This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json) Hash identifier: frwzjOC58d1NubUPizc8PGLjScYYz3qvlK1yQ7JaVHs= Subject key identifier: F3:A4:A6:99:1D:D6:30:73:8E:FD:B1:3B:F7:41:95:45:3F:E7:5B:3B Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44 Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744 Certificate serial: 019AF088C1F0E795B22D16A46CE5DB4E594C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: dAaKN6lNZoPdY4VXBYXub7AwABTwQyyBbxVXqrFeBzA=) 2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c1:f0:e7:95:b2:2d:16:a4:6c:e5:db:4e:59:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032873518697c23e9c3e37a646bad121235ad744 Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=f3a4a6991dd630738efdb13bf74195453fe75b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:a2:f3:c5:f7:a7:e4:c9:25:a4:d0:5c:8d: e3:c6:a4:b7:f9:72:6c:04:f0:91:84:6b:1d:57:ba: 71:1a:cd:64:2c:02:0b:f6:34:18:9a:40:d4:8a:66: 74:26:83:67:d0:33:a6:e7:06:1e:33:0b:b3:b0:4a: c3:34:de:31:ec:60:0a:b8:0a:bb:7d:94:34:61:d2: 25:da:43:9f:5e:54:86:61:10:92:f9:e7:b1:f3:2a: fe:69:16:29:fb:98:67:a8:9e:58:6d:08:3e:74:df: 84:a2:b7:18:5b:a4:9a:16:fd:57:8b:81:9c:8a:5d: 7b:91:cb:92:aa:1b:f8:df:c6:0e:19:e0:bf:ad:a5: ec:68:01:2a:8b:74:2c:34:16:90:10:ba:af:9f:69: db:bb:a5:77:eb:ed:ea:2f:a2:8d:51:5d:d4:13:52: 09:6f:74:2f:d2:a0:3f:b7:47:57:6e:9e:a1:e5:29: 6a:2c:f6:d9:89:28:10:76:a7:4a:ba:34:88:98:9a: a3:1e:39:d4:6c:01:95:50:34:07:c4:d3:ca:20:5e: 30:bc:ad:fe:07:37:2b:4d:0d:6b:d9:2c:2c:67:a2: 5c:c8:50:e8:3f:a4:eb:22:ce:43:6f:76:56:4b:41: 70:9a:9c:fd:a6:d1:c9:43:fc:2e:a0:62:a6:b8:5a: 40:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A4:A6:99:1D:D6:30:73:8E:FD:B1:3B:F7:41:95:45:3F:E7:5B:3B X509v3 Authority Key Identifier: keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:04:9b:ce:e1:c5:12:4c:c6:2b:0a:63:a7:b7:4e:86:83:06: 4a:d7:23:71:f9:c9:d1:83:13:f7:5a:e7:26:7a:5e:34:d3:ca: 09:2e:6a:e3:08:f0:fa:f7:af:8f:e1:6c:2f:c8:ab:00:4f:1d: be:d9:4c:d0:f8:85:01:af:8b:3b:54:38:7b:50:48:ca:cb:96: 9e:02:bb:27:7e:a5:c8:32:41:16:20:46:93:2b:61:2e:58:26: 3f:f8:2b:f8:b0:11:cd:ef:92:6c:db:98:de:88:bf:fe:35:e2: cb:7f:e1:c1:01:9e:51:ef:55:59:5d:b7:c6:14:3a:c9:04:da: f1:ed:3d:7e:75:38:1a:c5:cd:32:8a:e0:b4:4f:33:87:54:b0: 65:97:6b:79:ac:67:7e:50:7f:07:3d:98:31:4e:aa:46:03:90: ef:d0:a8:0b:39:38:30:90:3b:eb:84:75:ec:f9:b5:59:e9:26: 4f:10:fc:e6:b5:38:8e:c9:70:bb:14:62:4d:98:f0:ac:b8:d2: 3a:65:12:4c:f3:e9:de:3b:9d:89:43:7f:67:e0:4b:72:d4:ff: 46:3c:59:10:e1:98:cc:f7:e0:1e:7d:9f:fb:89:33:89:f8:a5: 33:e9:4f:42:9a:8f:4b:61:18:21:65:09:ca:53:f1:82:62:67: 61:a9:bb:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMHw55WyLRakbOXbTllMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjg3MzUxODY5N2MyM2U5YzNlMzdhNjQ2YmFkMTIxMjM1 YWQ3NDQwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD EyhmM2E0YTY5OTFkZDYzMDczOGVmZGIxM2JmNzQxOTU0NTNmZTc1YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGqi88X3p+TJJaTQXI3jxqS3+XJs BPCRhGsdV7pxGs1kLAIL9jQYmkDUimZ0JoNn0DOm5wYeMwuzsErDNN4x7GAKuAq7 fZQ0YdIl2kOfXlSGYRCS+eex8yr+aRYp+5hnqJ5YbQg+dN+EorcYW6SaFv1Xi4Gc il17kcuSqhv438YOGeC/raXsaAEqi3QsNBaQELqvn2nbu6V36+3qL6KNUV3UE1IJ b3Qv0qA/t0dXbp6h5SlqLPbZiSgQdqdKujSImJqjHjnUbAGVUDQHxNPKIF4wvK3+ BzcrTQ1r2SwsZ6JcyFDoP6TrIs5Db3ZWS0Fwmpz9ptHJQ/wuoGKmuFpAGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOkppkd1jBzjv2xO/dBlUU/51s7MB8GA1UdIwQY MBaAFAMoc1GGl8I+nD43pka60SEjWtdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmIt MTI3MDA4OTI0ZWVkLzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmItMTI3MDA4OTI0ZWVk LzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQSbzuHF EkzGKwpjp7dOhoMGStcjcfnJ0YMT91rnJnpeNNPKCS5q4wjw+vevj+FsL8irAE8d vtlM0PiFAa+LO1Q4e1BIysuWngK7J36lyDJBFiBGkythLlgmP/gr+LARze+SbNuY 3oi//jXiy3/hwQGeUe9VWV23xhQ6yQTa8e09fnU4GsXNMorgtE8zh1SwZZdreaxn flB/Bz2YMU6qRgOQ79CoCzk4MJA764R17Pm1WekmTxD85rU4jslwuxRiTZjwrLjS OmUSTPPp3judiUN/Z+BLctT/RjxZEOGYzPfgHn2f+4kzifilM+lPQpqPS2EYIWUJ ylPxgmJnYam7lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:56 2025 by rpki-client