This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json) Hash identifier: Li3HNt+wc7EMyWbAPb32N7MUvta60SWqXBYw8HTuU6Q= Subject key identifier: 73:11:82:0B:C8:1D:C5:2D:CA:91:38:ED:EF:C8:DA:C6:AB:D8:E0:E2 Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11 Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311 Certificate serial: 019AF2766B7BE3B57D1AA4D8AD8ADADEB3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft Manifest number: 1477 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: G1+0aexL3Veh8s72S8fjH/ac3WyztT52lGYPY5WAch0=) 2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6b:7b:e3:b5:7d:1a:a4:d8:ad:8a:da:de:b3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=7311820bc81dc52dca9138edefc8dac6abd8e0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:bf:9d:7c:3a:af:91:58:9f:7c:65:0e:dc: d5:b7:42:90:0b:45:af:9f:ff:5c:87:96:4d:46:2c: 44:e4:6d:84:36:af:91:60:b3:95:61:1b:8b:27:47: e0:64:28:7f:66:6a:37:5c:40:4f:53:24:b8:a9:80: 18:3d:b7:44:5c:58:e8:50:a5:73:50:c6:51:85:a4: 92:b0:c5:df:41:89:ff:e4:8d:6b:ec:37:15:d2:20: 4e:71:c2:19:f6:1f:ab:2e:ac:c1:d5:8e:18:b1:c0: c4:35:4e:f2:3d:7c:3f:6f:8d:2e:b3:ae:d9:03:5f: de:fe:49:ce:02:f4:32:a4:7d:f7:75:02:51:61:81: 7c:7b:ca:67:92:17:50:0c:44:ed:f7:a3:dc:45:35: f7:ce:07:38:7d:66:c8:a4:a4:78:6c:53:db:81:39: 45:ed:17:47:4a:76:c1:3a:1b:e8:6a:b0:74:d0:f1: 00:9a:28:df:bd:37:a0:cf:ca:1f:bb:1c:bf:8e:ae: dc:c0:60:43:58:f6:be:77:c6:d9:a8:ce:40:22:4d: 99:24:4d:aa:df:b7:bf:d6:6e:7b:0d:c6:be:e6:68: 07:2c:fe:b0:b1:cc:34:06:ac:da:d9:34:46:2d:a3: b8:50:51:39:7d:18:72:b5:0a:c9:93:eb:b4:d8:3a: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:11:82:0B:C8:1D:C5:2D:CA:91:38:ED:EF:C8:DA:C6:AB:D8:E0:E2 X509v3 Authority Key Identifier: keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ca:fe:a0:ad:71:9c:fa:54:ab:19:9c:08:0f:81:9b:5c:33: 17:10:ba:f5:5b:30:ec:0d:13:a2:68:e0:21:14:6e:05:7b:79: 06:6a:cc:b5:45:2a:42:71:2e:7c:f5:a0:14:17:af:9a:33:8c: 21:c5:81:6d:4f:03:e9:a3:96:1d:ca:c1:6b:c3:6f:bb:d4:60: 1e:f9:9d:72:0e:40:47:e6:01:bd:8c:c6:b9:fb:f6:fe:7a:a5: 62:8a:0e:af:67:7f:41:10:d1:b4:46:4b:a7:af:a3:a3:11:c4: 19:ce:dd:6f:dc:64:60:a3:0a:80:29:6c:3c:e5:8e:ca:01:d1: 19:ce:cf:2b:6e:0d:59:22:a7:be:f7:9f:09:22:2f:51:63:7a: cb:19:77:bb:0e:57:3e:17:78:7a:d5:bb:4d:5e:d5:bd:fb:8c: f1:5a:ba:5b:e5:5b:cf:ba:10:6e:5e:30:b3:8e:5e:7d:6f:f2: 93:c8:8a:35:d9:69:25:d4:fd:92:4c:c6:95:fd:ea:34:26:ef: 48:89:d9:2e:b7:87:3a:a4:e6:a1:e0:9b:50:38:e8:04:bc:3b: 18:61:16:76:5c:da:bc:41:35:8e:a8:b8:7d:9c:31:59:b7:7b: a4:71:8a:3a:aa:77:23:47:e8:7e:6a:bd:34:0b:8a:74:51:7b: ce:a6:1c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmt747V9GqTYrYra3rPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWNmZWUzYzJiNmVhNDlkMjllMTAzZTIzYTUyMmM2MmUz ODUzMTEwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD Eyg3MzExODIwYmM4MWRjNTJkY2E5MTM4ZWRlZmM4ZGFjNmFiZDhlMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6/nXw6r5FYn3xlDtzVt0KQC0Wv n/9ch5ZNRixE5G2ENq+RYLOVYRuLJ0fgZCh/Zmo3XEBPUyS4qYAYPbdEXFjoUKVz UMZRhaSSsMXfQYn/5I1r7DcV0iBOccIZ9h+rLqzB1Y4YscDENU7yPXw/b40us67Z A1/e/knOAvQypH33dQJRYYF8e8pnkhdQDETt96PcRTX3zgc4fWbIpKR4bFPbgTlF 7RdHSnbBOhvoarB00PEAmijfvTegz8ofuxy/jq7cwGBDWPa+d8bZqM5AIk2ZJE2q 37e/1m57Dca+5mgHLP6wscw0Bqza2TRGLaO4UFE5fRhytQrJk+u02Dr9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMRggvIHcUtypE47e/I2sar2ODiMB8GA1UdIwQY MBaAFAFc/uPCtupJ0p4QPiOlIsYuOFMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2Yt NGJmNzZjZTM1NjFkLzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2YtNGJmNzZjZTM1NjFk LzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcr+oK1x nPpUqxmcCA+Bm1wzFxC69Vsw7A0TomjgIRRuBXt5BmrMtUUqQnEufPWgFBevmjOM IcWBbU8D6aOWHcrBa8Nvu9RgHvmdcg5AR+YBvYzGufv2/nqlYooOr2d/QRDRtEZL p6+joxHEGc7db9xkYKMKgClsPOWOygHRGc7PK24NWSKnvvefCSIvUWN6yxl3uw5X Phd4etW7TV7VvfuM8Vq6W+Vbz7oQbl4ws45efW/yk8iKNdlpJdT9kkzGlf3qNCbv SInZLreHOqTmoeCbUDjoBLw7GGEWdlzavEE1jqi4fZwxWbd7pHGKOqp3I0fofmq9 NAuKdFF7zqYc8w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:58 2025 by rpki-client