This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json) Hash identifier: yX9d9BWR9P2c3vtZxrG+vtML2YH1kRUoP72scohwW7U= Subject key identifier: E0:09:3B:25:4B:81:24:EB:80:C4:68:E5:69:A4:1D:B3:1C:42:F0:60 Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff Certificate serial: 019B2B8A34EF51C74B657CA0D1FFBF62623E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft Manifest number: 161D Signing time: Wed 17 Dec 2025 09:00:36 +0000 Manifest this update: Wed 17 Dec 2025 09:00:36 +0000 Manifest next update: Thu 18 Dec 2025 09:00:36 +0000 Files and hashes: 1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: P8vTgKvJgdPEPQTNzoIPhsHjTtJOVBuyZAh6cGXQV+g=) 2: bOONrlZHdROoIahZ7NmIjgIdExM.roa (hash: 1aT2l6/v3aO2MOldiF+P6gsdMx47ItIcMI7fEC/C0L0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:34:ef:51:c7:4b:65:7c:a0:d1:ff:bf:62:62:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff Validity Not Before: Dec 17 09:00:36 2025 GMT Not After : Dec 18 09:00:36 2025 GMT Subject: CN=e0093b254b8124eb80c468e569a41db31c42f060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:c3:b2:ca:92:42:cc:de:91:04:66:9c:f9: 7a:91:d6:e2:26:27:9f:6a:e0:d0:74:8e:23:3a:22: bd:72:4d:4d:7c:b1:1f:ea:b4:62:9f:c3:40:93:6f: 25:2e:ff:96:9f:58:21:b8:bd:4e:af:3b:5e:dc:ed: 28:10:8b:58:08:44:0e:30:6c:ca:c7:37:00:d7:f5: 70:07:42:25:05:db:35:1b:89:69:96:b4:6d:84:e6: 12:e1:04:f3:88:49:b8:2e:52:96:70:c1:30:07:7d: 66:c6:54:fc:3b:66:53:f5:a2:eb:0e:43:85:5d:26: 98:d3:c9:fd:1a:3b:4d:83:80:6c:55:50:f2:2d:36: a8:d7:20:f1:f6:02:82:42:4c:93:47:4a:9b:93:e0: 62:20:21:5b:eb:32:ac:ae:d2:05:6e:b9:08:33:43: 83:e8:45:60:3f:c6:ef:42:87:87:70:6a:5f:af:a4: 45:13:62:77:ad:d0:80:6e:48:53:bc:e9:77:ea:9e: 03:92:79:11:36:6e:cd:04:98:3f:25:5c:41:c8:4d: 68:a5:4c:f2:a2:01:3c:31:3c:89:c5:d6:69:50:74: f3:4c:d0:64:a5:1a:36:6c:8a:41:12:86:21:67:c5: 2a:ed:69:59:fe:e5:16:95:ef:87:db:82:a9:a5:e8: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:3B:25:4B:81:24:EB:80:C4:68:E5:69:A4:1D:B3:1C:42:F0:60 X509v3 Authority Key Identifier: keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7b:6d:9c:00:57:ba:1f:c3:f4:cd:a6:18:ed:c9:16:aa:50: 47:ea:2a:1a:65:2d:94:2a:8d:d9:c9:fc:ca:80:22:f2:56:e6: 1b:a8:be:21:09:fe:a5:9e:a9:2b:ea:4c:dd:07:a4:ea:97:7e: 11:01:11:a5:d5:02:56:7d:01:50:df:b0:a1:e8:e2:15:82:6a: eb:32:38:b7:9f:65:5b:e9:c1:b7:9e:00:74:49:40:91:b6:72: cf:0a:09:f3:d2:3c:83:c2:cd:0f:1b:a6:ac:40:11:57:16:cc: 4c:d0:c7:6d:ea:14:b5:86:1d:a7:1c:64:71:d1:1e:27:29:e8: 19:22:99:46:05:95:17:bc:58:ad:ee:4e:e3:17:7a:a4:4e:3d: 40:1e:64:8f:ee:68:c2:22:b8:fe:1b:d7:7a:7d:c4:9a:6e:32: 3d:63:53:c6:cb:22:9e:85:00:48:fc:7b:43:d7:fd:d5:3e:48: 97:04:1b:4b:0e:d7:35:97:4c:e6:15:8f:bd:23:3d:49:57:a2: 09:fd:e5:c9:2f:ad:8d:b8:d4:bf:97:6f:1f:92:88:96:b3:a0: de:1d:a8:ce:32:87:16:35:91:a9:df:94:72:f6:97:23:d3:08: a7:73:25:23:f0:33:56:94:c1:d8:0a:28:05:c5:39:9f:c0:db: 5a:f0:6a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrijTvUcdLZXyg0f+/YmI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjFlYTM5NTA4ZTBlMTdhNjUxZmU5MmFjMjllYTM4ODMy ZDBiZmYwHhcNMjUxMjE3MDkwMDM2WhcNMjUxMjE4MDkwMDM2WjAzMTEwLwYDVQQD EyhlMDA5M2IyNTRiODEyNGViODBjNDY4ZTU2OWE0MWRiMzFjNDJmMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN7DssqSQszekQRmnPl6kdbiJief auDQdI4jOiK9ck1NfLEf6rRin8NAk28lLv+Wn1ghuL1Orzte3O0oEItYCEQOMGzK xzcA1/VwB0IlBds1G4lplrRthOYS4QTziEm4LlKWcMEwB31mxlT8O2ZT9aLrDkOF XSaY08n9GjtNg4BsVVDyLTao1yDx9gKCQkyTR0qbk+BiICFb6zKsrtIFbrkIM0OD 6EVgP8bvQoeHcGpfr6RFE2J3rdCAbkhTvOl36p4DknkRNm7NBJg/JVxByE1opUzy ogE8MTyJxdZpUHTzTNBkpRo2bIpBEoYhZ8Uq7WlZ/uUWle+H24Kppeg09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAJOyVLgSTrgMRo5WmkHbMcQvBgMB8GA1UdIwQY MBaAFAMh6jlQjg4XplH+kqwp6jiDLQv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQt OGNmODA1NTExMDAyLzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQtOGNmODA1NTExMDAy LzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3ttnABX uh/D9M2mGO3JFqpQR+oqGmUtlCqN2cn8yoAi8lbmG6i+IQn+pZ6pK+pM3Qek6pd+ EQERpdUCVn0BUN+woejiFYJq6zI4t59lW+nBt54AdElAkbZyzwoJ89I8g8LNDxum rEARVxbMTNDHbeoUtYYdpxxkcdEeJynoGSKZRgWVF7xYre5O4xd6pE49QB5kj+5o wiK4/hvXen3Emm4yPWNTxssinoUASPx7Q9f91T5IlwQbSw7XNZdM5hWPvSM9SVei Cf3lyS+tjbjUv5dvH5KIlrOg3h2ozjKHFjWRqd+UcvaXI9MIp3MlI/AzVpTB2Aoo BcU5n8DbWvBqaw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:06 2025 by rpki-client