This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft File: aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft (raw, json) Hash identifier: EMJH1WUJDbu2p56iJuVaA7zxEtF8rkZUiRj46d3GXDY= Subject key identifier: 1F:07:17:C0:4E:35:92:E8:9A:CE:01:44:FB:2A:7D:3D:D5:6D:43:61 Authority key identifier: 69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65 Certificate issuer: /CN=6951d3a68f40008ad8c520745ca0f309ea81e965 Certificate serial: 019AF2E43893B940403A6ACA65204965381E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft Manifest number: C1 Signing time: Sat 06 Dec 2025 09:00:34 +0000 Manifest this update: Sat 06 Dec 2025 09:00:34 +0000 Manifest next update: Sun 07 Dec 2025 09:00:34 +0000 Files and hashes: 1: aVHTpo9AAIrYxSB0XKDzCeqB6WU.crl (hash: ta4PE8rrxvwO+FQiaFcvuZCf9DOZNnP3rewJsmtXWnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft rsync://rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:38:93:b9:40:40:3a:6a:ca:65:20:49:65:38:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6951d3a68f40008ad8c520745ca0f309ea81e965 Validity Not Before: Dec 6 09:00:34 2025 GMT Not After : Dec 7 09:00:34 2025 GMT Subject: CN=1f0717c04e3592e89ace0144fb2a7d3dd56d4361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:f9:48:75:bb:8c:c2:20:8e:bf:3d:1f:95: 8d:87:6f:16:f7:f8:d5:50:02:6f:49:f2:f3:2b:ae: 6a:8c:17:b4:5f:0b:ee:93:03:c7:a1:7d:16:6b:28: 91:21:ef:5c:1b:38:fd:91:22:e1:6b:94:dd:2b:eb: 8f:cc:ed:a0:62:a0:c0:71:a5:9c:5b:d6:21:65:06: 9f:f8:df:eb:6c:42:1a:6f:7b:44:ea:d5:ef:1a:0b: f3:a3:f1:8f:10:9d:74:fe:77:07:64:b8:7c:c3:bc: 60:0a:43:a8:1d:dd:2d:82:c3:d0:a3:c7:d1:87:74: 24:06:2c:81:1d:b9:95:ad:c7:79:ec:8b:2a:17:0a: 3e:2c:e9:ef:99:d5:9b:3b:e1:09:25:24:1d:4e:00: 24:5d:46:e5:6f:a3:04:47:f1:b0:95:88:3b:ba:b0: ce:1d:f5:04:da:da:04:89:ba:c5:d0:d3:3d:51:33: 7d:35:e6:4a:d1:a4:ba:18:15:ea:c2:80:48:7c:68: a7:0d:77:b7:7e:de:c1:a9:27:c9:00:0e:97:f9:f0: 3a:d6:d7:3a:9c:99:a3:19:5c:7e:01:10:db:ec:54: 33:56:7f:3b:9f:ad:8d:43:d1:75:6b:73:e2:37:82: 62:d7:83:98:84:51:60:d5:e5:87:e0:f4:48:a4:3f: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:07:17:C0:4E:35:92:E8:9A:CE:01:44:FB:2A:7D:3D:D5:6D:43:61 X509v3 Authority Key Identifier: keyid:69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:cc:36:94:4b:e8:86:d4:88:d9:06:3e:84:d4:a7:29:a5:1a: 77:ab:c4:e7:08:11:91:52:a7:b2:c5:86:bc:67:11:e9:ef:2d: a7:66:39:ec:e3:0c:04:06:92:f9:08:52:fa:87:41:cd:41:91: 20:06:87:40:41:b2:09:4f:34:d9:b9:35:f3:11:7e:c8:b0:47: e0:0b:c6:32:01:1f:6e:e7:3b:9b:ac:cd:06:c5:45:48:bb:34: 1f:c8:5c:1b:8b:c4:5f:9c:f5:b9:78:80:e7:2b:ad:8c:56:b2: cc:fe:02:d0:71:6f:06:58:4c:f8:63:ec:58:1d:c0:c4:e8:46: 4b:1f:ff:0f:50:f0:0b:17:23:34:33:6b:62:bf:29:97:48:5e: c7:16:a8:47:25:96:56:03:6d:1a:fa:09:d1:92:fc:d5:c9:c4: c8:c6:cb:31:f8:fa:1a:3a:95:a4:90:2b:c1:22:6d:ca:ea:af: c1:2a:cf:13:17:71:f7:ec:03:2b:43:ca:dc:21:87:54:76:1a: dd:39:6a:fd:a0:47:7d:81:29:fd:14:b2:e9:f1:3f:68:83:8d: 8a:94:9c:05:3b:69:b8:f8:9a:4d:e9:55:a2:44:e9:71:50:58: 36:20:a4:78:48:32:3d:d8:32:1a:0a:30:d2:f9:a8:a6:4d:30: 06:5e:34:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DiTuUBAOmrKZSBJZTgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTFkM2E2OGY0MDAwOGFkOGM1MjA3NDVjYTBmMzA5ZWE4 MWU5NjUwHhcNMjUxMjA2MDkwMDM0WhcNMjUxMjA3MDkwMDM0WjAzMTEwLwYDVQQD EygxZjA3MTdjMDRlMzU5MmU4OWFjZTAxNDRmYjJhN2QzZGQ1NmQ0MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYP5SHW7jMIgjr89H5WNh28W9/jV UAJvSfLzK65qjBe0XwvukwPHoX0WayiRIe9cGzj9kSLha5TdK+uPzO2gYqDAcaWc W9YhZQaf+N/rbEIab3tE6tXvGgvzo/GPEJ10/ncHZLh8w7xgCkOoHd0tgsPQo8fR h3QkBiyBHbmVrcd57IsqFwo+LOnvmdWbO+EJJSQdTgAkXUblb6MER/GwlYg7urDO HfUE2toEibrF0NM9UTN9NeZK0aS6GBXqwoBIfGinDXe3ft7BqSfJAA6X+fA61tc6 nJmjGVx+ARDb7FQzVn87n62NQ9F1a3PiN4Ji14OYhFFg1eWH4PRIpD/SjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8HF8BONZLoms4BRPsqfT3VbUNhMB8GA1UdIwQY MBaAFGlR06aPQACK2MUgdFyg8wnqgellMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZIVHBvOUFBSXJZeFNCMFhLRHpDZXFCNldVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZWFmMDUtNmEwMy00MGIxLTk3YmIt YTI1MjExMTRhNzJlLzEvYVZIVHBvOUFBSXJZeFNCMFhLRHpDZXFCNldVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZWFmMDUtNmEwMy00MGIxLTk3YmItYTI1MjExMTRhNzJl LzEvYVZIVHBvOUFBSXJZeFNCMFhLRHpDZXFCNldVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcw2lEvo htSI2QY+hNSnKaUad6vE5wgRkVKnssWGvGcR6e8tp2Y57OMMBAaS+QhS+odBzUGR IAaHQEGyCU802bk18xF+yLBH4AvGMgEfbuc7m6zNBsVFSLs0H8hcG4vEX5z1uXiA 5yutjFayzP4C0HFvBlhM+GPsWB3AxOhGSx//D1DwCxcjNDNrYr8pl0hexxaoRyWW VgNtGvoJ0ZL81cnEyMbLMfj6GjqVpJArwSJtyuqvwSrPExdx9+wDK0PK3CGHVHYa 3Tlq/aBHfYEp/RSy6fE/aIONipScBTtpuPiaTelVokTpcVBYNiCkeEgyPdgyGgow 0vmopk0wBl40Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:21 2025 by rpki-client