This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json) Hash identifier: FKpHACJrvdGnnVQm4dyAMdxd7OnGcAkxf/XqIuA7URM= Subject key identifier: 20:E4:4F:4E:C2:A8:5A:CA:AA:73:AB:61:A5:F8:E7:93:90:C4:79:70 Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b Certificate serial: 019B2889C1A0C9C698C6C5E85F88525513CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft Manifest number: 0FE5 Signing time: Tue 16 Dec 2025 19:01:15 +0000 Manifest this update: Tue 16 Dec 2025 19:01:15 +0000 Manifest next update: Wed 17 Dec 2025 19:01:15 +0000 Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: faMrfzEV6vC5BfIirRwJ/lLWkt8BsFTNTpFgzNpSrdg=) 2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:c1:a0:c9:c6:98:c6:c5:e8:5f:88:52:55:13:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b Validity Not Before: Dec 16 19:01:15 2025 GMT Not After : Dec 17 19:01:15 2025 GMT Subject: CN=20e44f4ec2a85acaaa73ab61a5f8e79390c47970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:a8:fc:9d:2c:36:32:2c:1e:04:19:65:87: b8:9e:32:a9:48:32:27:27:f0:9d:6b:24:03:98:ee: 21:9b:ff:6a:d8:f7:d1:f1:1f:02:98:b6:4b:25:f8: ec:54:73:ab:30:e4:76:ac:68:6e:c0:45:24:f6:7e: 93:d2:d8:87:e1:e4:ed:12:d9:1a:41:67:92:49:de: 72:81:5c:13:9c:87:0f:7b:c0:22:4f:5d:bb:02:48: 4a:5c:e7:5a:a1:55:58:9f:fc:f4:69:7b:b6:bb:c6: 09:4f:79:5b:41:ec:9d:56:21:17:8f:ac:00:7b:b7: b0:d0:b3:67:58:1e:3e:d6:d5:09:02:1a:db:33:67: 0a:2d:e1:70:09:e7:3c:64:c1:0d:13:54:7f:58:a2: bf:9f:a7:ee:7a:48:b5:6b:16:02:bf:1d:cb:c2:b3: dd:a8:5d:d0:cb:27:86:d0:c5:22:cb:40:a0:41:0c: 22:49:2c:69:b2:ba:a2:a4:a3:23:b2:8e:19:42:50: d3:48:89:3f:10:46:2a:ad:57:2d:41:05:82:e4:e2: fd:02:74:8b:e0:2e:ec:ec:ea:29:87:34:de:46:37: b3:95:7d:66:a5:be:b4:11:d8:75:85:a4:49:b4:75: 93:05:ff:26:00:73:b2:8c:56:b7:13:85:d9:5b:d1: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E4:4F:4E:C2:A8:5A:CA:AA:73:AB:61:A5:F8:E7:93:90:C4:79:70 X509v3 Authority Key Identifier: keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0d:e3:dd:f6:cf:7c:06:12:b6:9f:a8:43:ba:a7:9a:5d:04: e3:5c:ae:97:8d:7e:52:41:c2:b7:d2:e9:70:87:01:18:b2:de: 0e:e2:13:ea:ac:b0:4b:bc:74:ad:24:f3:90:66:15:b1:76:1b: 0b:b4:b8:c4:63:29:90:f9:b5:20:78:4f:1f:6f:79:a9:02:97: ae:66:8c:44:97:8a:6d:d0:d6:32:98:85:99:65:08:ad:af:41: 67:16:47:3c:b6:e7:8b:21:cd:f1:11:2b:95:03:86:3a:f2:5b: 11:a2:ae:50:2b:f9:d4:d9:4f:56:57:52:52:88:46:e9:6f:2f: 6c:14:66:04:83:c8:38:44:e4:97:bb:c6:d8:98:af:ee:50:56: 8b:3e:a4:ad:a3:aa:e4:6c:fc:cc:f3:47:88:2e:63:8f:b7:68: 3e:19:26:ea:c2:95:ae:70:d9:2d:bb:92:f6:c0:cb:01:60:f3: b1:2e:ba:09:6c:9f:2b:e0:86:73:f2:ac:8d:d7:92:ab:78:fd: 08:f4:af:25:d4:63:49:a3:89:fb:80:9a:43:b6:2f:20:72:5c: 83:92:3c:4a:e5:5e:91:05:ea:3e:92:53:55:de:3c:91:31:f2: 78:de:27:72:e7:f0:ad:38:be:db:67:de:e8:8a:4e:53:75:54: 8c:72:03:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoicGgycaYxsXoX4hSVRPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOGIyMGZmMDk4ZTZiN2NiYzhiNmFmMGQ2ODAwNjVlNmI5 MDYwMGIwHhcNMjUxMjE2MTkwMTE1WhcNMjUxMjE3MTkwMTE1WjAzMTEwLwYDVQQD EygyMGU0NGY0ZWMyYTg1YWNhYWE3M2FiNjFhNWY4ZTc5MzkwYzQ3OTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhyo/J0sNjIsHgQZZYe4njKpSDIn J/CdayQDmO4hm/9q2PfR8R8CmLZLJfjsVHOrMOR2rGhuwEUk9n6T0tiH4eTtEtka QWeSSd5ygVwTnIcPe8AiT127AkhKXOdaoVVYn/z0aXu2u8YJT3lbQeydViEXj6wA e7ew0LNnWB4+1tUJAhrbM2cKLeFwCec8ZMENE1R/WKK/n6fueki1axYCvx3LwrPd qF3QyyeG0MUiy0CgQQwiSSxpsrqipKMjso4ZQlDTSIk/EEYqrVctQQWC5OL9AnSL 4C7s7OophzTeRjezlX1mpb60Edh1haRJtHWTBf8mAHOyjFa3E4XZW9EGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDkT07CqFrKqnOrYaX455OQxHlwMB8GA1UdIwQY MBaAFAGLIP8Jjmt8vItq8NaABl5rkGALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEt OTEyN2Y0MjlhNDhkLzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEtOTEyN2Y0MjlhNDhk LzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlw3j3fbP fAYStp+oQ7qnml0E41yul41+UkHCt9LpcIcBGLLeDuIT6qywS7x0rSTzkGYVsXYb C7S4xGMpkPm1IHhPH295qQKXrmaMRJeKbdDWMpiFmWUIra9BZxZHPLbniyHN8REr lQOGOvJbEaKuUCv51NlPVldSUohG6W8vbBRmBIPIOETkl7vG2Jiv7lBWiz6kraOq 5Gz8zPNHiC5jj7doPhkm6sKVrnDZLbuS9sDLAWDzsS66CWyfK+CGc/KsjdeSq3j9 CPSvJdRjSaOJ+4CaQ7YvIHJcg5I8SuVekQXqPpJTVd48kTHyeN4ncufwrTi+22fe 6IpOU3VUjHIDYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 22:11:13 2025 by rpki-client