This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json) Hash identifier: glMX0luKCAJKamyY8jh3wdU/HCZ8vS7MKoEnyLUFb/g= Subject key identifier: 18:98:1F:7C:22:8B:A7:D1:B4:67:B0:62:BD:59:28:1C:87:AD:EB:10 Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44 Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544 Certificate serial: 019AF31CBA5869FB8D82393854EF145FF483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft Manifest number: 10E1 Signing time: Sat 06 Dec 2025 10:02:17 +0000 Manifest this update: Sat 06 Dec 2025 10:02:17 +0000 Manifest next update: Sun 07 Dec 2025 10:02:17 +0000 Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=) 2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: vynQV3Nb5vZPi/HDyAUtwtoR0FmsIp48dNwqm7vkZv8=) 3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ba:58:69:fb:8d:82:39:38:54:ef:14:5f:f4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544 Validity Not Before: Dec 6 10:02:17 2025 GMT Not After : Dec 7 10:02:17 2025 GMT Subject: CN=18981f7c228ba7d1b467b062bd59281c87adeb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:e9:79:b9:45:e1:b8:b6:f3:54:9d:df:7f: b9:25:5f:18:d6:95:3f:18:5a:bc:02:33:f8:89:83: 21:00:43:ee:e3:13:b2:60:ba:bb:fe:13:d6:66:a4: d4:23:7f:ea:e2:39:42:de:56:d0:4a:f8:5f:97:2f: 14:db:ce:0d:c0:61:4c:05:ef:6e:01:c7:04:ee:d5: a6:99:48:c5:26:03:70:3c:73:09:54:ab:a4:33:aa: 02:b6:0f:55:3e:91:9f:7a:30:d8:51:0c:e8:ac:68: 0f:de:ce:c9:83:eb:12:11:59:23:76:a6:a9:1c:ad: 43:aa:cb:8c:32:bc:40:80:e2:45:9a:13:9b:a1:f4: ca:7e:ab:a5:4c:34:13:f7:81:8a:80:d6:47:2d:dd: 70:b6:f5:0b:ed:72:49:64:ad:db:3f:a8:c5:d6:b3: cc:5b:b5:7e:c3:48:68:ce:30:cc:5d:c8:e0:09:ae: 38:7b:b6:f3:92:41:be:2e:a5:d1:78:d1:da:8f:83: c2:0a:f5:82:78:71:35:b3:74:c0:14:5b:f2:ed:f9: 75:18:3b:c8:f2:6e:b8:6d:4e:8e:af:77:3a:fb:2a: 1f:f9:88:67:c3:cf:7b:e7:25:f1:ba:c8:77:ff:57: b8:94:73:22:b4:45:d7:62:4d:49:58:54:59:4f:12: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:98:1F:7C:22:8B:A7:D1:B4:67:B0:62:BD:59:28:1C:87:AD:EB:10 X509v3 Authority Key Identifier: keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9e:74:31:ff:ee:11:1f:dd:a0:81:86:63:eb:01:27:32:fc: d7:78:fe:7b:fb:19:d6:bd:4c:fd:f8:2b:a9:dd:c9:0d:0e:0f: 85:50:ff:d9:6d:8f:91:7c:a6:29:be:70:3d:d3:d6:5a:17:cd: 11:70:a6:58:65:2d:f2:ce:d8:39:73:06:2e:a9:61:c9:40:23: 7a:8d:a5:16:0f:1d:58:b7:10:db:cf:64:6b:0c:de:48:ff:80: 44:48:91:ce:6f:e5:ca:ae:8b:b1:af:3c:75:ff:c8:0d:bb:31: e0:f7:e2:bb:d5:22:fb:50:34:b8:df:3b:35:60:f2:8a:98:80: 7a:dc:06:74:91:b6:d1:f6:61:20:ed:5b:72:4e:3b:66:4b:aa: a5:24:84:40:38:e1:e9:86:56:a8:ae:b1:6c:76:a4:a1:fd:51: bc:dc:aa:ba:f7:0d:59:75:fc:c0:ee:20:34:e3:43:aa:2f:8b: b3:68:2e:0e:9f:fd:b4:40:b6:1c:c6:7a:04:22:12:1a:11:93: 2b:87:92:d9:70:8f:b9:16:6c:53:34:e3:af:f9:3a:30:85:ee: b7:f1:00:d1:8e:64:0d:6a:09:9e:cb:aa:2e:1c:8a:c1:f3:e1: 29:b4:01:5f:83:c8:c4:11:0f:60:2b:a7:9e:bf:06:e9:de:1d: 68:d5:ae:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLpYafuNgjk4VO8UX/SDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYzM0ZTQ5ZmJhOTY0MGI4M2VhYmFhZmJhOWM0YWI5NmM4 YzM1NDQwHhcNMjUxMjA2MTAwMjE3WhcNMjUxMjA3MTAwMjE3WjAzMTEwLwYDVQQD EygxODk4MWY3YzIyOGJhN2QxYjQ2N2IwNjJiZDU5MjgxYzg3YWRlYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX/peblF4bi281Sd33+5JV8Y1pU/ GFq8AjP4iYMhAEPu4xOyYLq7/hPWZqTUI3/q4jlC3lbQSvhfly8U284NwGFMBe9u AccE7tWmmUjFJgNwPHMJVKukM6oCtg9VPpGfejDYUQzorGgP3s7Jg+sSEVkjdqap HK1DqsuMMrxAgOJFmhObofTKfqulTDQT94GKgNZHLd1wtvUL7XJJZK3bP6jF1rPM W7V+w0hozjDMXcjgCa44e7bzkkG+LqXReNHaj4PCCvWCeHE1s3TAFFvy7fl1GDvI 8m64bU6Or3c6+yof+Yhnw8975yXxush3/1e4lHMitEXXYk1JWFRZTxLXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiYH3wii6fRtGewYr1ZKByHresQMB8GA1UdIwQY MBaAFGrDTkn7qWQLg+q6r7qcSrlsjDVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAt OTNjNDU2OGIxMDNiLzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAtOTNjNDU2OGIxMDNi LzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJ50Mf/u ER/doIGGY+sBJzL813j+e/sZ1r1M/fgrqd3JDQ4PhVD/2W2PkXymKb5wPdPWWhfN EXCmWGUt8s7YOXMGLqlhyUAjeo2lFg8dWLcQ289kawzeSP+AREiRzm/lyq6Lsa88 df/IDbsx4Pfiu9Ui+1A0uN87NWDyipiAetwGdJG20fZhIO1bck47ZkuqpSSEQDjh 6YZWqK6xbHakof1RvNyquvcNWXX8wO4gNONDqi+Ls2guDp/9tEC2HMZ6BCISGhGT K4eS2XCPuRZsUzTjr/k6MIXut/EA0Y5kDWoJnsuqLhyKwfPhKbQBX4PIxBEPYCun nr8G6d4daNWu6g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:37 2025 by rpki-client