This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json) Hash identifier: /QuUCUy/lqykfhqmQYtcQnSZCR6G1QyJtewxCU5geAw= Subject key identifier: 3A:10:7F:2F:58:ED:2B:F3:F8:42:99:BD:6D:DB:BC:BE:77:13:75:D4 Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03 Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003 Certificate serial: 019AF3C0B22412F536FE2DCEB6187C0895A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 13:01:23 +0000 Manifest this update: Sat 06 Dec 2025 13:01:23 +0000 Manifest next update: Sun 07 Dec 2025 13:01:23 +0000 Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: dNFO8HXIzDuvd3G/BfoEOp/nqykuCa4s0AkDLfFlTyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b2:24:12:f5:36:fe:2d:ce:b6:18:7c:08:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003 Validity Not Before: Dec 6 13:01:23 2025 GMT Not After : Dec 7 13:01:23 2025 GMT Subject: CN=3a107f2f58ed2bf3f84299bd6ddbbcbe771375d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:53:57:30:91:a2:0e:89:d5:d3:e3:db:0e:96: a3:99:70:58:e5:ba:61:24:9d:5c:59:06:c8:31:9a: ba:83:53:cb:69:ed:41:d7:fd:8c:f4:3a:70:cd:d6: ac:0c:e1:80:f8:fd:ba:be:83:d8:12:04:1c:ca:63: a2:f3:48:cb:81:18:16:f3:42:1f:4e:92:ad:61:3a: 4d:53:31:b0:a1:30:ec:36:9b:e5:3f:b4:17:41:62: 79:9b:89:be:82:03:0d:b5:b1:87:a2:1f:3f:e4:9d: 1d:7b:67:b8:91:64:5d:d5:5d:a1:ed:f1:c7:63:f1: aa:1a:16:eb:d6:0c:12:df:e0:a3:c1:c4:de:e1:54: 34:bf:e4:d0:4f:6e:80:16:a6:da:d4:49:c0:60:09: 5b:aa:8b:ff:4e:ce:53:fe:ad:1e:97:f4:85:90:a8: 3a:77:b9:73:08:21:d9:f8:16:31:d3:d0:21:97:19: 0e:7d:35:fd:8b:6d:95:da:6c:c3:98:60:62:43:60: dc:85:b7:01:4a:ba:f5:d0:30:ca:82:4a:11:c1:e6: fa:e6:b0:87:23:7e:c7:13:cc:8f:b8:97:62:be:62: ab:59:84:c8:3e:7d:65:1b:df:6b:08:b9:4b:6f:0d: 01:8f:4b:ce:85:3a:70:11:2c:f9:23:cf:7d:9c:95: 74:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:10:7F:2F:58:ED:2B:F3:F8:42:99:BD:6D:DB:BC:BE:77:13:75:D4 X509v3 Authority Key Identifier: keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a0:af:3d:15:5f:ae:66:38:49:10:be:10:eb:d9:e3:91:19: d4:73:c9:ea:98:a6:2a:26:49:1d:97:35:d2:24:29:bb:05:97: cf:e5:27:bd:05:bf:d6:9f:f0:5b:3b:d6:8f:97:ab:b9:9b:87: ef:62:e7:cb:b3:69:92:74:9a:5d:ad:96:55:5e:cb:f1:ed:f0: 0e:1f:fc:2a:71:67:f7:d3:d6:00:f3:8d:4b:aa:30:88:63:2e: 22:58:b5:49:bf:d9:02:72:80:e8:be:64:ab:96:cb:b0:e5:3b: c3:77:06:2c:0d:64:a6:aa:5c:40:e6:97:37:c5:95:cc:96:fa: ac:bb:4b:a9:8b:f7:8a:5d:58:87:c6:c3:b7:16:1f:60:c6:ed: 89:43:2d:14:cc:5f:37:e4:23:2d:7f:ec:30:bd:fe:bc:69:49: f3:a2:c3:f4:f5:96:67:d5:2c:de:9e:3a:7b:53:b8:ac:20:ae: 90:37:09:5b:ad:30:fc:3e:1a:ec:94:0c:b1:e6:44:ab:ac:d1: 3b:7b:6b:6d:82:da:21:d7:62:78:86:e2:56:d6:6f:cf:35:74: 40:13:30:bb:f1:57:6d:4c:c2:2d:3b:76:0b:8e:8e:78:f8:64: d4:a5:56:ab:a1:46:33:67:95:4a:4b:84:90:e9:25:d4:b6:c2: 98:70:5d:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLIkEvU2/i3Othh8CJWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjUwMTZmZjg5ZGEwYzhjYWZlZTIxNWVmNjI0MWMzMGJj OTMwMDMwHhcNMjUxMjA2MTMwMTIzWhcNMjUxMjA3MTMwMTIzWjAzMTEwLwYDVQQD EygzYTEwN2YyZjU4ZWQyYmYzZjg0Mjk5YmQ2ZGRiYmNiZTc3MTM3NWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lNXMJGiDonV0+PbDpajmXBY5bph JJ1cWQbIMZq6g1PLae1B1/2M9DpwzdasDOGA+P26voPYEgQcymOi80jLgRgW80If TpKtYTpNUzGwoTDsNpvlP7QXQWJ5m4m+ggMNtbGHoh8/5J0de2e4kWRd1V2h7fHH Y/GqGhbr1gwS3+CjwcTe4VQ0v+TQT26AFqba1EnAYAlbqov/Ts5T/q0el/SFkKg6 d7lzCCHZ+BYx09AhlxkOfTX9i22V2mzDmGBiQ2DchbcBSrr10DDKgkoRweb65rCH I37HE8yPuJdivmKrWYTIPn1lG99rCLlLbw0Bj0vOhTpwESz5I899nJV0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoQfy9Y7Svz+EKZvW3bvL53E3XUMB8GA1UdIwQY MBaAFGr1AW/4naDIyv7iFe9iQcMLyTADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYt ZGYwYzc0ZDU0NWQyLzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYtZGYwYzc0ZDU0NWQy LzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqCvPRVf rmY4SRC+EOvZ45EZ1HPJ6pimKiZJHZc10iQpuwWXz+UnvQW/1p/wWzvWj5eruZuH 72Lny7NpknSaXa2WVV7L8e3wDh/8KnFn99PWAPONS6owiGMuIli1Sb/ZAnKA6L5k q5bLsOU7w3cGLA1kpqpcQOaXN8WVzJb6rLtLqYv3il1Yh8bDtxYfYMbtiUMtFMxf N+QjLX/sML3+vGlJ86LD9PWWZ9Us3p46e1O4rCCukDcJW60w/D4a7JQMseZEq6zR O3trbYLaIddieIbiVtZvzzV0QBMwu/FXbUzCLTt2C46OePhk1KVWq6FGM2eVSkuE kOkl1LbCmHBd3g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:22 2025 by rpki-client