This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft File: _AUWm-THSVJnJZffED7rG0e7aKM.mft (raw, json) Hash identifier: umyFPIy3Ya7XA0qlRYzuKBHY7vQ6Prfv8AgeI2OyFNo= Subject key identifier: EE:6E:5C:1B:A8:24:7C:A4:E7:5D:C6:0D:50:0B:AB:30:81:3D:A9:66 Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3 Certificate issuer: /CN=fc05169be4c74952672597df103eeb1b47bb68a3 Certificate serial: 019AF1D1CE26BFD030076E6CCE332FEA35D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft Manifest number: 16DF Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: _AUWm-THSVJnJZffED7rG0e7aKM.crl (hash: 4wJq9eDv8BYzwtpWET9X5ow2PzvsmDcMjaWXy9dIgnY=) 2: qjBjdrunKiTcPXqIE7s1xh7dwEw.roa (hash: uHoSIY7qke5jgdqqvLbgYTxS1uVZNz+Tj5AJ31INqCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ce:26:bf:d0:30:07:6e:6c:ce:33:2f:ea:35:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=ee6e5c1ba8247ca4e75dc60d500bab30813da966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ed:c0:06:ca:47:45:78:4e:ea:d3:00:f4:64: a1:02:19:27:b7:f0:05:94:5c:7c:e3:3f:e7:5a:29: 6a:ba:d2:35:e4:5d:00:86:91:86:fd:c8:80:32:ef: c9:3e:0f:40:c8:63:ef:e1:ac:dd:e8:0f:66:6b:46: e7:97:86:a5:43:dc:21:bb:d1:0e:f3:62:8d:a9:6c: dc:03:b9:19:0b:dc:5b:c1:89:26:50:83:16:fc:0f: 68:92:03:ff:5e:b7:5d:2d:28:7b:4c:45:a3:b4:8a: 97:84:5f:4c:87:bc:ef:9f:70:55:5c:d2:09:43:ea: e8:ca:ef:64:cc:84:24:03:7a:d5:a0:94:1e:71:81: 5f:01:ac:18:50:04:e1:12:df:cc:59:88:d7:97:d4: 12:53:69:ad:13:f3:61:85:35:82:eb:f0:9b:80:59: c1:d8:bc:53:b0:3b:76:3e:56:db:25:b7:dc:9c:fb: 67:46:02:c2:95:0b:5a:79:64:62:35:5b:19:f0:0e: 6d:51:b1:3e:a3:b4:4f:74:47:5e:7e:6d:82:68:a8: bd:81:1a:fe:56:b5:8b:63:eb:93:9e:d7:73:75:0c: c8:e5:13:b1:a8:f1:40:5f:74:39:2f:8d:38:1a:5d: 9d:d3:b6:78:b8:0a:cb:28:23:d0:ec:ed:29:cd:1d: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6E:5C:1B:A8:24:7C:A4:E7:5D:C6:0D:50:0B:AB:30:81:3D:A9:66 X509v3 Authority Key Identifier: keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bc:13:56:ef:59:c3:26:48:7f:3a:b3:52:c0:1b:59:81:cc: a5:93:90:dc:14:f9:f0:5e:7d:2e:35:1d:78:90:46:25:f6:44: ac:f3:57:e8:c1:0c:59:ce:59:ac:dc:a7:92:c4:ea:8e:57:69: 6b:30:e9:9f:a8:d2:5b:66:57:a0:8c:b1:ef:82:b4:9e:f4:05: 4d:92:34:5d:ff:de:51:98:fb:3f:d0:75:1d:b1:f5:62:42:fb: 83:52:fb:3a:b1:ce:cf:d5:af:d4:85:f5:45:2e:06:c7:4f:64: 20:8a:eb:22:73:59:29:9a:4a:a5:d4:62:49:35:80:2d:b1:7e: 16:e6:98:50:f5:4f:47:da:c7:d4:f7:bc:74:40:8d:12:80:a7: 86:51:b9:d0:3e:cd:ec:8c:13:7d:18:f8:0d:c5:05:a8:a4:7d: 6f:88:a9:e5:85:d1:88:7f:d1:a4:cd:d0:bc:36:0c:46:76:77: cb:01:48:76:9b:07:00:aa:2d:e9:dc:0c:66:a3:bf:8f:62:4d: 63:8e:92:92:81:fc:33:fa:36:c2:24:16:ea:da:6d:99:a0:0e: 3a:1f:73:c6:ad:41:c1:bd:77:43:cc:07:4c:a2:2b:d0:92:e9: f2:30:a6:e6:94:de:86:0e:d1:3c:e1:53:fb:7c:d3:ee:25:2e: 15:09:e3:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c4mv9AwB25szjMv6jXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDUxNjliZTRjNzQ5NTI2NzI1OTdkZjEwM2VlYjFiNDdi YjY4YTMwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhlZTZlNWMxYmE4MjQ3Y2E0ZTc1ZGM2MGQ1MDBiYWIzMDgxM2RhOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6u3ABspHRXhO6tMA9GShAhknt/AF lFx84z/nWilqutI15F0AhpGG/ciAMu/JPg9AyGPv4azd6A9ma0bnl4alQ9whu9EO 82KNqWzcA7kZC9xbwYkmUIMW/A9okgP/XrddLSh7TEWjtIqXhF9Mh7zvn3BVXNIJ Q+royu9kzIQkA3rVoJQecYFfAawYUAThEt/MWYjXl9QSU2mtE/NhhTWC6/CbgFnB 2LxTsDt2PlbbJbfcnPtnRgLClQtaeWRiNVsZ8A5tUbE+o7RPdEdefm2CaKi9gRr+ VrWLY+uTntdzdQzI5ROxqPFAX3Q5L404Gl2d07Z4uArLKCPQ7O0pzR1zlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5uXBuoJHyk513GDVALqzCBPalmMB8GA1UdIwQY MBaAFPwFFpvkx0lSZyWX3xA+6xtHu2ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNTliYWYtMTEzZS00NjBiLTkzZTct MzM4YTk4YTFkOWNiLzEvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNTliYWYtMTEzZS00NjBiLTkzZTctMzM4YTk4YTFkOWNi LzEvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrwTVu9Z wyZIfzqzUsAbWYHMpZOQ3BT58F59LjUdeJBGJfZErPNX6MEMWc5ZrNynksTqjldp azDpn6jSW2ZXoIyx74K0nvQFTZI0Xf/eUZj7P9B1HbH1YkL7g1L7OrHOz9Wv1IX1 RS4Gx09kIIrrInNZKZpKpdRiSTWALbF+FuaYUPVPR9rH1Pe8dECNEoCnhlG50D7N 7IwTfRj4DcUFqKR9b4ip5YXRiH/RpM3QvDYMRnZ3ywFIdpsHAKot6dwMZqO/j2JN Y46SkoH8M/o2wiQW6tptmaAOOh9zxq1Bwb13Q8wHTKIr0JLp8jCm5pTehg7RPOFT +3zT7iUuFQnj7A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:56 2025 by rpki-client