This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json) Hash identifier: U/NaKtAa31HqS4NZhkWVa+giBclvx75EULvL0WCeUV4= Subject key identifier: 57:25:3E:25:95:51:55:EF:CE:F0:D6:1F:B1:FC:4F:1A:56:F9:5B:7A Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a Certificate serial: 019AF208B115A6F1A6171A9C3DAB10E9EBCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=) 2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: BSnze2rHHfM2jKbsOU5sgdoSi3rMzEDrvoDEXcM1m2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b1:15:a6:f1:a6:17:1a:9c:3d:ab:10:e9:eb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=57253e25955155efcef0d61fb1fc4f1a56f95b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:bd:d2:f3:91:82:1c:1a:48:88:ce:ad:88: d7:6f:2c:0f:86:90:6e:f3:04:04:1f:26:99:4f:46: a0:70:87:e1:35:94:87:99:fa:9b:fc:49:b0:c9:3c: eb:f9:27:16:34:4e:1c:da:24:3d:24:c1:96:0c:24: c8:2b:bb:af:aa:e3:29:32:2b:00:47:6c:2f:ab:92: 52:32:da:64:ab:65:10:93:1e:2a:b8:10:96:39:b4: 6c:5d:b2:b2:d8:31:bc:1a:e3:7b:4a:a6:15:69:b1: 2f:d3:3c:19:d4:6c:16:1a:61:ee:23:16:63:98:c6: 28:0b:1f:be:a1:b3:c8:f6:9e:21:d9:b2:0c:1a:b3: 35:67:34:01:3a:6c:92:fe:95:f6:94:f6:ce:b9:fa: 07:8e:aa:ae:6c:32:1d:9e:9a:46:91:be:90:e1:f5: f3:98:94:5d:8b:4a:29:bc:b2:c2:79:20:34:ec:88: 98:09:6a:07:dc:b5:3e:e4:ac:16:73:60:da:84:be: 36:ce:5e:3e:13:d8:b5:36:01:cf:da:2c:f4:21:8f: d7:ae:12:57:5d:1c:5f:4d:25:bd:3e:bf:01:32:88: fb:23:61:eb:9a:78:f9:d2:71:4f:a1:b0:6e:e8:43: c2:8f:26:1e:40:d3:5a:36:9f:2e:6c:b5:8e:23:2a: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:25:3E:25:95:51:55:EF:CE:F0:D6:1F:B1:FC:4F:1A:56:F9:5B:7A X509v3 Authority Key Identifier: keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:52:19:5a:c8:be:f7:67:69:74:64:6b:65:09:1b:8a:83:f9: 22:b7:72:dd:1b:d2:3c:3c:7d:36:99:ae:82:08:57:f0:5a:de: 5e:3d:1a:a5:29:0b:60:2b:7f:1a:2b:72:c2:cc:3a:dd:c0:c3: 34:70:6e:52:37:cb:8d:7c:29:26:74:56:6b:bc:f4:29:82:27: da:0e:47:84:14:e1:29:a3:3c:6a:37:ad:bd:c8:d5:96:56:bb: b1:4f:0e:48:91:1e:52:17:59:c6:e6:e7:cd:7d:60:61:0a:a3: 8e:9b:7e:5e:3f:02:ae:04:a4:5f:93:23:58:59:ca:7c:a3:2d: 49:4b:78:45:bd:ab:93:95:a7:83:2c:6d:d4:80:17:bb:7e:a1: 49:dd:74:55:e1:19:12:e3:d0:ee:bb:a1:1d:8b:8b:c7:b1:d1: 0b:2f:17:be:82:19:b6:c2:24:dc:e5:2c:6d:d8:ae:51:8b:96: f2:4f:38:d9:1c:f5:7b:7e:00:46:44:48:6b:d8:db:f3:ba:04: 01:6f:03:f6:41:0b:92:b6:cf:64:7f:12:41:9a:9d:95:ea:62: 51:3a:a0:9b:e6:06:3d:92:26:81:6e:5e:8a:a0:57:ba:32:39: 1b:ee:8f:e7:1e:20:e8:04:86:18:2f:34:8c:fd:24:b2:ff:11: db:c9:04:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLEVpvGmFxqcPasQ6evPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDE5OTIxNDQwYzJmMmIyMmE3Nzc3ODAyOTNiYzI3ZmE0 N2YzNWEwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg1NzI1M2UyNTk1NTE1NWVmY2VmMGQ2MWZiMWZjNGYxYTU2Zjk1YjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3690vORghwaSIjOrYjXbywPhpBu 8wQEHyaZT0agcIfhNZSHmfqb/EmwyTzr+ScWNE4c2iQ9JMGWDCTIK7uvquMpMisA R2wvq5JSMtpkq2UQkx4quBCWObRsXbKy2DG8GuN7SqYVabEv0zwZ1GwWGmHuIxZj mMYoCx++obPI9p4h2bIMGrM1ZzQBOmyS/pX2lPbOufoHjqqubDIdnppGkb6Q4fXz mJRdi0opvLLCeSA07IiYCWoH3LU+5KwWc2DahL42zl4+E9i1NgHP2iz0IY/XrhJX XRxfTSW9Pr8BMoj7I2Hrmnj50nFPobBu6EPCjyYeQNNaNp8ubLWOIyqmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFclPiWVUVXvzvDWH7H8TxpW+Vt6MB8GA1UdIwQY MBaAFAHRmSFEDC8rIqd3eAKTvCf6R/NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEt YWE2ZmQ0MzRlMGVmLzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEtYWE2ZmQ0MzRlMGVm LzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVIZWsi+ 92dpdGRrZQkbioP5Irdy3RvSPDx9NpmugghX8FreXj0apSkLYCt/Gitywsw63cDD NHBuUjfLjXwpJnRWa7z0KYIn2g5HhBThKaM8ajetvcjVlla7sU8OSJEeUhdZxubn zX1gYQqjjpt+Xj8CrgSkX5MjWFnKfKMtSUt4Rb2rk5Wngyxt1IAXu36hSd10VeEZ EuPQ7ruhHYuLx7HRCy8XvoIZtsIk3OUsbdiuUYuW8k842Rz1e34ARkRIa9jb87oE AW8D9kELkrbPZH8SQZqdlepiUTqgm+YGPZImgW5eiqBXujI5G+6P5x4g6ASGGC80 jP0ksv8R28kEFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:32 2025 by rpki-client