This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json) Hash identifier: AXe+uhimdO/39gGedN+uTe2UwwuBdrjn8tn/PLERh4I= Subject key identifier: 2E:E4:82:4F:75:0B:9C:EA:56:04:06:A3:6E:BF:91:7E:1C:A3:EE:71 Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751 Certificate serial: 019AF2772D3C6C9FCA85830FCAE56B9120E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft Manifest number: 04DD Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: fnKp7i/s8s0uEftdjP8nM5wMIQTbMReNqPEfaYcymWs=) 2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2d:3c:6c:9f:ca:85:83:0f:ca:e5:6b:91:20:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751 Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=2ee4824f750b9cea560406a36ebf917e1ca3ee71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:4c:31:25:b9:8d:9a:12:0e:f7:8a:bf:bb: 0f:84:7f:50:de:ea:af:31:6b:f8:d4:4b:da:df:f1: 2a:30:21:05:53:92:b5:f9:57:37:07:7b:44:95:7c: 01:5d:a0:12:80:1a:9e:cc:87:be:bc:30:4f:ed:ed: 6d:e7:9d:77:a7:b6:58:63:78:42:f8:a2:48:a1:e1: ba:48:6d:bc:7f:18:f5:c4:35:6a:a0:cd:9c:9a:4e: 74:bf:96:c7:f8:71:5b:09:5f:4f:ba:5c:03:63:3a: 0f:10:35:9f:ff:ea:f1:66:f9:c1:3e:9c:a9:e5:24: 64:96:9c:e8:ae:12:66:7f:5e:ba:7e:23:6e:e2:d2: 2c:02:01:7a:80:c7:34:ab:12:20:a4:48:04:74:47: 28:0a:19:e6:e7:a8:38:b0:b3:07:3e:92:59:23:cc: 03:90:33:02:7f:88:1f:58:bd:8b:7d:d1:da:1f:84: 74:5d:46:f8:63:11:12:fe:1a:b2:b2:5e:e7:ee:28: 89:46:98:0c:59:eb:bd:d5:14:de:26:4f:a8:8a:df: c1:47:87:e2:15:ca:47:8a:64:3b:06:69:a3:21:8f: 02:75:1d:9e:3d:6c:96:51:0a:c0:1f:35:b8:b8:ab: 96:48:ce:16:c8:ad:6e:63:6b:8f:5a:26:35:15:c1: 8a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E4:82:4F:75:0B:9C:EA:56:04:06:A3:6E:BF:91:7E:1C:A3:EE:71 X509v3 Authority Key Identifier: keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:67:86:8f:86:4d:30:62:70:81:d8:db:00:b6:67:45:44:5a: 69:60:3d:d9:0f:e8:6f:ba:da:84:ab:e5:e2:94:79:e2:5e:dd: 2c:eb:6d:a1:54:31:2d:95:c6:f4:56:d8:7a:8e:f3:22:e5:03: d2:df:61:35:8f:ef:70:e8:35:29:cc:3d:2a:b6:4c:98:36:e2: fd:d1:b6:22:0e:ee:81:44:ef:00:38:fd:e7:de:99:86:e7:b1: 13:0b:dc:58:d3:93:c9:b5:a0:7d:e9:b2:ce:cf:9b:82:72:a8: 4f:1c:3c:e2:cb:5f:9e:ea:bd:5c:91:6d:57:23:d0:44:2f:29: 64:06:55:b4:74:8d:45:8a:4c:bd:81:3b:a4:b5:6b:89:f3:2a: d8:3b:fd:c3:7f:e9:84:5e:5e:80:7c:f1:18:88:0f:09:cc:91: 7b:dd:22:05:c9:e0:06:06:66:35:ee:9f:62:48:1a:10:20:b2: f8:b4:74:7e:3f:4b:df:79:e2:21:a2:5e:a9:ef:da:ae:97:95: ef:ff:36:5e:3b:04:c8:58:01:12:24:70:78:3d:ad:b0:7d:12: cf:6e:86:b4:65:0a:b3:2f:9d:ef:b3:e9:f0:de:5e:87:15:06: 8f:2b:3d:4b:d1:2e:2f:b7:19:6c:bc:e9:55:69:e2:27:bd:91: 57:e5:07:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy08bJ/KhYMPyuVrkSDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi NTY3NTEwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD EygyZWU0ODI0Zjc1MGI5Y2VhNTYwNDA2YTM2ZWJmOTE3ZTFjYTNlZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30dMMSW5jZoSDveKv7sPhH9Q3uqv MWv41Eva3/EqMCEFU5K1+Vc3B3tElXwBXaASgBqezIe+vDBP7e1t5513p7ZYY3hC +KJIoeG6SG28fxj1xDVqoM2cmk50v5bH+HFbCV9PulwDYzoPEDWf/+rxZvnBPpyp 5SRklpzorhJmf166fiNu4tIsAgF6gMc0qxIgpEgEdEcoChnm56g4sLMHPpJZI8wD kDMCf4gfWL2LfdHaH4R0XUb4YxES/hqysl7n7iiJRpgMWeu91RTeJk+oit/BR4fi FcpHimQ7BmmjIY8CdR2ePWyWUQrAHzW4uKuWSM4WyK1uY2uPWiY1FcGKGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7kgk91C5zqVgQGo26/kX4co+5xMB8GA1UdIwQY MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt MjFkZTAzYTg1MjM1LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1 LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmeGj4ZN MGJwgdjbALZnRURaaWA92Q/ob7rahKvl4pR54l7dLOttoVQxLZXG9FbYeo7zIuUD 0t9hNY/vcOg1Kcw9KrZMmDbi/dG2Ig7ugUTvADj9596ZhuexEwvcWNOTybWgfemy zs+bgnKoTxw84stfnuq9XJFtVyPQRC8pZAZVtHSNRYpMvYE7pLVrifMq2Dv9w3/p hF5egHzxGIgPCcyRe90iBcngBgZmNe6fYkgaECCy+LR0fj9L33niIaJeqe/arpeV 7/82XjsEyFgBEiRweD2tsH0Sz26GtGUKsy+d77Pp8N5ehxUGjys9S9EuL7cZbLzp VWniJ72RV+UHOg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:26 2025 by rpki-client