This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json) Hash identifier: +IwF5IaVg6AW/H7Wx6/38bbC3wdGdM5M/Xq5FtK9HP8= Subject key identifier: BA:45:7D:DB:AF:81:55:A3:80:93:A2:D0:54:D2:39:56:D7:7D:60:6C Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f Certificate serial: 019AF6F98ACFD93C2C22D67C6AE661D60212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft Manifest number: 0D6C Signing time: Sun 07 Dec 2025 04:02:20 +0000 Manifest this update: Sun 07 Dec 2025 04:02:20 +0000 Manifest next update: Mon 08 Dec 2025 04:02:20 +0000 Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: j9FAevmjxLoUwGwTgUYjFU09DPFoFE+IKEyR3KlLJ60=) 2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:8a:cf:d9:3c:2c:22:d6:7c:6a:e6:61:d6:02:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f Validity Not Before: Dec 7 04:02:20 2025 GMT Not After : Dec 8 04:02:20 2025 GMT Subject: CN=ba457ddbaf8155a38093a2d054d23956d77d606c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:2b:cd:0f:cf:d6:9e:1c:5e:e5:d4:4e:6e: 75:5d:b5:a8:b0:98:39:d6:d0:c5:ac:8f:97:fb:b0: 61:fa:f5:f1:ea:31:ca:be:cd:cb:11:ab:af:34:e5: 48:39:b8:8e:0c:6f:30:4b:b0:31:5c:3b:91:63:f4: 50:49:3f:6d:3a:94:f7:d9:1d:90:a2:30:8e:e4:9d: 86:4e:ce:a8:d8:10:a5:95:be:bf:99:2d:7a:7f:30: 59:15:13:78:67:25:f3:71:8e:cd:c0:fb:1b:58:1f: 67:56:6b:cd:15:6e:09:bb:c0:81:73:d8:4c:d2:54: 69:4d:e0:ac:eb:bb:eb:36:1f:c0:a4:8c:11:ca:e0: 77:bc:30:eb:76:1f:88:a9:2c:f8:6c:f3:0a:8e:c2: c6:0d:9a:12:ec:9d:70:47:fc:21:16:14:13:9d:fe: d2:60:53:e7:6c:76:5a:af:cc:c1:52:91:64:8f:53: f7:0c:2a:fc:0e:da:4a:71:4a:4b:17:b5:db:4f:8d: 45:5b:0e:b2:f9:8f:24:45:8b:9f:16:e4:bc:08:62: ef:af:05:e4:de:25:0a:c8:17:77:c9:0d:18:0b:24: 95:35:98:7e:58:5f:37:03:54:be:61:fe:6e:e4:67: 71:e6:39:3f:a2:01:8f:7e:9b:96:84:52:f3:d6:28: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:45:7D:DB:AF:81:55:A3:80:93:A2:D0:54:D2:39:56:D7:7D:60:6C X509v3 Authority Key Identifier: keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cf:2e:81:1f:67:58:36:9b:41:a7:7d:42:bf:a7:66:51:c9: c8:dc:77:65:cd:10:75:99:c3:7a:98:aa:b0:27:6c:eb:49:b6: 65:29:c9:56:24:6a:cb:6e:01:8c:00:f1:31:ae:1d:f9:f8:a8: 78:d6:b0:c4:ca:49:50:f9:4d:4d:ba:fa:69:70:43:1f:a7:fa: b5:5b:39:50:c0:ec:30:7e:b3:24:b3:1f:6a:0d:0a:cb:0e:57: e4:ef:be:26:43:3d:3c:bf:2c:47:f6:34:48:0f:18:88:a7:64: 61:18:b5:0d:ef:2a:62:0c:c4:df:65:fd:76:00:dc:08:cb:0d: 2e:58:43:9b:d2:ce:62:d0:16:a3:c0:91:e4:94:9b:5a:b4:42: cb:e0:c9:71:be:11:16:0c:27:b2:a7:d7:d1:86:3d:1f:dc:3b: 87:ca:5e:07:17:ea:e0:d7:5e:d9:a7:a0:bf:fd:a7:15:60:ca: 03:b0:ad:12:5a:7d:db:e6:98:6c:a1:c4:79:d5:3b:0c:99:16: e7:0e:b6:15:d5:23:98:50:65:f2:ce:1c:b9:77:b4:3d:35:8a: 76:23:06:ff:0e:b1:ae:b0:32:5d:50:ec:50:52:ad:92:39:a1: 60:22:26:08:4c:38:de:ad:f1:8a:c0:1d:a8:e7:0a:10:d6:8a: 27:cf:6d:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+YrP2TwsItZ8auZh1gISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi ZDViMGYwHhcNMjUxMjA3MDQwMjIwWhcNMjUxMjA4MDQwMjIwWjAzMTEwLwYDVQQD EyhiYTQ1N2RkYmFmODE1NWEzODA5M2EyZDA1NGQyMzk1NmQ3N2Q2MDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT8rzQ/P1p4cXuXUTm51XbWosJg5 1tDFrI+X+7Bh+vXx6jHKvs3LEauvNOVIObiODG8wS7AxXDuRY/RQST9tOpT32R2Q ojCO5J2GTs6o2BCllb6/mS16fzBZFRN4ZyXzcY7NwPsbWB9nVmvNFW4Ju8CBc9hM 0lRpTeCs67vrNh/ApIwRyuB3vDDrdh+IqSz4bPMKjsLGDZoS7J1wR/whFhQTnf7S YFPnbHZar8zBUpFkj1P3DCr8DtpKcUpLF7XbT41FWw6y+Y8kRYufFuS8CGLvrwXk 3iUKyBd3yQ0YCySVNZh+WF83A1S+Yf5u5Gdx5jk/ogGPfpuWhFLz1igaEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpFfduvgVWjgJOi0FTSOVbXfWBsMB8GA1UdIwQY MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3 LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM8ugR9n WDabQad9Qr+nZlHJyNx3Zc0QdZnDepiqsCds60m2ZSnJViRqy24BjADxMa4d+fio eNawxMpJUPlNTbr6aXBDH6f6tVs5UMDsMH6zJLMfag0Kyw5X5O++JkM9PL8sR/Y0 SA8YiKdkYRi1De8qYgzE32X9dgDcCMsNLlhDm9LOYtAWo8CR5JSbWrRCy+DJcb4R FgwnsqfX0YY9H9w7h8peBxfq4Nde2aegv/2nFWDKA7CtElp92+aYbKHEedU7DJkW 5w62FdUjmFBl8s4cuXe0PTWKdiMG/w6xrrAyXVDsUFKtkjmhYCImCEw43q3xisAd qOcKENaKJ89tCA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:21:00 2025 by rpki-client