This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json) Hash identifier: t2DidvSn3BZw5kivR75jeLfv1dctupAgx+Bcb9xZ+J8= Subject key identifier: 3B:1F:F0:DB:32:2A:D2:37:61:AB:45:92:E7:82:3F:AA:06:CB:12:5C Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6 Certificate serial: 019AF1D2151792313D173AFD88BC8F94B88C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft Manifest number: 0799 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: RzotgunW382imjnQ+2BtwlRmO6LNotw939lH8YhUzvo=) 2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:15:17:92:31:3d:17:3a:fd:88:bc:8f:94:b8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=3b1ff0db322ad23761ab4592e7823faa06cb125c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:ab:f4:e5:30:68:2c:91:76:63:0e:66:82: be:02:06:43:22:af:4f:af:05:75:ea:67:b7:cb:61: e1:87:86:88:a2:77:5d:59:e2:81:35:ff:e6:3c:70: 7f:ef:b8:e0:7b:8f:f2:4d:3e:d7:24:eb:08:da:2a: f2:41:e8:d3:94:20:9f:8d:44:fd:63:ab:16:7e:dc: 4c:f5:b1:1a:9a:19:9c:ef:8e:8a:60:9d:ab:5e:d4: ea:71:62:3d:1c:02:f3:15:88:7d:00:a0:5d:4d:2d: e6:fc:e9:0c:46:84:84:26:e3:8f:46:f6:ae:3c:46: ac:eb:76:36:78:9b:24:9a:31:8a:17:a0:fb:8f:61: fd:66:38:82:ec:51:e4:e8:80:c3:2c:dd:99:cd:51: 3a:3f:14:e7:e6:6c:f1:97:3e:48:38:89:10:01:24: ce:c8:a8:c3:ec:51:94:32:00:30:06:86:d8:5b:a7: da:bd:75:4b:96:18:df:69:92:81:73:e6:f2:ed:4c: bb:bd:ed:4b:bd:25:9d:71:53:5b:ab:6a:d7:b2:a9: 6a:cc:49:a7:42:44:f9:02:9c:b1:46:c0:5e:e8:2d: 53:da:86:f0:ce:a9:ec:03:07:eb:0a:47:9d:8b:d2: dd:ce:38:23:d3:02:38:28:ec:b6:5c:b4:07:24:f4: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1F:F0:DB:32:2A:D2:37:61:AB:45:92:E7:82:3F:AA:06:CB:12:5C X509v3 Authority Key Identifier: keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:38:e0:9c:6f:f4:76:2c:e7:96:19:1a:47:00:4f:9d:06:8f: 80:27:89:99:e5:c8:45:c3:4e:c5:8a:6a:f3:43:6a:f4:c9:62: a3:54:b7:b0:21:c7:05:46:b2:30:41:01:c1:de:d0:c1:d6:d2: 36:51:43:15:76:bb:61:6e:4a:e0:63:b3:fe:d8:67:35:94:f9: 4c:bb:45:5b:41:4b:a2:1c:bb:2e:c7:de:f9:57:74:7b:af:16: da:48:a1:8f:48:5f:fb:f7:1e:3f:46:d5:b6:a1:93:85:81:2b: 03:52:f3:6b:ae:83:e2:f1:db:e5:55:a3:1b:6b:4c:a6:98:9c: e4:d2:ad:ae:f7:ae:05:c0:82:30:4e:36:86:fc:e0:9a:16:04: 57:1a:81:10:cc:10:8d:d2:61:62:29:73:85:0c:5a:57:48:25: aa:33:49:2f:50:b0:8a:dc:aa:ec:dd:e7:54:c7:b2:a7:ec:25: c5:b8:aa:34:81:16:65:ff:21:a8:65:2c:0f:ba:63:43:fe:b7: 16:59:2d:77:6d:d1:6a:a3:7e:0b:b6:07:5c:bc:10:06:3a:1b: 25:65:26:d9:c2:6a:99:d7:e7:8c:0e:8a:cb:59:49:16:2b:39: e6:6a:9d:4d:da:fe:03:53:c2:49:2b:be:f8:12:46:33:77:8a: db:09:41:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hUXkjE9Fzr9iLyPlLiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2 MDNlZjYwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EygzYjFmZjBkYjMyMmFkMjM3NjFhYjQ1OTJlNzgyM2ZhYTA2Y2IxMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriGr9OUwaCyRdmMOZoK+AgZDIq9P rwV16me3y2Hhh4aIonddWeKBNf/mPHB/77jge4/yTT7XJOsI2iryQejTlCCfjUT9 Y6sWftxM9bEamhmc746KYJ2rXtTqcWI9HALzFYh9AKBdTS3m/OkMRoSEJuOPRvau PEas63Y2eJskmjGKF6D7j2H9ZjiC7FHk6IDDLN2ZzVE6PxTn5mzxlz5IOIkQASTO yKjD7FGUMgAwBobYW6favXVLlhjfaZKBc+by7Uy7ve1LvSWdcVNbq2rXsqlqzEmn QkT5ApyxRsBe6C1T2obwzqnsAwfrCkedi9Ldzjgj0wI4KOy2XLQHJPRbmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsf8NsyKtI3YatFkueCP6oGyxJcMB8GA1UdIwQY MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTjgnG/0 diznlhkaRwBPnQaPgCeJmeXIRcNOxYpq80Nq9Mlio1S3sCHHBUayMEEBwd7QwdbS NlFDFXa7YW5K4GOz/thnNZT5TLtFW0FLohy7Lsfe+Vd0e68W2kihj0hf+/ceP0bV tqGThYErA1Lza66D4vHb5VWjG2tMppic5NKtrveuBcCCME42hvzgmhYEVxqBEMwQ jdJhYilzhQxaV0glqjNJL1Cwityq7N3nVMeyp+wlxbiqNIEWZf8hqGUsD7pjQ/63 Flktd23RaqN+C7YHXLwQBjobJWUm2cJqmdfnjA6Ky1lJFis55mqdTdr+A1PCSSu+ +BJGM3eK2wlB9g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:38 2025 by rpki-client