This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json) Hash identifier: 8oADXSE9B7iRZspLUY7ziCXoLzqsM3GumxFb9MiYV4w= Subject key identifier: 06:77:23:84:E3:48:E7:1F:3D:69:BB:3E:AC:CB:FD:17:2B:6F:B6:96 Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48 Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648 Certificate serial: 019AF276F7C462E87B021536E936EB31A91E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft Manifest number: 1643 Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: Lo/cWMEwHseIKVyPKym0WxJ7VEBBQrFf55k16PfUDHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f7:c4:62:e8:7b:02:15:36:e9:36:eb:31:a9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648 Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=06772384e348e71f3d69bb3eaccbfd172b6fb696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:a1:a2:c8:ca:fc:80:ce:3f:bd:c0:4c:fc: 3f:43:ec:13:49:88:a1:a1:17:a8:97:7b:e5:fa:18: 04:b6:7c:8c:8b:fe:7a:03:15:de:c6:65:b4:89:67: d4:58:bf:02:0e:fd:cc:27:88:38:40:c4:b8:09:87: 9c:f5:c1:1f:35:55:a4:96:ae:84:4f:68:ba:b2:10: 04:2c:4c:bf:3e:04:85:ea:ae:cd:d2:66:e0:02:61: 7e:75:16:e4:a3:d2:a0:49:2a:1c:2a:2d:47:02:df: 30:de:d8:19:75:5d:2d:ef:93:bd:4d:6d:3a:89:5d: 2d:5d:3e:a2:6c:94:e1:54:b6:77:65:06:71:db:2c: 33:90:25:76:73:d8:4f:47:eb:3f:75:8c:09:e1:a5: 45:67:d0:91:71:71:ce:fb:15:41:3e:a2:4c:0e:ac: 6c:f8:a0:62:27:3c:da:7d:c4:6c:16:ef:67:e8:6e: 4a:7d:6e:49:e8:a2:85:6d:f8:03:27:24:4f:c5:33: f7:67:3d:be:21:93:a7:b0:f0:4f:36:01:72:e6:c8: 4e:9f:8a:40:25:71:d1:02:67:40:ad:9b:36:de:a6: 85:d0:c2:0b:cc:6c:e0:34:d1:d8:b2:19:45:82:04: 1d:bf:2a:7c:cb:01:04:79:2b:51:27:c8:fe:ee:69: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:77:23:84:E3:48:E7:1F:3D:69:BB:3E:AC:CB:FD:17:2B:6F:B6:96 X509v3 Authority Key Identifier: keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:46:e4:6b:1e:5a:7d:34:c1:fe:a1:1f:c2:e1:fc:14:17:18: a5:88:b4:d2:a6:0d:6b:f1:0d:0b:af:63:8c:6f:a7:07:85:79: f5:0d:46:70:14:21:85:30:ad:cb:b1:5c:ee:3a:f4:90:c7:34: 96:a6:2a:f8:ed:57:c2:63:5e:ab:a2:6c:b7:b0:9f:bc:2d:f5: 29:1d:f1:59:87:66:88:81:1f:be:35:a9:00:8e:95:d0:5c:1c: 34:56:09:b5:f2:fd:62:e9:39:61:37:76:5b:68:b2:5c:c5:9a: 8c:08:17:9e:ad:2c:f2:e7:06:ea:a0:9f:4d:06:31:d7:cb:37: 19:50:64:e4:58:c8:2a:9f:9c:a7:0a:e2:76:b5:fd:75:93:41: 4e:93:de:83:3a:1b:f0:6c:51:2a:6a:7e:69:c6:51:51:56:16: e2:df:f0:30:d5:b8:13:c1:ad:17:05:15:95:96:24:b1:57:b1: dd:78:fe:92:85:a4:7e:12:63:6e:c6:a3:43:e5:a2:86:77:41: b3:8e:9a:99:07:12:65:4c:29:af:2e:00:5b:52:98:aa:9d:77: 5c:8d:62:3a:da:ba:3d:d9:7d:ea:eb:28:f4:c1:3e:3a:a8:88: bb:ec:4b:38:b2:13:e0:39:e7:8e:e0:52:e0:b1:54:7d:39:78: 7c:41:52:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvfEYuh7AhU26TbrMakeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNGE4MDhjY2Y1OTE5ZDA1NjdkYzQyMzRlOTBhM2U2MGNl YjE2NDgwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD EygwNjc3MjM4NGUzNDhlNzFmM2Q2OWJiM2VhY2NiZmQxNzJiNmZiNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY2hosjK/IDOP73ATPw/Q+wTSYih oReol3vl+hgEtnyMi/56AxXexmW0iWfUWL8CDv3MJ4g4QMS4CYec9cEfNVWklq6E T2i6shAELEy/PgSF6q7N0mbgAmF+dRbko9KgSSocKi1HAt8w3tgZdV0t75O9TW06 iV0tXT6ibJThVLZ3ZQZx2ywzkCV2c9hPR+s/dYwJ4aVFZ9CRcXHO+xVBPqJMDqxs +KBiJzzafcRsFu9n6G5KfW5J6KKFbfgDJyRPxTP3Zz2+IZOnsPBPNgFy5shOn4pA JXHRAmdArZs23qaF0MILzGzgNNHYshlFggQdvyp8ywEEeStRJ8j+7mnosQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ3I4TjSOcfPWm7PqzL/Rcrb7aWMB8GA1UdIwQY MBaAFAFKgIzPWRnQVn3EI06Qo+YM6xZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMt MTZhMmQzZTZjOTk0LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMtMTZhMmQzZTZjOTk0 LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0bkax5a fTTB/qEfwuH8FBcYpYi00qYNa/ENC69jjG+nB4V59Q1GcBQhhTCty7Fc7jr0kMc0 lqYq+O1XwmNeq6Jst7CfvC31KR3xWYdmiIEfvjWpAI6V0FwcNFYJtfL9Yuk5YTd2 W2iyXMWajAgXnq0s8ucG6qCfTQYx18s3GVBk5FjIKp+cpwridrX9dZNBTpPegzob 8GxRKmp+acZRUVYW4t/wMNW4E8GtFwUVlZYksVex3Xj+koWkfhJjbsajQ+WihndB s46amQcSZUwpry4AW1KYqp13XI1iOtq6Pdl96uso9ME+OqiIu+xLOLIT4DnnjuBS 4LFUfTl4fEFSrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:16:17 2025 by rpki-client