This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json) Hash identifier: 0vRP5BRbHW2IPoT7XNGWuZ66PmILG/DaMcjmbXyQ6YE= Subject key identifier: E9:4D:7E:BC:1D:29:1F:C8:DA:2A:85:07:F0:AE:E3:4E:1E:BE:78:B0 Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Certificate serial: 019AF1649251DF75E25546AFD34F86D0F66C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft Manifest number: 01AA Signing time: Sat 06 Dec 2025 02:01:31 +0000 Manifest this update: Sat 06 Dec 2025 02:01:31 +0000 Manifest next update: Sun 07 Dec 2025 02:01:31 +0000 Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: 86Ot2t5f6lHdPFMe/KMnKhD7buQxKMvNJSMDvkqIMac=) 2: hNq3yGnPCHaydptWbrbgby3w7SM.roa (hash: TF/bJmN5adtoEqSxW4KjZfMJbH3NebJd9z02MI+Ip68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:92:51:df:75:e2:55:46:af:d3:4f:86:d0:f6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Validity Not Before: Dec 6 02:01:31 2025 GMT Not After : Dec 7 02:01:31 2025 GMT Subject: CN=e94d7ebc1d291fc8da2a8507f0aee34e1ebe78b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:a6:d1:12:fa:8f:20:d4:1c:81:9b:7f:a8: d4:36:df:2e:d1:5b:13:ed:44:4a:77:da:4c:72:3d: a6:c1:c5:c5:e8:9d:a4:9b:aa:ee:2a:f6:72:d5:03: 98:9e:d9:b3:67:3d:b8:41:ac:71:5a:6f:50:7a:4e: 9c:0c:4f:36:13:db:86:2e:a6:4a:c5:17:79:8e:c5: 29:0b:2d:30:42:99:95:b7:d1:07:e2:9b:e4:e3:bf: 6a:44:5b:01:f7:45:33:92:3b:7b:6a:c6:c8:ad:3e: 83:88:fd:07:c2:8f:34:ac:76:d6:fb:3b:3d:8e:6d: af:9d:fb:10:82:ae:dc:3e:ff:47:f3:72:2b:f1:9b: bd:d5:67:e0:f6:46:17:72:32:dd:f1:f2:43:67:60: b8:09:af:e4:8b:86:18:76:52:ce:0f:40:d4:f0:5b: 8f:91:64:07:f7:57:3b:b5:e9:eb:32:bb:36:b6:88: 7f:8f:11:01:76:a6:fc:f0:9a:16:19:1f:af:d2:40: a8:65:2d:8f:93:d6:82:be:56:db:a7:cc:ef:58:e1: 80:af:0e:6b:5b:ca:a7:2c:a6:70:92:0d:6e:44:cd: 49:7b:3e:e9:53:85:63:16:7b:31:c8:b8:45:95:a5: ae:4b:3f:83:f9:cb:83:fd:36:ed:d4:f3:e4:30:60: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4D:7E:BC:1D:29:1F:C8:DA:2A:85:07:F0:AE:E3:4E:1E:BE:78:B0 X509v3 Authority Key Identifier: keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:21:d7:20:a0:8d:f0:f8:77:a8:2e:4d:ba:c7:09:6b:8a: e7:76:55:6f:36:a0:54:cb:ec:fd:0b:7a:ee:ad:e6:86:86:f3: ce:03:23:e2:28:c3:08:88:34:3e:f4:76:61:e5:ef:1e:c6:3c: a7:c7:ca:23:d9:88:ee:ea:08:0a:ae:b3:4c:0f:f7:d0:39:26: a6:1a:01:fb:4b:f0:49:ad:4f:ca:3b:7d:9f:f8:3b:d2:c9:9a: 57:97:e1:7c:78:c9:75:33:4e:f8:5e:96:1c:82:6b:38:ad:18: 4c:0c:27:b7:ad:f8:7c:5c:b5:95:00:dc:b2:2b:67:fa:ca:99: 68:1a:67:9a:d9:db:8e:a6:94:10:5f:c6:9b:3d:16:98:00:a4: 2d:99:fe:dc:87:01:a5:7c:9a:25:8b:47:72:51:20:39:fb:24: 6a:43:a6:b7:48:50:14:65:dc:1f:98:6a:27:58:f6:72:a4:2c: 3f:90:70:3b:3f:d9:09:27:5c:c1:2d:64:16:a6:d5:13:3a:69: ea:b5:8b:c4:71:2d:19:3f:d7:90:6f:db:d8:20:78:f1:aa:4e: 8a:3d:8d:ab:b0:ac:e3:96:b7:c7:33:97:62:c6:01:64:f7:f0: 51:91:f2:41:1a:2e:57:5f:3d:fa:88:a9:0e:40:9f:b8:d9:27: 50:6a:f0:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJJR33XiVUav00+G0PZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOGNjYzhkODE3OGM5ZTlkMmZmYzUzMmZjYjVjZDY4YmVh YTc3NmQwHhcNMjUxMjA2MDIwMTMxWhcNMjUxMjA3MDIwMTMxWjAzMTEwLwYDVQQD EyhlOTRkN2ViYzFkMjkxZmM4ZGEyYTg1MDdmMGFlZTM0ZTFlYmU3OGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz2m0RL6jyDUHIGbf6jUNt8u0VsT 7URKd9pMcj2mwcXF6J2km6ruKvZy1QOYntmzZz24QaxxWm9Qek6cDE82E9uGLqZK xRd5jsUpCy0wQpmVt9EH4pvk479qRFsB90Uzkjt7asbIrT6DiP0Hwo80rHbW+zs9 jm2vnfsQgq7cPv9H83Ir8Zu91Wfg9kYXcjLd8fJDZ2C4Ca/ki4YYdlLOD0DU8FuP kWQH91c7tenrMrs2toh/jxEBdqb88JoWGR+v0kCoZS2Pk9aCvlbbp8zvWOGArw5r W8qnLKZwkg1uRM1Jez7pU4VjFnsxyLhFlaWuSz+D+cuD/Tbt1PPkMGDxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlNfrwdKR/I2iqFB/Cu404evniwMB8GA1UdIwQY MBaAFAKMzI2BeMnp0v/FMvy1zWi+qndtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYt NWE0YjdiNWU0MDA3LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYtNWE0YjdiNWU0MDA3 LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLAh1yCg jfD4d6guTbrHCWuK53ZVbzagVMvs/Qt67q3mhobzzgMj4ijDCIg0PvR2YeXvHsY8 p8fKI9mI7uoICq6zTA/30DkmphoB+0vwSa1Pyjt9n/g70smaV5fhfHjJdTNO+F6W HIJrOK0YTAwnt634fFy1lQDcsitn+sqZaBpnmtnbjqaUEF/Gmz0WmACkLZn+3IcB pXyaJYtHclEgOfskakOmt0hQFGXcH5hqJ1j2cqQsP5BwOz/ZCSdcwS1kFqbVEzpp 6rWLxHEtGT/XkG/b2CB48apOij2Nq7Cs45a3xzOXYsYBZPfwUZHyQRouV189+oip DkCfuNknUGrwKA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:39 2025 by rpki-client