This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json) Hash identifier: 73PSb1AUvdRvpzWmHio/nCoiQxAL/++MBqZtECssIg8= Subject key identifier: 41:2D:B9:0C:30:60:A0:AA:EF:C3:41:6A:A0:90:29:38:58:2E:61:8D Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d Certificate serial: 019AF4658A9AC9CB605D5432878577ACD8F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft Manifest number: 13D6 Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 16:01:26 +0000 Manifest next update: Sun 07 Dec 2025 16:01:26 +0000 Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: Qib1A+5GPoahCwi+EuoDYWiDN9aP18MhXEVZ76UDnpQ=) 2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=) 3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8a:9a:c9:cb:60:5d:54:32:87:85:77:ac:d8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d Validity Not Before: Dec 6 16:01:26 2025 GMT Not After : Dec 7 16:01:26 2025 GMT Subject: CN=412db90c3060a0aaefc3416aa0902938582e618d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:ab:96:96:ae:49:19:d3:df:f2:79:5d:77: 65:91:63:a8:91:ec:5e:cd:55:ec:e5:dc:5f:d8:4a: 71:24:54:9e:92:2a:23:87:0a:20:fa:34:ff:bb:aa: 4f:c0:d2:9d:ed:5b:75:9f:17:e0:c2:5a:8d:e7:7b: c3:d9:98:c8:1f:e0:6b:58:b6:31:48:d8:b4:9e:11: db:c5:3d:a2:7d:50:f6:08:01:57:30:76:49:d5:7b: 90:00:49:fc:94:13:6d:89:de:30:86:c3:60:43:05: cc:60:db:ea:48:99:4e:f6:f2:be:1b:70:d1:9f:34: 4a:ab:57:f7:eb:5c:9e:55:2e:4d:10:18:80:9a:aa: 7d:74:3a:98:09:8e:d4:a3:73:22:e5:3b:65:55:a2: 48:00:f4:98:e7:ea:3c:a6:f4:6f:8b:8d:49:42:6f: 2e:57:24:94:6a:d1:fb:96:9b:1f:62:3d:22:29:05: b8:68:f8:05:19:82:f7:a9:64:1e:97:2e:02:27:8c: c0:2a:71:be:29:35:f5:c3:5f:54:b6:f3:96:74:86: 6b:6f:3b:d3:4c:dc:f1:bc:99:75:09:13:36:7e:52: f9:b9:9b:0d:95:84:37:57:ea:92:d4:2a:55:53:30: fc:ee:77:a3:8f:ef:2b:fe:94:96:79:49:c5:ef:ea: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2D:B9:0C:30:60:A0:AA:EF:C3:41:6A:A0:90:29:38:58:2E:61:8D X509v3 Authority Key Identifier: keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4e:ff:ba:f5:57:d7:95:d0:47:a3:db:0e:ff:31:c5:6f:4d: 5b:74:e1:08:b2:8f:14:ad:b9:bb:61:35:c0:03:3a:4e:1f:5c: 8a:d2:1a:86:1e:45:38:81:92:8b:6d:b4:41:46:61:ce:d2:27: e9:df:7d:9d:eb:89:ca:3b:ab:d6:95:fe:37:67:c3:85:e2:1c: 66:7d:2d:b7:cf:d3:b8:3c:18:18:a1:45:3b:54:92:6f:6e:4e: 7a:65:00:7a:2e:b1:b7:54:53:7d:e8:ab:85:9c:cb:41:ef:32: a6:d9:92:77:bf:4d:df:70:5d:64:35:93:79:2f:39:c6:c1:09: f3:de:45:ac:f4:c8:95:cc:5d:24:a5:1d:61:ef:4b:fc:c2:9f: f9:60:52:8a:e9:69:37:ff:14:ae:ef:ce:a4:36:71:ad:ba:cd: 6b:ef:dd:22:0f:78:7e:c5:60:f2:76:4b:8e:06:b6:f2:47:8e: 86:37:c1:31:17:3c:4e:27:74:c7:a3:c9:c8:77:6d:99:23:33: 75:41:2c:4a:06:22:a2:ba:a7:f8:9e:7a:cd:ef:80:45:01:aa: 6f:5d:9b:09:79:98:c1:72:ef:d9:83:8f:06:bc:b8:b6:85:38: cd:a6:6b:29:c4:95:fc:0b:1f:dc:9e:9f:8c:27:b4:e7:62:47: 73:b1:ad:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYqayctgXVQyh4V3rNjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz MDU1MmQwHhcNMjUxMjA2MTYwMTI2WhcNMjUxMjA3MTYwMTI2WjAzMTEwLwYDVQQD Eyg0MTJkYjkwYzMwNjBhMGFhZWZjMzQxNmFhMDkwMjkzODU4MmU2MThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzerlpauSRnT3/J5XXdlkWOokexe zVXs5dxf2EpxJFSekiojhwog+jT/u6pPwNKd7Vt1nxfgwlqN53vD2ZjIH+BrWLYx SNi0nhHbxT2ifVD2CAFXMHZJ1XuQAEn8lBNtid4whsNgQwXMYNvqSJlO9vK+G3DR nzRKq1f361yeVS5NEBiAmqp9dDqYCY7Uo3Mi5TtlVaJIAPSY5+o8pvRvi41JQm8u VySUatH7lpsfYj0iKQW4aPgFGYL3qWQely4CJ4zAKnG+KTX1w19UtvOWdIZrbzvT TNzxvJl1CRM2flL5uZsNlYQ3V+qS1CpVUzD87nejj+8r/pSWeUnF7+ocjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEtuQwwYKCq78NBaqCQKThYLmGNMB8GA1UdIwQY MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4 LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE7/uvVX 15XQR6PbDv8xxW9NW3ThCLKPFK25u2E1wAM6Th9citIahh5FOIGSi220QUZhztIn 6d99neuJyjur1pX+N2fDheIcZn0tt8/TuDwYGKFFO1SSb25OemUAei6xt1RTfeir hZzLQe8yptmSd79N33BdZDWTeS85xsEJ895FrPTIlcxdJKUdYe9L/MKf+WBSiulp N/8Uru/OpDZxrbrNa+/dIg94fsVg8nZLjga28keOhjfBMRc8Tid0x6PJyHdtmSMz dUEsSgYiorqn+J56ze+ARQGqb12bCXmYwXLv2YOPBry4toU4zaZrKcSV/Asf3J6f jCe052JHc7GtQg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:38 2025 by rpki-client