This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json) Hash identifier: U594GQk0x22LZcfXZC3YjeS8gr68cnSf1RirrLHm7gc= Subject key identifier: BB:07:D7:92:63:BF:ED:DF:E3:B2:E7:64:4B:54:D2:24:24:A2:3E:83 Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Certificate serial: 019AF31CCDD48A9DD9F804C4A94FBDF7FCBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:22 +0000 Manifest this update: Sat 06 Dec 2025 10:02:22 +0000 Manifest next update: Sun 07 Dec 2025 10:02:22 +0000 Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: xJSzzaBTmsT1p0rbSjZv2uGI+qmWWBwoPr1OUyZxErY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cd:d4:8a:9d:d9:f8:04:c4:a9:4f:bd:f7:fc:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Validity Not Before: Dec 6 10:02:22 2025 GMT Not After : Dec 7 10:02:22 2025 GMT Subject: CN=bb07d79263bfeddfe3b2e7644b54d22424a23e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:42:15:e3:88:8f:f7:b2:c9:a4:23:d8:a5: a5:c1:a9:ea:3a:a8:37:c7:aa:70:df:61:70:86:29: 85:bb:0d:87:47:f5:90:cf:5f:f9:b5:93:14:69:a0: 3b:d1:9d:5b:31:5f:ca:48:fa:18:98:e0:48:65:4c: 26:93:46:0d:6c:31:29:04:c8:f1:af:f5:d3:c1:54: db:8d:d4:f8:46:b0:e8:64:15:8b:46:89:df:3c:91: 43:29:95:e1:5b:b5:48:3a:12:57:b4:88:ab:7b:69: 92:26:51:c7:1f:d5:5c:a5:b3:59:42:76:0c:f7:5b: 2f:3f:95:db:1e:5b:76:4f:de:1e:95:3b:56:5d:66: 48:78:56:2e:04:30:71:6a:8f:49:63:55:9d:11:6f: 9d:ce:2c:09:4e:25:09:c2:b6:98:5a:a9:f4:fe:82: 33:e3:cc:36:f7:e7:e5:ed:62:ce:7a:c1:c7:bf:c0: ee:a3:6e:1a:89:bd:62:1c:ff:f8:d4:c2:36:67:87: b6:86:52:1a:94:e7:a6:9e:18:13:58:51:38:f7:84: 47:7f:4d:be:d1:8f:71:8d:c5:a6:c4:f8:47:41:cd: fa:ef:59:dc:70:88:a2:0f:a4:0e:b1:a2:31:40:eb: 56:e5:a1:c8:3d:d0:52:51:5c:8b:bf:4b:60:22:94: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:D7:92:63:BF:ED:DF:E3:B2:E7:64:4B:54:D2:24:24:A2:3E:83 X509v3 Authority Key Identifier: keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:59:cf:ed:91:9a:cc:30:13:3d:60:cb:63:ec:33:51:13:22: 14:9b:19:9d:cc:31:2b:32:a8:e9:bb:cb:c8:69:78:73:cf:39: cc:95:a4:87:9b:ff:a5:0a:ef:49:a6:90:06:d3:b5:62:93:66: 7d:8b:20:ac:97:74:21:23:94:07:6a:7d:40:88:31:c2:82:80: 6b:f4:ce:8c:ec:64:74:53:2d:65:c0:c0:67:23:bc:38:07:9e: 87:d5:95:57:56:41:9d:36:38:e0:a7:89:95:d8:14:10:85:89: 21:6c:b4:82:e0:52:03:e6:ff:13:55:af:42:65:12:03:ef:3b: dc:c1:15:cb:80:04:c2:0f:ef:07:33:6a:5c:3b:f6:84:b6:b3: 3f:e4:3b:42:ba:14:8b:31:5d:bb:df:d9:28:69:bf:62:4c:da: a4:48:72:0f:3d:c0:d6:43:95:58:4e:f3:8a:0b:1b:59:c4:de: 5e:90:45:03:a4:a5:26:c1:c2:1c:b2:50:95:fa:52:e5:bc:d2: 25:ee:64:58:14:90:86:5a:c4:65:cc:84:63:39:d2:ec:b2:84: d7:11:fa:8f:0c:99:96:dc:bb:83:f0:b0:c2:5a:55:42:49:49: 22:1c:39:d9:a1:67:49:8c:09:f2:1c:b5:fb:51:11:d6:9e:6e: a4:11:70:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHM3Uip3Z+ATEqU+99/y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh ZjM3YzYwHhcNMjUxMjA2MTAwMjIyWhcNMjUxMjA3MTAwMjIyWjAzMTEwLwYDVQQD EyhiYjA3ZDc5MjYzYmZlZGRmZTNiMmU3NjQ0YjU0ZDIyNDI0YTIzZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl5CFeOIj/eyyaQj2KWlwanqOqg3 x6pw32FwhimFuw2HR/WQz1/5tZMUaaA70Z1bMV/KSPoYmOBIZUwmk0YNbDEpBMjx r/XTwVTbjdT4RrDoZBWLRonfPJFDKZXhW7VIOhJXtIire2mSJlHHH9VcpbNZQnYM 91svP5XbHlt2T94elTtWXWZIeFYuBDBxao9JY1WdEW+dziwJTiUJwraYWqn0/oIz 48w29+fl7WLOesHHv8Duo24aib1iHP/41MI2Z4e2hlIalOemnhgTWFE494RHf02+ 0Y9xjcWmxPhHQc3671nccIiiD6QOsaIxQOtW5aHIPdBSUVyLv0tgIpS8eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsH15Jjv+3f47LnZEtU0iQkoj6DMB8GA1UdIwQY MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0 LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1nP7ZGa zDATPWDLY+wzURMiFJsZncwxKzKo6bvLyGl4c885zJWkh5v/pQrvSaaQBtO1YpNm fYsgrJd0ISOUB2p9QIgxwoKAa/TOjOxkdFMtZcDAZyO8OAeeh9WVV1ZBnTY44KeJ ldgUEIWJIWy0guBSA+b/E1WvQmUSA+873MEVy4AEwg/vBzNqXDv2hLazP+Q7QroU izFdu9/ZKGm/YkzapEhyDz3A1kOVWE7zigsbWcTeXpBFA6SlJsHCHLJQlfpS5bzS Je5kWBSQhlrEZcyEYznS7LKE1xH6jwyZlty7g/CwwlpVQklJIhw52aFnSYwJ8hy1 +1ER1p5upBFw8w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:51 2025 by rpki-client