This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json) Hash identifier: kw22j5GhZmGSb05UL4NRnYCw1kmI9epeslE2/CeYb70= Subject key identifier: AE:3E:47:6A:33:C8:9C:93:66:1E:18:35:CD:4C:F3:56:32:12:95:D6 Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Certificate serial: 019AF3BFF87BABDF696C56C4C5D7EBC2DA3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft Manifest number: 0286 Signing time: Sat 06 Dec 2025 13:00:35 +0000 Manifest this update: Sat 06 Dec 2025 13:00:35 +0000 Manifest next update: Sun 07 Dec 2025 13:00:35 +0000 Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: 1HLmqvTUTWHCqJ2K7xlWLG8KAPQf8aD2lYJw9Z8f8KY=) 2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=) 3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:f8:7b:ab:df:69:6c:56:c4:c5:d7:eb:c2:da:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Validity Not Before: Dec 6 13:00:35 2025 GMT Not After : Dec 7 13:00:35 2025 GMT Subject: CN=ae3e476a33c89c93661e1835cd4cf356321295d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:a5:01:70:72:c0:3d:4b:9b:2b:ca:4c:75: 9d:52:05:a7:ea:08:c0:7a:14:69:25:42:fa:cb:71: 40:4d:10:0c:12:68:ae:d6:f7:22:b8:6b:40:0c:5a: 9a:43:92:7e:6d:89:aa:c2:57:ee:72:0a:67:83:fd: 17:fc:7b:14:90:84:77:7c:4c:f8:4e:55:fa:c2:9a: 54:b3:51:3b:81:94:cb:9c:5b:1b:10:89:6e:14:b4: 7a:d9:ca:69:92:d3:13:5b:40:e7:3c:a6:4c:8c:a6: 74:31:70:23:85:b8:82:22:67:38:69:e9:46:97:d2: cf:08:45:24:e8:94:07:a7:bb:6d:f7:29:44:b4:4e: 98:18:c3:79:f0:a5:70:cd:ef:e7:97:f0:ad:c5:b2: 0e:7a:5b:a4:14:83:54:a1:fb:f1:b6:30:25:cd:86: c4:f2:8f:11:be:43:ea:b3:dc:0e:f3:5a:90:23:a0: a9:a7:8c:55:98:2f:65:13:4b:ea:ea:e3:03:ef:69: 5b:78:ca:64:28:ba:b6:0f:31:65:20:2b:52:0d:f0: 5f:c9:cd:a3:ae:20:88:ba:48:be:e1:1d:df:97:e9: ee:e0:74:09:0a:ef:d0:d9:c6:a4:e2:17:87:d1:38: 68:97:6d:53:03:80:89:c6:8c:4a:67:06:bd:c0:1b: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3E:47:6A:33:C8:9C:93:66:1E:18:35:CD:4C:F3:56:32:12:95:D6 X509v3 Authority Key Identifier: keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:08:8d:3d:ba:68:74:bf:de:28:70:0b:dc:7f:fd:52:e3:84: d7:33:2f:e8:08:80:f9:59:49:d2:80:81:03:f9:ba:17:5c:51: c7:6b:26:43:a3:2e:ec:a7:1a:ae:e0:e8:02:d2:2e:f0:bc:00: 8a:52:44:82:7a:a7:45:33:be:ec:2d:3f:14:b1:9f:d4:ad:5e: 56:2d:3e:fe:31:8d:a0:7e:10:62:51:ef:6f:7b:9f:be:23:b5: db:53:d3:41:bf:d2:f2:cd:d5:20:e5:17:76:11:26:d1:bb:85: 5f:70:97:1b:8b:58:46:4b:39:33:13:f0:07:e4:da:d7:16:03: 9e:bc:47:f5:5c:d0:f7:85:30:15:11:2a:10:a7:2d:cb:72:9a: 42:a6:21:10:c1:27:fb:58:9e:b5:a4:f0:19:ea:68:cb:be:44: 48:b7:ea:db:34:40:d5:41:10:e3:41:d7:c7:1d:f7:8b:01:c9: 28:3d:71:75:15:94:c4:94:8f:08:97:16:6f:4f:f0:ae:63:0a: 98:b0:46:eb:56:f5:83:c3:ac:85:a5:d1:b9:08:91:23:63:67: 04:e5:d0:83:74:d8:f3:d3:8f:e0:a7:f0:75:2e:fa:b3:0e:6e: 7b:a9:ef:e0:4b:c4:85:7e:47:b7:2b:d7:15:5c:21:8c:8b:ba: 15:8f:e2:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/h7q99pbFbExdfrwto8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj ZWYzMWYwHhcNMjUxMjA2MTMwMDM1WhcNMjUxMjA3MTMwMDM1WjAzMTEwLwYDVQQD EyhhZTNlNDc2YTMzYzg5YzkzNjYxZTE4MzVjZDRjZjM1NjMyMTI5NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uelAXBywD1LmyvKTHWdUgWn6gjA ehRpJUL6y3FATRAMEmiu1vciuGtADFqaQ5J+bYmqwlfucgpng/0X/HsUkIR3fEz4 TlX6wppUs1E7gZTLnFsbEIluFLR62cppktMTW0DnPKZMjKZ0MXAjhbiCImc4aelG l9LPCEUk6JQHp7tt9ylEtE6YGMN58KVwze/nl/CtxbIOelukFINUofvxtjAlzYbE 8o8RvkPqs9wO81qQI6Cpp4xVmC9lE0vq6uMD72lbeMpkKLq2DzFlICtSDfBfyc2j riCIuki+4R3fl+nu4HQJCu/Q2cak4heH0Thol21TA4CJxoxKZwa9wBvluQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4+R2ozyJyTZh4YNc1M81YyEpXWMB8GA1UdIwQY MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3 LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAiNPbpo dL/eKHAL3H/9UuOE1zMv6AiA+VlJ0oCBA/m6F1xRx2smQ6Mu7KcaruDoAtIu8LwA ilJEgnqnRTO+7C0/FLGf1K1eVi0+/jGNoH4QYlHvb3ufviO121PTQb/S8s3VIOUX dhEm0buFX3CXG4tYRks5MxPwB+Ta1xYDnrxH9VzQ94UwFREqEKcty3KaQqYhEMEn +1ietaTwGepoy75ESLfq2zRA1UEQ40HXxx33iwHJKD1xdRWUxJSPCJcWb0/wrmMK mLBG61b1g8OshaXRuQiRI2NnBOXQg3TY89OP4KfwdS76sw5ue6nv4EvEhX5HtyvX FVwhjIu6FY/ioQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:29 2025 by rpki-client