This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json) Hash identifier: kNmzgNTrVaSSOINU1RTB8nLtLhBi7SiAjXqJxFJxLLA= Subject key identifier: D8:A0:27:BB:2C:E3:2C:97:21:5C:B8:BA:BA:A8:59:6D:E2:EB:85:3B Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Certificate serial: 019AF12CC77449093FADBC9C04D96E483BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft Manifest number: 1478 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=) 2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=) 3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=) 4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: F5Qz9iu7euT6bjmWMDf9bsxDAFXPagSUIH5NBHXdN9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c7:74:49:09:3f:ad:bc:9c:04:d9:6e:48:3b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=d8a027bb2ce32c97215cb8babaa8596de2eb853b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:e1:71:9a:c9:9b:dd:5e:9c:9d:49:19:5f: 1a:07:e4:a8:ce:fd:89:9d:04:55:b7:29:ae:ad:1b: 50:87:9d:d7:12:81:1e:43:a9:8c:57:d7:cc:ba:b1: 0e:66:fd:7b:20:9f:62:8d:3e:b2:d9:ab:14:1d:88: bb:ca:92:2b:4e:a2:3f:5d:81:2e:0f:c1:1c:83:0e: 97:36:7e:2d:66:b1:9f:a8:cc:63:8c:5b:e8:91:c5: 0e:8b:d8:52:48:3b:4a:d4:bf:5f:96:a6:ba:b6:5b: 26:43:dc:df:cf:c7:59:f5:e5:36:2c:c4:3b:9a:fb: 4a:fe:26:4b:cc:94:e0:bc:bb:26:ed:ff:fe:4f:2c: 71:c9:b6:6a:4d:40:38:60:66:7d:9a:85:ca:52:db: 6e:97:3b:22:f8:31:5e:5b:a3:15:50:35:56:2a:a0: 4e:fd:47:22:86:6a:35:3b:ab:93:79:29:c6:2d:c3: 09:47:ae:7d:3d:e8:2a:c8:ca:ff:36:ac:6a:12:62: 1d:ad:eb:e8:67:02:60:ef:07:8e:e5:6f:94:6b:cb: 05:0a:bd:3c:5f:93:09:8a:f1:6e:a1:9f:8c:13:6a: 4a:43:ce:10:31:fa:9a:ef:c6:33:08:17:90:d4:be: d6:db:c9:0b:1e:28:81:74:f9:08:eb:f7:2e:f4:11: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:27:BB:2C:E3:2C:97:21:5C:B8:BA:BA:A8:59:6D:E2:EB:85:3B X509v3 Authority Key Identifier: keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:64:94:66:60:1b:3f:c1:36:81:bc:1b:50:34:53:fe:74:34: ec:fe:39:a7:bb:91:3b:93:39:5f:bd:38:8b:2f:96:dd:a4:ab: 6e:f9:4f:b4:c0:cb:99:3f:41:cb:72:bc:60:bd:97:6d:fe:aa: c5:8b:36:d5:40:3e:e7:d3:a5:91:0f:5d:f2:8c:14:f3:44:b8: 56:c0:4f:b0:f5:b7:56:a0:dd:33:0f:e1:b4:0e:a9:ee:5f:20: 0a:66:f0:67:7f:18:79:88:95:04:cf:f8:46:6a:ea:ef:2e:cd: 33:f4:e8:93:82:a7:46:09:53:bf:d0:0c:a6:b7:c8:67:bc:3c: 22:87:e5:62:c5:6e:3d:53:eb:7c:d2:f1:02:c2:ed:da:5f:e2: 9c:42:0e:71:c7:f8:b5:95:6c:3b:d9:48:56:62:53:19:f6:94: 0a:a4:f3:12:6a:5c:f6:19:6f:36:b9:d0:b3:1e:87:ff:23:95: 20:a0:58:17:c4:21:20:b2:46:b3:34:75:d6:a7:1e:e4:b1:12: 47:c6:2a:04:ec:7e:c8:fe:36:37:b7:bc:87:08:98:4d:f2:6f: fc:2d:9c:bc:59:ce:f0:2d:20:df:c6:0a:f4:eb:e6:ff:3b:f3: 61:d9:c6:e3:ef:ab:b6:6d:36:28:f8:97:a3:f0:fd:ee:20:c1: f1:42:72:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMd0SQk/rbycBNluSDuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl OTFhNGQwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD EyhkOGEwMjdiYjJjZTMyYzk3MjE1Y2I4YmFiYWE4NTk2ZGUyZWI4NTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHLhcZrJm91enJ1JGV8aB+Sozv2J nQRVtymurRtQh53XEoEeQ6mMV9fMurEOZv17IJ9ijT6y2asUHYi7ypIrTqI/XYEu D8Ecgw6XNn4tZrGfqMxjjFvokcUOi9hSSDtK1L9flqa6tlsmQ9zfz8dZ9eU2LMQ7 mvtK/iZLzJTgvLsm7f/+TyxxybZqTUA4YGZ9moXKUttulzsi+DFeW6MVUDVWKqBO /Ucihmo1O6uTeSnGLcMJR659PegqyMr/NqxqEmIdrevoZwJg7weO5W+Ua8sFCr08 X5MJivFuoZ+ME2pKQ84QMfqa78YzCBeQ1L7W28kLHiiBdPkI6/cu9BGi7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNigJ7ss4yyXIVy4urqoWW3i64U7MB8GA1UdIwQY MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt M2FjM2I2NzM3MDQyLzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2SUZmAb P8E2gbwbUDRT/nQ07P45p7uRO5M5X704iy+W3aSrbvlPtMDLmT9By3K8YL2Xbf6q xYs21UA+59OlkQ9d8owU80S4VsBPsPW3VqDdMw/htA6p7l8gCmbwZ38YeYiVBM/4 Rmrq7y7NM/Tok4KnRglTv9AMprfIZ7w8IoflYsVuPVPrfNLxAsLt2l/inEIOccf4 tZVsO9lIVmJTGfaUCqTzEmpc9hlvNrnQsx6H/yOVIKBYF8QhILJGszR11qce5LES R8YqBOx+yP42N7e8hwiYTfJv/C2cvFnO8C0g38YK9Ovm/zvzYdnG4++rtm02KPiX o/D97iDB8UJy0w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:31 2025 by rpki-client