This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json) Hash identifier: XD7IhqrWaHHgYGdftpq3epHYeX2aZcjKjharXsqpcpw= Subject key identifier: 32:B9:5D:77:3D:64:A0:CC:D0:73:A9:50:68:E8:DD:E8:83:1C:82:1F Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89 Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289 Certificate serial: 019AF19AC8FCFA3F2923A5D55CA8D96B029E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: TBpgqdVw9BxUe4Ez724R4lfNul/EOemoevz3LPNtzV8=) 2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c8:fc:fa:3f:29:23:a5:d5:5c:a8:d9:6b:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=32b95d773d64a0ccd073a95068e8dde8831c821f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:d0:07:36:21:bb:a1:23:86:93:be:76:37: 83:a0:79:16:9b:9e:f3:ce:bc:b2:08:ab:69:b2:ab: 19:2a:3c:c9:c4:5b:b5:fe:42:0a:e2:72:e1:73:b8: b3:c8:30:7d:4b:83:a1:b5:3f:a6:88:e1:fd:16:e7: 50:98:5f:ad:6b:ff:10:ed:42:ad:38:a8:4d:a6:65: d5:c8:15:62:5e:25:65:1e:a5:01:fb:b6:ac:0c:2a: 29:55:41:21:10:0d:67:33:80:1a:d2:de:4a:2f:78: c6:90:cc:73:5d:d1:80:64:0e:cb:99:d6:8b:23:0f: 13:ae:cc:9d:50:1d:04:91:97:71:22:9e:39:6b:11: 62:a9:4a:b1:fa:d2:92:9f:4f:7a:c1:77:63:df:ea: d1:c5:e6:e8:dc:84:ba:f5:7e:f2:dd:b0:b9:ac:9e: 4d:6a:8a:a0:e5:a2:41:e6:15:66:b9:6e:d3:29:c3: 82:da:3e:b0:df:0c:31:fa:b7:1e:6b:1f:cc:65:89: 5d:3e:3a:fa:2c:c5:60:87:16:02:68:de:9b:68:f4: f5:ab:ca:5a:45:0f:7f:66:4a:d9:c8:60:f3:86:c9: 83:09:82:cb:82:cb:8b:a8:67:84:10:89:d4:75:24: 3b:ef:4f:25:e8:ed:4f:35:c3:26:2b:a9:5f:38:91: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:5D:77:3D:64:A0:CC:D0:73:A9:50:68:E8:DD:E8:83:1C:82:1F X509v3 Authority Key Identifier: keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:19:bd:3e:c0:ae:f8:be:79:6a:47:21:51:88:10:e2:d9:93: 4e:70:a1:f8:59:ed:5f:0f:d3:e1:5d:f3:63:1b:dc:26:a5:5a: 53:2c:6c:e6:df:c0:2a:b3:7e:68:24:d5:6a:75:fd:fa:3e:99: 13:44:a4:61:58:c3:e2:d0:fc:7b:30:63:0e:a7:fb:ab:8c:d6: 98:a7:f9:0f:6a:c9:ac:5e:e8:26:8e:92:b0:56:9c:87:f5:24: 82:e6:6f:90:1f:1a:e7:9f:38:30:e9:eb:83:57:9d:ff:48:0c: b9:4a:b2:d7:82:7b:52:6f:25:59:19:c9:59:5c:39:b7:f9:46: 7a:d8:c6:7c:3c:04:dc:6e:ce:79:b5:cf:fe:a4:25:92:08:a1: 77:cb:a4:77:d6:ff:8d:fa:de:e6:43:04:f8:b0:45:23:95:02: d7:2b:11:1a:12:8b:96:e6:29:34:f1:64:64:07:49:bb:fc:62: de:78:fa:59:2f:3f:47:9a:10:2f:91:94:fd:3b:e0:a1:1b:dd: 2a:f7:7e:bc:a8:ae:58:14:83:6d:7b:7d:ad:bd:bf:71:e2:d8: ae:9c:25:b3:99:ca:ba:41:51:61:64:54:ec:41:dd:0c:a3:6f: 6a:3d:ff:cb:b6:f4:52:7d:85:f7:0a:21:60:7a:d8:e3:22:92: 5c:15:61:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsj8+j8pI6XVXKjZawKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk ODgyODkwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD EygzMmI5NWQ3NzNkNjRhMGNjZDA3M2E5NTA2OGU4ZGRlODgzMWM4MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+/QBzYhu6EjhpO+djeDoHkWm57z zryyCKtpsqsZKjzJxFu1/kIK4nLhc7izyDB9S4OhtT+miOH9FudQmF+ta/8Q7UKt OKhNpmXVyBViXiVlHqUB+7asDCopVUEhEA1nM4Aa0t5KL3jGkMxzXdGAZA7LmdaL Iw8TrsydUB0EkZdxIp45axFiqUqx+tKSn096wXdj3+rRxebo3IS69X7y3bC5rJ5N aoqg5aJB5hVmuW7TKcOC2j6w3wwx+rceax/MZYldPjr6LMVghxYCaN6baPT1q8pa RQ9/ZkrZyGDzhsmDCYLLgsuLqGeEEInUdSQ7708l6O1PNcMmK6lfOJE5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK5XXc9ZKDM0HOpUGjo3eiDHIIfMB8GA1UdIwQY MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5 LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRm9PsCu +L55akchUYgQ4tmTTnCh+FntXw/T4V3zYxvcJqVaUyxs5t/AKrN+aCTVanX9+j6Z E0SkYVjD4tD8ezBjDqf7q4zWmKf5D2rJrF7oJo6SsFach/UkguZvkB8a5584MOnr g1ed/0gMuUqy14J7Um8lWRnJWVw5t/lGetjGfDwE3G7OebXP/qQlkgihd8ukd9b/ jfre5kME+LBFI5UC1ysRGhKLluYpNPFkZAdJu/xi3nj6WS8/R5oQL5GU/TvgoRvd Kvd+vKiuWBSDbXt9rb2/ceLYrpwls5nKukFRYWRU7EHdDKNvaj3/y7b0Un2F9woh YHrY4yKSXBVhzA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:29 2025 by rpki-client