This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json) Hash identifier: yHkJalbnIQRINGfxeYqbc7fwIIfVaG4+FnGPFCKn168= Subject key identifier: 63:BB:27:B5:DD:D0:E4:7D:A1:E8:78:49:6D:8E:93:D9:19:46:45:B8 Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf Certificate serial: 019AF208D9CA75D3ED86CF25F7A50CE6BEEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft Manifest number: 0982 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: 8myxfTbe0eHu3JZLmfSXJN0o9Klad5pryNAdQxaYFaM=) 2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d9:ca:75:d3:ed:86:cf:25:f7:a5:0c:e6:be:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=63bb27b5ddd0e47da1e878496d8e93d9194645b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:42:39:e8:37:7f:94:21:7b:e2:10:c9:e0: 62:81:7a:2c:1a:39:9c:41:11:7d:f9:07:a6:32:e3: b7:27:42:74:ce:e9:b6:65:28:9c:9b:91:f5:b4:c9: be:53:9c:e0:78:5b:be:98:3a:17:3d:12:fe:5b:90: e7:58:27:84:07:51:61:33:16:fd:c3:b9:21:64:de: 19:a2:bb:1f:17:8d:a5:b7:0d:e5:ba:67:01:4d:c0: bb:d3:2a:16:80:86:3d:83:4f:09:c9:30:c3:04:32: 5f:e9:7d:76:ea:b4:13:9c:4e:0c:fa:36:42:dd:fa: 8d:bb:a7:da:a9:1c:a3:c3:5f:51:cc:80:b0:e4:bf: fe:5d:12:5f:9d:0a:f0:ab:9c:7b:50:3f:b4:c4:8f: 1c:19:7f:80:d0:32:cc:b0:b3:90:b2:3c:3a:6f:40: 1d:5b:a2:e6:44:7d:e6:c9:37:4a:cd:c0:e6:82:a0: a5:f6:c5:0e:8f:09:d6:cf:c8:a2:e8:3c:89:39:d3: 22:58:63:91:2e:82:f3:4a:e1:91:e3:03:4d:3f:53: 16:af:9d:ac:2d:b5:ce:3f:04:2f:8f:4e:24:ac:1c: af:0a:a7:db:1f:91:7f:23:06:36:13:38:df:42:4b: a6:6e:9d:dc:d0:72:a3:d4:d0:d1:20:2a:ad:e8:4e: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BB:27:B5:DD:D0:E4:7D:A1:E8:78:49:6D:8E:93:D9:19:46:45:B8 X509v3 Authority Key Identifier: keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:56:2b:5b:b9:87:d8:bf:36:cf:2e:d6:40:ca:c7:96:36:bd: e6:08:4a:09:e5:e1:28:2d:46:58:c4:42:1d:82:28:72:fe:7f: e3:1e:aa:d2:21:ca:91:92:2d:12:4d:aa:29:1a:1b:0c:ae:bc: ec:30:ca:51:da:9b:3d:26:bc:0f:0b:10:d6:75:06:7d:85:68: ea:7d:3e:0a:68:b8:4d:2a:c6:22:65:b6:f4:37:ac:3f:5b:6b: 1e:6e:37:c1:0a:e0:5b:66:9f:a6:32:65:69:34:31:8e:c4:70: ea:5b:37:49:86:76:38:f0:e1:c8:88:f6:f3:13:6c:03:e5:82: ad:13:ad:ec:8f:43:bb:d1:7f:c0:10:0f:21:66:87:5a:d6:bb: 03:f6:40:76:ee:e2:27:4d:7e:12:3b:d4:86:b9:57:b4:02:1a: a2:f1:85:0f:d0:eb:68:45:25:e4:12:31:53:13:9a:70:d0:96: bd:23:f2:7a:95:12:2c:74:02:b6:30:f7:f5:61:69:03:34:92: 0b:b3:f2:e3:bd:3b:26:88:0d:fe:bd:92:2c:72:82:7b:00:cc: 6b:63:ab:52:5c:50:8f:29:7f:60:ba:23:b6:0e:7c:8f:00:e6: e1:31:c8:4b:bf:a4:b1:09:19:04:08:3c:89:25:7c:51:47:d6: 11:26:99:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNnKddPths8l96UM5r7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYTBkNTg2OGM3YTQxZDZmZTlkY2JjZjkzODA1YWM0MmNi ZGJkYmYwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD Eyg2M2JiMjdiNWRkZDBlNDdkYTFlODc4NDk2ZDhlOTNkOTE5NDY0NWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6RCOeg3f5Qhe+IQyeBigXosGjmc QRF9+QemMuO3J0J0zum2ZSicm5H1tMm+U5zgeFu+mDoXPRL+W5DnWCeEB1FhMxb9 w7khZN4ZorsfF42ltw3lumcBTcC70yoWgIY9g08JyTDDBDJf6X126rQTnE4M+jZC 3fqNu6faqRyjw19RzICw5L/+XRJfnQrwq5x7UD+0xI8cGX+A0DLMsLOQsjw6b0Ad W6LmRH3myTdKzcDmgqCl9sUOjwnWz8ii6DyJOdMiWGORLoLzSuGR4wNNP1MWr52s LbXOPwQvj04krByvCqfbH5F/IwY2EzjfQkumbp3c0HKj1NDRICqt6E7QNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO7J7Xd0OR9oeh4SW2Ok9kZRkW4MB8GA1UdIwQY MBaAFAGg1YaMekHW/p3Lz5OAWsQsvb2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMt MTQ2ZTBiMTc4MDg1LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMtMTQ2ZTBiMTc4MDg1 LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1YrW7mH 2L82zy7WQMrHlja95ghKCeXhKC1GWMRCHYIocv5/4x6q0iHKkZItEk2qKRobDK68 7DDKUdqbPSa8DwsQ1nUGfYVo6n0+Cmi4TSrGImW29DesP1trHm43wQrgW2afpjJl aTQxjsRw6ls3SYZ2OPDhyIj28xNsA+WCrROt7I9Du9F/wBAPIWaHWta7A/ZAdu7i J01+EjvUhrlXtAIaovGFD9DraEUl5BIxUxOacNCWvSPyepUSLHQCtjD39WFpAzSS C7Py4707JogN/r2SLHKCewDMa2OrUlxQjyl/YLojtg58jwDm4THIS7+ksQkZBAg8 iSV8UUfWESaZrw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:13 2025 by rpki-client