This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json) Hash identifier: A5G1eFce8AMU7fUbyBJlHrI2RodPMHNpesFCiQQdJCo= Subject key identifier: 24:DF:2A:37:CC:1C:81:F9:64:BF:50:A2:3A:57:85:FC:73:0C:00:06 Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Certificate serial: 019AF27691E6869EC88003464CDE877D2330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft Manifest number: 0838 Signing time: Sat 06 Dec 2025 07:00:48 +0000 Manifest this update: Sat 06 Dec 2025 07:00:48 +0000 Manifest next update: Sun 07 Dec 2025 07:00:48 +0000 Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: dhLlLxqq6voTbqwOoLgdiwHluf6M4NdEXz4omrxmXew=) 2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=) 3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:91:e6:86:9e:c8:80:03:46:4c:de:87:7d:23:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Validity Not Before: Dec 6 07:00:48 2025 GMT Not After : Dec 7 07:00:48 2025 GMT Subject: CN=24df2a37cc1c81f964bf50a23a5785fc730c0006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:54:51:d9:b9:7d:b1:ac:e7:2e:66:87:d6:54: b6:0b:74:50:15:06:c7:02:4e:cf:49:43:8c:43:6d: 4e:59:d7:c1:4c:fc:df:ec:a3:04:8e:04:44:f9:e7: 8b:fa:ee:3a:94:d2:aa:f3:65:9d:61:cd:53:c8:b7: ae:d5:60:28:28:01:ec:f9:e2:89:7e:26:4d:db:eb: f7:3d:00:71:de:2a:c4:88:0a:df:63:92:bc:85:0d: e5:e7:c9:eb:38:fd:28:b8:99:18:3f:3b:01:28:09: f3:7a:5c:b5:fb:64:18:44:7d:ce:57:5a:e0:39:02: d8:bb:44:94:98:02:88:b6:4e:18:34:fe:10:1c:45: ba:91:24:05:95:73:14:86:8e:40:02:2e:3c:0b:c9: ee:38:70:6c:43:03:37:d6:0e:65:4a:0d:8a:df:9f: 6a:20:3c:84:28:75:4a:a1:68:75:3d:64:ea:64:04: 6d:79:f0:ee:de:ee:4c:97:1e:56:34:7f:5d:5d:6a: 70:1a:42:52:6d:6b:78:88:13:14:a8:f8:70:7a:49: 1e:e1:a1:20:08:10:53:d7:03:90:8b:3d:7a:56:df: 31:31:f0:13:7f:39:62:bb:3f:3a:c6:d4:b3:21:b9: 69:25:95:ac:c1:b5:c5:8b:62:d0:31:52:06:ea:09: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DF:2A:37:CC:1C:81:F9:64:BF:50:A2:3A:57:85:FC:73:0C:00:06 X509v3 Authority Key Identifier: keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:49:bf:f5:d4:5f:9b:06:c6:85:f9:87:12:eb:09:31:dc:6a: 97:fb:6e:9f:a9:be:10:fc:db:bd:89:be:ae:db:6e:32:68:a2: ff:95:72:ef:4f:07:d0:8d:cd:bd:67:fd:64:95:22:f0:e9:ed: e9:54:5b:07:12:bc:8a:55:43:d0:aa:fb:95:dd:b8:23:4a:1b: 4b:41:5f:be:e3:e0:2e:9b:13:d7:d5:40:90:39:2e:d4:57:f6: a8:26:4d:ca:d3:ff:81:62:fb:f9:a7:04:35:a7:82:ae:34:db: c5:f7:a1:d2:fd:58:29:29:fa:97:11:2a:86:5d:ac:2b:f1:64: 48:48:36:a4:bf:1e:79:9f:13:61:03:c1:f2:5a:a4:bb:a0:11: 9d:dc:7d:bb:25:fa:ec:08:e4:54:93:b9:df:54:1e:4d:cb:fe: 19:2b:a4:40:cd:17:c9:40:58:a8:96:5e:9a:5d:5a:16:38:a6: ad:de:67:b9:8d:7c:24:1f:34:e4:d8:8f:f4:ec:21:9a:a3:ac: a8:8b:9b:f2:bb:7e:80:63:c4:93:5f:c6:30:52:af:41:42:e9: 10:52:de:71:1c:01:67:88:7f:1f:eb:a9:e5:1d:b3:fa:02:bf: 28:d8:42:9d:8b:0d:87:73:4f:c8:5b:13:35:bd:55:70:cf:87: d7:5e:14:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpHmhp7IgANGTN6HfSMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz ZmQzYmEwHhcNMjUxMjA2MDcwMDQ4WhcNMjUxMjA3MDcwMDQ4WjAzMTEwLwYDVQQD EygyNGRmMmEzN2NjMWM4MWY5NjRiZjUwYTIzYTU3ODVmYzczMGMwMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1RR2bl9saznLmaH1lS2C3RQFQbH Ak7PSUOMQ21OWdfBTPzf7KMEjgRE+eeL+u46lNKq82WdYc1TyLeu1WAoKAHs+eKJ fiZN2+v3PQBx3irEiArfY5K8hQ3l58nrOP0ouJkYPzsBKAnzely1+2QYRH3OV1rg OQLYu0SUmAKItk4YNP4QHEW6kSQFlXMUho5AAi48C8nuOHBsQwM31g5lSg2K359q IDyEKHVKoWh1PWTqZARtefDu3u5Mlx5WNH9dXWpwGkJSbWt4iBMUqPhwekke4aEg CBBT1wOQiz16Vt8xMfATfzliuz86xtSzIblpJZWswbXFi2LQMVIG6gkfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTfKjfMHIH5ZL9QojpXhfxzDAAGMB8GA1UdIwQY MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0 LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUm/9dRf mwbGhfmHEusJMdxql/tun6m+EPzbvYm+rttuMmii/5Vy708H0I3NvWf9ZJUi8Ont 6VRbBxK8ilVD0Kr7ld24I0obS0FfvuPgLpsT19VAkDku1Ff2qCZNytP/gWL7+acE NaeCrjTbxfeh0v1YKSn6lxEqhl2sK/FkSEg2pL8eeZ8TYQPB8lqku6ARndx9uyX6 7AjkVJO531QeTcv+GSukQM0XyUBYqJZeml1aFjimrd5nuY18JB805NiP9OwhmqOs qIub8rt+gGPEk1/GMFKvQULpEFLecRwBZ4h/H+up5R2z+gK/KNhCnYsNh3NPyFsT Nb1VcM+H114UYw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:12 2025 by rpki-client