This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json) Hash identifier: 9TXIK5DaUBzd9iJPatwqkveaw63UB1h581CSsz+LyE4= Subject key identifier: 6C:3A:4B:14:A3:2A:56:91:40:00:0B:EA:14:2F:2D:48:73:CB:65:CB Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d Certificate serial: 019AF240019AE436B5FAB3A5A02D013E915E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: 68BSPGLDlwnJNBbUjx41r/uwRFiQdEqcIxcflN2MMqo=) 2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:01:9a:e4:36:b5:fa:b3:a5:a0:2d:01:3e:91:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ea25e356932875c096a0317559804155f6c99d Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=6c3a4b14a32a569140000bea142f2d4873cb65cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:c4:8b:81:89:94:ca:e4:e5:86:11:bd:b1: 78:f3:d4:db:d5:ae:fa:32:dd:bb:de:fb:06:83:6c: 24:a1:08:57:cd:5c:04:98:f8:d0:56:34:24:51:4f: c0:24:52:70:25:0f:a0:35:2d:91:ce:33:25:3d:e2: b4:eb:00:fb:92:38:14:96:f2:9f:1c:a6:1f:51:84: 6d:a4:30:77:93:d5:82:ca:d0:ee:fb:a3:0c:22:6a: 71:d5:c4:55:68:4c:5d:3f:9f:db:3e:32:90:9f:74: b0:01:2d:c9:3a:4c:7d:df:52:16:e2:a4:85:42:72: 93:ef:9d:f9:43:35:bb:7b:bb:f2:36:e7:44:1d:60: 9e:07:99:0f:2f:66:9e:cb:91:4e:75:29:68:6d:ad: 0b:36:3c:7f:ba:12:6c:bb:16:62:8a:8f:b6:49:20: 44:ad:54:5e:f5:d6:8b:70:16:f0:7f:9d:3a:29:65: b3:d7:81:21:e4:83:8f:77:8b:98:49:41:9f:c1:5c: 1f:14:d8:e5:f8:4a:99:16:da:85:d0:08:5e:60:af: ba:7f:e6:bc:57:95:83:c5:3a:79:c8:c9:c8:e9:8b: 7e:10:87:28:d2:e7:e4:ec:da:f1:cd:c5:33:cf:5f: 8f:7e:cf:b3:a9:68:42:4f:8c:e7:e0:4b:04:71:0e: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3A:4B:14:A3:2A:56:91:40:00:0B:EA:14:2F:2D:48:73:CB:65:CB X509v3 Authority Key Identifier: keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2c:e9:02:c6:33:81:0c:8a:8b:3e:da:a2:c2:f4:a1:4a:9d: 0f:fb:d3:c3:b6:00:15:62:76:fc:c8:a6:e9:26:ea:5f:f1:92: 3b:f6:fb:a0:6e:8f:87:1d:f5:e2:a8:30:55:b2:17:7f:5f:b8: f6:6e:df:89:19:bb:47:a3:4f:6c:91:57:cc:66:b3:31:4b:b4: 76:17:9b:67:05:7b:07:db:a7:84:c0:74:b6:75:1f:f8:87:be: bc:76:b7:87:c4:d2:b3:2a:2a:12:a9:ea:98:cf:a7:3d:7a:18: a4:f6:77:68:e7:53:83:10:4d:44:86:91:15:0d:97:0b:5f:03: 34:07:1c:b0:3a:ae:64:c7:6b:a6:40:ce:ca:de:07:7e:49:91: 3f:58:97:ca:02:a5:d4:11:0d:54:83:6f:ee:07:49:f7:df:fd: 22:48:4b:18:dd:a7:3c:45:25:61:5d:47:67:de:18:d7:d6:3d: 50:44:99:cb:6c:e4:0d:c8:76:d7:b7:3c:27:47:c3:61:a6:b4: 09:f3:06:1d:9a:c2:1b:e8:bd:c2:ad:7d:ca:98:01:a8:d6:50: db:4a:9d:b5:04:c5:23:ed:8a:bc:36:7d:3f:74:64:d0:46:e3: e3:97:1a:22:81:f2:4d:92:47:84:aa:59:db:28:c1:03:9e:4d: 99:13:3a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAGa5Da1+rOloC0BPpFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZWEyNWUzNTY5MzI4NzVjMDk2YTAzMTc1NTk4MDQxNTVm NmM5OWQwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD Eyg2YzNhNGIxNGEzMmE1NjkxNDAwMDBiZWExNDJmMmQ0ODczY2I2NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEbEi4GJlMrk5YYRvbF489Tb1a76 Mt273vsGg2wkoQhXzVwEmPjQVjQkUU/AJFJwJQ+gNS2RzjMlPeK06wD7kjgUlvKf HKYfUYRtpDB3k9WCytDu+6MMImpx1cRVaExdP5/bPjKQn3SwAS3JOkx931IW4qSF QnKT7535QzW7e7vyNudEHWCeB5kPL2aey5FOdSloba0LNjx/uhJsuxZiio+2SSBE rVRe9daLcBbwf506KWWz14Eh5IOPd4uYSUGfwVwfFNjl+EqZFtqF0AheYK+6f+a8 V5WDxTp5yMnI6Yt+EIco0ufk7NrxzcUzz1+Pfs+zqWhCT4zn4EsEcQ7+7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw6SxSjKlaRQAAL6hQvLUhzy2XLMB8GA1UdIwQY MBaAFALqJeNWkyh1wJagMXVZgEFV9smdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEt ZDgxNGZkY2E1YmVkLzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEtZDgxNGZkY2E1YmVk LzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHizpAsYz gQyKiz7aosL0oUqdD/vTw7YAFWJ2/Mim6SbqX/GSO/b7oG6Phx314qgwVbIXf1+4 9m7fiRm7R6NPbJFXzGazMUu0dhebZwV7B9unhMB0tnUf+Ie+vHa3h8TSsyoqEqnq mM+nPXoYpPZ3aOdTgxBNRIaRFQ2XC18DNAccsDquZMdrpkDOyt4HfkmRP1iXygKl 1BENVINv7gdJ99/9IkhLGN2nPEUlYV1HZ94Y19Y9UESZy2zkDch217c8J0fDYaa0 CfMGHZrCG+i9wq19ypgBqNZQ20qdtQTFI+2KvDZ9P3Rk0Ebj45caIoHyTZJHhKpZ 2yjBA55NmRM6Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:29 2025 by rpki-client