This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft File: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json) Hash identifier: GFhOZxPtl0I7hxGE7lKLe9+1pOyVvYqrZokFtOyS3AI= Subject key identifier: 34:4C:11:B8:1F:06:1F:FC:D4:A9:12:91:55:93:EA:D8:AA:7C:98:C6 Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D Certificate issuer: /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d Certificate serial: 019AF3C061F6C5660C38F65AD707A88B851C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft Manifest number: 169E Signing time: Sat 06 Dec 2025 13:01:02 +0000 Manifest this update: Sat 06 Dec 2025 13:01:02 +0000 Manifest next update: Sun 07 Dec 2025 13:01:02 +0000 Files and hashes: 1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: UEuEaP6MtzU5Kju8r1btUDhdaxiaW6TWwQ63YQk76K0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:61:f6:c5:66:0c:38:f6:5a:d7:07:a8:8b:85:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d Validity Not Before: Dec 6 13:01:02 2025 GMT Not After : Dec 7 13:01:02 2025 GMT Subject: CN=344c11b81f061ffcd4a912915593ead8aa7c98c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:75:27:ff:6d:40:99:4c:ae:cc:05:dc:f5: a7:31:ff:bf:11:b2:a9:b1:1c:d4:ef:52:92:e5:7c: d5:c7:6e:97:aa:09:bc:9e:5e:39:83:ba:f0:61:3e: bf:1e:37:93:bb:e7:76:74:72:2b:72:4a:9d:6a:f8: 6f:1e:03:3a:7b:d3:48:99:0d:1a:c4:d3:58:4f:63: ec:03:34:5c:cd:75:d5:f1:d0:27:8d:0a:db:91:c8: 65:c2:15:9d:19:27:e2:07:d1:b4:2d:e1:55:22:ba: b0:86:4d:98:56:71:26:c5:5c:50:d8:6e:3a:95:f3: bd:44:4c:79:5a:32:39:c7:e6:d9:83:d3:f5:00:cc: 82:1d:71:c1:da:6d:1b:af:34:af:d0:d6:27:d7:fe: 6e:dc:fa:8f:67:d1:47:fc:a3:1f:5c:d3:3c:28:31: 6a:44:05:2d:0b:da:52:e1:93:51:84:99:88:49:be: bb:f2:92:94:2d:06:9c:5e:82:4a:7e:98:6f:15:9f: 1d:c5:20:d3:0f:a8:da:fa:9b:6d:4c:8f:a4:b6:a7: 8f:01:0e:8e:c3:e1:86:3e:e5:f1:23:1d:e4:ca:13: 15:32:e5:f3:63:3e:d4:c5:f9:ed:58:61:c2:3f:8e: 67:73:23:4d:2c:b4:5e:0e:9a:bd:46:5f:80:29:55: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4C:11:B8:1F:06:1F:FC:D4:A9:12:91:55:93:EA:D8:AA:7C:98:C6 X509v3 Authority Key Identifier: keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0d:4e:62:49:a6:b5:d5:a5:56:41:62:6f:9a:21:08:8e:db: 14:be:54:d4:df:d4:a5:74:8b:21:5c:62:4a:40:b3:c0:02:f5: 7d:83:67:ba:f6:35:ae:44:ff:98:b1:0a:fb:d8:cc:b7:62:23: a8:72:81:9c:98:d5:ae:46:76:b8:cb:16:b2:96:7d:ca:a4:ff: 9f:86:17:fa:1a:b3:bd:b9:5e:3d:39:54:c1:8a:24:4e:08:70: bf:c3:04:01:44:18:80:64:ca:7e:54:b0:7d:54:c4:13:aa:3f: ff:14:0e:7a:01:6d:d3:98:90:28:ac:fb:58:3d:6d:bf:ca:be: df:d8:57:6b:4a:ac:3c:27:94:5e:c0:5e:8b:a4:f3:88:10:97: ab:4b:39:3a:9e:c3:be:db:cf:b0:ea:1d:f0:b3:ab:48:bf:26: c6:fb:8a:8c:ec:f1:92:ec:04:08:e6:de:88:b3:df:4e:8f:69: b2:4d:68:4a:b3:06:c5:97:29:c4:12:91:4b:f7:1c:7d:e6:e7: b2:c9:ac:96:6c:d6:bd:d1:f3:b7:fa:c6:89:cd:9a:ed:6b:8a: 33:db:66:39:79:d2:ad:32:be:21:87:d3:ef:3f:4e:26:78:8f: 00:b6:1f:00:47:fb:0c:9c:eb:63:30:17:f4:d5:4b:7e:01:45: 11:4b:92:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGH2xWYMOPZa1weoi4UcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGJkNGQ1NjgyY2U2MDhlMjdjYmUyMjFhMjY3N2VjYjUw NzQ5N2QwHhcNMjUxMjA2MTMwMTAyWhcNMjUxMjA3MTMwMTAyWjAzMTEwLwYDVQQD EygzNDRjMTFiODFmMDYxZmZjZDRhOTEyOTE1NTkzZWFkOGFhN2M5OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokt1J/9tQJlMrswF3PWnMf+/EbKp sRzU71KS5XzVx26Xqgm8nl45g7rwYT6/HjeTu+d2dHIrckqdavhvHgM6e9NImQ0a xNNYT2PsAzRczXXV8dAnjQrbkchlwhWdGSfiB9G0LeFVIrqwhk2YVnEmxVxQ2G46 lfO9REx5WjI5x+bZg9P1AMyCHXHB2m0brzSv0NYn1/5u3PqPZ9FH/KMfXNM8KDFq RAUtC9pS4ZNRhJmISb678pKULQacXoJKfphvFZ8dxSDTD6ja+pttTI+ktqePAQ6O w+GGPuXxIx3kyhMVMuXzYz7UxfntWGHCP45ncyNNLLReDpq9Rl+AKVWEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRMEbgfBh/81KkSkVWT6tiqfJjGMB8GA1UdIwQY MBaAFNAL1NVoLOYI4ny+Ihomd+y1B0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2Qt ZWI5MzAwNjcyYWU0LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2QtZWI5MzAwNjcyYWU0 LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQ1OYkmm tdWlVkFib5ohCI7bFL5U1N/UpXSLIVxiSkCzwAL1fYNnuvY1rkT/mLEK+9jMt2Ij qHKBnJjVrkZ2uMsWspZ9yqT/n4YX+hqzvblePTlUwYokTghwv8MEAUQYgGTKflSw fVTEE6o//xQOegFt05iQKKz7WD1tv8q+39hXa0qsPCeUXsBei6TziBCXq0s5Op7D vtvPsOod8LOrSL8mxvuKjOzxkuwECObeiLPfTo9psk1oSrMGxZcpxBKRS/ccfebn ssmslmzWvdHzt/rGic2a7WuKM9tmOXnSrTK+IYfT7z9OJniPALYfAEf7DJzrYzAX 9NVLfgFFEUuSyg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:44 2025 by rpki-client