This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft File: AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json) Hash identifier: 10EmBuqF4UZHJZsCT3jjbG7pFUI7mpMWQm7kQfvWK6c= Subject key identifier: 60:01:07:18:1F:6F:D5:54:BD:EE:AA:33:38:AF:7A:41:BC:D5:B1:02 Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567 Certificate serial: 019AF4655B3A0B09634B394076E6A7CC8CB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft Manifest number: 1137 Signing time: Sat 06 Dec 2025 16:01:14 +0000 Manifest this update: Sat 06 Dec 2025 16:01:14 +0000 Manifest next update: Sun 07 Dec 2025 16:01:14 +0000 Files and hashes: 1: 9Q2RHv269wPiesXqtuAqx5hcH88.roa (hash: wl+INHVpEi+t5QzVsEqpFRnOOYgn09RgHODGqfcm7so=) 2: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: BQMtD4MpVz3sncqgwAeHbNxOyqT4th4GrSYqV32G/Bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:5b:3a:0b:09:63:4b:39:40:76:e6:a7:cc:8c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567 Validity Not Before: Dec 6 16:01:14 2025 GMT Not After : Dec 7 16:01:14 2025 GMT Subject: CN=600107181f6fd554bdeeaa3338af7a41bcd5b102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:a2:e2:43:93:a8:14:6c:17:85:ba:bc:9b: 30:f6:28:0b:ce:85:28:74:25:0d:96:a6:f1:e6:bf: 69:8d:e1:49:d5:5f:0b:06:e4:30:44:c4:63:8a:fe: 9b:eb:05:85:60:bb:1d:15:90:c6:c8:10:f8:fa:65: 66:4b:e7:2e:4a:b0:84:f4:2c:fc:56:d2:72:70:9c: 12:08:1f:50:35:69:07:9f:a6:34:c1:84:6f:20:c7: d0:2a:9b:63:56:87:54:e4:4c:ea:1b:cd:ae:d0:ec: 88:0f:89:a9:34:27:49:89:88:f3:3f:1d:b6:24:db: 6d:d7:a6:37:4f:72:ca:67:7b:4e:57:25:ce:4f:f4: f1:23:04:53:1e:19:f0:58:61:b7:77:c4:af:eb:ff: 9a:f2:00:70:cf:31:ff:66:ad:3a:ea:a7:23:79:bd: 89:44:e0:ef:6a:68:06:56:b4:92:52:e9:7a:dd:53: a2:3d:69:6f:b8:80:c6:fb:cc:5c:f4:62:b5:35:df: f4:fa:54:89:1a:d7:0e:29:4f:15:72:95:58:1a:dd: f9:1f:6a:94:15:89:f5:71:9d:5d:6f:a6:06:56:af: b3:90:05:e4:10:17:97:fe:70:8e:9f:c9:f3:ab:83: e0:cb:6e:a3:8d:af:54:a8:89:f1:aa:95:24:ac:14: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:07:18:1F:6F:D5:54:BD:EE:AA:33:38:AF:7A:41:BC:D5:B1:02 X509v3 Authority Key Identifier: keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:0e:be:64:06:3e:3f:35:e6:1d:39:9b:75:5d:d4:12:88:8f: 87:9c:38:fc:b3:ec:1f:16:9e:af:0f:5f:fd:07:8e:2c:70:a6: b1:a7:48:2d:89:75:22:84:1d:cf:4a:9c:95:26:8c:36:fe:00: c4:fd:b9:3e:2d:e0:5a:29:b0:4a:0b:cf:79:66:c6:89:34:24: 46:9f:47:41:97:ce:5c:d7:a2:89:a4:14:20:b5:a6:14:11:0f: 1d:ab:e0:ea:80:28:8a:05:ed:3f:20:25:f2:ff:fb:3e:15:2d: 39:d1:58:8e:23:7c:ca:b2:37:d1:e1:1e:5b:30:17:2b:48:7f: 49:3b:3b:11:8c:b7:59:20:0b:4a:e2:0f:e7:b0:4c:46:c6:bd: 50:9a:37:98:b2:2a:ba:f2:36:26:04:4f:46:d0:e3:75:9f:4c: a4:ee:50:10:08:ff:e1:a4:34:22:4a:6c:f7:f6:18:3b:32:86: 26:1d:b6:9a:35:59:60:44:c3:d3:3f:81:6c:8b:d0:52:84:63: bb:bd:02:6f:51:83:de:6a:90:63:5b:31:84:53:2b:e9:53:67: 59:0e:c3:11:d6:b4:6e:ec:ab:ae:16:60:c5:d4:04:7d:4e:1b: 80:b7:bf:c1:60:42:a6:c8:90:11:06:82:f2:51:af:0f:d4:cd: bb:16:b8:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVs6CwljSzlAduanzIywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNGVmZGZkMDY0N2NjYmE3MzRiMmEwNTY2MDEyNGViOGMw Njc1NjcwHhcNMjUxMjA2MTYwMTE0WhcNMjUxMjA3MTYwMTE0WjAzMTEwLwYDVQQD Eyg2MDAxMDcxODFmNmZkNTU0YmRlZWFhMzMzOGFmN2E0MWJjZDViMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbai4kOTqBRsF4W6vJsw9igLzoUo dCUNlqbx5r9pjeFJ1V8LBuQwRMRjiv6b6wWFYLsdFZDGyBD4+mVmS+cuSrCE9Cz8 VtJycJwSCB9QNWkHn6Y0wYRvIMfQKptjVodU5EzqG82u0OyID4mpNCdJiYjzPx22 JNtt16Y3T3LKZ3tOVyXOT/TxIwRTHhnwWGG3d8Sv6/+a8gBwzzH/Zq066qcjeb2J RODvamgGVrSSUul63VOiPWlvuIDG+8xc9GK1Nd/0+lSJGtcOKU8VcpVYGt35H2qU FYn1cZ1db6YGVq+zkAXkEBeX/nCOn8nzq4Pgy26jja9UqInxqpUkrBRxYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGABBxgfb9VUve6qMzivekG81bECMB8GA1UdIwQY MBaAFAFO/f0GR8y6c0sqBWYBJOuMBnVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUt ZmM2Y2RhYWYyNTBiLzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUtZmM2Y2RhYWYyNTBi LzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQ6+ZAY+ PzXmHTmbdV3UEoiPh5w4/LPsHxaerw9f/QeOLHCmsadILYl1IoQdz0qclSaMNv4A xP25Pi3gWimwSgvPeWbGiTQkRp9HQZfOXNeiiaQUILWmFBEPHavg6oAoigXtPyAl 8v/7PhUtOdFYjiN8yrI30eEeWzAXK0h/STs7EYy3WSALSuIP57BMRsa9UJo3mLIq uvI2JgRPRtDjdZ9MpO5QEAj/4aQ0Ikps9/YYOzKGJh22mjVZYETD0z+BbIvQUoRj u70Cb1GD3mqQY1sxhFMr6VNnWQ7DEda0buyrrhZgxdQEfU4bgLe/wWBCpsiQEQaC 8lGvD9TNuxa4iQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:44 2025 by rpki-client