This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft File: AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json) Hash identifier: EbykxRaCzSvWMgmnPkTKnqAmMVCN9rX9pmF2N8kDuXs= Subject key identifier: B5:6F:70:9A:01:2C:58:55:A4:31:2D:95:E8:3B:28:01:EE:9F:C6:AA Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B Certificate issuer: /CN=02c4913823a319feba2270e1ba2ca09e435bd55b Certificate serial: 019AF23FD2255FC42110FBD3AF27AE6DD74A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft Manifest number: 1418 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: /fEpiwuHfAJzoqb4wSN7+9ZOuN0aF0+I+yArN65B06c=) 2: zqiwP0xb8bytzAumv2YPA_fNwb4.roa (hash: zCaLlPBZ2WB2CsOiMiyWuvWQI6GwLJcAhYLvd/2+eA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d2:25:5f:c4:21:10:fb:d3:af:27:ae:6d:d7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=b56f709a012c5855a4312d95e83b2801ee9fc6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:b4:11:3d:2a:11:8c:07:2f:78:e8:6d:88: 27:84:c3:72:1a:25:36:50:9e:46:ff:1f:eb:7f:c6: 0d:bd:18:ff:dc:ee:77:c0:ca:33:3b:f3:b3:ce:aa: b5:cf:68:e8:03:91:19:87:9c:9e:3d:ba:48:ce:b0: 1f:d2:bd:ba:a0:9b:2e:e6:82:f6:08:fe:4e:1b:76: 02:bd:b0:95:ec:46:24:21:c3:59:bd:6c:09:cd:e3: 87:e2:da:99:06:6c:1a:94:75:ea:4c:71:11:40:ea: a4:da:35:a0:a1:93:1f:1e:66:60:c9:9e:dd:12:cd: 9a:3f:96:d3:6f:1c:58:7a:6e:d7:5b:ce:a6:e5:5e: 03:03:a6:11:c2:bf:9d:7e:81:56:be:ca:49:c8:3c: 1d:2a:ff:b2:e4:ed:8c:ab:38:b3:d6:bc:23:d3:d4: 99:ec:4e:ff:bf:08:72:cc:25:9f:65:69:66:e4:eb: d9:ca:0a:f2:3a:1a:46:29:1a:4d:fc:44:5e:67:37: c6:9d:56:cd:ec:f4:aa:8d:83:90:7c:05:39:00:da: 65:92:30:75:a0:6f:43:1d:bb:36:c4:3b:49:3a:2c: a7:b4:ea:8e:a6:4b:64:c1:89:28:a8:b5:60:fd:aa: ed:85:d1:fc:1b:2e:7d:9c:f4:5f:89:c4:52:7d:7b: e4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:70:9A:01:2C:58:55:A4:31:2D:95:E8:3B:28:01:EE:9F:C6:AA X509v3 Authority Key Identifier: keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:84:6a:27:b9:51:4f:dc:09:41:54:7c:e7:c4:c6:0a:a6:9b: 80:3f:ba:8e:17:8e:4d:ea:e5:6c:7a:bf:e4:5b:e1:42:5d:05: 02:37:66:a6:bf:fa:10:ca:32:88:81:1c:bc:32:f2:64:14:85: 97:07:30:08:f7:20:da:be:b2:20:09:2b:f0:a1:b2:0f:62:cb: 4b:21:71:03:8b:6c:0a:2c:e9:5f:a2:18:6b:a2:da:53:86:3e: ea:44:66:0f:41:80:13:e2:74:34:e9:c9:10:f6:8b:0b:bd:23: 09:79:44:91:7e:e2:53:dd:f9:b1:2f:0b:bf:14:c6:87:4a:0a: c7:30:d9:b6:40:f7:7a:a9:7c:26:cc:b8:4c:ba:3a:e7:e1:16: f0:7f:1d:68:c7:44:f3:d7:24:9c:18:ec:39:cb:d0:bc:8d:30: 67:2c:21:28:24:ee:bc:2d:73:f3:ed:9c:16:39:4a:ed:0a:d4: ec:63:e2:6b:3c:39:1d:9c:e5:23:8b:1d:7c:da:03:ad:3c:0d: 10:75:6a:bb:09:b6:db:24:6c:c8:dc:d6:b7:b6:99:eb:59:87: 50:de:dd:b6:b2:4e:22:75:c5:fd:af:63:a4:50:4d:42:21:f7: 1d:2a:a5:52:ea:3e:35:6e:5d:3f:8e:cf:35:21:57:d9:a6:8c: 72:17:3c:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9IlX8QhEPvTryeubddKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzQ5MTM4MjNhMzE5ZmViYTIyNzBlMWJhMmNhMDllNDM1 YmQ1NWIwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhiNTZmNzA5YTAxMmM1ODU1YTQzMTJkOTVlODNiMjgwMWVlOWZjNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlau0ET0qEYwHL3jobYgnhMNyGiU2 UJ5G/x/rf8YNvRj/3O53wMozO/Ozzqq1z2joA5EZh5yePbpIzrAf0r26oJsu5oL2 CP5OG3YCvbCV7EYkIcNZvWwJzeOH4tqZBmwalHXqTHERQOqk2jWgoZMfHmZgyZ7d Es2aP5bTbxxYem7XW86m5V4DA6YRwr+dfoFWvspJyDwdKv+y5O2Mqziz1rwj09SZ 7E7/vwhyzCWfZWlm5OvZygryOhpGKRpN/EReZzfGnVbN7PSqjYOQfAU5ANplkjB1 oG9DHbs2xDtJOiyntOqOpktkwYkoqLVg/arthdH8Gy59nPRficRSfXvkoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVvcJoBLFhVpDEtleg7KAHun8aqMB8GA1UdIwQY MBaAFALEkTgjoxn+uiJw4bosoJ5DW9VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQt ZDYzYTUxMTFmYmY3LzEvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQtZDYzYTUxMTFmYmY3 LzEvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4RqJ7lR T9wJQVR858TGCqabgD+6jheOTerlbHq/5FvhQl0FAjdmpr/6EMoyiIEcvDLyZBSF lwcwCPcg2r6yIAkr8KGyD2LLSyFxA4tsCizpX6IYa6LaU4Y+6kRmD0GAE+J0NOnJ EPaLC70jCXlEkX7iU935sS8LvxTGh0oKxzDZtkD3eql8Jsy4TLo65+EW8H8daMdE 89cknBjsOcvQvI0wZywhKCTuvC1z8+2cFjlK7QrU7GPiazw5HZzlI4sdfNoDrTwN EHVquwm22yRsyNzWt7aZ61mHUN7dtrJOInXF/a9jpFBNQiH3HSqlUuo+NW5dP47P NSFX2aaMchc8Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:20 2025 by rpki-client