This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json) Hash identifier: 5Mvqs+6L6bx5eATcFxydluQnFGLF2e9xizanz/vNCXs= Subject key identifier: D8:61:BE:C6:EE:CF:84:09:04:A2:73:6E:B0:02:07:07:F8:15:E9:D5 Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0 Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0 Certificate serial: 019AF2773DA46018B5D171E8381A40FA7B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft Manifest number: 1628 Signing time: Sat 06 Dec 2025 07:01:32 +0000 Manifest this update: Sat 06 Dec 2025 07:01:32 +0000 Manifest next update: Sun 07 Dec 2025 07:01:32 +0000 Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: 9ZctwaZxzAaTRararTP+bZu4eK3VS79iLSTx7IXVaGM=) 2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3d:a4:60:18:b5:d1:71:e8:38:1a:40:fa:7b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0 Validity Not Before: Dec 6 07:01:32 2025 GMT Not After : Dec 7 07:01:32 2025 GMT Subject: CN=d861bec6eecf840904a2736eb0020707f815e9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:0e:b4:f5:64:ba:90:5f:59:0f:df:61:49: 11:ec:48:d0:4c:c8:d7:e2:90:5c:32:a1:8e:a5:04: ff:0c:b5:3f:84:60:d5:3d:d5:6e:79:47:b2:15:f7: b3:82:dd:17:94:5a:85:d1:9e:c7:ed:ac:d7:e7:16: e2:b8:56:ee:cb:37:b8:6a:88:84:7e:86:f1:b7:d5: c4:6d:09:37:bf:77:ee:32:b7:d2:3b:02:a5:dd:0e: 10:ae:34:b2:52:2f:6e:e9:a5:6a:33:27:cf:19:90: e7:33:7d:7d:6b:d8:fe:f0:ac:ab:b1:ee:d7:53:79: f8:9f:ce:c8:c6:9d:ab:ab:44:a6:1c:48:14:2f:75: 2f:a3:a4:d7:90:ce:c0:77:8f:a1:7d:25:07:a7:27: a7:a8:1c:b2:91:c3:20:01:9c:89:10:95:96:a3:6b: 9d:de:46:d6:f2:0f:97:b6:dd:67:33:65:4a:72:a3: 5c:40:5a:0c:d6:f6:4f:7e:90:a7:32:1a:c1:20:a1: 7e:3c:df:23:ac:8b:3f:91:a2:f9:bd:41:3c:6b:2e: 13:c8:23:1f:8e:91:a6:ce:2a:1f:89:27:68:96:07: 14:e6:a8:a4:a6:3d:b0:b8:08:c5:97:82:a1:ba:64: 3b:4e:ac:48:6e:1f:d1:16:2f:81:08:1b:57:f1:57: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:61:BE:C6:EE:CF:84:09:04:A2:73:6E:B0:02:07:07:F8:15:E9:D5 X509v3 Authority Key Identifier: keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:0b:70:4a:e4:a9:fe:89:25:e7:40:47:dc:65:85:b7:4c:59: f5:b9:78:47:3c:42:ab:0f:8f:2c:2c:12:c9:2f:32:9a:d4:b3: 2c:23:a2:c3:31:92:e8:0d:62:a5:92:0b:e0:b8:28:b1:0e:c0: 81:ef:ae:49:88:41:2d:c9:09:4c:4f:1b:1b:4d:d6:fe:ef:66: 45:77:c2:92:4a:f7:63:a2:56:bd:ab:77:2a:41:b6:45:bb:9c: 6d:36:61:a4:b6:d8:fe:47:d2:42:fb:61:65:cf:75:9a:47:d5: 04:61:6a:08:8f:66:9a:5b:f6:23:9e:10:ef:c0:52:69:27:fe: be:0d:e7:04:ef:2d:bf:47:3d:02:5c:00:b9:40:fa:89:60:b1: 7a:cc:d1:d1:ae:45:c3:e5:06:a0:42:59:db:e9:39:87:e2:36: 3d:f6:e8:8a:34:c4:18:24:d3:8a:b5:2a:42:9a:04:4e:57:60: f3:a7:1e:3f:0f:68:d3:8e:0b:c3:f1:07:6d:ac:d3:aa:01:50: 86:01:6f:67:20:70:0f:94:d2:74:a2:8b:9a:62:7b:d4:a5:7e: 43:83:11:68:77:6e:ed:7f:d8:51:30:2d:e0:d0:e8:21:c0:c9: e9:2a:f2:62:86:a8:a7:75:0a:a7:67:7b:80:57:d4:bd:07:58: 10:5b:15:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydz2kYBi10XHoOBpA+nsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDhkMmNhOGEyYjQzYjZjYWQyNWIyMjI2NTM1NGZlMzAz OTExYTAwHhcNMjUxMjA2MDcwMTMyWhcNMjUxMjA3MDcwMTMyWjAzMTEwLwYDVQQD EyhkODYxYmVjNmVlY2Y4NDA5MDRhMjczNmViMDAyMDcwN2Y4MTVlOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJQOtPVkupBfWQ/fYUkR7EjQTMjX 4pBcMqGOpQT/DLU/hGDVPdVueUeyFfezgt0XlFqF0Z7H7azX5xbiuFbuyze4aoiE fobxt9XEbQk3v3fuMrfSOwKl3Q4QrjSyUi9u6aVqMyfPGZDnM319a9j+8Kyrse7X U3n4n87Ixp2rq0SmHEgUL3Uvo6TXkM7Ad4+hfSUHpyenqByykcMgAZyJEJWWo2ud 3kbW8g+Xtt1nM2VKcqNcQFoM1vZPfpCnMhrBIKF+PN8jrIs/kaL5vUE8ay4TyCMf jpGmziofiSdolgcU5qikpj2wuAjFl4KhumQ7TqxIbh/RFi+BCBtX8Vd/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhhvsbuz4QJBKJzbrACBwf4FenVMB8GA1UdIwQY MBaAFAFI0sqKK0O2ytJbIiZTVP4wORGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjct MWJmODY4YTAzNTM4LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjctMWJmODY4YTAzNTM4 LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAtwSuSp /okl50BH3GWFt0xZ9bl4RzxCqw+PLCwSyS8ymtSzLCOiwzGS6A1ipZIL4LgosQ7A ge+uSYhBLckJTE8bG03W/u9mRXfCkkr3Y6JWvat3KkG2RbucbTZhpLbY/kfSQvth Zc91mkfVBGFqCI9mmlv2I54Q78BSaSf+vg3nBO8tv0c9AlwAuUD6iWCxeszR0a5F w+UGoEJZ2+k5h+I2PfboijTEGCTTirUqQpoETldg86cePw9o044Lw/EHbazTqgFQ hgFvZyBwD5TSdKKLmmJ71KV+Q4MRaHdu7X/YUTAt4NDoIcDJ6SryYoaop3UKp2d7 gFfUvQdYEFsVAw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:37 2025 by rpki-client