This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json) Hash identifier: JEPce2tCnT1yUUYB1plRrq20tepJNVyXxW2QiehqvtA= Subject key identifier: FC:7A:3F:B8:5F:F7:68:5B:9B:58:0F:10:78:7B:22:8B:6F:42:24:8E Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Certificate serial: 019AF19B631C68099490B158BD3A63E8EC71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=) 2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: hNtwnzpOnZGlY7P4DhTx6d5XGRYqTTZc16G26/Ud4U8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:63:1c:68:09:94:90:b1:58:bd:3a:63:e8:ec:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=fc7a3fb85ff7685b9b580f10787b228b6f42248e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:b8:06:50:65:95:e9:e6:a6:48:d4:49:ea: d4:bf:64:e0:dd:24:6e:00:72:fd:70:c7:fb:3c:6e: c1:6f:c2:7f:df:e4:9b:e8:28:ca:9f:f2:58:68:18: 6b:09:d1:76:e6:5f:6b:d8:90:2a:71:ef:a2:d4:1d: 34:7d:c7:86:c1:8f:c7:36:ae:69:40:c6:5f:f9:12: 8d:42:fd:bc:f2:37:dc:ff:03:bf:38:9d:2f:57:e4: b6:76:80:f0:07:d0:a4:c4:cb:c2:dc:b5:30:ce:1a: e2:65:50:5b:86:9d:43:87:c6:2b:45:b7:15:2a:29: 5a:90:2e:e0:c0:c5:d4:08:c9:17:73:18:d7:6e:34: 1b:b3:45:57:a1:ef:45:d4:38:2b:5f:e3:9f:31:2f: 4e:b5:a8:bc:d7:b0:fa:75:21:79:59:4b:9b:e5:97: 97:1b:c7:b6:e5:27:29:3c:e0:ee:59:4f:cf:f0:f4: 04:7f:0d:7e:60:f3:ff:e8:8d:ad:bd:c1:3a:63:f9: 6f:34:a2:d9:b9:24:47:d7:57:8f:25:b8:8c:03:51: 89:fe:b2:43:e4:79:38:69:c9:98:44:a3:a6:b8:14: 35:d9:02:b3:3d:37:91:9a:b1:7f:c9:01:a4:d8:e4: 51:65:f2:6f:72:a7:20:0c:f8:75:98:34:1c:4e:77: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7A:3F:B8:5F:F7:68:5B:9B:58:0F:10:78:7B:22:8B:6F:42:24:8E X509v3 Authority Key Identifier: keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:9d:1e:83:c0:2e:b0:11:d3:2d:39:41:3d:73:d5:dc:38: 51:58:27:6d:01:4e:7e:fc:d9:9c:75:8e:b5:5a:1b:38:ee:c4: 05:04:40:29:e3:0d:2e:0d:cf:65:a7:91:af:dd:af:72:f8:1c: 4e:41:6a:cd:30:1f:56:f0:c0:9c:f6:b3:0d:1d:92:33:89:d4: 31:58:f0:aa:bd:45:57:6c:6c:43:45:1a:be:90:e6:68:ca:93: df:99:d0:01:46:62:18:94:b2:a1:0e:9b:cc:f8:8e:45:44:aa: fe:38:b2:de:ed:4b:65:b2:e0:f6:bd:54:f0:62:e5:bb:7c:21: 89:d8:32:ed:d5:82:15:ee:1d:69:64:da:b8:6b:44:b1:ca:6b: cb:4d:27:3a:d3:14:39:f8:70:a7:28:ed:c8:47:c3:dc:d8:4f: a0:56:30:2d:b9:c5:0d:ba:a3:7b:b2:57:8a:2a:1b:cb:cd:9f: 7e:c3:29:ea:52:74:81:76:33:e8:f6:7b:d9:99:3f:7b:ec:a2: 84:9e:7f:db:65:e5:69:b4:7b:f9:ff:cb:60:41:b2:33:42:4b: ea:fc:4e:2c:06:1b:c2:5a:a9:70:3c:ba:bd:8e:d3:8c:2d:1a: 38:2a:45:51:05:9f:bb:4e:09:b0:d8:f9:2b:1f:15:76:d9:d8: 29:a1:2e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2McaAmUkLFYvTpj6OxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmFiMDkxNjhlN2NjNjZiNjYzYzYxNjJkNWM4ZDQ1NDk2 NWNjZTIwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhmYzdhM2ZiODVmZjc2ODViOWI1ODBmMTA3ODdiMjI4YjZmNDIyNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8m4BlBllenmpkjUSerUv2Tg3SRu AHL9cMf7PG7Bb8J/3+Sb6CjKn/JYaBhrCdF25l9r2JAqce+i1B00fceGwY/HNq5p QMZf+RKNQv288jfc/wO/OJ0vV+S2doDwB9CkxMvC3LUwzhriZVBbhp1Dh8YrRbcV KilakC7gwMXUCMkXcxjXbjQbs0VXoe9F1DgrX+OfMS9Otai817D6dSF5WUub5ZeX G8e25ScpPODuWU/P8PQEfw1+YPP/6I2tvcE6Y/lvNKLZuSRH11ePJbiMA1GJ/rJD 5Hk4acmYRKOmuBQ12QKzPTeRmrF/yQGk2ORRZfJvcqcgDPh1mDQcTnesMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPx6P7hf92hbm1gPEHh7IotvQiSOMB8GA1UdIwQY MBaAFGr6sJFo58xmtmPGFi1cjUVJZcziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgt NWYzMzgxYjA3MWRhLzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgtNWYzMzgxYjA3MWRh LzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5SdHoPA LrAR0y05QT1z1dw4UVgnbQFOfvzZnHWOtVobOO7EBQRAKeMNLg3PZaeRr92vcvgc TkFqzTAfVvDAnPazDR2SM4nUMVjwqr1FV2xsQ0UavpDmaMqT35nQAUZiGJSyoQ6b zPiORUSq/jiy3u1LZbLg9r1U8GLlu3whidgy7dWCFe4daWTauGtEscpry00nOtMU OfhwpyjtyEfD3NhPoFYwLbnFDbqje7JXiioby82ffsMp6lJ0gXYz6PZ72Zk/e+yi hJ5/22XlabR7+f/LYEGyM0JL6vxOLAYbwlqpcDy6vY7TjC0aOCpFUQWfu04JsNj5 Kx8VdtnYKaEu0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:25 2025 by rpki-client