This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft File: AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json) Hash identifier: 7nFpGvxHd8jw2f7smQEgbrYR98U0zenrLH4GLq6ewXE= Subject key identifier: 28:75:37:87:C8:E9:CF:15:60:D0:29:EF:8C:3F:25:51:77:A2:F1:BA Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23 Certificate issuer: /CN=02c37210ed8a56ce0edd4574bf736b63245e5823 Certificate serial: 019AF23FB2C275EFD961182124FABEF1AAFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: qnWUMI+9bsdIhhHbCXrlpXk9AVydd+XIXDQIgLWPIRg=) 2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b2:c2:75:ef:d9:61:18:21:24:fa:be:f1:aa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=28753787c8e9cf1560d029ef8c3f255177a2f1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:33:28:d6:e1:fa:8c:9e:b0:9e:45:ad:b3: de:e2:51:18:21:17:5f:c6:8a:2b:01:9e:11:bc:0e: ba:29:2c:fb:96:44:8c:29:03:5f:95:8a:64:52:7b: a3:da:01:96:f2:1a:a1:10:53:00:23:1f:5b:2e:28: fa:11:ce:86:27:c0:e5:4e:9e:23:1d:a1:0e:e4:10: e8:c4:d8:02:d0:74:bc:97:77:7f:b0:be:65:89:da: be:99:65:59:4b:90:cb:38:2d:45:31:80:54:5a:d8: 85:67:3d:5e:8d:e6:7b:4a:72:0c:f1:d6:8d:f9:20: 35:45:55:6a:03:62:2f:49:dc:ef:a3:2a:64:ee:de: 84:9b:70:8e:15:c5:b2:56:7a:ce:89:e9:38:5b:7e: 0f:4f:a9:56:09:2a:f6:e6:0e:50:e0:5e:96:7f:64: 50:84:e6:f8:39:01:61:79:d2:f6:47:2b:0b:f2:f1: d7:55:5f:ef:bc:2c:42:97:85:be:d3:c5:7d:a5:01: 9c:a6:b8:94:a9:36:52:ab:46:6c:db:fb:56:66:80: 14:b3:ef:ff:e5:62:e5:66:c8:1a:85:32:c1:f6:91: 78:de:3f:3a:f7:49:9a:7b:95:00:54:f6:9b:c1:71: 81:62:d7:c0:36:42:da:04:94:a0:5f:7b:1c:4e:e5: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:37:87:C8:E9:CF:15:60:D0:29:EF:8C:3F:25:51:77:A2:F1:BA X509v3 Authority Key Identifier: keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:07:b9:ab:f4:d8:e3:40:18:ef:3d:ae:b4:56:12:48:4a:ea: 4e:ad:9a:f3:14:0a:4a:e6:3b:94:2e:11:96:3c:9b:55:77:ae: 5f:12:40:4f:3c:79:c4:8d:6e:79:0e:9d:a0:b7:02:3c:8a:4e: 97:e2:a5:bd:e0:6c:6a:f1:e5:06:c2:ac:2a:66:cf:00:15:b5: b8:50:c4:4c:e2:9e:09:29:5c:fb:39:55:6e:04:b5:bb:ac:80: c4:33:a5:f7:eb:7c:e2:ba:a9:f5:08:15:ae:5d:e5:96:e5:de: 11:f7:c8:f5:6a:99:99:c2:de:c5:f4:05:3d:65:1b:74:20:c8: 92:c8:f0:af:75:d3:b9:70:b2:2c:b9:a0:9b:d9:2f:d8:36:42: a9:f4:02:56:d0:4b:70:7a:44:d6:a9:04:4e:0b:47:6f:c6:9d: ae:65:71:df:6e:b8:62:f1:3b:3c:88:59:95:c8:80:b9:07:8e: 4c:61:8b:d0:b6:50:10:4f:cd:f7:d8:76:37:04:e5:f6:33:0e: f3:d0:72:e9:98:5d:ae:da:bb:21:77:67:98:e6:fd:82:7c:be: 23:03:58:88:79:5f:ab:e1:cc:31:03:72:a5:42:fe:00:6d:55: d3:3d:23:66:38:ed:6e:f4:19:66:22:cc:24:e3:b8:b5:1f:d5: c7:c3:f0:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7LCde/ZYRghJPq+8ar9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzM3MjEwZWQ4YTU2Y2UwZWRkNDU3NGJmNzM2YjYzMjQ1 ZTU4MjMwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD EygyODc1Mzc4N2M4ZTljZjE1NjBkMDI5ZWY4YzNmMjU1MTc3YTJmMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVAzKNbh+oyesJ5FrbPe4lEYIRdf xoorAZ4RvA66KSz7lkSMKQNflYpkUnuj2gGW8hqhEFMAIx9bLij6Ec6GJ8DlTp4j HaEO5BDoxNgC0HS8l3d/sL5lidq+mWVZS5DLOC1FMYBUWtiFZz1ejeZ7SnIM8daN +SA1RVVqA2IvSdzvoypk7t6Em3COFcWyVnrOiek4W34PT6lWCSr25g5Q4F6Wf2RQ hOb4OQFhedL2RysL8vHXVV/vvCxCl4W+08V9pQGcpriUqTZSq0Zs2/tWZoAUs+// 5WLlZsgahTLB9pF43j8690mae5UAVPabwXGBYtfANkLaBJSgX3scTuVSPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh1N4fI6c8VYNAp74w/JVF3ovG6MB8GA1UdIwQY MBaAFALDchDtilbODt1FdL9za2MkXlgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEt YzFmMGVhZWVkOGNlLzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEtYzFmMGVhZWVkOGNl LzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPge5q/TY 40AY7z2utFYSSErqTq2a8xQKSuY7lC4RljybVXeuXxJATzx5xI1ueQ6doLcCPIpO l+KlveBsavHlBsKsKmbPABW1uFDETOKeCSlc+zlVbgS1u6yAxDOl9+t84rqp9QgV rl3lluXeEffI9WqZmcLexfQFPWUbdCDIksjwr3XTuXCyLLmgm9kv2DZCqfQCVtBL cHpE1qkETgtHb8adrmVx3264YvE7PIhZlciAuQeOTGGL0LZQEE/N99h2NwTl9jMO 89By6Zhdrtq7IXdnmOb9gny+IwNYiHlfq+HMMQNypUL+AG1V0z0jZjjtbvQZZiLM JOO4tR/Vx8PwjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:43 2025 by rpki-client