This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json) Hash identifier: oJbWYjzKCLM0kTe6P9U702kCGpY8zQfBziVYA2GpfZE= Subject key identifier: 4B:D7:1E:42:F7:09:26:A6:7E:BC:A3:E6:37:C1:CF:41:28:FF:EB:80 Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f Certificate serial: 019AF163EAE3E5E9F2334B809FE56AC3C370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft Manifest number: 1276 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=) 2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: HAY2b35tNtJrNlm8WyoW3/Whc1SU5CQccy58e9us48Y=) 3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ea:e3:e5:e9:f2:33:4b:80:9f:e5:6a:c3:c3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=4bd71e42f70926a67ebca3e637c1cf4128ffeb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:f5:60:b2:45:f3:14:46:ed:4b:b3:1b:59: bf:52:d7:2d:56:d0:52:f3:3d:b0:e5:62:89:ed:d5: cb:e3:e5:da:2c:6b:db:db:04:d5:8e:e3:b5:75:ca: 73:4c:1b:e6:12:49:5a:5e:bd:7c:d6:17:27:d5:01: 18:41:54:ab:74:e9:3e:48:77:b0:8b:ea:df:35:95: 98:be:e0:6e:35:a4:26:e5:39:06:c1:64:b5:7e:3b: df:16:92:ee:d0:e6:da:6c:cb:8b:e3:31:18:ac:24: d8:15:18:97:8a:63:26:cc:e5:09:0c:9a:98:8c:59: c7:2c:71:07:97:fd:43:d1:24:16:e6:e0:e3:27:eb: 93:8c:c9:c1:35:bc:79:bc:53:65:f5:7f:cd:d9:c5: 80:37:d5:03:4e:37:bc:f9:64:14:4c:7a:3a:f0:90: 07:cd:5c:eb:66:c8:c6:88:3e:5a:34:c2:4e:fe:99: 21:b8:66:45:a4:77:cd:41:08:78:3c:5e:59:87:8e: 55:f2:65:6c:5c:3e:c1:37:4a:6d:92:b6:bc:e4:d0: e8:d2:57:58:4a:a0:63:59:54:5d:ae:b0:98:4e:1a: f3:dd:80:f7:e3:0d:ca:24:43:c7:90:08:c6:30:ea: 32:56:20:f8:88:34:05:77:98:ff:7a:89:26:93:d1: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D7:1E:42:F7:09:26:A6:7E:BC:A3:E6:37:C1:CF:41:28:FF:EB:80 X509v3 Authority Key Identifier: keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:af:86:40:5a:04:2b:16:33:e1:6e:f7:a9:eb:8e:01:0f:49: d4:6b:9f:6f:31:5c:fb:7b:0f:e7:2f:fb:8d:aa:8e:69:a9:59: d6:81:5c:b3:a7:d5:79:bf:9b:cb:2e:1e:41:36:e2:13:2a:fd: 4b:4e:dc:f5:ec:47:d3:d1:ec:95:61:34:c9:73:df:f5:cd:f1: 60:79:6c:8d:a7:59:58:cc:0b:56:47:bf:71:54:84:70:22:c9: 5c:29:31:fd:36:d6:79:31:28:f3:d4:5f:b6:ff:04:ff:39:a7: c9:2e:9a:06:02:2c:69:dd:72:4d:90:9f:d4:8e:91:36:a3:c4: cb:69:92:88:2b:a9:53:70:3b:ef:e3:01:08:8d:60:b6:0b:76: c7:c9:84:c0:d9:95:79:da:2b:42:70:c8:80:d1:59:b5:1d:09: 05:b1:79:3c:e6:49:7c:78:65:0b:0e:53:22:7b:c0:76:4b:e6: e6:75:b0:ba:12:b1:30:da:9c:11:b1:0c:59:ef:a0:64:40:63: ec:c7:76:12:2b:ec:c2:46:5e:fa:5b:54:f3:13:68:47:67:0f: c8:54:94:f7:7b:11:7d:4d:c7:b9:73:63:a8:a1:17:ad:53:ee: 3d:4e:37:73:bc:ec:45:4d:f9:07:82:56:68:66:47:04:e9:3b: 18:90:75:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+rj5enyM0uAn+Vqw8NwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjljNTQwYjE0NmJiNDRjODIxOWQwMTM3NWMxMDEyNDky MGFlOWYwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD Eyg0YmQ3MWU0MmY3MDkyNmE2N2ViY2EzZTYzN2MxY2Y0MTI4ZmZlYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAour1YLJF8xRG7UuzG1m/UtctVtBS 8z2w5WKJ7dXL4+XaLGvb2wTVjuO1dcpzTBvmEklaXr181hcn1QEYQVSrdOk+SHew i+rfNZWYvuBuNaQm5TkGwWS1fjvfFpLu0ObabMuL4zEYrCTYFRiXimMmzOUJDJqY jFnHLHEHl/1D0SQW5uDjJ+uTjMnBNbx5vFNl9X/N2cWAN9UDTje8+WQUTHo68JAH zVzrZsjGiD5aNMJO/pkhuGZFpHfNQQh4PF5Zh45V8mVsXD7BN0ptkra85NDo0ldY SqBjWVRdrrCYThrz3YD34w3KJEPHkAjGMOoyViD4iDQFd5j/eokmk9H/WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvXHkL3CSamfryj5jfBz0Eo/+uAMB8GA1UdIwQY MBaAFGr5xUCxRrtEyCGdATdcEBJJIK6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODct NDIxYTk5YmRkNzhmLzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODctNDIxYTk5YmRkNzhm LzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja+GQFoE KxYz4W73qeuOAQ9J1GufbzFc+3sP5y/7jaqOaalZ1oFcs6fVeb+byy4eQTbiEyr9 S07c9exH09HslWE0yXPf9c3xYHlsjadZWMwLVke/cVSEcCLJXCkx/TbWeTEo89Rf tv8E/zmnyS6aBgIsad1yTZCf1I6RNqPEy2mSiCupU3A77+MBCI1gtgt2x8mEwNmV edorQnDIgNFZtR0JBbF5POZJfHhlCw5TInvAdkvm5nWwuhKxMNqcEbEMWe+gZEBj 7Md2EivswkZe+ltU8xNoR2cPyFSU93sRfU3HuXNjqKEXrVPuPU43c7zsRU35B4JW aGZHBOk7GJB1IQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:48 2025 by rpki-client