This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft File: AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json) Hash identifier: 6TOJ5VuakHSZcalEkB6zmArzUZT2M/XzDZyHus9c8k4= Subject key identifier: 79:EB:6C:73:CA:A5:28:BF:B7:9A:12:BA:65:6A:0C:49:C2:78:B3:C6 Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22 Certificate issuer: /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222 Certificate serial: 019AF50B4AD0CAD6929BBE83EE34BFCEAF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft Manifest number: 09B2 Signing time: Sat 06 Dec 2025 19:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:02:29 +0000 Manifest next update: Sun 07 Dec 2025 19:02:29 +0000 Files and hashes: 1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=) 2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: 0N61CFTiqsZbk8tPEbXsukmVwT6mOwvG4rCYBk7uFEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:4a:d0:ca:d6:92:9b:be:83:ee:34:bf:ce:af:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222 Validity Not Before: Dec 6 19:02:29 2025 GMT Not After : Dec 7 19:02:29 2025 GMT Subject: CN=79eb6c73caa528bfb79a12ba656a0c49c278b3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:c1:a7:44:68:7d:af:00:c5:80:50:24:57: 2e:40:22:f6:99:b5:9c:96:06:39:08:92:41:dc:51: 92:2f:6a:e6:3d:83:41:05:a7:28:30:59:ca:ed:0f: d2:1d:c5:b4:a0:f4:50:1a:f2:53:9a:08:a5:74:ea: 1b:73:63:20:10:92:0c:b2:dd:37:7e:79:c5:ee:a1: 20:31:f4:75:ba:d8:83:dc:4b:4b:4e:07:d6:44:c1: a4:74:49:90:a8:67:be:c6:9a:83:c2:52:53:51:7f: cd:48:4a:cf:e8:c8:5b:bb:ee:35:c9:e0:a5:ac:fe: cc:ec:ea:c1:e1:26:ea:13:90:2b:f9:c7:f1:39:88: c9:ec:41:fe:cf:cf:8c:57:7b:76:6c:c2:1b:93:f7: 67:08:c1:78:28:ea:13:16:8c:2f:ed:ca:b5:64:c1: e3:3d:1b:68:92:0c:24:59:a0:31:32:1f:fb:90:cc: 55:20:5c:7e:b8:a1:52:09:81:ab:b3:ac:e0:7f:37: 00:65:7b:45:a8:7c:c5:69:c2:14:9a:7d:1a:26:56: ec:61:a0:2f:64:96:4a:a6:b1:e9:20:2e:8b:d1:68: a6:ae:35:37:66:08:41:59:35:a0:20:59:c9:4d:43: 2a:a4:76:aa:71:85:b6:3a:05:64:3a:9a:cd:61:4f: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EB:6C:73:CA:A5:28:BF:B7:9A:12:BA:65:6A:0C:49:C2:78:B3:C6 X509v3 Authority Key Identifier: keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:73:46:f1:6a:d5:b0:88:d2:a1:6e:13:48:c2:c4:5b:10:07: ed:9d:b2:74:21:38:fe:26:cd:95:de:ea:ca:74:fb:bd:76:74: a5:8b:0e:1e:df:f7:8b:f8:42:bd:7b:3b:d8:69:32:b7:d9:6a: 75:e0:2d:17:65:7c:1b:63:b1:02:22:2c:f4:62:4d:69:ae:9c: f1:99:97:94:73:6a:df:0f:22:97:b8:5d:b4:fd:61:96:34:bf: bd:b9:ff:be:a5:0a:84:ee:52:ed:bb:97:1b:0b:5a:d6:72:40: 8d:d8:14:d8:89:99:30:a2:b4:b7:71:d0:e7:bd:9d:7a:d0:19: 71:cc:28:5e:6e:6f:0e:34:3d:29:22:bd:f7:62:13:81:67:0e: ed:72:c0:f3:80:4d:a6:06:87:f4:3d:d6:9b:d6:3d:c0:f8:b6: c1:39:97:4f:65:62:ec:74:1f:f2:15:61:72:e9:58:68:bd:5b: cc:8d:d9:a9:76:91:74:7b:6d:82:b5:df:d9:cd:ee:26:7c:84: 0b:44:75:cb:e2:93:ac:ec:48:b5:dc:0a:db:52:fb:a0:0b:63: 2f:3f:6c:91:d9:d6:97:22:08:02:c7:31:16:9f:04:1a:bf:2f: de:bd:ce:3a:08:3f:c5:69:dc:a6:68:e0:52:7c:bc:59:a4:7c: b7:b8:cf:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0rQytaSm76D7jS/zq9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZjU2MjYyYzllOGM3ZDEzNDRkZjJiMGY4YzI1ZGExM2Fi ZDYyMjIwHhcNMjUxMjA2MTkwMjI5WhcNMjUxMjA3MTkwMjI5WjAzMTEwLwYDVQQD Eyg3OWViNmM3M2NhYTUyOGJmYjc5YTEyYmE2NTZhMGM0OWMyNzhiM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKXBp0Rofa8AxYBQJFcuQCL2mbWc lgY5CJJB3FGSL2rmPYNBBacoMFnK7Q/SHcW0oPRQGvJTmgildOobc2MgEJIMst03 fnnF7qEgMfR1utiD3EtLTgfWRMGkdEmQqGe+xpqDwlJTUX/NSErP6Mhbu+41yeCl rP7M7OrB4SbqE5Ar+cfxOYjJ7EH+z8+MV3t2bMIbk/dnCMF4KOoTFowv7cq1ZMHj PRtokgwkWaAxMh/7kMxVIFx+uKFSCYGrs6zgfzcAZXtFqHzFacIUmn0aJlbsYaAv ZJZKprHpIC6L0WimrjU3ZghBWTWgIFnJTUMqpHaqcYW2OgVkOprNYU97BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnrbHPKpSi/t5oSumVqDEnCeLPGMB8GA1UdIwQY MBaAFAL1YmLJ6MfRNE3ysPjCXaE6vWIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDIt ZDRiYzc3MmE5MmJkLzEvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDItZDRiYzc3MmE5MmJk LzEvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHNG8WrV sIjSoW4TSMLEWxAH7Z2ydCE4/ibNld7qynT7vXZ0pYsOHt/3i/hCvXs72Gkyt9lq deAtF2V8G2OxAiIs9GJNaa6c8ZmXlHNq3w8il7hdtP1hljS/vbn/vqUKhO5S7buX Gwta1nJAjdgU2ImZMKK0t3HQ572detAZccwoXm5vDjQ9KSK992ITgWcO7XLA84BN pgaH9D3Wm9Y9wPi2wTmXT2Vi7HQf8hVhculYaL1bzI3ZqXaRdHttgrXf2c3uJnyE C0R1y+KTrOxItdwK21L7oAtjLz9skdnWlyIIAscxFp8EGr8v3r3OOgg/xWncpmjg Uny8WaR8t7jPDg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:33 2025 by rpki-client