This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json) Hash identifier: BxkCINixy3LfG/YUPEXRDb+uAPFw1P3pkc0rJpvjTss= Subject key identifier: 01:8D:B2:78:26:4F:B5:BB:78:C3:C3:B6:0B:4D:CD:44:DF:9E:6B:DA Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49 Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749 Certificate serial: 019AF35213DEF0D8A6CE7832109A435427D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft Manifest number: 1385 Signing time: Sat 06 Dec 2025 11:00:33 +0000 Manifest this update: Sat 06 Dec 2025 11:00:33 +0000 Manifest next update: Sun 07 Dec 2025 11:00:33 +0000 Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: u5Oz3dR0cp2tTVA/VOWCNDkLQt8nXCfu1Jda6f/d1Yc=) 2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:13:de:f0:d8:a6:ce:78:32:10:9a:43:54:27:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749 Validity Not Before: Dec 6 11:00:33 2025 GMT Not After : Dec 7 11:00:33 2025 GMT Subject: CN=018db278264fb5bb78c3c3b60b4dcd44df9e6bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:59:2e:15:8b:54:94:27:48:f7:d2:11:ce: ab:25:9b:4b:12:81:78:19:72:76:de:24:c3:52:35: 32:9d:83:ef:66:f1:fb:80:a0:0e:f5:6e:d4:3b:94: 26:60:ce:b9:5e:a9:60:1c:7e:2e:46:31:53:e9:17: 43:9c:5e:f9:12:0e:41:3a:a5:96:d6:91:d5:4a:ea: d4:f1:3b:a4:b3:cf:b8:18:a8:48:c3:5a:4c:fe:9f: cd:d4:ae:f9:60:74:ac:bd:78:bc:4b:9c:9f:94:d8: e9:c0:16:9b:de:63:5e:66:d1:10:cf:95:77:eb:ff: 9e:2e:38:25:01:ba:c0:0f:59:c1:aa:c9:73:4f:5c: 36:91:40:cf:df:2f:8e:ff:e4:72:d9:24:7f:99:e7: 23:53:50:2b:8f:0a:8f:27:88:3c:8a:cd:98:0a:8e: 04:5b:1d:c5:70:2c:48:bd:2e:ba:d9:53:b6:fe:49: a3:07:74:59:fd:cb:47:f3:c7:c1:29:30:f4:10:cd: 91:8d:b1:ec:45:d6:15:4e:00:0d:ab:23:03:09:a1: 7c:a6:70:29:6a:d6:7f:c2:d7:f9:f6:5b:ff:95:68: d0:d9:bb:b0:35:8c:ca:d9:f1:20:e8:34:af:3f:30: f3:5a:42:e5:59:a6:26:2d:4c:6f:96:a3:37:a9:2b: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8D:B2:78:26:4F:B5:BB:78:C3:C3:B6:0B:4D:CD:44:DF:9E:6B:DA X509v3 Authority Key Identifier: keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:11:5e:0e:20:8a:d8:88:5e:c2:f2:25:a0:eb:34:74:e0:09: 7f:c1:ba:51:99:9c:73:b3:3b:5c:1d:ed:30:4c:72:1c:ae:d9: 42:bc:0e:e8:e5:cb:33:b5:28:b4:26:06:2b:80:2a:c2:0a:13: 2b:71:3b:a1:5e:a5:5f:e1:52:be:39:00:70:72:0b:77:fb:f8: 06:17:17:18:a9:6a:ab:80:68:7a:1a:fb:a1:4e:99:85:2c:18: fd:9e:21:02:86:52:3e:c5:13:78:c4:f8:30:4f:72:b4:1d:19: ca:52:72:4a:0b:c9:8e:5a:fd:c2:f4:fb:74:6f:d1:9d:d9:18: fc:36:dd:fb:b4:17:79:6a:3a:da:05:12:63:94:cf:1b:14:3b: 71:9a:80:a9:76:79:88:1a:b8:ab:8d:28:99:99:f5:8a:1b:14: 27:0e:0a:33:56:e6:06:1c:64:a8:ad:b6:fc:92:26:24:93:ff: ea:c7:49:84:b8:02:e1:0d:2d:86:41:11:ed:8a:bd:52:80:14: 5c:f4:d9:fa:fe:3d:af:3a:50:2c:11:a0:22:82:5a:f3:21:f1: ae:52:7f:c6:7d:78:4a:72:79:30:13:2d:78:43:62:19:c5:e5: 76:31:2e:73:2f:70:1f:8d:2d:af:a8:6a:b2:4e:f1:4e:00:c4: d9:f2:f1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhPe8NimzngyEJpDVCfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDYzNjgyM2EyMGU2MDI2MzQyZmU4Yzg4ZWE3MmE4Zjhm N2E3NDkwHhcNMjUxMjA2MTEwMDMzWhcNMjUxMjA3MTEwMDMzWjAzMTEwLwYDVQQD EygwMThkYjI3ODI2NGZiNWJiNzhjM2MzYjYwYjRkY2Q0NGRmOWU2YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6lZLhWLVJQnSPfSEc6rJZtLEoF4 GXJ23iTDUjUynYPvZvH7gKAO9W7UO5QmYM65XqlgHH4uRjFT6RdDnF75Eg5BOqWW 1pHVSurU8Tuks8+4GKhIw1pM/p/N1K75YHSsvXi8S5yflNjpwBab3mNeZtEQz5V3 6/+eLjglAbrAD1nBqslzT1w2kUDP3y+O/+Ry2SR/mecjU1ArjwqPJ4g8is2YCo4E Wx3FcCxIvS662VO2/kmjB3RZ/ctH88fBKTD0EM2RjbHsRdYVTgANqyMDCaF8pnAp atZ/wtf59lv/lWjQ2buwNYzK2fEg6DSvPzDzWkLlWaYmLUxvlqM3qSs48wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGNsngmT7W7eMPDtgtNzUTfnmvaMB8GA1UdIwQY MBaAFPwGNoI6IOYCY0L+jIjqcqj496dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDIt MDA1YTkyOWFjMTI0LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDItMDA1YTkyOWFjMTI0 LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxFeDiCK 2IhewvIloOs0dOAJf8G6UZmcc7M7XB3tMExyHK7ZQrwO6OXLM7UotCYGK4AqwgoT K3E7oV6lX+FSvjkAcHILd/v4BhcXGKlqq4Boehr7oU6ZhSwY/Z4hAoZSPsUTeMT4 ME9ytB0ZylJySgvJjlr9wvT7dG/RndkY/Dbd+7QXeWo62gUSY5TPGxQ7cZqAqXZ5 iBq4q40omZn1ihsUJw4KM1bmBhxkqK22/JImJJP/6sdJhLgC4Q0thkER7Yq9UoAU XPTZ+v49rzpQLBGgIoJa8yHxrlJ/xn14SnJ5MBMteENiGcXldjEucy9wH40tr6hq sk7xTgDE2fLx3g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:15 2025 by rpki-client