This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json) Hash identifier: y7fnQuvGXXntrZjzGUfgsRVGTKubZ5nDbfBSC6oCTNo= Subject key identifier: C5:3F:17:65:3D:80:DF:47:15:7D:F6:3A:B5:1B:F2:0C:9E:00:77:E1 Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e Certificate serial: 019AF12CCE99B97755E63ECB018455C8AF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft Manifest number: 11C3 Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=) 2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: G+kbmj5KpkL6rOY2Z8ffpfKPCpLpGFnbTVodoWE84rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ce:99:b9:77:55:e6:3e:cb:01:84:55:c8:af:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=c53f17653d80df47157df63ab51bf20c9e0077e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:3f:21:ff:a2:5e:fb:b0:f5:84:82:71:eb: 4d:ef:5f:f2:3a:6f:dd:a2:49:41:29:72:a3:61:29: 23:61:82:17:cd:a5:70:24:ea:9b:c6:80:5b:24:5d: 12:af:a8:27:9d:fe:6c:8f:fe:3d:dd:74:ae:cf:74: d9:60:60:a8:36:b9:10:7f:2d:64:c8:d2:92:b0:2f: 73:be:5b:f5:e0:b4:ac:68:52:93:4e:c1:5a:2e:99: 6b:78:2f:f8:c4:c3:f5:94:78:b5:f9:b1:43:fa:88: ee:64:7a:53:c8:e1:c1:4c:00:69:67:4b:e0:cf:1c: 8e:9f:ef:44:42:a5:76:51:d6:4a:69:89:e6:ff:a4: 6e:2b:48:31:41:47:7d:ef:0c:35:a6:ca:83:ef:19: ff:5a:7a:af:cd:30:39:78:d7:83:19:21:30:49:c7: b7:64:84:1e:8c:ea:6f:08:51:11:3a:82:e0:5c:80: 90:9b:5d:9f:04:7d:6c:88:56:34:02:19:70:64:aa: 93:9a:ae:0b:4f:da:5b:8d:bf:28:2a:23:e5:88:e4: de:98:15:02:d4:d2:e1:27:81:f0:6b:d8:a2:f6:e1: 34:3d:1f:25:ed:79:d3:43:16:81:a6:b5:a3:61:54: e7:ea:5f:47:07:39:38:f7:7f:7d:c6:b6:3f:5a:ed: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:17:65:3D:80:DF:47:15:7D:F6:3A:B5:1B:F2:0C:9E:00:77:E1 X509v3 Authority Key Identifier: keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b3:6e:27:59:dc:ab:c1:88:d4:bb:d7:0e:ae:dd:df:44:60: 92:f6:20:41:1a:e6:87:c8:a9:9d:94:23:97:d0:a2:b8:f0:ad: ec:34:29:3b:ef:e2:95:31:cb:49:f6:8b:7a:a4:19:35:bd:6c: 85:5c:47:7b:1d:fd:51:1a:9c:61:6e:50:9a:dc:42:88:9e:eb: ea:51:61:0d:65:70:95:7a:95:dc:ba:05:e9:3f:f1:56:ed:33: d5:4c:c8:5a:9b:2d:69:c8:94:4c:23:35:79:ad:ba:8d:89:91: 48:ab:9d:6c:e9:51:44:c6:ff:48:3c:4f:9e:98:83:54:eb:ee: 8c:fb:68:49:2a:4c:48:34:a5:2e:80:73:4c:2e:2e:d0:7e:20: d1:ac:94:74:75:6c:0b:56:0e:2e:42:cd:77:cd:37:2a:bf:4d: c3:00:db:74:b4:13:9b:c7:b9:c2:83:3c:d3:80:90:eb:eb:a0: 33:cf:79:52:e3:ef:66:38:a4:2a:bf:01:47:78:27:34:ed:4b: 43:6c:71:9f:58:5a:67:88:8f:76:7a:e6:0c:0d:4c:26:a2:c6: d4:64:18:43:89:c2:ce:71:c0:0d:32:86:44:66:dc:c1:dd:e2: 37:3c:92:e0:94:f2:8a:e9:07:f7:8b:22:a3:9c:78:9d:c2:25: 1e:8b:23:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM6ZuXdV5j7LAYRVyK9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODU0YTU3YWIwZDhhM2M5MjJjOGY2YTc5YWE4ZmU4YTZh MmMwOWUwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EyhjNTNmMTc2NTNkODBkZjQ3MTU3ZGY2M2FiNTFiZjIwYzllMDA3N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+c/If+iXvuw9YSCcetN71/yOm/d oklBKXKjYSkjYYIXzaVwJOqbxoBbJF0Sr6gnnf5sj/493XSuz3TZYGCoNrkQfy1k yNKSsC9zvlv14LSsaFKTTsFaLplreC/4xMP1lHi1+bFD+ojuZHpTyOHBTABpZ0vg zxyOn+9EQqV2UdZKaYnm/6RuK0gxQUd97ww1psqD7xn/WnqvzTA5eNeDGSEwSce3 ZIQejOpvCFEROoLgXICQm12fBH1siFY0AhlwZKqTmq4LT9pbjb8oKiPliOTemBUC 1NLhJ4Hwa9ii9uE0PR8l7XnTQxaBprWjYVTn6l9HBzk49399xrY/Wu0TXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMU/F2U9gN9HFX32OrUb8gyeAHfhMB8GA1UdIwQY MBaAFGmFSlerDYo8kiyPanmqj+imosCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQt NTIzOGIwMzU0NWNhLzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQtNTIzOGIwMzU0NWNh LzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbNuJ1nc q8GI1LvXDq7d30RgkvYgQRrmh8ipnZQjl9CiuPCt7DQpO+/ilTHLSfaLeqQZNb1s hVxHex39URqcYW5QmtxCiJ7r6lFhDWVwlXqV3LoF6T/xVu0z1UzIWpstaciUTCM1 ea26jYmRSKudbOlRRMb/SDxPnpiDVOvujPtoSSpMSDSlLoBzTC4u0H4g0ayUdHVs C1YOLkLNd803Kr9NwwDbdLQTm8e5woM804CQ6+ugM895UuPvZjikKr8BR3gnNO1L Q2xxn1haZ4iPdnrmDA1MJqLG1GQYQ4nCznHADTKGRGbcwd3iNzyS4JTyiukH94si o5x4ncIlHosjOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:53 2025 by rpki-client