This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json) Hash identifier: xoBmf/XR9WTVZHBzt6optFOrlWtcGJ+PSaOelmyHYYk= Subject key identifier: A1:72:19:18:06:84:8D:C6:DF:5D:CA:07:B7:27:E4:88:59:7A:F1:32 Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b Certificate serial: 019AF31B21E4A61582D32624D9BF8A9DFD4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft Manifest number: 12E3 Signing time: Sat 06 Dec 2025 10:00:32 +0000 Manifest this update: Sat 06 Dec 2025 10:00:32 +0000 Manifest next update: Sun 07 Dec 2025 10:00:32 +0000 Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=) 2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: DjmZzMG6b8JkOuruHA0/2y6SVL/qTl0KO+pF5SInuMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:21:e4:a6:15:82:d3:26:24:d9:bf:8a:9d:fd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b Validity Not Before: Dec 6 10:00:32 2025 GMT Not After : Dec 7 10:00:32 2025 GMT Subject: CN=a172191806848dc6df5dca07b727e488597af132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:f5:2c:ad:30:ef:3b:1b:7d:a9:b4:b1:5b: 77:a8:93:bc:16:f9:31:55:0a:f4:0b:f5:3a:d3:15: 75:bd:ad:cd:57:5e:f9:ea:6a:40:13:33:2a:42:b6: ca:5f:07:73:f4:bf:97:b0:ae:ee:8c:cc:15:24:09: a7:53:ac:90:ed:a1:1b:e6:69:66:f6:64:32:40:31: 31:36:8f:46:fe:e8:19:63:78:09:33:a2:aa:c2:58: 7c:cc:5c:c5:35:74:e7:05:d5:86:a2:2d:14:58:c9: ea:27:ee:0a:71:04:76:d3:8b:1b:20:56:5a:ed:f5: 49:0d:0a:4d:78:39:f7:43:f3:dd:4b:88:0a:89:cc: bb:6b:74:f0:f6:07:3d:2f:4d:7c:51:24:ad:03:10: 62:90:10:da:0d:05:f1:12:0d:71:0a:4a:e6:25:03: 59:6d:0f:19:da:1c:6f:aa:92:68:bd:b9:b0:a0:ad: e5:ef:ce:07:99:d2:1e:44:67:aa:75:57:bf:c3:0b: e1:ec:4c:66:28:34:e3:ed:18:85:77:71:20:f0:27: 80:52:23:e5:78:81:42:c2:15:ee:15:cb:ab:c8:e9: a6:b7:7e:19:1f:7f:54:8c:3e:91:b8:1b:d8:d3:94: bf:c1:43:ef:d3:2f:fc:d2:0e:ff:19:05:8c:85:a3: 44:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:72:19:18:06:84:8D:C6:DF:5D:CA:07:B7:27:E4:88:59:7A:F1:32 X509v3 Authority Key Identifier: keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c0:4b:3a:95:61:f4:09:84:64:b2:ed:60:ef:a3:22:cb:01: dc:78:0b:cd:1a:85:8e:4a:f4:fe:1a:17:bb:d7:dc:80:c8:a2: 98:0a:a5:cc:2a:b8:ca:d2:81:28:ce:ac:84:76:2d:62:48:1f: 51:23:f2:6e:bb:83:af:d7:09:f1:59:57:15:bd:ea:f2:d2:83: 5a:27:5e:b0:bb:27:29:fe:1a:0a:c0:b9:57:13:d3:8a:2e:7e: e3:b5:73:28:dc:e0:01:76:18:b0:d9:7c:a6:b7:e9:d6:ff:29: e9:99:8a:96:42:f4:72:2b:8f:1b:c2:50:b7:67:dd:67:4c:03: d6:6a:b6:1d:e6:cf:ea:44:a1:c5:0a:84:02:70:d4:7d:6d:26: 6f:cf:91:84:d0:78:cd:82:90:20:0a:1d:4d:7f:bd:6a:dd:12: 8d:e4:16:08:24:d1:a2:1c:c7:e0:70:0a:2e:1b:1b:e0:1e:2c: 65:1f:55:94:af:e2:5e:dc:dc:a7:f4:6f:66:54:89:25:c6:f6: 9c:07:0e:0e:0f:b2:42:a9:d8:4f:1a:8c:3d:f1:c7:c0:5d:e1: 84:e5:d3:27:38:8b:06:a4:00:54:80:c2:f1:9c:84:d7:64:ed: fe:1a:d2:c0:8f:58:f1:f2:18:b7:07:2d:63:94:0a:cf:a8:91: 6c:5c:b1:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyHkphWC0yYk2b+Knf1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDQ4N2EwNGY1YWE0NDJiZTUxOWExN2NiMmJiMjJkNzgz ZGYyM2IwHhcNMjUxMjA2MTAwMDMyWhcNMjUxMjA3MTAwMDMyWjAzMTEwLwYDVQQD EyhhMTcyMTkxODA2ODQ4ZGM2ZGY1ZGNhMDdiNzI3ZTQ4ODU5N2FmMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUz1LK0w7zsbfam0sVt3qJO8Fvkx VQr0C/U60xV1va3NV1756mpAEzMqQrbKXwdz9L+XsK7ujMwVJAmnU6yQ7aEb5mlm 9mQyQDExNo9G/ugZY3gJM6Kqwlh8zFzFNXTnBdWGoi0UWMnqJ+4KcQR204sbIFZa 7fVJDQpNeDn3Q/PdS4gKicy7a3Tw9gc9L018USStAxBikBDaDQXxEg1xCkrmJQNZ bQ8Z2hxvqpJovbmwoK3l784HmdIeRGeqdVe/wwvh7ExmKDTj7RiFd3Eg8CeAUiPl eIFCwhXuFcuryOmmt34ZH39UjD6RuBvY05S/wUPv0y/80g7/GQWMhaNEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFyGRgGhI3G313KB7cn5IhZevEyMB8GA1UdIwQY MBaAFPwEh6BPWqRCvlGaF8srsi14PfI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEt MWIzYTM2ZTFhY2E4LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEtMWIzYTM2ZTFhY2E4 LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocBLOpVh 9AmEZLLtYO+jIssB3HgLzRqFjkr0/hoXu9fcgMiimAqlzCq4ytKBKM6shHYtYkgf USPybruDr9cJ8VlXFb3q8tKDWidesLsnKf4aCsC5VxPTii5+47VzKNzgAXYYsNl8 prfp1v8p6ZmKlkL0ciuPG8JQt2fdZ0wD1mq2HebP6kShxQqEAnDUfW0mb8+RhNB4 zYKQIAodTX+9at0SjeQWCCTRohzH4HAKLhsb4B4sZR9VlK/iXtzcp/RvZlSJJcb2 nAcODg+yQqnYTxqMPfHHwF3hhOXTJziLBqQAVIDC8ZyE12Tt/hrSwI9Y8fIYtwct Y5QKz6iRbFyxFw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:08 2025 by rpki-client