This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft File: 01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json) Hash identifier: hIfHGonztHFhpwQ/4yKFY/17Bku/eudPOziOlra8UhQ= Subject key identifier: B1:42:53:3C:FE:BC:C9:36:38:19:8F:B9:B3:EF:31:D7:46:9B:15:C8 Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Certificate serial: 019AF0BEFD7704C20E58803CB02FA690A86C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 23:00:39 +0000 Manifest this update: Fri 05 Dec 2025 23:00:39 +0000 Manifest next update: Sat 06 Dec 2025 23:00:39 +0000 Files and hashes: 1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: /IJ/RaV47IfkA3Ew01HeXS4Iw3GEbsx442kRVxMElNs=) 2: 3wb1_tKdAp9U3t54r_yuAt_t74c.roa (hash: TRy2GucvGX452Ui0rXwDPLdQsvvya9qliAwd0VMiMQg=) 3: FRyMmxASxmy-8j0poAKeBfWYQOw.roa (hash: rggDbDyghfOZf84v31JsaN//o0OD54TdWq5+Du2lhgw=) 4: UP92FGd897Ta77gAjDusBRyzKw4.roa (hash: bi2tqHIDLMNNDJZuMzCDB/j/tTne6ixxxWYNy/lNRuw=) 5: _4mHAp6kpGlHe9veqUWZlR3bnno.roa (hash: AE1aWk5k7KrYjZa6mqR0Z0k8/+EX2mo7iBxCrqvE0fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:fd:77:04:c2:0e:58:80:3c:b0:2f:a6:90:a8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Validity Not Before: Dec 5 23:00:39 2025 GMT Not After : Dec 6 23:00:39 2025 GMT Subject: CN=b142533cfebcc93638198fb9b3ef31d7469b15c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:8d:bc:8b:90:70:bc:d5:ee:92:4d:12:bd: 02:94:45:01:57:b4:a0:64:27:8e:91:7d:4f:f4:08: a0:89:03:43:d2:49:60:af:91:66:0f:82:90:aa:e0: 96:3b:be:83:89:7c:8f:09:3e:f2:54:2e:67:b7:84: 62:9a:24:20:e6:10:06:59:f0:47:96:e5:70:3f:9d: bc:4e:86:a6:04:7f:b4:e3:09:04:b0:b0:c0:21:bc: 0a:88:cd:24:31:da:cc:cd:5e:6a:1a:a2:5c:c0:29: 0f:1d:1b:68:76:b2:84:d0:26:37:af:a3:61:14:9a: 58:e7:c6:c2:f5:c7:f8:15:d8:9b:8c:33:df:4d:f6: bf:26:eb:dc:53:1d:07:73:35:a6:e1:bf:22:fe:25: 5b:c0:9d:76:00:4a:09:ab:57:3b:37:2c:b1:29:47: 4d:d2:59:1e:db:cd:93:dc:31:41:21:0a:0b:1a:c6: 10:23:b3:ae:20:90:59:fd:a2:f1:e3:4b:02:88:03: e7:2c:46:87:91:6b:e0:b1:8e:df:29:92:a5:67:68: 64:d3:c6:b8:c9:d1:c9:32:a2:03:1d:c0:a4:fd:95: d8:c1:e7:3d:83:06:0c:f6:87:ac:e0:b5:38:0d:35: ec:9b:be:25:f9:58:e2:fd:d9:72:81:56:bc:07:cb: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:42:53:3C:FE:BC:C9:36:38:19:8F:B9:B3:EF:31:D7:46:9B:15:C8 X509v3 Authority Key Identifier: keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e0:49:7a:e2:ac:0f:4c:5f:5f:a7:27:c6:14:ae:f2:c9:32: 35:94:83:22:97:e1:09:a3:b1:70:4d:68:5a:5f:ad:6f:73:4b: f0:12:fa:ac:bb:ba:c3:33:34:68:d5:a0:90:ee:03:89:e7:95: 7c:83:7a:2b:23:db:6d:6b:22:c4:ac:8d:fb:ae:d4:a9:66:98: e7:e8:3b:b1:9e:57:0c:c6:ce:34:58:91:be:41:6a:14:c3:36: a5:2f:8a:56:61:c1:51:4d:f3:78:b5:b1:d2:eb:6f:e2:55:6a: 28:d9:2b:8d:0f:75:d2:58:97:b6:a1:5b:0c:d1:6b:d6:dc:44: 3d:33:8d:24:61:d5:ec:1a:5e:95:f2:11:e6:2e:42:00:f8:5b: 77:17:47:c1:1b:c4:4e:c0:fa:a9:25:bb:c4:3c:0c:d2:0e:19: d0:56:d9:ce:5c:3f:86:5a:d7:8f:61:bc:af:1c:03:31:70:5a: 12:63:3a:a8:34:36:e3:d9:ee:af:48:52:79:2d:08:1a:ff:fc: 63:18:01:c2:50:99:0f:6c:7c:c4:86:a5:f2:72:91:84:2f:de: fd:35:2c:8e:a5:2b:f2:df:fc:18:bd:4c:5a:f0:b8:d2:6f:d8: 15:0d:f8:b5:bf:20:03:7e:52:c6:9a:96:ae:74:95:0c:da:f7: f9:6b:b5:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvv13BMIOWIA8sC+mkKhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3 M2E4ZjgwHhcNMjUxMjA1MjMwMDM5WhcNMjUxMjA2MjMwMDM5WjAzMTEwLwYDVQQD EyhiMTQyNTMzY2ZlYmNjOTM2MzgxOThmYjliM2VmMzFkNzQ2OWIxNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuruNvIuQcLzV7pJNEr0ClEUBV7Sg ZCeOkX1P9AigiQND0klgr5FmD4KQquCWO76DiXyPCT7yVC5nt4RimiQg5hAGWfBH luVwP528ToamBH+04wkEsLDAIbwKiM0kMdrMzV5qGqJcwCkPHRtodrKE0CY3r6Nh FJpY58bC9cf4FdibjDPfTfa/JuvcUx0HczWm4b8i/iVbwJ12AEoJq1c7NyyxKUdN 0lke282T3DFBIQoLGsYQI7OuIJBZ/aLx40sCiAPnLEaHkWvgsY7fKZKlZ2hk08a4 ydHJMqIDHcCk/ZXYwec9gwYM9oes4LU4DTXsm74l+Vji/dlygVa8B8si6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFCUzz+vMk2OBmPubPvMddGmxXIMB8GA1UdIwQY MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt MmVhODdlNmVhMmEwLzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeBJeuKs D0xfX6cnxhSu8skyNZSDIpfhCaOxcE1oWl+tb3NL8BL6rLu6wzM0aNWgkO4DieeV fIN6KyPbbWsixKyN+67UqWaY5+g7sZ5XDMbONFiRvkFqFMM2pS+KVmHBUU3zeLWx 0utv4lVqKNkrjQ910liXtqFbDNFr1txEPTONJGHV7BpelfIR5i5CAPhbdxdHwRvE TsD6qSW7xDwM0g4Z0FbZzlw/hlrXj2G8rxwDMXBaEmM6qDQ249nur0hSeS0IGv/8 YxgBwlCZD2x8xIal8nKRhC/e/TUsjqUr8t/8GL1MWvC40m/YFQ34tb8gA35SxpqW rnSVDNr3+Wu1yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:20 2025 by rpki-client