This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft File: ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json) Hash identifier: PRqIqwPVOZcauvGcnGtgdcVz0GOHDI249IBvhwC4brk= Subject key identifier: BE:72:CF:A5:2E:60:B6:68:92:15:84:7A:E9:CC:69:32:99:3C:89:3E Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22 Certificate issuer: /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322 Certificate serial: 019B2EFA89B5DFCBE3EFE9AE5511BCE8FE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft Manifest number: 08B0 Signing time: Thu 18 Dec 2025 01:02:09 +0000 Manifest this update: Thu 18 Dec 2025 01:02:09 +0000 Manifest next update: Fri 19 Dec 2025 01:02:09 +0000 Files and hashes: 1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: h4E33UV1KZPdTYWRFj/9Rkp5ThUoSgsc/aNVv2zhUSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:89:b5:df:cb:e3:ef:e9:ae:55:11:bc:e8:fe:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322 Validity Not Before: Dec 18 01:02:09 2025 GMT Not After : Dec 19 01:02:09 2025 GMT Subject: CN=be72cfa52e60b6689215847ae9cc6932993c893e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:9d:a2:2d:02:d3:a7:ea:eb:8f:1f:75:43: 55:ea:f2:03:87:34:e3:51:d3:dc:7a:f5:eb:68:ed: 40:6a:56:b8:96:42:f9:ea:8c:55:6b:0c:f4:a1:bc: cc:be:dd:e7:04:e4:ca:ef:a8:00:22:60:99:1a:28: 99:c9:db:dc:7d:b9:03:5d:4e:41:8e:55:e8:16:43: 64:4d:61:88:19:45:42:ba:8b:73:98:12:ce:f3:d7: b5:a5:44:34:0f:5f:7c:8a:64:fd:77:9a:e2:7e:4c: 90:9d:6d:55:0f:a5:54:2a:85:ee:f6:75:f6:b3:cf: c3:ba:41:a1:29:f7:4f:b7:ad:db:47:1d:7e:c7:e8: f0:c3:12:fd:d8:73:d5:e0:42:75:7f:5b:ca:9a:b4: bf:23:9d:34:54:3b:1b:b0:ed:68:94:2a:ae:a0:00: a4:48:b2:f2:b7:fb:e7:43:05:b7:e0:63:00:20:58: 47:85:f8:bc:87:66:41:05:9c:08:f4:b2:34:0e:39: bb:64:49:3e:b4:10:cf:92:95:dc:1d:ab:28:15:2c: ab:0d:cc:c0:6b:18:78:d4:04:d1:64:3d:83:3d:87: 49:1e:16:01:dc:ec:5a:bc:1b:7a:97:48:a0:ed:1e: 8a:55:80:ed:01:ff:1b:5e:79:24:0d:b0:cb:3e:e4: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:CF:A5:2E:60:B6:68:92:15:84:7A:E9:CC:69:32:99:3C:89:3E X509v3 Authority Key Identifier: keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b6:60:5e:4f:43:fe:53:1c:17:54:fc:14:6e:d5:19:e2:48: 67:74:93:74:92:fc:53:9a:07:10:c3:06:a2:f7:ef:11:fc:38: 46:75:7a:ed:31:d4:05:cc:0a:2d:46:10:05:db:a9:fe:19:5d: 8f:46:8d:9a:ac:df:86:03:e8:bb:0d:5d:91:61:95:b9:c5:87: b3:e3:12:c3:93:0d:7b:8e:55:b0:f6:f4:0e:24:a2:ca:51:6f: 38:47:73:c9:9d:30:e2:f7:fa:63:15:1c:31:9e:90:20:42:78: 2d:8a:03:84:6b:20:fd:ea:dc:93:30:ab:9d:a0:dc:6d:f0:a7: cd:c6:ec:34:b5:a2:66:98:54:16:70:09:70:9d:d7:37:f4:44: 19:11:40:9f:12:1c:e5:ce:24:c9:08:f6:9b:5c:e2:bb:f4:63: 6f:14:34:63:c4:30:c0:12:07:bb:a5:b8:47:41:68:01:bb:e1: cf:40:09:cb:90:90:3b:de:9c:c9:a6:6b:0a:dd:a3:e3:38:cd: c2:c2:f9:3a:2b:2d:a7:8a:46:60:4e:09:c1:37:83:85:52:30: 43:2a:4b:00:3c:9b:b2:76:b2:49:2c:96:4e:ed:24:39:d4:52: 00:4d:92:3c:68:c7:21:fe:5f:a4:1d:14:ec:96:b8:c8:97:12: a7:07:1e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+om138vj7+muVRG86P6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjMxMWY4MGE3YTc2ZTlhZTAzYjhjMTNkODJkODNlOWMw ZjgzMjIwHhcNMjUxMjE4MDEwMjA5WhcNMjUxMjE5MDEwMjA5WjAzMTEwLwYDVQQD EyhiZTcyY2ZhNTJlNjBiNjY4OTIxNTg0N2FlOWNjNjkzMjk5M2M4OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmSdoi0C06fq648fdUNV6vIDhzTj UdPcevXraO1Aala4lkL56oxVawz0obzMvt3nBOTK76gAImCZGiiZydvcfbkDXU5B jlXoFkNkTWGIGUVCuotzmBLO89e1pUQ0D198imT9d5rifkyQnW1VD6VUKoXu9nX2 s8/DukGhKfdPt63bRx1+x+jwwxL92HPV4EJ1f1vKmrS/I500VDsbsO1olCquoACk SLLyt/vnQwW34GMAIFhHhfi8h2ZBBZwI9LI0Djm7ZEk+tBDPkpXcHasoFSyrDczA axh41ATRZD2DPYdJHhYB3OxavBt6l0ig7R6KVYDtAf8bXnkkDbDLPuRXYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5yz6UuYLZokhWEeunMaTKZPIk+MB8GA1UdIwQY MBaAFAEjEfgKenbprgO4wT2C2D6cD4MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNNUi1BcDZkdW11QTdqQlBZTFlQcHdQZ3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMzk2ZWUtMGFlYS00N2YzLWI5ZmUt NWI5YmE5MWRlMzNkLzEvQVNNUi1BcDZkdW11QTdqQlBZTFlQcHdQZ3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wMzk2ZWUtMGFlYS00N2YzLWI5ZmUtNWI5YmE5MWRlMzNk LzEvQVNNUi1BcDZkdW11QTdqQlBZTFlQcHdQZ3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7ZgXk9D /lMcF1T8FG7VGeJIZ3STdJL8U5oHEMMGovfvEfw4RnV67THUBcwKLUYQBdup/hld j0aNmqzfhgPouw1dkWGVucWHs+MSw5MNe45VsPb0DiSiylFvOEdzyZ0w4vf6YxUc MZ6QIEJ4LYoDhGsg/erckzCrnaDcbfCnzcbsNLWiZphUFnAJcJ3XN/REGRFAnxIc 5c4kyQj2m1ziu/RjbxQ0Y8QwwBIHu6W4R0FoAbvhz0AJy5CQO96cyaZrCt2j4zjN wsL5Oistp4pGYE4JwTeDhVIwQypLADybsnaySSyWTu0kOdRSAE2SPGjHIf5fpB0U 7Ja4yJcSpwcewA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:26:55 2025 by rpki-client