This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json) Hash identifier: HZE+DV74l6yFSG8HnWVfTRkvWWHIRaOyH2WhdI2vZh8= Subject key identifier: A3:36:E5:2D:7E:9D:54:A5:3A:C6:66:4E:B3:0F:A9:97:05:92:3A:28 Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f Certificate serial: 019B3D22FE20052239A23D1D3CBC78600004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft Manifest number: 10C4 Signing time: Sat 20 Dec 2025 19:01:02 +0000 Manifest this update: Sat 20 Dec 2025 19:01:02 +0000 Manifest next update: Sun 21 Dec 2025 19:01:02 +0000 Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: xg6lTdF7sNSJmKZaVHxGOAjBj0Kn4Jh0FpQfLFXnk+I=) 2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:fe:20:05:22:39:a2:3d:1d:3c:bc:78:60:00:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f Validity Not Before: Dec 20 19:01:02 2025 GMT Not After : Dec 21 19:01:02 2025 GMT Subject: CN=a336e52d7e9d54a53ac6664eb30fa99705923a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:7c:b9:cf:9a:1e:1f:2d:09:93:51:2c:50: 53:d0:7d:dd:66:c2:85:25:60:69:92:5a:8c:88:d6: 57:1c:a8:df:14:75:aa:6b:87:c2:24:13:7c:4f:5a: 1d:be:b5:94:33:23:7f:a8:3a:c0:66:ef:2b:89:c0: 04:89:f6:c8:30:9f:8c:f3:18:0c:80:c1:c1:ed:47: ba:a4:7f:18:28:1d:ca:64:53:6c:ea:53:c4:a9:d0: 45:fa:b9:ea:b4:c5:2f:be:58:0a:bb:97:de:b1:f9: fe:80:82:da:0d:f6:b1:98:80:1f:e4:26:25:f5:f7: 03:ba:0b:52:e0:56:5f:79:7b:14:5b:49:d5:23:4c: 0b:e5:10:54:b6:0d:ed:a2:05:0f:67:b4:ef:36:c9: ff:4a:54:6d:33:8f:43:3b:b0:31:15:7d:8f:2e:e7: 45:a3:c0:67:3e:89:9c:6e:6d:57:b3:d9:18:cb:df: cf:6a:4c:fc:4a:88:6e:cf:49:3a:3f:76:df:41:de: 88:2f:e6:10:04:77:5a:30:45:6b:5d:99:fe:76:cc: 0e:e9:03:28:c0:b2:ce:58:d1:9c:2d:97:ff:25:66: a9:e6:eb:79:15:78:b6:b3:a2:62:b7:4f:5c:5f:bd: 0d:ef:f2:60:44:da:b0:58:50:dd:ca:55:b9:06:50: 92:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:36:E5:2D:7E:9D:54:A5:3A:C6:66:4E:B3:0F:A9:97:05:92:3A:28 X509v3 Authority Key Identifier: keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e6:95:9e:32:9c:61:2a:96:8a:11:77:fe:ff:a8:bd:01:7d: c1:14:02:62:64:8c:f0:c0:d1:47:19:90:eb:f1:17:2d:bd:f2: 29:58:3b:ff:69:d6:4f:ed:7e:60:85:6e:14:ff:e1:da:0f:48: d3:26:98:1d:87:9a:fb:39:f1:2f:d0:56:9c:ac:69:57:cd:93: 15:0c:4b:04:37:54:df:f8:c9:fd:1f:a2:c4:79:ae:9b:04:f8: 2b:2a:e6:d2:af:53:e4:e5:63:0b:c5:13:0e:1b:80:cf:c8:92: 96:8f:79:9a:df:94:e5:7a:a1:c7:e3:24:97:e2:18:77:6b:57: 58:d6:50:50:7f:d8:ac:9f:1c:66:d6:67:78:a5:2f:be:7d:eb: b3:cc:b2:6e:85:3f:ac:41:3d:62:f6:c3:dc:7c:12:22:fc:c3: ae:2d:a6:4b:ff:5b:c2:c0:f3:69:c9:87:8b:db:de:7c:d1:32: c9:4a:11:3a:15:dd:0b:1b:aa:0f:c4:ef:76:72:0f:8e:33:a4: 72:36:8d:f5:6c:6b:e2:e4:69:55:eb:7f:47:dd:78:ca:b9:ff: f2:15:da:54:64:04:2a:bd:6d:a4:b4:13:73:bc:cc:0c:db:fb: bb:2c:3c:81:50:ef:fa:db:ad:96:52:27:4b:f5:04:95:de:b0: 90:3c:2d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iv4gBSI5oj0dPLx4YAAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh NTQ0NmYwHhcNMjUxMjIwMTkwMTAyWhcNMjUxMjIxMTkwMTAyWjAzMTEwLwYDVQQD EyhhMzM2ZTUyZDdlOWQ1NGE1M2FjNjY2NGViMzBmYTk5NzA1OTIzYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD58uc+aHh8tCZNRLFBT0H3dZsKF JWBpklqMiNZXHKjfFHWqa4fCJBN8T1odvrWUMyN/qDrAZu8ricAEifbIMJ+M8xgM gMHB7Ue6pH8YKB3KZFNs6lPEqdBF+rnqtMUvvlgKu5fesfn+gILaDfaxmIAf5CYl 9fcDugtS4FZfeXsUW0nVI0wL5RBUtg3togUPZ7TvNsn/SlRtM49DO7AxFX2PLudF o8BnPomcbm1Xs9kYy9/Pakz8Sohuz0k6P3bfQd6IL+YQBHdaMEVrXZn+dswO6QMo wLLOWNGcLZf/JWap5ut5FXi2s6Jit09cX70N7/JgRNqwWFDdylW5BlCS3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM25S1+nVSlOsZmTrMPqZcFkjooMB8GA1UdIwQY MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOaVnjKc YSqWihF3/v+ovQF9wRQCYmSM8MDRRxmQ6/EXLb3yKVg7/2nWT+1+YIVuFP/h2g9I 0yaYHYea+znxL9BWnKxpV82TFQxLBDdU3/jJ/R+ixHmumwT4Kyrm0q9T5OVjC8UT DhuAz8iSlo95mt+U5Xqhx+Mkl+IYd2tXWNZQUH/YrJ8cZtZneKUvvn3rs8yyboU/ rEE9YvbD3HwSIvzDri2mS/9bwsDzacmHi9vefNEyyUoROhXdCxuqD8TvdnIPjjOk cjaN9Wxr4uRpVet/R914yrn/8hXaVGQEKr1tpLQTc7zMDNv7uyw8gVDv+tutllIn S/UEld6wkDwt8A== -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:29 2025 by rpki-client