This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json) Hash identifier: RCHu1aNz8JJwmPvVESoybuNbR8DHWpVL6ofyd93EvNM= Subject key identifier: AE:96:22:6B:62:08:17:BB:7D:BA:DA:B9:9A:F4:3D:66:3F:37:1E:10 Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b Certificate serial: 019AF2767EF685AC99F7A42CE5B8BA31263C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft Manifest number: 056A Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=) 2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: Rj7pBROgQAovEMDNWGWXgQcSdjGp4nTJyDpV1G5N4Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7e:f6:85:ac:99:f7:a4:2c:e5:b8:ba:31:26:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=ae96226b620817bb7dbadab99af43d663f371e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c2:f5:90:1d:60:85:7b:72:e8:c6:43:16:c7: 5e:42:4c:9a:f8:81:25:5a:cc:1b:1a:2b:f9:fa:23: 6d:bb:de:92:c7:7c:66:ae:db:b1:65:a6:3d:f9:90: 20:58:ad:58:8c:20:52:e9:cf:2f:90:6a:3d:7a:52: 58:9d:ff:33:9c:75:35:b3:90:ea:e4:a9:f5:24:80: c2:8d:05:ac:f2:e8:4c:13:a1:26:1b:a6:9a:71:2f: f5:5a:85:e8:20:89:27:02:6c:5a:a1:b3:54:83:4e: 3e:ad:3a:1b:8c:00:09:04:80:47:b7:0b:42:ee:81: 45:d2:10:ac:df:6d:4a:2e:bd:92:db:5e:bb:4e:ec: b6:a1:9b:94:92:7c:59:da:32:7a:9d:1f:9e:ab:e6: 36:87:73:2c:4d:3a:11:cc:b8:f9:34:d1:9a:ca:5b: 6a:43:81:7a:d9:a1:b7:3e:4f:c3:b8:3f:9c:f4:9f: 40:6a:67:7f:5f:ad:89:bf:20:ef:1c:8a:bd:37:ce: af:b6:f1:b7:a8:88:d7:4d:b5:b5:96:0d:cf:95:15: 87:1f:e3:b0:78:e5:aa:0a:a0:6f:99:0c:48:82:22: 2a:f5:95:4b:67:9b:d6:80:4a:54:f2:06:f2:d7:fb: 0e:62:e8:ae:6f:75:6f:0d:ee:9a:51:ad:44:78:67: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:96:22:6B:62:08:17:BB:7D:BA:DA:B9:9A:F4:3D:66:3F:37:1E:10 X509v3 Authority Key Identifier: keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a9:2b:90:8d:29:b0:3d:5b:a7:04:00:ae:3b:da:9e:18:de: 8e:98:d0:51:ed:d5:01:e6:e9:2c:41:70:4b:9d:3d:27:4c:5d: 5c:63:c0:f3:3d:f7:e0:cf:21:e1:f3:e5:3f:d0:db:4a:43:ef: 12:9f:7e:ff:8e:25:99:b4:c3:96:1e:70:57:a8:d0:2b:3b:80: c0:81:22:92:9f:9b:fb:74:95:f3:59:2d:c9:c8:2a:a1:44:56: 52:f5:27:d9:ed:57:39:c4:15:aa:ab:13:32:4a:a7:f0:49:60: 02:cc:07:a7:02:3f:7d:fe:04:4c:79:14:83:3b:7e:1d:3e:5a: 93:a4:a7:4d:09:32:dd:bc:cb:50:b1:f8:37:82:98:c1:23:df: 27:07:82:33:4a:b0:3b:a4:fe:3e:3e:30:6d:af:90:89:b4:c3: 17:5a:ec:bf:f5:bc:2e:4c:0a:b9:07:f9:10:8e:8f:9e:3d:1e: 7f:eb:28:60:9f:e3:e9:6b:ba:7f:c6:a9:80:c5:1a:ac:2d:d7: fc:f1:9e:3b:8f:7e:30:eb:a9:30:a8:ac:e1:35:0b:80:e0:61: 85:36:bb:de:0c:78:be:32:52:66:0f:2a:08:3c:17:df:76:0c: d0:f1:77:c3:9a:62:af:9e:6b:5d:eb:79:3b:d8:69:75:d2:0a: cb:f2:d2:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn72hayZ96Qs5bi6MSY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMmI5ZDJkZTUzNzEwYjMxNThlNDJmMjI4ODkxMDllMmM0 MGY0M2IwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EyhhZTk2MjI2YjYyMDgxN2JiN2RiYWRhYjk5YWY0M2Q2NjNmMzcxZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8L1kB1ghXty6MZDFsdeQkya+IEl WswbGiv5+iNtu96Sx3xmrtuxZaY9+ZAgWK1YjCBS6c8vkGo9elJYnf8znHU1s5Dq 5Kn1JIDCjQWs8uhME6EmG6aacS/1WoXoIIknAmxaobNUg04+rTobjAAJBIBHtwtC 7oFF0hCs321KLr2S2167Tuy2oZuUknxZ2jJ6nR+eq+Y2h3MsTToRzLj5NNGayltq Q4F62aG3Pk/DuD+c9J9Aamd/X62JvyDvHIq9N86vtvG3qIjXTbW1lg3PlRWHH+Ow eOWqCqBvmQxIgiIq9ZVLZ5vWgEpU8gby1/sOYuiub3VvDe6aUa1EeGcmfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6WImtiCBe7fbrauZr0PWY/Nx4QMB8GA1UdIwQY MBaAFAMrnS3lNxCzFY5C8iiJEJ4sQPQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODIt NGQxOWE4ZGUwYWJhLzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODItNGQxOWE4ZGUwYWJh LzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASakrkI0p sD1bpwQArjvanhjejpjQUe3VAebpLEFwS509J0xdXGPA8z334M8h4fPlP9DbSkPv Ep9+/44lmbTDlh5wV6jQKzuAwIEikp+b+3SV81ktycgqoURWUvUn2e1XOcQVqqsT Mkqn8ElgAswHpwI/ff4ETHkUgzt+HT5ak6SnTQky3bzLULH4N4KYwSPfJweCM0qw O6T+Pj4wba+QibTDF1rsv/W8LkwKuQf5EI6Pnj0ef+soYJ/j6Wu6f8apgMUarC3X /PGeO49+MOupMKis4TULgOBhhTa73gx4vjJSZg8qCDwX33YM0PF3w5pir55rXet5 O9hpddIKy/LS7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:12 2025 by rpki-client