This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json) Hash identifier: d+oBJAssV3mzx79QgFnYXTkcdRRqMF6AFqLAkUToLws= Subject key identifier: FB:C4:9F:57:AB:9E:2E:08:02:2A:84:16:12:14:80:2A:78:BE:0F:3C Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Certificate serial: 019AF5E59859FFA8CB8C6DE262228DD455C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft Manifest number: 0271 Signing time: Sat 06 Dec 2025 23:00:55 +0000 Manifest this update: Sat 06 Dec 2025 23:00:55 +0000 Manifest next update: Sun 07 Dec 2025 23:00:55 +0000 Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=) 2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: teDwm40he8LYG9SJoArlysdlzszeLa9xVGHvYT/eBcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:98:59:ff:a8:cb:8c:6d:e2:62:22:8d:d4:55:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Validity Not Before: Dec 6 23:00:55 2025 GMT Not After : Dec 7 23:00:55 2025 GMT Subject: CN=fbc49f57ab9e2e08022a84161214802a78be0f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:2e:72:a4:97:77:b4:04:1c:6f:4f:96:d0: 4c:4c:69:d4:e3:1c:68:c1:6b:2d:c8:03:aa:b2:b8: 8a:ec:0c:81:df:7f:e3:25:ad:2a:9b:29:b5:02:96: 04:a2:a7:85:8c:95:c1:3c:45:bc:25:c6:4e:26:17: 45:83:fb:1b:df:a2:63:f0:26:e4:8c:53:0d:cf:78: 37:73:42:89:71:12:43:36:26:fa:2c:fe:5d:bb:b5: e7:20:ab:2b:fc:8d:08:ec:a3:1c:7a:d8:a1:eb:87: f9:74:6c:79:e2:0a:96:00:65:14:fc:82:5f:c5:25: 50:6f:70:ea:16:50:57:fc:81:4a:bc:c6:78:24:a8: aa:fa:46:36:eb:69:c7:5b:f3:ed:4a:8c:ce:10:e2: 41:80:0f:cb:9a:20:41:f5:67:be:86:0f:7f:08:22: a1:4e:38:6f:f5:23:88:0b:5a:8f:81:28:a4:b4:c9: 50:a9:2d:b0:76:0e:0f:91:71:8a:aa:18:96:55:69: 02:cb:15:06:84:3d:52:ca:d7:d4:80:fd:00:93:12: 31:ce:d7:32:75:a4:0c:02:00:73:b0:70:09:0a:ce: 2f:ae:c8:db:21:83:fa:fc:99:05:b7:0f:d4:61:33: c5:55:fd:f3:69:9a:2a:00:31:ee:98:61:b9:bd:e1: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C4:9F:57:AB:9E:2E:08:02:2A:84:16:12:14:80:2A:78:BE:0F:3C X509v3 Authority Key Identifier: keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:00:fe:8d:b0:ff:1d:86:ce:91:6f:f8:18:2a:8e:ac:26:f3: 51:91:27:a3:82:a8:76:f9:51:b3:d7:63:cb:58:06:23:ef:9b: 56:eb:cc:f4:63:48:df:cd:c3:af:68:08:b0:c2:4d:b7:0c:d2: 8b:41:11:c7:63:55:ad:e9:71:28:cc:dc:27:58:ff:36:60:e7: fe:ca:03:55:68:ea:91:c9:7f:a9:e2:58:a4:5e:b7:fd:c5:1f: 0a:c2:43:ae:ae:d0:4f:e1:d5:f2:2d:bf:a7:17:46:eb:58:81: 51:92:d5:2e:7a:55:75:af:6c:26:a0:a6:20:d5:69:d6:7d:62: 74:f5:ab:00:91:63:2d:c3:77:8e:94:83:38:2a:62:4a:7f:3e: 6d:68:1d:e7:ae:a2:47:cc:b7:22:d6:e7:10:dd:b5:9c:51:76: d4:dd:18:8c:1f:23:94:6f:ae:36:91:79:8b:c8:cb:b8:ab:34: 16:a5:b8:61:38:e4:0c:c0:ca:7d:18:b2:21:c5:fb:6e:01:b1: 34:11:a5:f8:a7:44:23:a6:8d:10:35:1f:55:15:90:c8:e3:30: 57:a7:3e:cf:a7:86:14:1e:97:cf:cd:3c:18:8b:80:65:11:28: 0d:b4:8f:28:34:ec:ac:0d:9b:6a:af:d2:6e:bd:6c:d2:44:f3: e2:f0:4f:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ZhZ/6jLjG3iYiKN1FXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl YTA0YjUwHhcNMjUxMjA2MjMwMDU1WhcNMjUxMjA3MjMwMDU1WjAzMTEwLwYDVQQD EyhmYmM0OWY1N2FiOWUyZTA4MDIyYTg0MTYxMjE0ODAyYTc4YmUwZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pEucqSXd7QEHG9PltBMTGnU4xxo wWstyAOqsriK7AyB33/jJa0qmym1ApYEoqeFjJXBPEW8JcZOJhdFg/sb36Jj8Cbk jFMNz3g3c0KJcRJDNib6LP5du7XnIKsr/I0I7KMcetih64f5dGx54gqWAGUU/IJf xSVQb3DqFlBX/IFKvMZ4JKiq+kY262nHW/PtSozOEOJBgA/LmiBB9We+hg9/CCKh Tjhv9SOIC1qPgSiktMlQqS2wdg4PkXGKqhiWVWkCyxUGhD1SytfUgP0AkxIxztcy daQMAgBzsHAJCs4vrsjbIYP6/JkFtw/UYTPFVf3zaZoqADHumGG5veEDmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvEn1erni4IAiqEFhIUgCp4vg88MB8GA1UdIwQY MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt OWI1NTk1MjlhZDE2LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2 LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwD+jbD/ HYbOkW/4GCqOrCbzUZEno4KodvlRs9djy1gGI++bVuvM9GNI383Dr2gIsMJNtwzS i0ERx2NVrelxKMzcJ1j/NmDn/soDVWjqkcl/qeJYpF63/cUfCsJDrq7QT+HV8i2/ pxdG61iBUZLVLnpVda9sJqCmINVp1n1idPWrAJFjLcN3jpSDOCpiSn8+bWgd566i R8y3ItbnEN21nFF21N0YjB8jlG+uNpF5i8jLuKs0FqW4YTjkDMDKfRiyIcX7bgGx NBGl+KdEI6aNEDUfVRWQyOMwV6c+z6eGFB6Xz808GIuAZREoDbSPKDTsrA2baq/S br1s0kTz4vBPVg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:03 2025 by rpki-client