This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: mX/xJTF3EHSUyeK/PKeqlG37W2zqX1plJcOCfhS5pzY= Subject key identifier: 40:42:BC:65:5F:13:10:1D:63:CF:F4:B7:3E:5E:67:7E:5D:FA:06:24 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019AF20974BD9A191D63A9F4DAC7184D08D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 11F9 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: tr9fuFmaEV300W5/gjk+GXdG8ptBfufWEwJ/qRo2Hxc=) 5: GNzsCq9UcoPEjNUJsHvqEaDTmhI.roa (hash: UUPKwITy6fppL/i4iIfPQtQ+oEwY++MmCUS8CWuHxoc=) 6: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 7: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 8: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 9: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:74:bd:9a:19:1d:63:a9:f4:da:c7:18:4d:08:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=4042bc655f13101d63cff4b73e5e677e5dfa0624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:e6:08:aa:21:67:cd:44:c9:1c:d8:3c:22: 02:ff:42:f3:ae:51:1b:b7:e0:27:88:79:73:a4:f4: f4:6c:89:56:29:c8:ce:c6:2c:82:f0:cb:0b:82:b4: 0a:6a:3c:4c:ae:99:cf:02:2a:2e:36:c6:f8:97:98: 3b:90:f1:33:64:47:0d:cd:37:c6:1b:c7:63:47:f2: 2c:e2:12:f6:02:75:bd:4b:4c:40:97:53:1a:45:bb: 74:8d:39:4a:2d:39:1e:33:45:a1:a5:4c:b6:ea:f3: 8b:e1:65:51:ed:46:bc:80:e9:69:2e:04:38:d8:19: c6:9d:1f:e7:1a:93:a4:da:e1:1f:dd:9e:5b:1b:52: 2f:9b:c4:22:fd:4e:bf:24:95:de:2d:09:d0:09:8d: ac:3e:3a:30:79:59:b9:bd:9e:d1:49:bb:c6:fe:75: 3a:8f:96:6d:c7:77:ce:aa:e5:bd:a4:ee:e7:62:5a: 5a:9e:7e:60:4d:86:a4:bc:66:37:2b:39:0d:46:62: f5:05:65:2d:da:4d:18:c6:44:c5:32:33:3f:64:d8: 95:bf:a4:7b:4e:15:6d:ab:35:63:4c:9d:a3:b8:4e: a3:d8:3c:06:18:42:61:72:ae:fa:58:51:16:67:5a: 96:ae:15:ae:57:c9:b2:1e:d3:92:d2:1f:34:0d:3d: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:BC:65:5F:13:10:1D:63:CF:F4:B7:3E:5E:67:7E:5D:FA:06:24 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a1:7f:a9:08:9a:66:bf:fa:32:dd:67:a8:20:a7:d0:fc:24: 15:65:fc:13:f4:b8:9f:57:94:dc:7a:bd:ed:b8:95:c9:76:40: cc:67:4a:8e:96:d0:41:90:0a:95:5a:74:91:5b:3d:11:7c:fd: e5:fd:07:28:c3:43:93:6c:d4:19:82:47:ea:d1:d9:cd:a1:65: 22:f4:61:76:b1:b4:92:01:b4:58:b6:9f:e9:a9:85:fb:c6:6b: 97:64:0d:d6:c9:c9:bc:d4:df:9a:08:9c:98:b0:f3:5b:55:4e: 8c:a1:82:6c:e4:96:9f:40:8f:79:25:a8:e5:f2:3a:7e:9e:0e: 2c:9d:f2:b7:44:d4:31:96:24:52:d1:55:0d:2e:3c:fc:19:5c: b0:a0:f5:01:50:6d:48:d5:08:17:75:d1:31:2f:a6:06:5a:2d: af:00:ff:d6:f3:f8:d6:16:17:db:25:1b:8d:c3:f2:12:a5:38: 94:1c:77:1f:eb:b0:87:70:1a:35:88:78:42:08:20:de:d7:32: 2b:75:84:cd:d8:fd:fa:23:2a:b2:14:cc:44:12:fc:2c:42:bd: 5e:1e:99:74:9e:f4:2e:ac:58:be:20:c7:34:84:4e:9d:79:0c: 06:ab:7d:dd:52:b7:32:39:40:e2:32:66:a1:58:d7:30:0a:11: 05:5e:15:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXS9mhkdY6n02scYTQjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD Eyg0MDQyYmM2NTVmMTMxMDFkNjNjZmY0YjczZTVlNjc3ZTVkZmEwNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/mCKohZ81EyRzYPCIC/0LzrlEb t+AniHlzpPT0bIlWKcjOxiyC8MsLgrQKajxMrpnPAiouNsb4l5g7kPEzZEcNzTfG G8djR/Is4hL2AnW9S0xAl1MaRbt0jTlKLTkeM0WhpUy26vOL4WVR7Ua8gOlpLgQ4 2BnGnR/nGpOk2uEf3Z5bG1Ivm8Qi/U6/JJXeLQnQCY2sPjoweVm5vZ7RSbvG/nU6 j5Ztx3fOquW9pO7nYlpann5gTYakvGY3KzkNRmL1BWUt2k0YxkTFMjM/ZNiVv6R7 ThVtqzVjTJ2juE6j2DwGGEJhcq76WFEWZ1qWrhWuV8myHtOS0h80DT0C+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBCvGVfExAdY8/0tz5eZ35d+gYkMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqF/qQia Zr/6Mt1nqCCn0PwkFWX8E/S4n1eU3Hq97biVyXZAzGdKjpbQQZAKlVp0kVs9EXz9 5f0HKMNDk2zUGYJH6tHZzaFlIvRhdrG0kgG0WLaf6amF+8Zrl2QN1snJvNTfmgic mLDzW1VOjKGCbOSWn0CPeSWo5fI6fp4OLJ3yt0TUMZYkUtFVDS48/BlcsKD1AVBt SNUIF3XRMS+mBlotrwD/1vP41hYX2yUbjcPyEqU4lBx3H+uwh3AaNYh4Qggg3tcy K3WEzdj9+iMqshTMRBL8LEK9Xh6ZdJ70LqxYviDHNIROnXkMBqt93VK3MjlA4jJm oVjXMAoRBV4Vsg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:48 2025 by rpki-client