This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json) Hash identifier: 9now+/fB9i6iLojF5KAFcv8Dxummc3gtnMELiYtPyL0= Subject key identifier: 8B:8E:F7:5E:FB:D4:74:FA:C2:73:D9:8F:C2:EC:6A:5E:25:05:AB:4B Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Certificate serial: 019AF164875763AF6DD21D84A31825C87EED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: j0mRSi3j9GYzQ92axO5Q1cWgU0E1c1JzneK40eHTJWo=) 2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:87:57:63:af:6d:d2:1d:84:a3:18:25:c8:7e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=8b8ef75efbd474fac273d98fc2ec6a5e2505ab4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:41:a1:b6:28:a0:06:27:19:fe:62:1d:16: 8f:a6:51:51:f7:44:f2:62:1a:7a:ab:9e:5f:dc:95: 3c:49:1a:c7:9c:b1:dd:7e:d5:47:6c:42:79:9b:78: 73:46:8c:c5:b5:c1:60:30:f0:52:86:d2:58:39:a1: 22:e3:dc:47:58:fd:bf:0b:8b:0f:12:78:8f:8f:47: 56:2a:55:6d:20:9d:2e:f8:53:37:45:cc:12:38:bd: 59:1f:3e:b4:0b:6d:cd:d1:73:0e:ce:b8:60:b3:35: d1:a0:68:e6:e5:c2:bf:4c:fa:32:e2:88:80:fb:ae: 64:8a:ac:20:33:54:d7:cd:bd:85:dc:69:01:8c:f2: 65:49:99:67:d0:e6:a3:44:f0:0d:47:f2:84:94:d9: 2d:42:04:e9:30:36:fb:fc:32:ec:2b:48:0c:d8:28: 42:c1:16:2e:d9:45:f7:16:7f:89:86:27:8b:61:a5: c3:4e:7f:2e:11:7f:6d:cc:8a:13:ae:6e:d1:6a:38: f9:44:ed:48:be:14:b9:a9:2f:1d:26:74:55:6c:6d: d3:77:d5:24:66:7d:32:fc:d3:fc:54:07:68:2b:a2: 5f:ba:fc:f2:89:af:55:fb:91:4e:cf:40:33:78:0a: 9c:40:70:88:7d:e9:4c:e4:3c:00:55:62:06:c6:64: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:F7:5E:FB:D4:74:FA:C2:73:D9:8F:C2:EC:6A:5E:25:05:AB:4B X509v3 Authority Key Identifier: keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d1:e8:e1:47:57:c9:bf:5e:09:3f:4a:ef:1f:61:1a:fe:64: c3:3a:78:70:86:3a:81:33:8d:8f:71:a0:e0:59:36:02:f7:d9: c0:ec:df:aa:8a:25:d9:3d:79:04:92:6a:78:cd:ec:0c:cf:44: fe:8f:6a:8d:ab:c8:7b:54:b5:a7:41:53:2e:f0:eb:a6:13:f8: 90:cd:fd:74:e2:e3:d9:69:66:19:13:91:df:1e:33:8d:66:da: 1a:28:b1:c9:78:35:d4:8e:7d:2b:e1:e8:55:d1:78:3b:db:0d: 66:06:bd:71:01:82:67:ba:38:34:b6:2a:52:b4:19:69:a9:dc: c3:46:6c:eb:62:22:49:1e:a9:7b:0e:4c:72:d6:55:7f:c9:de: 7b:6f:45:f3:75:5a:99:3a:50:9b:1e:79:8e:d7:7e:62:ab:cc: 8b:1c:23:86:16:1b:a1:bf:2a:f3:bb:28:b6:f8:29:ec:ac:06: 00:d9:a4:f1:c5:e1:76:82:a2:74:c8:fa:fb:44:d4:83:1b:50: 4a:cc:03:45:77:34:90:0d:df:ef:ab:23:5c:fb:60:66:d9:49: b2:85:f7:df:af:af:ef:71:2e:8e:59:97:f5:89:08:6e:23:4b: b7:1f:d0:0c:88:4a:0d:56:4a:3d:82:12:58:cb:86:1e:b0:4c: 67:6a:70:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIdXY69t0h2EoxglyH7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzM0ZjgzNzNiZTdmZmIxYTM1ZWIzODg2MDU2NWJjM2M0 NTFiZTYwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD Eyg4YjhlZjc1ZWZiZDQ3NGZhYzI3M2Q5OGZjMmVjNmE1ZTI1MDVhYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquRBobYooAYnGf5iHRaPplFR90Ty Yhp6q55f3JU8SRrHnLHdftVHbEJ5m3hzRozFtcFgMPBShtJYOaEi49xHWP2/C4sP EniPj0dWKlVtIJ0u+FM3RcwSOL1ZHz60C23N0XMOzrhgszXRoGjm5cK/TPoy4oiA +65kiqwgM1TXzb2F3GkBjPJlSZln0OajRPANR/KElNktQgTpMDb7/DLsK0gM2ChC wRYu2UX3Fn+JhieLYaXDTn8uEX9tzIoTrm7Rajj5RO1IvhS5qS8dJnRVbG3Td9Uk Zn0y/NP8VAdoK6Jfuvzyia9V+5FOz0AzeAqcQHCIfelM5DwAVWIGxmTO5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuO91771HT6wnPZj8Lsal4lBatLMB8GA1UdIwQY MBaAFALDT4Nzvn/7GjXrOIYFZbw8RRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQt ZTQ1MWI1OTA3ZWE0LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQtZTQ1MWI1OTA3ZWE0 LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtHo4UdX yb9eCT9K7x9hGv5kwzp4cIY6gTONj3Gg4Fk2AvfZwOzfqool2T15BJJqeM3sDM9E /o9qjavIe1S1p0FTLvDrphP4kM39dOLj2WlmGROR3x4zjWbaGiixyXg11I59K+Ho VdF4O9sNZga9cQGCZ7o4NLYqUrQZaancw0Zs62IiSR6pew5MctZVf8nee29F83Va mTpQmx55jtd+YqvMixwjhhYbob8q87sotvgp7KwGANmk8cXhdoKidMj6+0TUgxtQ SswDRXc0kA3f76sjXPtgZtlJsoX336+v73EujlmX9YkIbiNLtx/QDIhKDVZKPYIS WMuGHrBMZ2pwYw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:38 2025 by rpki-client