This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json) Hash identifier: 8la7LT8S9d6HQpWBgzh9TAdf9Od7C7hisJESwVoj8/s= Subject key identifier: C5:D4:1B:49:C3:A3:87:9F:1F:63:B9:F7:D9:F2:8A:FB:BB:66:F1:7D Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b Certificate serial: 019AF20945A5DE42675FC438A4891B2F10A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft Manifest number: 0E7E Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: m2D27j6ak9jnYcrduzjlcdSsWjJ1DUNl2Uy+nbubW+A=) 2: y0l08LmHC8QSfP0tR34hSAaY9y8.roa (hash: di/b00/E3HvqNjQok6vnEiSRxkUs3SsPM1HST0/CUYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:45:a5:de:42:67:5f:c4:38:a4:89:1b:2f:10:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=c5d41b49c3a3879f1f63b9f7d9f28afbbb66f17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:a1:23:9d:fa:cc:be:3b:df:f1:05:09:26: c0:dc:a1:0e:a3:dd:27:c6:2e:81:61:90:9a:0f:f6: 51:e9:7a:ca:9a:2c:2e:83:9f:1e:2d:d5:31:5c:99: 63:72:7c:a8:53:41:ca:4a:bc:7b:36:38:b1:54:ff: 08:b0:87:a6:5e:88:57:6a:b2:8e:74:b7:50:84:a6: 89:a9:35:72:ae:cd:f1:44:4f:2c:3c:41:ac:fc:3d: 90:c5:9d:0f:12:c0:34:5f:65:5f:72:a7:fb:d0:af: eb:e5:7e:95:6a:ba:57:ba:76:72:bf:c6:ba:f6:bb: 8f:16:48:09:fd:32:d0:d0:cc:2f:79:44:e8:bb:d5: 71:e5:f6:df:5b:56:8d:d6:80:a3:a9:c8:8a:6d:1b: 6d:38:af:d6:b7:5d:de:23:da:b6:e8:93:f0:92:65: fe:43:ef:4f:df:bd:05:ca:82:40:57:07:0b:b6:0a: 01:74:bb:1f:6f:e2:7a:70:69:9f:f4:50:fe:7c:89: 23:e9:97:e4:96:e8:98:e7:89:24:e7:d5:81:35:b1: 11:f5:37:2d:bb:32:6e:be:ba:35:d3:58:6f:8e:15: 60:f8:a9:8d:9d:ad:5e:48:e6:d4:48:e7:20:15:4c: 63:e6:e1:6e:de:24:15:b9:2e:c1:fa:4c:c0:ac:62: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:1B:49:C3:A3:87:9F:1F:63:B9:F7:D9:F2:8A:FB:BB:66:F1:7D X509v3 Authority Key Identifier: keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7f:a9:f2:3f:40:4b:90:9b:47:8a:88:78:88:5d:6b:d9:f1: 08:13:75:12:2c:b7:ae:46:ab:ef:72:6b:22:b8:4a:5f:68:aa: d0:a4:07:bf:cc:7b:a2:91:26:10:b6:e7:f5:0e:ed:5e:03:2f: 1c:27:b8:df:a1:d5:32:b0:ee:e1:7d:4c:73:05:69:eb:ca:8d: 44:b0:85:54:f2:30:1c:43:4c:9a:ea:0e:7c:ef:f9:b5:ec:ec: 71:5f:c1:47:23:f0:69:8e:67:6a:7b:dd:b2:8f:65:08:5d:99: 52:c4:00:16:58:d8:32:1b:a0:7b:5e:20:60:01:60:63:35:96: 29:99:d5:d3:1f:3f:7d:29:7a:72:fc:34:82:80:a5:be:06:cf: 97:b4:63:72:86:84:dc:91:1c:61:17:02:1d:9e:9c:cb:cb:aa: 7e:3b:6a:8e:f3:ff:44:d1:71:7b:fa:f6:85:fd:9a:b6:22:81: 66:fe:dd:6b:c3:e6:60:2f:ab:0e:cb:26:69:f3:c1:20:ec:b1: a6:20:87:cd:64:b1:20:31:06:14:08:47:91:da:e7:f2:92:4c: 09:4f:84:18:27:8f:ac:b8:2c:77:9f:f0:c4:00:fd:69:84:b1: dd:1c:02:f1:f9:8b:fd:7c:24:9c:f0:b1:eb:dc:0d:5c:8a:8b: 7d:2e:07:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUWl3kJnX8Q4pIkbLxCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWM1MzdkMjY1NmRiNGRkMGMzYzMyZmU5ODFiM2M3NzE0 NDNlNWIwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EyhjNWQ0MWI0OWMzYTM4NzlmMWY2M2I5ZjdkOWYyOGFmYmJiNjZmMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ShI536zL473/EFCSbA3KEOo90n xi6BYZCaD/ZR6XrKmiwug58eLdUxXJljcnyoU0HKSrx7NjixVP8IsIemXohXarKO dLdQhKaJqTVyrs3xRE8sPEGs/D2QxZ0PEsA0X2Vfcqf70K/r5X6VarpXunZyv8a6 9ruPFkgJ/TLQ0MwveUTou9Vx5fbfW1aN1oCjqciKbRttOK/Wt13eI9q26JPwkmX+ Q+9P370FyoJAVwcLtgoBdLsfb+J6cGmf9FD+fIkj6ZfkluiY54kk59WBNbER9Tct uzJuvro101hvjhVg+KmNna1eSObUSOcgFUxj5uFu3iQVuS7B+kzArGISiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXUG0nDo4efH2O599nyivu7ZvF9MB8GA1UdIwQY MBaAFGlcU30mVttN0MPDL+mBs8dxRD5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYt YThiZWI1NjU3ZDc2LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYtYThiZWI1NjU3ZDc2 LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnH+p8j9A S5CbR4qIeIhda9nxCBN1Eiy3rkar73JrIrhKX2iq0KQHv8x7opEmELbn9Q7tXgMv HCe436HVMrDu4X1McwVp68qNRLCFVPIwHENMmuoOfO/5tezscV/BRyPwaY5nanvd so9lCF2ZUsQAFljYMhuge14gYAFgYzWWKZnV0x8/fSl6cvw0goClvgbPl7RjcoaE 3JEcYRcCHZ6cy8uqfjtqjvP/RNFxe/r2hf2atiKBZv7da8PmYC+rDssmafPBIOyx piCHzWSxIDEGFAhHkdrn8pJMCU+EGCePrLgsd5/wxAD9aYSx3RwC8fmL/XwknPCx 69wNXIqLfS4HyA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:18 2025 by rpki-client