This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json) Hash identifier: EWBimIe2qla50Nu6rdmSVSBotAlORle/ThAH4IClvnU= Subject key identifier: 31:56:1F:91:72:6C:DF:A9:BD:F8:75:AC:89:78:28:F8:21:92:4A:DE Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2 Certificate serial: 019AF35247D94E858705432E50DA091229D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft Manifest number: 0F27 Signing time: Sat 06 Dec 2025 11:00:47 +0000 Manifest this update: Sat 06 Dec 2025 11:00:47 +0000 Manifest next update: Sun 07 Dec 2025 11:00:47 +0000 Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: nyctIwBSYey62mGiGada5NKfuIn0cGUJ7tLhg52nogo=) 2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:47:d9:4e:85:87:05:43:2e:50:da:09:12:29:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2 Validity Not Before: Dec 6 11:00:47 2025 GMT Not After : Dec 7 11:00:47 2025 GMT Subject: CN=31561f91726cdfa9bdf875ac897828f821924ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:8b:2b:a9:3e:06:70:23:74:c2:f6:60:3b: bf:7d:37:40:fd:4c:c2:9e:76:13:a5:4c:87:e7:51: cd:cd:cd:5c:52:1c:4a:8d:1e:8b:ca:88:3e:d8:07: d6:0a:74:0f:ee:58:24:71:39:5d:58:17:5d:a3:97: 5b:fb:de:1f:75:16:98:b0:fc:c8:cc:81:96:92:8b: ef:32:4b:d2:4c:db:eb:9f:10:98:60:85:74:ea:56: c5:6f:b9:7f:54:17:1e:95:60:e9:82:a9:03:98:4b: 2c:23:8a:42:53:e5:b0:f3:35:51:9a:75:1c:1f:eb: 68:e2:f2:11:c4:7c:67:8e:00:87:a5:bb:65:94:aa: ca:a6:07:a7:0d:2f:c5:6b:27:08:d6:d7:8a:ab:6d: 69:7a:24:f6:6e:7e:17:89:3f:8b:bd:dc:81:82:74: 2a:88:16:6c:cf:fe:c3:90:66:0f:e8:1c:42:b9:0b: e4:75:95:bd:e2:b9:30:dc:2b:91:89:41:0f:52:1c: 18:54:ef:94:ba:31:68:4e:3a:c9:89:94:0d:1d:80: 1f:f9:95:5c:b3:ef:34:e1:8c:41:29:0a:27:39:bd: 2a:01:ec:1c:8e:89:48:71:03:54:b6:61:58:76:ec: 95:26:2f:e1:da:1e:f4:80:ca:4c:b8:0a:84:c8:cd: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:56:1F:91:72:6C:DF:A9:BD:F8:75:AC:89:78:28:F8:21:92:4A:DE X509v3 Authority Key Identifier: keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:05:37:94:01:13:52:22:65:4b:b1:bd:2f:ba:49:51:35: a7:3a:08:d1:cf:cf:ce:4c:ec:e3:d1:74:fb:7a:7e:3c:a5:87: 63:5b:56:14:89:ae:45:4c:4b:ff:1a:ea:d3:b1:d5:1e:05:43: e2:a1:a3:be:f0:a8:bd:f9:63:6c:33:b9:14:86:6c:05:80:14: 00:e2:41:8d:b3:f9:4a:ca:84:4f:ac:67:db:ca:13:8b:65:9e: 20:6f:d9:2e:f3:5a:6a:38:8f:e8:0b:74:fb:f7:8d:7c:05:6d: 57:2a:b5:a3:26:da:a9:c7:5d:10:c0:cf:c2:e7:e0:d7:e7:4c: 67:4e:aa:e3:a0:27:80:51:c8:80:51:c8:32:9c:70:91:6e:d0: 22:17:0b:3e:a4:1b:b6:f2:0a:7c:89:c4:7c:8f:36:ec:1f:41: 15:96:ff:0f:07:01:8f:8b:45:59:be:cf:34:09:5c:7d:69:c1: fc:2e:78:7b:c6:0e:6f:21:87:9f:79:93:b4:b0:e1:ca:1a:97: 19:92:be:b9:3a:64:d0:5a:76:e9:fd:0b:34:34:a7:00:b2:03: 9e:aa:98:d8:a4:db:39:e2:28:b4:8b:7d:e1:93:67:0f:ad:54: 82:0b:d0:e1:5d:37:7e:04:d1:5f:5c:0f:76:cf:8a:0c:bb:c4: 24:e0:e7:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkfZToWHBUMuUNoJEinTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMw MjVhYzIwHhcNMjUxMjA2MTEwMDQ3WhcNMjUxMjA3MTEwMDQ3WjAzMTEwLwYDVQQD EygzMTU2MWY5MTcyNmNkZmE5YmRmODc1YWM4OTc4MjhmODIxOTI0YWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M6LK6k+BnAjdML2YDu/fTdA/UzC nnYTpUyH51HNzc1cUhxKjR6Lyog+2AfWCnQP7lgkcTldWBddo5db+94fdRaYsPzI zIGWkovvMkvSTNvrnxCYYIV06lbFb7l/VBcelWDpgqkDmEssI4pCU+Ww8zVRmnUc H+to4vIRxHxnjgCHpbtllKrKpgenDS/FaycI1teKq21peiT2bn4XiT+LvdyBgnQq iBZsz/7DkGYP6BxCuQvkdZW94rkw3CuRiUEPUhwYVO+UujFoTjrJiZQNHYAf+ZVc s+804YxBKQonOb0qAewcjolIcQNUtmFYduyVJi/h2h70gMpMuAqEyM2U0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFWH5FybN+pvfh1rIl4KPghkkreMB8GA1UdIwQY MBaAFGmH1Hk14RN9VEQm21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1Zjgt OWM5NTM1OTRkNmIxLzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIx LzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVwFN5QB E1IiZUuxvS+6SVE1pzoI0c/Pzkzs49F0+3p+PKWHY1tWFImuRUxL/xrq07HVHgVD 4qGjvvCovfljbDO5FIZsBYAUAOJBjbP5SsqET6xn28oTi2WeIG/ZLvNaajiP6At0 +/eNfAVtVyq1oybaqcddEMDPwufg1+dMZ06q46AngFHIgFHIMpxwkW7QIhcLPqQb tvIKfInEfI827B9BFZb/DwcBj4tFWb7PNAlcfWnB/C54e8YObyGHn3mTtLDhyhqX GZK+uTpk0Fp26f0LNDSnALIDnqqY2KTbOeIotIt94ZNnD61UggvQ4V03fgTRX1wP ds+KDLvEJODnAg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:44 2025 by rpki-client