This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json) Hash identifier: oBM9jqNMyWgBOfhkUlk9Cug0HpTGmSRYbaba1ObkcrU= Subject key identifier: C1:5F:16:35:C5:DD:58:EE:4A:1E:05:88:40:54:6E:B8:6E:D1:94:CE Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Certificate serial: 019B2B1E36F88A5829A6F6FD7AE031C3FFCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft Manifest number: 13CF Signing time: Wed 17 Dec 2025 07:02:38 +0000 Manifest this update: Wed 17 Dec 2025 07:02:38 +0000 Manifest next update: Thu 18 Dec 2025 07:02:38 +0000 Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: NHLPHtQ1gRil7ekKFvxTZomTfC5OXIbm+3vxQGSNess=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:36:f8:8a:58:29:a6:f6:fd:7a:e0:31:c3:ff:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Validity Not Before: Dec 17 07:02:38 2025 GMT Not After : Dec 18 07:02:38 2025 GMT Subject: CN=c15f1635c5dd58ee4a1e058840546eb86ed194ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:1c:f4:77:00:6d:39:d5:cf:86:10:b9:68: 6f:5c:cd:48:40:15:5c:12:92:1d:59:e9:7d:09:6d: a0:05:7e:ae:0c:7c:7f:53:97:c3:61:c5:e9:a0:25: bd:10:6f:86:49:17:de:0d:89:fe:ad:bb:80:24:2c: 40:bb:76:7d:4c:57:65:8a:35:80:11:3b:e2:e9:02: 84:d7:24:8a:ae:66:b3:c2:37:94:24:7f:43:90:9f: 0f:63:82:20:cf:7c:97:44:ed:fb:53:89:60:f8:a2: 04:76:ae:15:d0:9c:0a:c1:21:bc:a5:91:c8:6d:2c: 5b:de:82:68:d2:75:97:03:f8:d6:87:da:e4:b0:18: a4:a0:a7:e4:90:9a:3e:7b:46:bf:94:ae:e3:f5:df: 55:20:86:6e:fb:0e:5f:e0:a9:30:00:7c:0f:78:e6: 04:15:f8:9a:6a:77:bd:78:ee:90:8a:65:78:8f:84: bf:a7:44:1a:1e:42:c2:73:69:a8:90:e1:92:20:7d: 29:f7:47:90:eb:a8:d6:68:4e:28:30:a1:5d:95:fc: 16:06:3c:3c:d2:ef:eb:18:13:0e:e9:55:72:21:fa: 81:fe:82:cf:16:96:82:4b:29:f5:84:7d:54:c8:ac: 90:9d:6f:07:9d:6e:14:96:93:d9:a6:07:e0:47:e4: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:16:35:C5:DD:58:EE:4A:1E:05:88:40:54:6E:B8:6E:D1:94:CE X509v3 Authority Key Identifier: keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4c:a4:71:f5:90:f3:cb:ca:8d:2a:65:28:a3:43:c9:17:86: 1b:db:f5:e6:d9:ae:85:d6:ab:e5:fb:5a:2b:ef:01:7d:02:59: 40:0e:56:89:6c:b0:80:8f:0b:3b:6a:f8:b3:c9:1d:9c:6f:64: 85:88:a0:a6:2f:20:29:a6:d2:c8:50:7d:b4:e9:95:73:12:4f: e7:12:5b:5b:e5:e7:de:63:42:8b:29:6b:12:48:f4:d9:d7:5c: 77:e9:1c:3c:ba:14:8a:aa:b3:00:ed:6f:43:cc:aa:65:f3:02: 5b:2a:d3:b6:3d:3d:d2:be:1d:dd:11:b8:e1:1b:41:9d:59:ea: 40:94:eb:da:07:2c:41:d3:22:0d:7b:cc:7c:15:47:37:45:c1: 22:62:6e:f9:f1:90:3e:43:7a:c5:da:28:c7:a5:6d:68:25:c1: 2d:76:52:b0:5f:4c:39:ec:f4:eb:09:0e:ee:6a:62:9b:d7:c0: f7:df:98:2a:a9:4e:70:b1:b0:65:2f:e2:d2:95:82:cd:aa:5b: 06:91:12:95:26:a4:1d:fe:34:f3:21:ef:43:9b:1d:b6:42:54: 91:7f:65:9b:5b:ba:b3:94:41:72:7e:7d:5e:2f:39:3f:21:84: 12:41:50:ce:e1:03:4d:07:ab:3f:dc:ae:c5:92:a9:29:cb:a7: 4c:53:06:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHjb4ilgppvb9euAxw//OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWJmYWNiNWExMzRkMTM4MDVlZWY5NWZkOGZiZDEyZGU2 YTAxZjMwHhcNMjUxMjE3MDcwMjM4WhcNMjUxMjE4MDcwMjM4WjAzMTEwLwYDVQQD EyhjMTVmMTYzNWM1ZGQ1OGVlNGExZTA1ODg0MDU0NmViODZlZDE5NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsYc9HcAbTnVz4YQuWhvXM1IQBVc EpIdWel9CW2gBX6uDHx/U5fDYcXpoCW9EG+GSRfeDYn+rbuAJCxAu3Z9TFdlijWA ETvi6QKE1ySKrmazwjeUJH9DkJ8PY4Igz3yXRO37U4lg+KIEdq4V0JwKwSG8pZHI bSxb3oJo0nWXA/jWh9rksBikoKfkkJo+e0a/lK7j9d9VIIZu+w5f4KkwAHwPeOYE Ffiaane9eO6QimV4j4S/p0QaHkLCc2mokOGSIH0p90eQ66jWaE4oMKFdlfwWBjw8 0u/rGBMO6VVyIfqB/oLPFpaCSyn1hH1UyKyQnW8HnW4UlpPZpgfgR+R6QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFfFjXF3VjuSh4FiEBUbrhu0ZTOMB8GA1UdIwQY MBaAFGlb+staE00TgF7vlf2PvRLeagHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEt OTk0Y2NkMTBmYTQ0LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEtOTk0Y2NkMTBmYTQ0 LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkykcfWQ 88vKjSplKKNDyReGG9v15tmuhdar5ftaK+8BfQJZQA5WiWywgI8LO2r4s8kdnG9k hYigpi8gKabSyFB9tOmVcxJP5xJbW+Xn3mNCiylrEkj02ddcd+kcPLoUiqqzAO1v Q8yqZfMCWyrTtj090r4d3RG44RtBnVnqQJTr2gcsQdMiDXvMfBVHN0XBImJu+fGQ PkN6xdoox6VtaCXBLXZSsF9MOez06wkO7mpim9fA99+YKqlOcLGwZS/i0pWCzapb BpESlSakHf408yHvQ5sdtkJUkX9lm1u6s5RBcn59Xi85PyGEEkFQzuEDTQerP9yu xZKpKcunTFMGcQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:02:26 2025 by rpki-client