This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json) Hash identifier: uZt7UNjrOmSdUbtO5ZyZsA8NcLRSjKBiFlr5EbUlAkc= Subject key identifier: 4A:78:B4:1C:60:D6:58:10:A7:CF:79:E5:F5:41:55:A4:39:19:2F:D9 Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72 Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572 Certificate serial: 019AF2AD6B0DE0342F18997EAB2421A3E915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft Manifest number: 142F Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: Xv5EaZVNkluN0+Ic+pXf13zTiE5CX4nVpWxBKs8Q+k4=) 2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6b:0d:e0:34:2f:18:99:7e:ab:24:21:a3:e9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572 Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=4a78b41c60d65810a7cf79e5f54155a439192fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:0c:67:d0:e9:c1:6f:4f:84:c1:e9:6e:33: ba:bd:8b:eb:44:e1:6c:53:87:b2:7d:59:70:c0:64: 4f:bc:ea:a5:d9:1c:5e:32:a8:44:bf:6c:21:73:3b: 40:6b:95:2a:44:3c:73:6f:63:c7:93:d1:49:42:4e: 6b:a6:c0:ff:52:1e:c9:82:c6:9d:0e:1f:a6:23:50: 04:95:49:ff:39:b6:9b:45:b2:0b:99:39:41:3b:94: 57:9a:bb:8e:5c:de:e7:c8:4e:ca:91:fd:cb:11:b4: 9f:b4:71:a1:da:ba:b8:34:5b:26:2c:9d:5b:c1:6c: 6c:64:a0:3a:34:19:3e:67:65:5f:b8:a5:4b:5a:f0: 30:9c:29:88:5b:46:37:6f:48:86:dc:31:fc:c1:32: ca:6e:c5:df:44:89:c6:35:a6:d0:c7:48:31:88:cc: 00:48:57:15:3f:e1:dc:84:db:1a:e3:5e:23:f1:30: 51:a0:8c:ef:02:87:9f:9e:59:3f:31:14:d9:0e:be: 6a:84:05:ca:90:86:a4:95:16:01:14:96:ad:2d:66: f3:34:da:a4:81:51:c9:62:7e:15:3e:15:4a:cc:9a: 1d:55:57:0d:ba:f6:35:73:13:67:fb:3c:7b:f8:ea: 60:8d:1a:d5:1a:7c:8e:c5:eb:1f:af:fc:e6:dd:04: 66:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:78:B4:1C:60:D6:58:10:A7:CF:79:E5:F5:41:55:A4:39:19:2F:D9 X509v3 Authority Key Identifier: keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f2:07:e2:a9:05:fa:c4:30:54:5f:a9:64:90:3d:94:33:db: 75:ce:20:7f:ba:bd:5d:30:a9:cc:0e:a1:78:84:7f:47:08:1e: be:ef:00:2a:fb:f0:f0:7e:aa:8d:1c:a5:0b:91:5e:07:2f:14: b3:3e:62:71:1a:56:41:de:57:9c:35:53:38:07:1f:18:a3:f7: 78:aa:9d:ef:4a:10:40:99:b2:ab:ca:7f:4c:64:f5:9b:4e:c6: 3c:bb:5b:b2:b0:b5:5d:12:9f:4d:10:e8:01:d5:be:49:6b:90: 9c:1e:c8:26:40:2e:13:87:14:1a:3b:8c:c7:33:b5:93:f9:d2: c2:66:75:af:4a:0f:c4:71:2a:a9:3f:2a:0f:54:7c:68:6b:36: 9f:f4:69:7a:4c:45:36:ca:25:2f:08:6d:33:ae:ee:30:97:49: 25:b1:3e:51:5d:21:5e:fb:8b:24:9a:c2:da:7a:ae:c4:c2:b6: f0:0a:38:bc:bd:38:29:96:9a:7e:ee:9f:61:6b:2b:e7:df:0f: 1e:1b:65:4b:a0:56:fc:7a:27:6f:fa:47:3b:27:95:06:a5:c2: 4b:22:73:5b:c4:60:38:ba:d9:e8:b3:7e:ed:e0:48:b5:31:f5: 2d:5a:1b:56:96:17:08:95:80:09:35:f7:2e:d7:27:ad:67:be: 2d:19:f0:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWsN4DQvGJl+qyQho+kVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWYyZWY2ZGI1MDI5OTRkN2IwYzhlNDljZDRhNzc3YmRi OTM1NzIwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD Eyg0YTc4YjQxYzYwZDY1ODEwYTdjZjc5ZTVmNTQxNTVhNDM5MTkyZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy0MZ9DpwW9PhMHpbjO6vYvrROFs U4eyfVlwwGRPvOql2RxeMqhEv2whcztAa5UqRDxzb2PHk9FJQk5rpsD/Uh7Jgsad Dh+mI1AElUn/ObabRbILmTlBO5RXmruOXN7nyE7Kkf3LEbSftHGh2rq4NFsmLJ1b wWxsZKA6NBk+Z2VfuKVLWvAwnCmIW0Y3b0iG3DH8wTLKbsXfRInGNabQx0gxiMwA SFcVP+HchNsa414j8TBRoIzvAoefnlk/MRTZDr5qhAXKkIaklRYBFJatLWbzNNqk gVHJYn4VPhVKzJodVVcNuvY1cxNn+zx7+OpgjRrVGnyOxesfr/zm3QRm4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp4tBxg1lgQp8955fVBVaQ5GS/ZMB8GA1UdIwQY MBaAFAFfLvbbUCmU17DI5JzUp3e9uTVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzIt ZmFmZjIxMWVhNGM2LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzItZmFmZjIxMWVhNGM2 LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfIH4qkF +sQwVF+pZJA9lDPbdc4gf7q9XTCpzA6heIR/Rwgevu8AKvvw8H6qjRylC5FeBy8U sz5icRpWQd5XnDVTOAcfGKP3eKqd70oQQJmyq8p/TGT1m07GPLtbsrC1XRKfTRDo AdW+SWuQnB7IJkAuE4cUGjuMxzO1k/nSwmZ1r0oPxHEqqT8qD1R8aGs2n/RpekxF NsolLwhtM67uMJdJJbE+UV0hXvuLJJrC2nquxMK28Ao4vL04KZaafu6fYWsr598P HhtlS6BW/Honb/pHOyeVBqXCSyJzW8RgOLrZ6LN+7eBItTH1LVobVpYXCJWACTX3 LtcnrWe+LRnwYg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:41 2025 by rpki-client