This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json) Hash identifier: Ho0npAmPVqNilfuCJ8M13LPWy2WodPp3nHwEqp6JggQ= Subject key identifier: 6C:49:71:7E:6C:95:06:71:79:63:3F:31:2A:8A:9A:CB:E2:59:0F:5F Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b Certificate serial: 019B281C1A51B2460969CBDD996A42BD4582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft Manifest number: 0798 Signing time: Tue 16 Dec 2025 17:01:28 +0000 Manifest this update: Tue 16 Dec 2025 17:01:28 +0000 Manifest next update: Wed 17 Dec 2025 17:01:28 +0000 Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: JvV1C53VBqyHZzxw+GQ4PhsVvs8J80jgjvDSetNFg7I=) 2: qq8J_fEHI4G11qkKijWQISK00G0.roa (hash: RMB75Z9HEAqFVlcsv+x1Xsp/vs4KwqhHTjxwNb+JGOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1c:1a:51:b2:46:09:69:cb:dd:99:6a:42:bd:45:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b Validity Not Before: Dec 16 17:01:28 2025 GMT Not After : Dec 17 17:01:28 2025 GMT Subject: CN=6c49717e6c95067179633f312a8a9acbe2590f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:e9:66:42:ff:25:55:07:6a:b9:6c:1e:67: f5:05:66:af:bb:43:14:32:67:d1:f3:a3:aa:60:c1: 67:39:b3:6b:47:fb:7f:7e:22:62:49:87:f2:ba:e8: 64:f9:d9:2a:66:16:d0:ba:a1:9c:71:35:e1:18:92: e8:e4:ad:0f:83:4f:70:1c:c2:a5:ea:ac:ce:cf:1b: a3:92:e5:dd:1c:54:1a:af:2b:e5:e8:73:ab:fc:27: 64:07:ad:d4:d0:f9:15:35:ef:2c:53:d0:2b:6a:84: 46:3b:72:34:b5:9a:3e:0c:eb:e0:50:8b:32:7d:85: a5:c1:72:79:44:44:aa:8b:61:b9:c1:44:8b:7d:8a: 09:64:b2:68:cf:e4:7f:b6:9a:e3:e3:ce:01:8e:61: 69:fe:af:1d:ed:ac:0b:a1:c4:4c:fc:b2:5c:a9:f5: 11:1d:64:fe:9c:94:81:07:37:cb:55:f0:07:44:23: 23:de:c3:e4:33:83:e3:1a:61:e3:49:aa:f7:02:ed: 19:e1:2b:34:ef:dd:12:d1:38:c3:90:aa:95:cd:29: f4:aa:2e:76:13:c7:52:ba:a9:69:af:c9:79:3c:d2: 49:9c:02:61:73:83:a5:28:05:ca:16:9b:23:e0:95: 89:de:39:e7:46:58:b1:a3:7e:b5:5f:c1:b4:e6:60: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:49:71:7E:6C:95:06:71:79:63:3F:31:2A:8A:9A:CB:E2:59:0F:5F X509v3 Authority Key Identifier: keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0c:fa:63:60:ee:b5:45:c8:0a:4a:ee:5b:ea:ef:fd:2b:90: 60:a5:45:15:90:c5:88:46:90:00:03:5c:14:a0:a5:cd:ea:7b: 35:4b:24:6f:1b:9c:13:c6:75:60:44:f2:69:04:f1:e1:d8:b7: 1a:a2:e0:05:01:e5:0b:72:ec:b1:85:46:4a:3a:cc:ff:bf:50: ff:cd:5d:a0:09:ba:60:28:05:41:dd:4f:63:51:55:2c:64:b5: 3e:87:86:66:81:72:0d:50:7a:2c:a8:47:c8:a8:12:31:34:b9: 10:27:14:c6:c3:e6:4c:6b:68:42:a9:07:fb:bb:7a:ed:c4:fa: 8d:7a:4a:fc:c8:50:12:5c:ec:f2:af:53:dc:37:d9:7d:ca:a2: c7:87:d7:9d:61:f9:ee:8f:91:5b:33:ee:ed:a5:41:4b:d3:02: 10:67:25:70:c7:f4:13:4f:f2:95:42:b3:42:95:1e:03:d2:4d: b2:83:48:08:92:9e:2f:1e:d5:20:3e:56:19:10:93:5a:fe:0e: 16:93:a2:ca:76:31:5c:22:14:79:4a:7f:9a:47:62:96:35:3c: 65:80:4e:17:85:f3:f7:7e:05:8a:ad:9f:e4:e4:21:dd:de:0b: 95:91:e2:23:65:af:9f:35:f1:c4:02:fb:33:45:21:35:11:04: 28:fd:aa:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoHBpRskYJacvdmWpCvUWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWJiZDU0MjkxMmE2NmZlZTZhMzQxMjhhM2E4Y2Y3MDk3 ZGM2OWIwHhcNMjUxMjE2MTcwMTI4WhcNMjUxMjE3MTcwMTI4WjAzMTEwLwYDVQQD Eyg2YzQ5NzE3ZTZjOTUwNjcxNzk2MzNmMzEyYThhOWFjYmUyNTkwZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX3pZkL/JVUHarlsHmf1BWavu0MU MmfR86OqYMFnObNrR/t/fiJiSYfyuuhk+dkqZhbQuqGccTXhGJLo5K0Pg09wHMKl 6qzOzxujkuXdHFQaryvl6HOr/CdkB63U0PkVNe8sU9AraoRGO3I0tZo+DOvgUIsy fYWlwXJ5RESqi2G5wUSLfYoJZLJoz+R/tprj484BjmFp/q8d7awLocRM/LJcqfUR HWT+nJSBBzfLVfAHRCMj3sPkM4PjGmHjSar3Au0Z4Ss0790S0TjDkKqVzSn0qi52 E8dSuqlpr8l5PNJJnAJhc4OlKAXKFpsj4JWJ3jnnRlixo361X8G05mC6kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxJcX5slQZxeWM/MSqKmsviWQ9fMB8GA1UdIwQY MBaAFGlbvVQpEqZv7mo0Eoo6jPcJfcabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgt OTgxNmM2N2E5MjYyLzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgtOTgxNmM2N2E5MjYy LzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgz6Y2Du tUXICkruW+rv/SuQYKVFFZDFiEaQAANcFKClzep7NUskbxucE8Z1YETyaQTx4di3 GqLgBQHlC3LssYVGSjrM/79Q/81doAm6YCgFQd1PY1FVLGS1PoeGZoFyDVB6LKhH yKgSMTS5ECcUxsPmTGtoQqkH+7t67cT6jXpK/MhQElzs8q9T3DfZfcqix4fXnWH5 7o+RWzPu7aVBS9MCEGclcMf0E0/ylUKzQpUeA9JNsoNICJKeLx7VID5WGRCTWv4O FpOiynYxXCIUeUp/mkdiljU8ZYBOF4Xz934Fiq2f5OQh3d4LlZHiI2WvnzXxxAL7 M0UhNREEKP2qzA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:13:03 2025 by rpki-client