This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json) Hash identifier: UNG4L49BhQlSgCSFOYc7d3X+9vRD+o3zAL+M9S/QR7M= Subject key identifier: 57:3A:02:15:EC:6D:FC:9D:2B:FE:73:D7:02:AF:48:A8:AA:33:48:03 Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4 Certificate serial: 019AF31CBDAABDBDF5AB5E3F51654A6BC860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft Manifest number: 12A1 Signing time: Sat 06 Dec 2025 10:02:18 +0000 Manifest this update: Sat 06 Dec 2025 10:02:18 +0000 Manifest next update: Sun 07 Dec 2025 10:02:18 +0000 Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=) 2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: F5d7dcStzcx9joc4ywosavlFFRF/VNLj8k//DLrCIIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bd:aa:bd:bd:f5:ab:5e:3f:51:65:4a:6b:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4 Validity Not Before: Dec 6 10:02:18 2025 GMT Not After : Dec 7 10:02:18 2025 GMT Subject: CN=573a0215ec6dfc9d2bfe73d702af48a8aa334803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:76:99:6a:ef:8b:86:4a:3c:1d:0b:a2:2c: ce:5c:a5:a9:0a:78:65:f0:7d:48:a2:2e:1f:34:dd: 26:df:34:54:02:0c:1b:b0:23:44:98:ba:5b:57:7c: 72:56:67:b4:4c:67:16:69:9f:28:2f:c5:eb:9e:60: 35:01:78:1c:ff:1f:9b:63:f5:37:10:39:ae:cc:d9: 62:8e:7f:30:8a:ab:17:80:64:62:bf:f7:e6:16:d3: 75:d5:6e:3d:68:df:71:36:28:a1:a2:d4:74:a2:36: ce:ba:5e:d5:8e:4b:c0:f9:5d:81:85:aa:d8:ea:44: fb:13:52:44:6e:24:79:a8:ff:61:46:8b:33:46:08: 40:ab:67:a6:86:83:f3:5b:ab:67:ff:fb:fa:9b:e4: d6:2b:32:1a:13:2b:2b:b5:8f:51:96:65:5a:af:94: 86:1e:2f:dd:76:84:8c:a6:cb:26:ee:d2:b1:57:95: c5:c7:00:5e:6e:10:d6:e1:76:da:fa:fc:61:ac:99: cd:8a:b3:a6:30:63:6c:39:ae:d7:16:2b:d7:e9:0c: c8:32:8f:fa:50:f5:3e:96:e2:0f:31:bd:6f:a1:87: ca:a5:69:4e:f0:f4:6d:db:80:fa:eb:45:91:69:00: 0f:61:18:82:d3:19:13:b4:ee:2e:08:88:d0:bd:c1: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:02:15:EC:6D:FC:9D:2B:FE:73:D7:02:AF:48:A8:AA:33:48:03 X509v3 Authority Key Identifier: keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0d:b2:75:5a:2d:f0:8d:6b:ed:f1:fb:a0:4e:73:80:92:3a: 5b:6b:6a:6b:44:74:79:fb:78:de:ee:07:7f:3f:aa:43:b9:9d: 76:98:d1:a7:2c:1f:ca:b3:02:ad:7c:50:95:a8:c4:64:25:17: 28:c6:c8:4d:a9:1f:86:46:8d:11:8c:b5:92:65:54:f0:d5:3a: d0:f0:b3:ca:be:0a:0f:1a:2f:66:d5:c0:54:e3:ee:86:a4:5a: 5b:07:4a:ab:22:b4:d5:d4:21:97:83:b2:56:4d:e3:1d:42:be: 2c:ae:d4:1b:ec:73:70:d8:58:35:fd:f4:f7:93:d5:2b:1f:fb: 19:68:bf:23:58:eb:01:49:be:5d:1b:a7:76:c4:43:f6:e1:a6: d6:53:2c:5f:b1:2c:c8:1f:41:cb:99:91:d0:20:7c:66:41:42: 30:53:c0:40:18:3b:bf:39:f0:32:1c:b1:97:38:1c:30:54:fe: 7b:d7:79:4c:b3:00:7f:3f:58:84:93:eb:55:f2:4a:a5:c7:d5: 56:31:2e:cf:ca:23:98:a5:d6:15:85:b6:07:e3:61:17:e1:73: 79:a4:f3:2f:83:a3:33:07:9b:d1:62:34:1f:20:f5:03:e7:bf: fa:43:38:e1:56:54:af:7f:17:3b:59:1d:8a:98:84:ae:a2:71: e3:55:b3:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHL2qvb31q14/UWVKa8hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYzcyYTczNDM5MmY2Y2Y3OTJiM2QwYzNlZDExODIwMjg2 ZjE5ZjQwHhcNMjUxMjA2MTAwMjE4WhcNMjUxMjA3MTAwMjE4WjAzMTEwLwYDVQQD Eyg1NzNhMDIxNWVjNmRmYzlkMmJmZTczZDcwMmFmNDhhOGFhMzM0ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIJ2mWrvi4ZKPB0LoizOXKWpCnhl 8H1Ioi4fNN0m3zRUAgwbsCNEmLpbV3xyVme0TGcWaZ8oL8XrnmA1AXgc/x+bY/U3 EDmuzNlijn8wiqsXgGRiv/fmFtN11W49aN9xNiihotR0ojbOul7VjkvA+V2BharY 6kT7E1JEbiR5qP9hRoszRghAq2emhoPzW6tn//v6m+TWKzIaEysrtY9RlmVar5SG Hi/ddoSMpssm7tKxV5XFxwBebhDW4Xba+vxhrJnNirOmMGNsOa7XFivX6QzIMo/6 UPU+luIPMb1voYfKpWlO8PRt24D660WRaQAPYRiC0xkTtO4uCIjQvcE5AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc6AhXsbfydK/5z1wKvSKiqM0gDMB8GA1UdIwQY MBaAFGrHKnNDkvbPeSs9DD7RGCAobxn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQt OTNkZjQ1MDAzZTdlLzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQtOTNkZjQ1MDAzZTdl LzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqA2ydVot 8I1r7fH7oE5zgJI6W2tqa0R0eft43u4Hfz+qQ7mddpjRpywfyrMCrXxQlajEZCUX KMbITakfhkaNEYy1kmVU8NU60PCzyr4KDxovZtXAVOPuhqRaWwdKqyK01dQhl4Oy Vk3jHUK+LK7UG+xzcNhYNf3095PVKx/7GWi/I1jrAUm+XRundsRD9uGm1lMsX7Es yB9By5mR0CB8ZkFCMFPAQBg7vznwMhyxlzgcMFT+e9d5TLMAfz9YhJPrVfJKpcfV VjEuz8ojmKXWFYW2B+NhF+FzeaTzL4OjMweb0WI0HyD1A+e/+kM44VZUr38XO1kd ipiErqJx41Wzow== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:15 2025 by rpki-client