This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json) Hash identifier: Bew75f3h6A3YaikOAF4k14fPeQRo2AKrYRpVH+h7R4g= Subject key identifier: FE:F2:9A:BF:2B:42:A1:AB:CB:EC:02:D1:2D:EF:15:4C:85:E5:B7:0B Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e Certificate serial: 019AF2AD9EED4B99B4A176DFE59B3FAAD631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft Manifest number: 0CD6 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=) 2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: Jelw1wKRER80tMr9rYvb4JvBaKBFBGekNvd1NYaq7gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9e:ed:4b:99:b4:a1:76:df:e5:9b:3f:aa:d6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=fef29abf2b42a1abcbec02d12def154c85e5b70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:28:53:60:6d:e0:5b:0a:78:a2:ed:91:4f:63: 91:19:76:6b:64:df:47:fc:b1:f7:7c:13:a5:8f:ca: a8:7a:4c:82:47:af:6d:7f:fc:5e:c2:01:f2:58:e8: b7:f6:cf:8c:44:12:31:66:aa:b5:bb:eb:e3:22:0f: 36:22:d5:71:70:2a:19:6d:8c:5e:eb:1f:ee:e6:5a: 5f:7b:c8:ef:9b:e8:24:11:27:52:4c:14:ca:7a:21: c2:25:11:2c:93:1d:33:95:8d:36:7b:bb:ab:e4:67: dd:52:d2:e2:75:03:e6:22:fa:31:05:1d:d6:a1:4b: b1:5f:c6:fe:d9:bf:98:f5:be:06:14:47:78:7e:2d: 99:2f:53:ca:ec:0e:1a:af:01:07:43:c2:d5:c1:6a: 5d:1b:42:01:90:39:69:7a:70:c6:56:ca:5b:a2:2f: 1f:dc:e0:4c:e6:d2:67:88:23:c2:93:2e:ce:db:82: 75:b0:dc:44:b4:46:e5:5d:0f:38:a3:85:ac:af:ec: 72:61:db:f7:0c:ad:7c:3c:6e:ae:b5:83:ec:35:a9: 29:7c:2e:e9:84:5b:4d:c3:49:68:94:19:94:4e:02: ed:f5:9c:de:09:13:13:be:c4:d4:6b:e2:4b:2d:83: 36:c7:e9:18:74:6c:9e:25:7c:71:20:77:a1:95:5e: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F2:9A:BF:2B:42:A1:AB:CB:EC:02:D1:2D:EF:15:4C:85:E5:B7:0B X509v3 Authority Key Identifier: keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:54:fa:24:6c:e2:0c:91:e1:e3:ba:54:71:dd:28:9a:19:f8: 5c:65:d9:d0:9c:63:a5:b9:05:b1:6a:9d:97:27:e4:b8:7c:5e: bc:e3:45:a1:32:f4:85:c9:e6:84:e7:55:fc:bf:1b:f8:ee:f6: 52:45:af:4c:2c:9a:98:67:56:bb:b9:df:6e:a8:12:ba:d1:ff: ed:ca:f2:5d:1c:97:e9:17:c0:c6:1a:bc:8d:a3:ff:f1:7d:db: 3c:83:29:04:c0:fe:56:f4:35:1e:e5:7a:a7:7d:75:3a:47:9a: 2a:bd:47:aa:54:10:84:ba:b6:a2:af:bd:4f:2f:74:a2:fb:e6: 07:ba:19:b8:58:62:a6:10:33:db:25:86:7c:c3:64:53:31:a2: 1b:1d:b0:b1:13:c2:6c:b1:25:34:66:6e:b6:7e:dd:bf:49:72: b4:1d:d3:51:74:c2:17:39:13:1b:2d:a5:85:3e:a5:1c:3f:7d: 41:fc:4b:be:cf:b3:db:87:b7:59:86:9c:d7:fc:79:ca:b4:f4: c3:3b:97:37:d2:80:67:ff:49:d7:51:0a:fb:52:80:63:d5:41: 3e:b4:c7:ca:3e:df:1e:ec:e8:85:c9:09:a4:c1:49:dc:97:06: 32:13:7c:67:2e:42:71:82:5a:27:97:ec:44:1c:d2:2c:c8:28: 42:3c:3a:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZ7tS5m0oXbf5Zs/qtYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmM4ZmZjNTA2MDllYzBkOGI0YTcyODA1Yzg5OTBhNjRh YWU3MWUwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD EyhmZWYyOWFiZjJiNDJhMWFiY2JlYzAyZDEyZGVmMTU0Yzg1ZTViNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnihTYG3gWwp4ou2RT2ORGXZrZN9H /LH3fBOlj8qoekyCR69tf/xewgHyWOi39s+MRBIxZqq1u+vjIg82ItVxcCoZbYxe 6x/u5lpfe8jvm+gkESdSTBTKeiHCJREskx0zlY02e7ur5GfdUtLidQPmIvoxBR3W oUuxX8b+2b+Y9b4GFEd4fi2ZL1PK7A4arwEHQ8LVwWpdG0IBkDlpenDGVspboi8f 3OBM5tJniCPCky7O24J1sNxEtEblXQ84o4Wsr+xyYdv3DK18PG6utYPsNakpfC7p hFtNw0lolBmUTgLt9ZzeCRMTvsTUa+JLLYM2x+kYdGyeJXxxIHehlV7F8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7ymr8rQqGry+wC0S3vFUyF5bcLMB8GA1UdIwQY MBaAFAIsj/xQYJ7A2LSnKAXImQpkquceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQt MTViMGMzNDQ5OTA3LzEvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQtMTViMGMzNDQ5OTA3 LzEvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilT6JGzi DJHh47pUcd0omhn4XGXZ0JxjpbkFsWqdlyfkuHxevONFoTL0hcnmhOdV/L8b+O72 UkWvTCyamGdWu7nfbqgSutH/7cryXRyX6RfAxhq8jaP/8X3bPIMpBMD+VvQ1HuV6 p311OkeaKr1HqlQQhLq2oq+9Ty90ovvmB7oZuFhiphAz2yWGfMNkUzGiGx2wsRPC bLElNGZutn7dv0lytB3TUXTCFzkTGy2lhT6lHD99QfxLvs+z24e3WYac1/x5yrT0 wzuXN9KAZ/9J11EK+1KAY9VBPrTHyj7fHuzohckJpMFJ3JcGMhN8Zy5CcYJaJ5fs RBzSLMgoQjw6FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:32 2025 by rpki-client