This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json) Hash identifier: kNyfC5u78HpoojfWjxA8JQ+/uofVlTIqtq4iMa1Xg8A= Subject key identifier: 57:26:B8:37:42:33:37:0C:16:51:7D:86:77:F3:7C:7F:80:FA:06:A3 Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6 Certificate serial: 019B3F11E00FB31B26B60D9593BD798BCCF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft Manifest number: 07C1 Signing time: Sun 21 Dec 2025 04:01:34 +0000 Manifest this update: Sun 21 Dec 2025 04:01:34 +0000 Manifest next update: Mon 22 Dec 2025 04:01:34 +0000 Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: MMTCo9aF5y8DV2UaWmShNh0uCHJsWOK3snA2Rt9ljkM=) 2: BJSflswBbF0KTW1WxnqGispYE6A.roa (hash: 0G9L1AGhPY7c7LWy6WEMdnKFLYng4LvVWndIKcOm2KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:e0:0f:b3:1b:26:b6:0d:95:93:bd:79:8b:cc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6 Validity Not Before: Dec 21 04:01:34 2025 GMT Not After : Dec 22 04:01:34 2025 GMT Subject: CN=5726b8374233370c16517d8677f37c7f80fa06a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:81:de:e6:46:59:0e:1b:cd:69:22:6d:a6: a2:8d:ac:da:07:ac:8e:11:69:10:87:ee:14:93:cc: d3:25:b0:23:7b:d8:5a:f0:bb:78:36:d7:55:5f:02: ee:cb:b0:b2:5b:d5:5a:2a:84:bd:d6:dc:33:9f:28: b7:02:75:57:f4:ee:c1:c9:15:b9:90:36:55:83:57: 3d:7c:15:67:51:52:55:d4:4b:c3:22:9c:80:ef:5f: 12:ab:4d:af:6a:ed:50:52:8d:10:dd:e6:5e:6a:11: a4:c0:fa:ea:5f:6a:a2:fb:ad:18:f8:ec:86:4c:96: 10:05:79:e4:6f:d1:66:9b:ed:80:c9:9c:e1:70:16: 44:36:cb:69:2a:2e:8c:23:7d:4d:9d:49:82:78:de: 4e:79:24:ec:6d:21:b0:ad:83:67:2b:a0:20:14:3e: 4e:fc:22:02:f6:5f:50:84:95:17:71:15:f8:7a:3c: 00:36:c5:ff:a4:f2:56:97:0c:42:4b:dd:35:6b:b5: f0:be:d9:43:f6:b1:68:6a:2a:a4:d0:13:f1:31:6a: 2a:61:80:91:be:75:03:f9:35:57:d8:f0:d9:53:ec: 6e:e7:34:50:5d:52:b4:6e:5e:a5:29:59:72:21:84: 77:e9:8c:db:a2:2f:cd:c7:c3:10:3e:50:7d:34:e3: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:26:B8:37:42:33:37:0C:16:51:7D:86:77:F3:7C:7F:80:FA:06:A3 X509v3 Authority Key Identifier: keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:54:77:51:6f:63:5e:73:e4:58:1d:18:74:02:3c:58:e1:93: 5f:22:5d:f2:2a:ec:51:0f:51:37:f0:9f:5b:2d:40:df:15:1a: 69:9c:21:4a:1c:4f:fb:68:8c:a7:25:6a:96:e0:44:18:6a:4f: ae:5e:07:df:ef:ce:65:35:41:95:9c:7a:ba:58:59:4b:aa:ec: 1e:ea:36:98:40:d1:25:6e:2d:4f:82:ef:a4:bb:7c:8b:59:21: 3e:fb:a3:c9:bf:b0:7f:22:6a:30:bd:55:00:34:b1:ce:3f:2f: 86:95:ad:ce:a7:81:c8:9c:b0:d3:83:d6:e4:25:c8:d4:52:b3: 19:95:b0:5f:b4:57:b0:48:02:27:2d:6e:5f:65:bd:40:55:51: 19:fc:60:da:cb:18:76:29:4b:4c:3b:4d:40:f9:9a:3c:29:ea: 8b:13:93:d6:3e:66:c7:bb:bb:35:62:0f:f6:93:b0:5a:b4:e3: e9:56:de:6b:73:83:ed:45:3f:e9:36:29:90:da:a8:45:d0:ac: 80:ab:ad:ba:aa:8b:07:92:53:3c:a5:8e:35:f1:33:a7:41:0c: 41:65:2f:97:79:ca:ae:33:6d:37:d5:c9:b5:c6:3a:61:de:a8: 61:f9:e7:e5:dc:ed:45:04:03:02:c7:98:a3:f5:cd:2c:a4:83: a0:40:a1:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EeAPsxsmtg2Vk715i8zzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2 MDNlZjYwHhcNMjUxMjIxMDQwMTM0WhcNMjUxMjIyMDQwMTM0WjAzMTEwLwYDVQQD Eyg1NzI2YjgzNzQyMzMzNzBjMTY1MTdkODY3N2YzN2M3ZjgwZmEwNmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSSB3uZGWQ4bzWkibaaijazaB6yO EWkQh+4Uk8zTJbAje9ha8Lt4NtdVXwLuy7CyW9VaKoS91twznyi3AnVX9O7ByRW5 kDZVg1c9fBVnUVJV1EvDIpyA718Sq02vau1QUo0Q3eZeahGkwPrqX2qi+60Y+OyG TJYQBXnkb9Fmm+2AyZzhcBZENstpKi6MI31NnUmCeN5OeSTsbSGwrYNnK6AgFD5O /CIC9l9QhJUXcRX4ejwANsX/pPJWlwxCS901a7XwvtlD9rFoaiqk0BPxMWoqYYCR vnUD+TVX2PDZU+xu5zRQXVK0bl6lKVlyIYR36Yzboi/Nx8MQPlB9NOP8AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcmuDdCMzcMFlF9hnfzfH+A+gajMB8GA1UdIwQY MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1R3UW9j XnPkWB0YdAI8WOGTXyJd8irsUQ9RN/CfWy1A3xUaaZwhShxP+2iMpyVqluBEGGpP rl4H3+/OZTVBlZx6ulhZS6rsHuo2mEDRJW4tT4LvpLt8i1khPvujyb+wfyJqML1V ADSxzj8vhpWtzqeByJyw04PW5CXI1FKzGZWwX7RXsEgCJy1uX2W9QFVRGfxg2ssY dilLTDtNQPmaPCnqixOT1j5mx7u7NWIP9pOwWrTj6Vbea3OD7UU/6TYpkNqoRdCs gKutuqqLB5JTPKWONfEzp0EMQWUvl3nKrjNtN9XJtcY6Yd6oYfnn5dztRQQDAseY o/XNLKSDoEChVw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:36:28 2025 by rpki-client