This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json) Hash identifier: AzDVA1W8FfJCFXXzoIz5MirjExzOGq57lyxEmqEF6uQ= Subject key identifier: A3:6B:1F:78:51:24:69:9F:C0:91:39:68:67:92:98:66:A1:ED:2C:67 Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e Certificate serial: 019AF3C0B0D605CA7C720CD59128D5493F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 13:01:22 +0000 Manifest this update: Sat 06 Dec 2025 13:01:22 +0000 Manifest next update: Sun 07 Dec 2025 13:01:22 +0000 Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: 6KvP7R9TL4lXXb954zlTfSiHowIJW4trfh+Yed0r/wE=) 2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=) 3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b0:d6:05:ca:7c:72:0c:d5:91:28:d5:49:3f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e Validity Not Before: Dec 6 13:01:22 2025 GMT Not After : Dec 7 13:01:22 2025 GMT Subject: CN=a36b1f785124699fc091396867929866a1ed2c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:a7:ed:db:45:02:7f:0a:b4:3a:b6:c9:3d: 28:1c:e3:e0:c2:10:ee:f6:3f:ec:93:d1:bb:6d:8e: bb:3f:f9:87:9b:bf:ea:ea:c2:a4:83:6a:a6:8a:c7: 33:86:1d:92:15:f7:da:cb:5c:2c:ed:2a:a6:cd:17: 55:d4:4d:70:79:9c:ca:1e:4f:c3:99:d5:e9:68:aa: 56:b0:02:61:e9:aa:98:7a:88:29:e7:82:e1:49:32: d3:54:41:cd:b3:31:48:e0:da:55:e1:7e:da:c2:a4: 10:05:d3:2c:d3:fa:5b:c5:7c:5d:c2:e1:99:4f:a6: 5e:bd:1f:ed:e9:b7:e1:b8:aa:95:ee:d7:56:f9:88: 6c:ae:14:41:5f:f2:e1:55:0d:33:d1:e0:f7:c2:47: a4:43:68:2b:68:65:09:f9:0c:76:fd:81:d5:5b:49: e6:c3:16:2e:10:dc:12:a7:c1:cd:8b:7e:b1:8f:1b: b2:2a:07:18:32:04:78:61:1a:07:92:ad:fc:27:ec: 06:5e:f9:3a:0d:71:b7:e4:4d:b2:83:75:a8:43:8f: a9:08:82:d6:ab:6c:66:59:32:88:91:ea:9b:44:00: fb:8d:50:fc:85:6a:97:e7:43:80:7f:f3:a8:f6:dd: 36:14:27:97:f4:45:df:4c:b9:40:a1:27:3b:e3:b9: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6B:1F:78:51:24:69:9F:C0:91:39:68:67:92:98:66:A1:ED:2C:67 X509v3 Authority Key Identifier: keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c6:1e:ef:58:c9:be:04:a6:ae:f6:ce:9c:ed:99:1b:b1:b2: 83:95:64:52:64:85:96:d5:4e:53:0f:8c:6a:2e:8b:34:0a:ca: 1e:02:34:d3:1b:99:8e:1d:fa:ec:06:57:79:20:19:5e:b6:ec: 1e:51:34:c1:63:c9:02:3a:4f:4a:94:73:5e:27:21:1f:65:f7: d4:00:60:41:d5:35:48:88:bb:38:3c:11:a9:89:88:df:47:c4: cc:92:38:e3:20:7f:4a:c3:e0:53:02:15:eb:3c:32:af:a3:de: bd:c6:8d:8c:de:4f:db:c0:1a:42:92:7a:0a:19:42:8b:17:1a: c5:c2:b3:f7:6b:f4:d4:34:2b:83:76:46:8d:70:7b:32:5d:12: f2:db:a1:61:d4:38:6e:c1:8b:8e:dc:66:80:0a:15:37:fa:c9: b1:cf:34:d9:f4:05:25:82:6b:97:20:dc:35:09:f5:fe:30:86: 24:6d:87:00:a5:2f:b1:d5:8e:19:44:13:8e:0f:84:25:ee:b9: 34:2e:d6:8c:a9:bb:b4:00:56:ea:8f:75:5d:f2:c5:5f:36:78: b0:b2:0f:85:6b:e4:65:f2:c8:7a:4f:74:5f:04:72:2b:fc:72: 9c:87:fc:47:0c:49:59:e5:10:78:ed:2d:df:6e:05:1a:38:bc: b5:14:1a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLDWBcp8cgzVkSjVST9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyY2M2OTE0NzZhNmU3ODk1YjBlNDU2MTE2NDQ0ZjkxOTM3 YmYwMWUwHhcNMjUxMjA2MTMwMTIyWhcNMjUxMjA3MTMwMTIyWjAzMTEwLwYDVQQD EyhhMzZiMWY3ODUxMjQ2OTlmYzA5MTM5Njg2NzkyOTg2NmExZWQyYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83mn7dtFAn8KtDq2yT0oHOPgwhDu 9j/sk9G7bY67P/mHm7/q6sKkg2qmisczhh2SFffay1ws7SqmzRdV1E1weZzKHk/D mdXpaKpWsAJh6aqYeogp54LhSTLTVEHNszFI4NpV4X7awqQQBdMs0/pbxXxdwuGZ T6ZevR/t6bfhuKqV7tdW+YhsrhRBX/LhVQ0z0eD3wkekQ2graGUJ+Qx2/YHVW0nm wxYuENwSp8HNi36xjxuyKgcYMgR4YRoHkq38J+wGXvk6DXG35E2yg3WoQ4+pCILW q2xmWTKIkeqbRAD7jVD8hWqX50OAf/Oo9t02FCeX9EXfTLlAoSc747lBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNrH3hRJGmfwJE5aGeSmGah7SxnMB8GA1UdIwQY MBaAFALMaRR2pueJWw5FYRZET5GTe/AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYt YmMxOTJiYjczMDI1LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYtYmMxOTJiYjczMDI1 LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMYe71jJ vgSmrvbOnO2ZG7Gyg5VkUmSFltVOUw+Mai6LNArKHgI00xuZjh367AZXeSAZXrbs HlE0wWPJAjpPSpRzXichH2X31ABgQdU1SIi7ODwRqYmI30fEzJI44yB/SsPgUwIV 6zwyr6PevcaNjN5P28AaQpJ6ChlCixcaxcKz92v01DQrg3ZGjXB7Ml0S8tuhYdQ4 bsGLjtxmgAoVN/rJsc802fQFJYJrlyDcNQn1/jCGJG2HAKUvsdWOGUQTjg+EJe65 NC7WjKm7tABW6o91XfLFXzZ4sLIPhWvkZfLIek90XwRyK/xynIf8RwxJWeUQeO0t 324FGji8tRQa4g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:23 2025 by rpki-client