:39:1f:58:61:9c:dd:b3:e3:4c:64:26:de:a3:63: 49:b5:f2:ee:9c:b5:62:db:89:51:c9:8d:dc:10:28:fd:17:cb: 6b:8c:90:b7:60:14:30:de:3c:21:8f:15:c3:0b:3a:de:84:27: 41:ae:9d:17:d8:30:67:b0:7f:a7:4d:df:ea:7a:e7:89:e7:ed: 7f:d4:41:3c:da:6d:6d:ea:27:ea:38:a9:28:3c:21:28:c2:3a: cb:cf:83:85:d1:46:9c:00:dc:ab:23:99:90:2b:af:04:98:0c: 19:e7:f9:b2:49:87:cc:26:fa:67:b9:92:19:30:61:f6:37:33: c6:cb:4e:1b:de:a0:83:8f:bd:61:c6:d9:17:db:4d:a9:db:19: 01:f6:62:74:20:7b:9c:f1:33:8b:1d:2d:b7:97:fe:5c:ab:26: 46:2b:e0:f6:9e:b2:dc:f3:4a:bf:07:73:7d:1f:5a:4d:aa:0e: 1a:30:fa:9b:d1:76:cb:ac:1d:db:b2:12:89:21:33:81:d0:f7: ff:0b:2e:20:86:7c:3a:a6:86:74:76:7d:9e:63:fa:85:61:ea: cb:8c:32:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq+YAxkzKx1erp/CMUz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMDM1ODRiY2U1NDJlNTU0ZTMyMjc5MDk0NDNmNjgyMmMz ZTRmMDMwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD Eyg2NzJjNWQ1YjUxYmM5NDgzZTI2YzE1ODA1NzFjZWNhNmE1ZDk1NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0coMKeGsviKo2Qp0KiX5Va8SDYt RfFcYzzWswpMl6NwHQPtqgpNF1D7HHHQJwq2s2cQI5Kp+7xUfmgbzk4yre4Eqp1z zAQVgPv2+A0vS+jQ8krDc9iQ2Bc4XdkMbdyQmhE6QreDo0Bo/n/FgKa3U75O52LO tyjTyn+BcVp5Wk3cey7pCNKV6inyXj6tszaMRuuIiJ9htUIzC01RizozTxtsulBn OeNFTWsAE/R6lhAubv9dX9QPht6ucNV4Kctkxpz7bR1wDdc7xIbzuuuu5NBzu0++ lZd+7V5Fb92hTNCCLyTrUZtn6ERCDNrXh8kshzo3yzoB9O+wJeISxs0ZOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcsXVtRvJSD4mwVgFcc7Kal2VQdMB8GA1UdIwQY MBaAFGsDWEvOVC5VTjInkJRD9oIsPk8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEt MzViMTljZjkyZGY5LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEtMzViMTljZjkyZGY5 LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfvXMzS2 4P9V9w1OQyCudBXHn7Zcvw+1Qvq+f7+tuFB9vYYvaNPt6zkfWGGc3bPjTGQm3qNj SbXy7py1YtuJUcmN3BAo/RfLa4yQt2AUMN48IY8Vwws63oQnQa6dF9gwZ7B/p03f 6nrnieftf9RBPNptbeon6jipKDwhKMI6y8+DhdFGnADcqyOZkCuvBJgMGef5skmH zCb6Z7mSGTBh9jczxstOG96gg4+9YcbZF9tNqdsZAfZidCB7nPEzix0tt5f+XKsm Rivg9p6y3PNKvwdzfR9aTaoOGjD6m9F2y6wd27ISiSEzgdD3/wsuIIZ8OqaGdHZ9 nmP6hWHqy4wyhw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:54 2025 by rpki-client