This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json) Hash identifier: zzXtIuczQKU7yheN8q7olJE9wEUzrht17Px2Ul/2sEU= Subject key identifier: 8B:6E:04:FA:0B:90:7F:0A:E0:7A:68:30:BE:4E:83:13:29:F4:79:72 Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Certificate serial: 019AF3F8209085B7F3688D2A51519CEA03B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft Manifest number: 171D Signing time: Sat 06 Dec 2025 14:01:55 +0000 Manifest this update: Sat 06 Dec 2025 14:01:55 +0000 Manifest next update: Sun 07 Dec 2025 14:01:55 +0000 Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: 1SgxhXqgToaVvD7rVA4lZH2062FkGdUKAissTlRA9ZI=) 2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=) 3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:20:90:85:b7:f3:68:8d:2a:51:51:9c:ea:03:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Validity Not Before: Dec 6 14:01:55 2025 GMT Not After : Dec 7 14:01:55 2025 GMT Subject: CN=8b6e04fa0b907f0ae07a6830be4e831329f47972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:ad:dc:5b:3b:62:98:b9:40:7e:0f:45:62: 5e:5d:43:cd:5c:0e:cd:16:cb:a4:28:75:15:60:e4: 41:49:c0:40:89:9f:23:0d:30:53:42:1e:09:9d:9e: a3:ba:2c:32:ac:9a:d7:32:63:12:09:db:a0:db:cc: e4:14:1c:a7:b0:ed:f5:0c:df:2f:e6:a8:d1:09:29: 21:90:2d:c6:0e:27:a9:80:3c:e7:57:e2:bd:44:6f: 65:d8:af:a1:62:ea:00:4a:08:ea:b3:57:fe:6f:8c: 61:ff:4b:93:fd:66:d4:6a:06:e1:c8:28:41:7d:d8: 19:d6:a4:f7:57:7f:ab:36:18:ae:fb:71:66:9e:a6: ec:cd:58:b8:69:14:d7:17:75:95:bb:82:6d:4d:b8: 7d:9c:ca:35:23:18:c1:1e:66:4a:88:99:01:d5:80: 7e:99:a2:cf:e7:ea:88:c9:1f:4e:e3:aa:8e:67:a7: 62:9b:2e:e7:7d:d9:02:e0:27:56:dd:1a:61:b2:53: a8:c7:3a:df:7e:9e:7f:d2:11:6a:8c:c0:7f:a5:b6: a1:cb:27:3a:4f:85:44:28:c0:03:26:48:ec:18:eb: 3f:ef:2e:c5:9e:15:01:4a:b1:93:66:74:1e:5e:35: e1:32:87:fe:64:bb:ac:06:2f:bf:f6:ab:ba:12:b8: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:04:FA:0B:90:7F:0A:E0:7A:68:30:BE:4E:83:13:29:F4:79:72 X509v3 Authority Key Identifier: keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c7:3a:50:fb:c2:26:55:e0:4f:fd:41:bb:ba:59:43:31:4d: 92:53:4a:20:47:47:f4:7c:82:70:c7:9e:a0:a5:f5:2f:c2:f2: c4:3d:14:c9:d5:b8:08:51:17:e2:c6:fe:42:54:d2:b3:d0:4f: fa:7a:13:75:2f:fa:25:1e:65:a1:31:d1:72:a1:a9:e0:1b:40: ac:a4:9c:82:3e:53:67:07:4f:b9:aa:7c:bd:33:77:aa:e3:6b: 05:d7:05:5c:b4:64:d0:38:06:fe:1f:5a:98:d9:2e:8d:9f:8d: dc:5b:2c:3e:f3:ba:29:90:49:27:50:38:be:32:9d:76:11:04: 5e:5a:a4:11:7d:fb:60:0a:f2:9e:7a:a0:dc:15:c1:fd:27:42: f3:f2:46:53:d1:95:32:67:ce:66:62:ec:14:eb:d4:e7:e0:07: 72:f2:5e:79:76:1d:b8:4f:f2:0e:94:4e:a6:90:2d:32:36:d8: 26:60:e8:d7:e7:6e:5d:59:b9:0b:b8:65:1d:8d:67:65:57:86: f9:e8:ee:15:cc:c5:f2:1d:b4:26:bb:3c:2e:e3:43:e0:36:3c: 20:59:b2:8f:d8:a3:1d:48:9f:5e:de:2c:42:1b:bd:63:2d:78: 61:37:f7:03:f8:c1:c1:e9:2f:db:70:58:4e:e4:77:bb:db:f5: 8c:50:fd:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+CCQhbfzaI0qUVGc6gO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4 OGVmYzMwHhcNMjUxMjA2MTQwMTU1WhcNMjUxMjA3MTQwMTU1WjAzMTEwLwYDVQQD Eyg4YjZlMDRmYTBiOTA3ZjBhZTA3YTY4MzBiZTRlODMxMzI5ZjQ3OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDet3Fs7Ypi5QH4PRWJeXUPNXA7N FsukKHUVYORBScBAiZ8jDTBTQh4JnZ6juiwyrJrXMmMSCdug28zkFBynsO31DN8v 5qjRCSkhkC3GDiepgDznV+K9RG9l2K+hYuoASgjqs1f+b4xh/0uT/WbUagbhyChB fdgZ1qT3V3+rNhiu+3FmnqbszVi4aRTXF3WVu4JtTbh9nMo1IxjBHmZKiJkB1YB+ maLP5+qIyR9O46qOZ6dimy7nfdkC4CdW3RphslOoxzrffp5/0hFqjMB/pbahyyc6 T4VEKMADJkjsGOs/7y7FnhUBSrGTZnQeXjXhMof+ZLusBi+/9qu6Eric6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItuBPoLkH8K4HpoML5OgxMp9HlyMB8GA1UdIwQY MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasc6UPvC JlXgT/1Bu7pZQzFNklNKIEdH9HyCcMeeoKX1L8LyxD0UydW4CFEX4sb+QlTSs9BP +noTdS/6JR5loTHRcqGp4BtArKScgj5TZwdPuap8vTN3quNrBdcFXLRk0DgG/h9a mNkujZ+N3FssPvO6KZBJJ1A4vjKddhEEXlqkEX37YArynnqg3BXB/SdC8/JGU9GV MmfOZmLsFOvU5+AHcvJeeXYduE/yDpROppAtMjbYJmDo1+duXVm5C7hlHY1nZVeG +ejuFczF8h20Jrs8LuND4DY8IFmyj9ijHUifXt4sQhu9Yy14YTf3A/jBwekv23BY TuR3u9v1jFD9Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:00 2025 by rpki-client