This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json) Hash identifier: obwPLqlYM340kE1DbMd6AaLz9C5CdQxl/0Rci5bAl7c= Subject key identifier: 9C:E4:55:AF:86:2D:65:A1:64:DE:15:EB:33:B6:16:A2:F8:9B:FF:5E Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff Certificate serial: 019AF19AA2B9B80EB6C3EB68EE7FC8B2009C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft Manifest number: 15FF Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: YkJ4mZD+Tlvmp7ueYRJP9U6LBOeqzPcKeXxucXAcXwk=) 2: bOONrlZHdROoIahZ7NmIjgIdExM.roa (hash: 1aT2l6/v3aO2MOldiF+P6gsdMx47ItIcMI7fEC/C0L0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a2:b9:b8:0e:b6:c3:eb:68:ee:7f:c8:b2:00:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=9ce455af862d65a164de15eb33b616a2f89bff5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a4:65:98:76:e6:28:4f:c7:b8:1b:f2:c0:b5: a3:25:7c:c3:22:7a:21:31:a3:5a:53:13:23:84:50: 00:1e:a8:55:26:5c:80:56:8a:51:05:9e:95:94:4f: 64:6f:05:d8:e4:31:b4:dd:45:94:56:7b:d5:2c:30: 54:ec:cb:fe:c4:6f:9e:2d:db:aa:cb:d8:e1:91:cd: 7d:0a:7c:a5:cc:d6:5d:99:1b:1d:22:ac:95:68:b4: df:19:09:9b:52:d0:1c:d2:d4:eb:fd:95:ed:d7:34: ac:5d:b2:fc:80:d7:43:bc:40:f9:bd:95:98:e9:2a: df:59:8e:ba:fa:fe:b2:a1:37:fe:7a:d5:8e:0b:68: de:01:5b:b5:89:7b:87:f4:4c:c9:10:bb:7c:a0:99: bc:1a:dc:d0:5f:d0:06:13:ee:4d:4c:0c:34:bd:18: 0d:13:e2:c3:a8:f0:4d:93:14:40:2c:1f:1a:3f:eb: cb:96:1b:e1:82:44:32:5a:d6:cf:16:76:87:6a:6f: fa:e2:6a:60:01:a2:ad:a0:b6:ac:68:2e:21:3f:ea: ba:d9:fc:17:59:dd:fe:a9:88:56:b2:a8:24:a4:be: 0a:7e:71:0d:dc:8c:fe:c6:a1:cf:87:df:60:29:57: a0:77:7f:d5:25:ff:4e:fe:63:f3:b1:68:d4:c0:19: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E4:55:AF:86:2D:65:A1:64:DE:15:EB:33:B6:16:A2:F8:9B:FF:5E X509v3 Authority Key Identifier: keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ef:fe:da:5d:78:76:c9:5e:77:a9:5f:8b:4c:04:86:8d:df: 64:d9:03:bd:d7:c4:4a:a8:e2:dc:ce:77:50:b3:82:7e:57:12: 23:d1:c1:5a:08:96:22:15:05:9c:2e:bf:9c:bc:a0:89:13:db: 51:3e:7a:de:aa:7f:56:b7:fd:50:59:39:4f:13:bf:d7:c3:19: a1:61:3e:6e:a7:da:0c:ef:7b:73:80:84:ea:17:26:74:a7:5e: 37:68:22:11:79:1a:46:0c:83:c8:c3:71:b4:42:ea:99:ef:0b: e2:77:7c:42:a3:93:4f:b7:65:79:4e:b4:98:21:97:a9:49:71: e8:ad:d3:52:c9:bb:f2:29:6e:83:f1:5b:7a:16:22:74:b7:7e: 67:53:64:ef:7a:c6:47:88:ac:23:bd:c4:9e:35:cf:05:f5:29: e7:28:d3:af:d0:e0:82:d1:d8:38:05:e5:88:32:d9:85:29:bd: af:2b:9e:51:1b:1b:ab:eb:54:89:b2:4d:a8:02:98:2f:ba:a8: ef:92:5f:82:48:f1:9d:79:04:96:47:65:78:c2:5b:42:69:e8: 97:75:ae:be:ba:1a:24:3a:8d:73:fe:e2:2e:4c:c0:c5:f4:48: da:c0:6c:94:f6:b6:3e:f4:ee:d0:98:5f:3d:1a:93:d7:34:a2: 62:34:04:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqK5uA62w+to7n/IsgCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjFlYTM5NTA4ZTBlMTdhNjUxZmU5MmFjMjllYTM4ODMy ZDBiZmYwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD Eyg5Y2U0NTVhZjg2MmQ2NWExNjRkZTE1ZWIzM2I2MTZhMmY4OWJmZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qRlmHbmKE/HuBvywLWjJXzDInoh MaNaUxMjhFAAHqhVJlyAVopRBZ6VlE9kbwXY5DG03UWUVnvVLDBU7Mv+xG+eLduq y9jhkc19CnylzNZdmRsdIqyVaLTfGQmbUtAc0tTr/ZXt1zSsXbL8gNdDvED5vZWY 6SrfWY66+v6yoTf+etWOC2jeAVu1iXuH9EzJELt8oJm8GtzQX9AGE+5NTAw0vRgN E+LDqPBNkxRALB8aP+vLlhvhgkQyWtbPFnaHam/64mpgAaKtoLasaC4hP+q62fwX Wd3+qYhWsqgkpL4KfnEN3Iz+xqHPh99gKVegd3/VJf9O/mPzsWjUwBnd7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzkVa+GLWWhZN4V6zO2FqL4m/9eMB8GA1UdIwQY MBaAFAMh6jlQjg4XplH+kqwp6jiDLQv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQt OGNmODA1NTExMDAyLzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQtOGNmODA1NTExMDAy LzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJO/+2l14 dsled6lfi0wEho3fZNkDvdfESqji3M53ULOCflcSI9HBWgiWIhUFnC6/nLygiRPb UT563qp/Vrf9UFk5TxO/18MZoWE+bqfaDO97c4CE6hcmdKdeN2giEXkaRgyDyMNx tELqme8L4nd8QqOTT7dleU60mCGXqUlx6K3TUsm78ilug/FbehYidLd+Z1Nk73rG R4isI73EnjXPBfUp5yjTr9DggtHYOAXliDLZhSm9ryueURsbq+tUibJNqAKYL7qo 75JfgkjxnXkElkdleMJbQmnol3WuvroaJDqNc/7iLkzAxfRI2sBslPa2PvTu0Jhf PRqT1zSiYjQE3g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:13 2025 by rpki-client