This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json) Hash identifier: u9r/Be7by4lMTftVDNTbjK9u4f6RGjjsI9jidePXfzg= Subject key identifier: AF:F5:35:22:E3:0E:E4:21:BA:D0:C4:42:43:C9:97:08:28:23:56:88 Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d Certificate serial: 019B30435E213C5E3705EFEC9BE05D70119F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft Manifest number: 13F5 Signing time: Thu 18 Dec 2025 07:01:19 +0000 Manifest this update: Thu 18 Dec 2025 07:01:19 +0000 Manifest next update: Fri 19 Dec 2025 07:01:19 +0000 Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: WZwpu0qDqqc7GXnc7F4B41FpglD+WeAQP3vhCePYH0s=) 2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=) 3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:5e:21:3c:5e:37:05:ef:ec:9b:e0:5d:70:11:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d Validity Not Before: Dec 18 07:01:19 2025 GMT Not After : Dec 19 07:01:19 2025 GMT Subject: CN=aff53522e30ee421bad0c44243c9970828235688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:66:bc:a1:6c:b4:45:90:7f:f5:0a:27:30: 28:73:e6:f5:84:fb:58:3d:e5:b3:84:03:47:be:e7: 55:7e:d6:b5:b8:27:65:a8:87:6d:a6:eb:96:cf:b9: 4c:81:f7:d3:bf:c5:92:48:6a:f4:40:53:e8:df:8a: 09:70:c8:13:b2:7c:18:62:c0:13:9e:f4:01:a4:35: fc:5c:17:7d:4d:b3:30:64:e0:12:d6:1c:80:fa:d6: 72:e2:38:b8:f9:24:65:48:ae:01:96:d1:31:b5:43: 7e:b3:b6:e3:dc:25:45:b9:a4:46:41:b2:8d:26:f1: 27:3c:c8:0d:60:e8:6a:3d:e8:f3:1e:3f:32:b1:f5: e5:7b:55:e1:49:37:d5:ea:77:3f:85:7c:48:9b:47: fd:f0:35:5f:db:ac:1d:23:d3:d4:29:b4:73:ff:f0: 76:89:45:31:ba:91:b5:2d:27:93:f7:0d:f4:80:41: 8b:79:39:d4:e0:52:44:1c:b6:79:a7:6d:20:66:0e: 15:fb:c2:16:e0:fa:15:ad:83:27:a6:c5:f7:fe:8d: 65:9b:80:e5:94:0c:82:e3:ef:54:55:ea:11:30:3e: 87:cd:23:b4:6e:bf:12:ad:7c:57:9b:99:67:c1:d2: d3:a6:7c:ea:9b:d2:70:18:7b:e4:f7:e3:83:ec:a1: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F5:35:22:E3:0E:E4:21:BA:D0:C4:42:43:C9:97:08:28:23:56:88 X509v3 Authority Key Identifier: keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c1:9c:13:7e:84:db:fe:c7:91:a9:46:40:be:95:21:bc:d8: ea:b0:49:f2:70:4e:b8:99:2d:ac:a1:8c:a5:7f:49:65:58:42: 9a:11:10:30:64:12:cd:e9:51:5b:b9:5f:d5:f6:c9:6a:b2:68: e5:66:ee:e9:76:85:74:ab:84:33:ce:1b:7c:32:a5:c8:26:f0: 1a:e9:24:8d:3a:5f:e9:6d:72:30:2f:10:03:d5:12:04:49:18: 67:b2:bb:cf:f1:27:5e:56:44:fe:8d:92:60:c7:9c:61:a4:95: 6e:d6:bd:b3:52:1a:6e:5c:c1:a2:53:c7:34:b1:bf:65:96:9e: 35:44:6b:d6:59:f5:4d:c2:40:1e:5c:ff:95:a6:bf:50:2c:52: fc:7a:de:dd:fb:58:e2:fe:e5:78:1a:dd:09:e5:ac:22:a1:e6: 61:1d:e4:cb:60:ed:e9:73:cd:92:46:42:83:a5:de:6b:75:dc: 52:01:ae:42:18:80:0d:7a:03:3a:0b:8b:59:09:7a:3b:f0:ff: be:3b:2c:09:7b:78:ea:b4:e1:4f:2a:a7:9b:52:82:93:ca:ae: a7:e1:15:60:02:b2:a9:f7:1f:af:c3:b2:ba:27:c2:c9:06:6c: 5b:b0:54:d9:fe:9a:c8:a1:f5:e0:db:18:d3:d6:24:58:ca:52: e0:bd:8b:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ14hPF43Be/sm+BdcBGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz MDU1MmQwHhcNMjUxMjE4MDcwMTE5WhcNMjUxMjE5MDcwMTE5WjAzMTEwLwYDVQQD EyhhZmY1MzUyMmUzMGVlNDIxYmFkMGM0NDI0M2M5OTcwODI4MjM1Njg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39lmvKFstEWQf/UKJzAoc+b1hPtY PeWzhANHvudVfta1uCdlqIdtpuuWz7lMgffTv8WSSGr0QFPo34oJcMgTsnwYYsAT nvQBpDX8XBd9TbMwZOAS1hyA+tZy4ji4+SRlSK4BltExtUN+s7bj3CVFuaRGQbKN JvEnPMgNYOhqPejzHj8ysfXle1XhSTfV6nc/hXxIm0f98DVf26wdI9PUKbRz//B2 iUUxupG1LSeT9w30gEGLeTnU4FJEHLZ5p20gZg4V+8IW4PoVrYMnpsX3/o1lm4Dl lAyC4+9UVeoRMD6HzSO0br8SrXxXm5lnwdLTpnzqm9JwGHvk9+OD7KGpcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/1NSLjDuQhutDEQkPJlwgoI1aIMB8GA1UdIwQY MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4 LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacGcE36E 2/7HkalGQL6VIbzY6rBJ8nBOuJktrKGMpX9JZVhCmhEQMGQSzelRW7lf1fbJarJo 5Wbu6XaFdKuEM84bfDKlyCbwGukkjTpf6W1yMC8QA9USBEkYZ7K7z/EnXlZE/o2S YMecYaSVbta9s1IablzBolPHNLG/ZZaeNURr1ln1TcJAHlz/laa/UCxS/Hre3ftY 4v7leBrdCeWsIqHmYR3ky2Dt6XPNkkZCg6Xea3XcUgGuQhiADXoDOguLWQl6O/D/ vjssCXt46rThTyqnm1KCk8qup+EVYAKyqfcfr8OyuifCyQZsW7BU2f6ayKH14NsY 09YkWMpS4L2Ljw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:54:56 2025 by rpki-client