This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft File: aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json) Hash identifier: L1zZkHZyvF9BplNNnmgRnBvIiyKk9gCPzOe05/5Y+5g= Subject key identifier: E4:CD:29:DA:5A:A2:D5:99:96:C9:31:30:F0:4E:D0:90:F6:5B:D3:14 Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877 Certificate serial: 019AF0BEEFCC67EC921432FBB3A83DD165EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft Manifest number: 0871 Signing time: Fri 05 Dec 2025 23:00:36 +0000 Manifest this update: Fri 05 Dec 2025 23:00:36 +0000 Manifest next update: Sat 06 Dec 2025 23:00:36 +0000 Files and hashes: 1: PxyIfomodD9RHY4nPMUQ_8FG_F0.roa (hash: GQBwkJMiYlMRNPb5m5PsI1lq6MhgUy7JaZpjCwR+Ch8=) 2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: lH/10SKDAaQwO+Yn+p8/JCWL1hnYesEMdhF01c4GsQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ef:cc:67:ec:92:14:32:fb:b3:a8:3d:d1:65:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877 Validity Not Before: Dec 5 23:00:36 2025 GMT Not After : Dec 6 23:00:36 2025 GMT Subject: CN=e4cd29da5aa2d59996c93130f04ed090f65bd314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:28:98:30:dc:d3:20:72:43:41:27:78:70: e5:32:be:f5:bf:ad:c2:7f:ce:9e:76:8c:41:7e:89: 2b:2a:40:02:f9:29:c6:eb:4c:31:ca:9b:ad:0e:ca: 13:46:c4:a1:a3:29:e3:58:d2:f2:0f:e6:9c:07:db: fd:2d:d0:e5:b4:11:4a:2a:2e:d4:02:4d:db:c9:cb: 3b:08:8d:45:6d:44:51:a8:68:02:80:65:d4:1c:dd: 1e:ac:19:30:f3:22:e7:bf:c1:13:38:42:dd:6b:07: 52:8a:3c:9b:8e:b5:09:04:c2:8a:1c:f9:6b:44:53: 4e:2f:0e:a4:38:fd:ec:3c:5c:66:92:a1:c7:d7:40: 5b:6d:4a:b5:af:82:59:31:47:5d:08:c2:61:c8:70: 07:96:59:d8:30:3a:24:93:dc:f2:d0:85:d9:d8:f0: fe:c7:0c:50:e6:52:16:65:1f:b9:37:ff:7e:a4:3b: df:f0:b5:2f:43:0b:3f:22:da:68:bb:63:b5:89:4c: 26:bf:68:41:bd:f0:ee:92:92:4b:55:ee:4c:af:a4: e6:11:30:f9:d8:b2:cb:20:4b:4e:8f:6f:c5:fc:11: 17:fd:e5:5d:c8:b8:11:82:bd:e4:58:c5:4d:7c:02: 04:9b:7e:fe:fa:78:f1:86:3c:cb:21:aa:56:cb:cc: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CD:29:DA:5A:A2:D5:99:96:C9:31:30:F0:4E:D0:90:F6:5B:D3:14 X509v3 Authority Key Identifier: keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5c:b2:2f:6b:68:88:b9:63:4c:7f:41:e3:8f:3f:6b:65:4f: 23:a9:40:b7:fe:15:6d:fe:5e:bf:fb:06:ff:16:6f:77:9a:78: 82:80:d5:82:c1:52:9c:2d:68:e3:fa:f1:a0:7d:70:51:da:92: 41:75:ce:39:eb:5d:12:de:fd:1c:45:8d:e6:dc:7b:54:2a:1f: e5:45:11:6f:d5:23:e5:9c:bf:e4:0d:48:5a:dc:d9:7c:45:7d: a1:32:e8:6a:7d:37:4b:94:42:e3:68:18:d7:3c:00:5b:a7:be: f4:19:f7:14:cd:fe:5b:a4:4a:3e:76:8f:e0:0a:dd:df:a4:97: e1:23:07:fe:ae:db:23:52:bd:d3:c4:4a:a8:9e:5f:4e:c2:61: 88:09:07:55:99:c2:9c:79:44:6d:38:21:3c:31:4e:30:00:99: d3:d0:61:3b:90:9d:ff:11:71:f1:5f:09:db:4d:13:e9:de:f9: 72:02:e4:69:f6:bd:51:d0:0d:71:b3:3f:3b:7d:a2:e2:95:94: ce:02:c6:02:7d:fe:8e:d2:d7:3a:c6:d4:4a:4d:ec:14:20:1b: 33:8e:ca:ce:d3:a0:13:d9:ce:2e:f9:cf:26:d8:c9:b8:08:c0: e6:59:3a:d2:a1:e8:98:2a:66:e3:12:71:85:c4:1c:f0:59:e6: 8c:18:86:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvu/MZ+ySFDL7s6g90WXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTFkNDU1MWQyNmE1MWMwZjkyYjc3YzJkMzc4ZmIzNDc1 OGI4NzcwHhcNMjUxMjA1MjMwMDM2WhcNMjUxMjA2MjMwMDM2WjAzMTEwLwYDVQQD EyhlNGNkMjlkYTVhYTJkNTk5OTZjOTMxMzBmMDRlZDA5MGY2NWJkMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrwomDDc0yByQ0EneHDlMr71v63C f86edoxBfokrKkAC+SnG60wxyputDsoTRsShoynjWNLyD+acB9v9LdDltBFKKi7U Ak3bycs7CI1FbURRqGgCgGXUHN0erBkw8yLnv8ETOELdawdSijybjrUJBMKKHPlr RFNOLw6kOP3sPFxmkqHH10BbbUq1r4JZMUddCMJhyHAHllnYMDokk9zy0IXZ2PD+ xwxQ5lIWZR+5N/9+pDvf8LUvQws/Itpou2O1iUwmv2hBvfDukpJLVe5Mr6TmETD5 2LLLIEtOj2/F/BEX/eVdyLgRgr3kWMVNfAIEm37++njxhjzLIapWy8xwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTNKdpaotWZlskxMPBO0JD2W9MUMB8GA1UdIwQY MBaAFGlR1FUdJqUcD5K3fC03j7NHWLh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAt YTJlZGE5NDZlZDI5LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAtYTJlZGE5NDZlZDI5 LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVyyL2to iLljTH9B448/a2VPI6lAt/4Vbf5ev/sG/xZvd5p4goDVgsFSnC1o4/rxoH1wUdqS QXXOOetdEt79HEWN5tx7VCof5UURb9Uj5Zy/5A1IWtzZfEV9oTLoan03S5RC42gY 1zwAW6e+9Bn3FM3+W6RKPnaP4Ard36SX4SMH/q7bI1K908RKqJ5fTsJhiAkHVZnC nHlEbTghPDFOMACZ09BhO5Cd/xFx8V8J200T6d75cgLkafa9UdANcbM/O32i4pWU zgLGAn3+jtLXOsbUSk3sFCAbM47KztOgE9nOLvnPJtjJuAjA5lk60qHomCpm4xJx hcQc8FnmjBiGmA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:09 2025 by rpki-client