This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json) Hash identifier: ywvt2psIMTL7QAgMzPrnYMZ/oDwmLGE8eBmxLaSymPs= Subject key identifier: 81:89:C7:93:89:09:12:1A:6D:83:D9:5B:4D:E3:44:38:B7:97:88:D3 Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44 Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44 Certificate serial: 019AF12CC6DA4BB06D07FFB3DD39EB632F5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=) 2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: C19qsNHcP635nzydUZGyofMMRNtPps/tY7HrNutATRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c6:da:4b:b0:6d:07:ff:b3:dd:39:eb:63:2f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=8189c7938909121a6d83d95b4de34438b79788d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:ad:53:6b:11:c1:b3:80:71:ff:8a:87:65: 57:41:49:67:af:8c:65:17:a6:bc:2d:71:4c:35:0a: 68:77:91:db:2e:80:c9:ea:4b:8b:69:01:c1:81:e3: cc:7f:d9:bc:f7:41:91:01:ba:73:aa:02:6f:ab:fb: e5:5b:c3:48:c1:2d:4e:68:b7:dd:01:01:88:df:cd: 4d:94:9c:f0:35:d3:44:9b:ef:65:8a:04:98:17:06: d8:93:7e:6a:c0:43:1f:69:4c:0b:d8:5a:bf:3d:e8: bb:8f:0e:fa:db:7c:02:2c:6a:e1:f7:d5:8f:d4:6b: 93:89:22:03:da:53:ea:2f:2c:11:11:2d:50:cd:99: 10:fe:ad:91:41:de:87:95:05:1d:ce:68:e9:56:7d: 2f:3a:5c:93:5e:65:06:0a:5c:e7:e3:b6:eb:fd:cc: 95:d1:e9:a1:54:2e:13:7a:90:5c:e8:85:a4:c2:1a: a1:c0:11:75:3d:ac:2f:1c:ee:73:d2:75:8c:ac:42: 1c:d0:bc:df:07:79:6b:ff:f9:17:73:ab:dd:82:71: f0:a3:5a:48:7e:9d:59:0a:c9:a0:f2:7d:5e:52:2c: 53:82:34:a0:ca:14:bc:d0:ae:64:33:93:4d:7a:56: 4a:73:bf:b1:9a:b6:f2:68:21:ce:54:19:c6:ac:a5: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:89:C7:93:89:09:12:1A:6D:83:D9:5B:4D:E3:44:38:B7:97:88:D3 X509v3 Authority Key Identifier: keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:42:42:24:f2:7c:0f:4e:97:03:7b:75:ea:f5:1c:09:10:1a: 82:0f:f6:e9:93:2e:8b:57:16:e1:0a:74:96:78:be:49:0e:05: 93:0f:c9:04:2a:12:89:83:bf:28:8a:8f:3a:58:62:fb:91:4a: a3:82:c2:7d:4d:52:3d:a4:34:03:5c:e3:27:34:9b:bc:a9:b0: b1:ae:78:1b:80:73:42:2f:55:ae:d0:f7:a3:d0:39:4c:bb:14: 58:af:2e:36:4d:d6:eb:07:10:ac:d0:d6:4a:19:8b:44:d1:3a: cc:a2:98:49:cc:2e:f0:22:21:42:93:56:d7:a7:87:8c:65:6e: f9:76:05:48:40:7c:45:90:0e:9e:26:77:d7:3b:44:a7:b3:63: 08:37:72:f2:97:b6:0d:93:b5:ba:8e:57:bd:1e:d2:fa:b5:75: 32:52:c9:13:96:a9:1b:60:12:86:10:d3:80:71:77:6b:ef:0d: 1a:a4:e4:18:5e:de:58:6d:86:61:4d:2a:b9:04:73:d5:46:3b: 53:f4:cb:89:46:2f:12:e5:d7:38:05:6f:c0:04:9d:ee:59:49: 2c:b5:b5:88:fb:8d:f6:d1:ba:ae:d3:4e:e4:67:ff:db:80:19: 50:de:b1:ab:aa:a6:67:46:15:81:65:db:b4:39:1a:d2:5c:8e: c9:ff:6e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMbaS7BtB/+z3TnrYy9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx ODZhNDQwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD Eyg4MTg5Yzc5Mzg5MDkxMjFhNmQ4M2Q5NWI0ZGUzNDQzOGI3OTc4OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6qtU2sRwbOAcf+Kh2VXQUlnr4xl F6a8LXFMNQpod5HbLoDJ6kuLaQHBgePMf9m890GRAbpzqgJvq/vlW8NIwS1OaLfd AQGI381NlJzwNdNEm+9ligSYFwbYk35qwEMfaUwL2Fq/Pei7jw7623wCLGrh99WP 1GuTiSID2lPqLywRES1QzZkQ/q2RQd6HlQUdzmjpVn0vOlyTXmUGClzn47br/cyV 0emhVC4TepBc6IWkwhqhwBF1PawvHO5z0nWMrEIc0LzfB3lr//kXc6vdgnHwo1pI fp1ZCsmg8n1eUixTgjSgyhS80K5kM5NNelZKc7+xmrbyaCHOVBnGrKXg/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGJx5OJCRIabYPZW03jRDi3l4jTMB8GA1UdIwQY MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUJCJPJ8 D06XA3t16vUcCRAagg/26ZMui1cW4Qp0lni+SQ4Fkw/JBCoSiYO/KIqPOlhi+5FK o4LCfU1SPaQ0A1zjJzSbvKmwsa54G4BzQi9VrtD3o9A5TLsUWK8uNk3W6wcQrNDW ShmLRNE6zKKYScwu8CIhQpNW16eHjGVu+XYFSEB8RZAOniZ31ztEp7NjCDdy8pe2 DZO1uo5XvR7S+rV1MlLJE5apG2AShhDTgHF3a+8NGqTkGF7eWG2GYU0quQRz1UY7 U/TLiUYvEuXXOAVvwASd7llJLLW1iPuN9tG6rtNO5Gf/24AZUN6xq6qmZ0YVgWXb tDka0lyOyf9udQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:34 2025 by rpki-client