This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json) Hash identifier: vu1Ms+1B8LTO+my3XoHYEUZb9oDJg6dHM9FxJUdS3yI= Subject key identifier: 4C:F2:98:ED:CD:64:6E:6A:11:12:19:AE:1B:A3:D3:DE:AF:E1:93:DA Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26 Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26 Certificate serial: 019AF19B074B5843872D6EDDF88A8A1FD593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: rG/S+Rgg+Y7FM5E7kmJ5CSRiOLCxajH5O0QJSS5UmSo=) 2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:07:4b:58:43:87:2d:6e:dd:f8:8a:8a:1f:d5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=4cf298edcd646e6a111219ae1ba3d3deafe193da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:13:ec:1f:83:14:94:33:d8:c5:73:85:88:f1: 2b:9b:94:84:56:9b:83:72:28:73:5e:1b:53:c9:95: c2:a8:93:2a:fc:e6:60:f8:ab:78:81:f2:aa:88:a0: 10:ec:1c:ba:02:9d:9a:e1:5f:2d:8b:d4:ef:24:08: e4:90:69:bc:b9:52:0b:16:13:5d:24:64:b4:1a:93: 63:90:96:9f:f6:6b:1b:51:27:8c:fe:00:65:99:05: f3:fd:95:a0:a9:be:77:9d:05:9f:3b:f3:f2:99:69: 8b:61:c7:f3:89:ce:52:ee:74:bd:71:39:c5:9d:2e: d8:51:05:73:cd:af:1c:cd:e3:c4:b7:60:77:df:3d: d9:89:25:35:8d:fd:20:cd:42:ab:7f:2c:b0:27:47: e3:cb:fb:80:7c:54:1a:4b:80:37:7a:16:18:a0:66: 01:3f:3b:6f:7d:37:28:ca:a3:4f:df:4e:61:74:9b: 65:f8:fe:65:62:fc:b4:00:8a:1b:34:b8:61:d2:a3: c0:53:37:86:4f:94:1b:1a:23:7b:c2:06:70:4a:82: d3:d3:69:69:ec:61:05:e0:d9:9e:bc:c8:da:f6:8d: a3:15:ce:4a:25:5a:2e:85:16:f9:a7:92:28:80:57: 34:6a:47:12:fa:d6:46:ca:5e:25:97:61:d8:99:5c: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F2:98:ED:CD:64:6E:6A:11:12:19:AE:1B:A3:D3:DE:AF:E1:93:DA X509v3 Authority Key Identifier: keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b7:b0:35:65:bd:44:d0:10:0a:4e:6a:a6:2e:d6:a0:21:72: 2a:07:ad:36:b7:83:05:9b:bf:41:5a:37:24:05:10:b8:b6:93: a4:78:06:0d:5b:71:83:3f:0f:a2:e7:4f:ff:0d:49:ce:9c:0d: 28:df:d2:1e:e1:21:5e:24:a0:3e:64:bc:7e:3b:5f:79:a5:8f: 1a:4d:0a:a9:f2:2c:d1:8f:5d:5f:e4:cc:34:2d:e5:74:c1:5d: 7f:2a:76:57:7f:00:8b:9a:04:74:23:dc:16:0c:29:54:06:0d: 57:93:fa:74:de:96:10:27:ae:f0:38:55:38:65:41:b3:86:0b: e6:ac:44:f1:88:8e:cc:1d:b8:b9:01:4c:a6:22:38:b5:9b:fa: 52:4b:e4:53:e6:0c:c2:e2:02:2c:b1:7f:55:0c:e0:10:6b:f5: 84:47:dc:3c:2e:5b:e5:de:a3:3f:5b:10:20:c2:99:f0:fd:a5: 16:aa:0b:57:32:be:b8:4c:cb:9f:a0:05:8b:2a:c9:5e:da:6d: ad:d3:1d:25:4f:c3:be:62:44:e4:bf:92:ed:5a:9f:17:36:24: b3:f1:48:5e:d5:9b:e2:5c:6a:ea:fd:da:e0:14:1e:d5:4d:83: fc:0f:1e:22:8b:01:96:a0:48:76:0e:7f:99:21:d4:4c:96:f9: e8:c7:c7:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwdLWEOHLW7d+IqKH9WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwODU1ZGQ4OTcyNTZlODZkYTNjYmU2OTk0ZTk0Y2UyZTk2 OWFmMjYwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD Eyg0Y2YyOThlZGNkNjQ2ZTZhMTExMjE5YWUxYmEzZDNkZWFmZTE5M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RPsH4MUlDPYxXOFiPErm5SEVpuD cihzXhtTyZXCqJMq/OZg+Kt4gfKqiKAQ7By6Ap2a4V8ti9TvJAjkkGm8uVILFhNd JGS0GpNjkJaf9msbUSeM/gBlmQXz/ZWgqb53nQWfO/PymWmLYcfzic5S7nS9cTnF nS7YUQVzza8czePEt2B33z3ZiSU1jf0gzUKrfyywJ0fjy/uAfFQaS4A3ehYYoGYB PztvfTcoyqNP305hdJtl+P5lYvy0AIobNLhh0qPAUzeGT5QbGiN7wgZwSoLT02lp 7GEF4NmevMja9o2jFc5KJVouhRb5p5IogFc0akcS+tZGyl4ll2HYmVw7lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzymO3NZG5qERIZrhuj096v4ZPaMB8GA1UdIwQY MBaAFACFXdiXJW6G2jy+aZTpTOLpaa8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUt ODg2ZjY2YmI2ZWU4LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUtODg2ZjY2YmI2ZWU4 LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLewNWW9 RNAQCk5qpi7WoCFyKgetNreDBZu/QVo3JAUQuLaTpHgGDVtxgz8PoudP/w1JzpwN KN/SHuEhXiSgPmS8fjtfeaWPGk0KqfIs0Y9dX+TMNC3ldMFdfyp2V38Ai5oEdCPc FgwpVAYNV5P6dN6WECeu8DhVOGVBs4YL5qxE8YiOzB24uQFMpiI4tZv6UkvkU+YM wuICLLF/VQzgEGv1hEfcPC5b5d6jP1sQIMKZ8P2lFqoLVzK+uEzLn6AFiyrJXtpt rdMdJU/DvmJE5L+S7VqfFzYks/FIXtWb4lxq6v3a4BQe1U2D/A8eIosBlqBIdg5/ mSHUTJb56MfHfg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:39 2025 by rpki-client