This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json) Hash identifier: SXr74RnbcJ6FHrrLOFAcD4Z2D8KTNcFuhFk1h9j9JFI= Subject key identifier: DE:61:AF:68:22:41:6A:10:A0:3B:9C:19:2E:BB:84:98:22:25:8A:78 Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad Certificate serial: 019AF23FE6381FAB3BFF2C504645D6B24466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft Manifest number: 0879 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: ktkY5H+HvKlwt6JgK733BTEOsac33a+g8BSB/srJTXg=) 2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e6:38:1f:ab:3b:ff:2c:50:46:45:d6:b2:44:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=de61af6822416a10a03b9c192ebb849822258a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b1:cc:ed:6c:75:14:8a:7e:15:55:a8:75:6f: 3b:7c:2b:c7:06:91:20:ea:81:6a:97:7c:b5:d6:a4: 08:0c:87:e7:3f:ab:93:6e:d4:7b:90:40:83:01:6a: 0f:2e:d2:45:50:e9:53:77:85:b9:b0:fc:18:0f:e8: 3f:9e:17:8e:42:a0:f1:41:2b:85:24:af:2e:e3:8d: b4:f7:42:24:e4:46:81:97:dc:c1:d2:54:e8:b8:5b: 2b:53:6f:d8:7f:dc:c7:76:7b:28:9d:c3:09:1e:30: 20:b3:cf:33:4b:5f:d0:f1:03:3d:cd:11:b8:07:18: 47:5b:35:a8:5c:e0:a4:ad:73:e6:af:c2:18:fb:1c: fa:4c:78:43:20:72:e0:92:8f:56:f0:c7:d7:fe:8a: 54:0d:2c:bd:b0:29:93:d3:e0:89:fb:df:ad:7b:02: ad:db:a6:59:fd:18:54:13:bf:90:8f:92:b1:a7:bf: 47:2f:d4:52:eb:47:b0:33:24:26:48:8c:33:16:9a: 02:38:77:53:86:79:12:cd:98:a0:0f:0b:3f:d6:20: f5:7e:59:55:37:29:3a:11:c8:b6:98:27:7a:43:26: 49:4d:55:53:c0:08:64:c7:f9:5d:68:0f:9d:44:14: 66:a6:20:cc:e0:8a:38:5d:db:2f:02:5d:2b:1a:c0: 7b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:AF:68:22:41:6A:10:A0:3B:9C:19:2E:BB:84:98:22:25:8A:78 X509v3 Authority Key Identifier: keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:83:6c:2d:3f:27:a0:1b:63:1d:d6:20:cc:6a:57:a2:5e: 40:d6:59:52:b0:10:34:5d:64:32:5f:bd:c1:cd:cb:90:28:a2: fe:ae:d5:d2:60:90:3e:4b:8c:b7:14:e9:b9:b0:1b:a7:ba:4a: ea:9b:63:2e:9c:af:b3:de:d4:c6:9f:93:fc:ac:4d:76:c2:0d: a2:e5:8a:0d:cf:d9:01:5f:23:0e:68:7f:0c:b5:e9:70:2e:02: 36:be:6e:07:5f:2e:79:25:15:d6:51:0c:63:72:0c:12:0f:37: 08:f2:a1:de:6c:43:48:ff:cd:f5:49:78:0d:03:60:cc:8a:7d: 07:d7:27:c6:1d:8d:35:44:8e:54:ef:50:e3:e2:3e:d6:4f:16: ef:ba:c8:31:dc:7c:fe:3a:d1:57:38:8d:8b:0d:be:46:e3:ea: 4a:1e:14:b7:50:26:a5:fe:32:30:7f:93:f5:97:bd:c7:af:77: 35:f3:db:a1:c1:a6:b2:4b:71:34:07:54:f7:46:f5:63:67:dd: 4a:30:17:e2:92:c9:33:12:3b:18:05:23:09:56:90:11:6e:0d: 50:e6:ee:59:31:31:29:21:cc:ff:71:52:4b:8b:d4:da:e8:51: 41:85:86:ea:fc:ac:00:31:05:9f:43:a2:8c:da:d7:41:e7:d4: 06:71:5c:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+Y4H6s7/yxQRkXWskRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0 ZjJiYWQwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EyhkZTYxYWY2ODIyNDE2YTEwYTAzYjljMTkyZWJiODQ5ODIyMjU4YTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LHM7Wx1FIp+FVWodW87fCvHBpEg 6oFql3y11qQIDIfnP6uTbtR7kECDAWoPLtJFUOlTd4W5sPwYD+g/nheOQqDxQSuF JK8u442090Ik5EaBl9zB0lTouFsrU2/Yf9zHdnsoncMJHjAgs88zS1/Q8QM9zRG4 BxhHWzWoXOCkrXPmr8IY+xz6THhDIHLgko9W8MfX/opUDSy9sCmT0+CJ+9+tewKt 26ZZ/RhUE7+Qj5Kxp79HL9RS60ewMyQmSIwzFpoCOHdThnkSzZigDws/1iD1fllV Nyk6Eci2mCd6QyZJTVVTwAhkx/ldaA+dRBRmpiDM4Io4XdsvAl0rGsB7yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5hr2giQWoQoDucGS67hJgiJYp4MB8GA1UdIwQY MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzGDbC0/ J6AbYx3WIMxqV6JeQNZZUrAQNF1kMl+9wc3LkCii/q7V0mCQPkuMtxTpubAbp7pK 6ptjLpyvs97Uxp+T/KxNdsINouWKDc/ZAV8jDmh/DLXpcC4CNr5uB18ueSUV1lEM Y3IMEg83CPKh3mxDSP/N9Ul4DQNgzIp9B9cnxh2NNUSOVO9Q4+I+1k8W77rIMdx8 /jrRVziNiw2+RuPqSh4Ut1Ampf4yMH+T9Ze9x693NfPbocGmsktxNAdU90b1Y2fd SjAX4pLJMxI7GAUjCVaQEW4NUObuWTExKSHM/3FSS4vU2uhRQYWG6vysADEFn0Oi jNrXQefUBnFc0A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:55 2025 by rpki-client