This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json) Hash identifier: gmAprFn8bFl4wcLk2Oefqx5gxRA+GpQBQx8T8V3Rm6o= Subject key identifier: 4C:BC:18:2F:70:A2:21:98:CC:40:14:5F:FA:D0:52:EE:60:FD:D2:A7 Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48 Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48 Certificate serial: 019B3231E4B78F57A938B9B4987278BBD094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 16:01:29 +0000 Manifest this update: Thu 18 Dec 2025 16:01:29 +0000 Manifest next update: Fri 19 Dec 2025 16:01:29 +0000 Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: WP1hMCyyjb7uSrWP6Kns+MD6xCeg9ScMrtMZKHSwZYM=) 2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=) 3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:e4:b7:8f:57:a9:38:b9:b4:98:72:78:bb:d0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48 Validity Not Before: Dec 18 16:01:29 2025 GMT Not After : Dec 19 16:01:29 2025 GMT Subject: CN=4cbc182f70a22198cc40145ffad052ee60fdd2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:ca:0c:1b:c8:1e:ff:1e:43:cf:85:0c:6b: aa:7d:7a:35:3b:0a:c6:17:d1:35:9f:12:13:58:0a: 77:bb:1a:90:82:2e:f1:1c:5e:31:2a:52:9f:53:b3: 6e:f6:33:1b:15:60:a8:69:f0:0c:06:8b:0a:15:9d: cb:81:e0:60:b5:97:70:c1:6d:9d:53:b6:61:b0:fa: 0b:b5:47:a8:cc:f8:c2:05:5f:43:d1:d5:13:80:66: 50:75:9f:58:dc:d5:ad:ef:ca:ec:ca:7e:e0:69:af: 04:7d:e7:e0:20:9f:ed:a7:26:12:cb:9f:98:b8:69: 50:16:77:29:2d:3f:52:8a:1e:df:1c:52:99:35:f1: 51:ef:13:2e:b0:03:ba:b4:18:45:d5:db:28:61:89: 55:11:9d:98:17:d0:0b:26:ac:0d:31:ab:b8:8a:4a: 34:92:6b:ae:75:d5:ab:b9:48:85:6e:16:6a:48:3a: 2d:24:a7:5c:dc:5d:8d:ff:ff:44:7a:d2:b2:3a:9a: fb:c0:1f:2a:e0:b9:6d:8a:c9:78:2f:42:36:dd:09: 64:70:11:52:af:d6:c7:2f:71:96:b8:1d:8c:a1:69: b4:78:19:13:0b:17:51:99:ee:5e:28:98:6b:5a:ad: c5:b4:fd:a7:25:4e:fb:11:e3:46:29:e6:40:f1:1e: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BC:18:2F:70:A2:21:98:CC:40:14:5F:FA:D0:52:EE:60:FD:D2:A7 X509v3 Authority Key Identifier: keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6f:0d:27:c8:4e:c4:eb:9f:e5:0d:e6:5c:3d:c7:77:5d:1e: 39:2f:7c:39:a8:b7:1c:c0:b3:f3:b8:f3:5a:b7:e4:e9:d3:ca: f6:06:d8:48:8b:6f:5f:a9:c1:bd:8b:58:5b:f7:07:35:a6:2d: b1:98:b4:63:f8:53:1b:4b:ff:b9:e3:d6:68:9c:d2:5e:6d:f8: 37:52:df:9c:93:9e:e9:68:1d:bb:a3:69:e4:d8:17:52:fd:5f: 5d:0e:be:79:e1:fa:e8:d7:54:60:cc:ac:a2:4a:fd:09:73:92: de:30:82:b6:3b:f4:25:98:53:e1:f8:ba:2c:67:c5:dd:51:57: c1:6d:1f:f2:45:1c:9b:37:eb:2a:60:52:aa:9f:05:20:37:62: 88:89:ca:a0:b5:88:55:15:42:a2:06:db:00:9a:61:fc:e0:91: 1b:1d:9b:41:20:97:9e:b0:2f:9e:96:59:7f:dd:7f:c4:06:06: c3:8e:0b:cd:d5:80:b4:23:b2:71:74:8b:3d:19:b6:66:43:64: f0:27:62:07:3c:6c:cb:4c:59:09:0b:e5:af:62:3a:fe:0b:f3: 75:87:db:57:a1:92:3d:7f:7e:f5:d9:f4:00:3a:83:99:d5:90: d4:b3:a7:39:7e:ae:f7:63:54:fd:7f:cf:32:30:4e:f7:34:00: af:8f:e9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMeS3j1epOLm0mHJ4u9CUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh YmZjNDgwHhcNMjUxMjE4MTYwMTI5WhcNMjUxMjE5MTYwMTI5WjAzMTEwLwYDVQQD Eyg0Y2JjMTgyZjcwYTIyMTk4Y2M0MDE0NWZmYWQwNTJlZTYwZmRkMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqLKDBvIHv8eQ8+FDGuqfXo1OwrG F9E1nxITWAp3uxqQgi7xHF4xKlKfU7Nu9jMbFWCoafAMBosKFZ3LgeBgtZdwwW2d U7ZhsPoLtUeozPjCBV9D0dUTgGZQdZ9Y3NWt78rsyn7gaa8EfefgIJ/tpyYSy5+Y uGlQFncpLT9Sih7fHFKZNfFR7xMusAO6tBhF1dsoYYlVEZ2YF9ALJqwNMau4iko0 kmuuddWruUiFbhZqSDotJKdc3F2N//9EetKyOpr7wB8q4Lltisl4L0I23QlkcBFS r9bHL3GWuB2MoWm0eBkTCxdRme5eKJhrWq3FtP2nJU77EeNGKeZA8R6qGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEy8GC9woiGYzEAUX/rQUu5g/dKnMB8GA1UdIwQY MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3 LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG8NJ8hO xOuf5Q3mXD3Hd10eOS98Oai3HMCz87jzWrfk6dPK9gbYSItvX6nBvYtYW/cHNaYt sZi0Y/hTG0v/uePWaJzSXm34N1LfnJOe6Wgdu6Np5NgXUv1fXQ6+eeH66NdUYMys okr9CXOS3jCCtjv0JZhT4fi6LGfF3VFXwW0f8kUcmzfrKmBSqp8FIDdiiInKoLWI VRVCogbbAJph/OCRGx2bQSCXnrAvnpZZf91/xAYGw44LzdWAtCOycXSLPRm2ZkNk 8CdiBzxsy0xZCQvlr2I6/gvzdYfbV6GSPX9+9dn0ADqDmdWQ1LOnOX6u92NU/X/P MjBO9zQAr4/prA== -----END CERTIFICATE-----Generated at Thu Dec 18 19:05:37 2025 by rpki-client