This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json) Hash identifier: kXmXlHjxwEO7phVukttzG63Yw8MG52hytg+VNvR/CHY= Subject key identifier: FC:A1:21:65:E4:C2:17:B0:B6:25:A7:93:7D:B2:C8:7E:78:2F:30:6F Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a Certificate serial: 019AF42E4D73B1EC732133180D24E454C08E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft Manifest number: 0C57 Signing time: Sat 06 Dec 2025 15:01:06 +0000 Manifest this update: Sat 06 Dec 2025 15:01:06 +0000 Manifest next update: Sun 07 Dec 2025 15:01:06 +0000 Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: Bid8UF6OY9FuIXS7JpIyr897/PmwzYcUqO96DfO+xwA=) 2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4d:73:b1:ec:73:21:33:18:0d:24:e4:54:c0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a Validity Not Before: Dec 6 15:01:06 2025 GMT Not After : Dec 7 15:01:06 2025 GMT Subject: CN=fca12165e4c217b0b625a7937db2c87e782f306f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:5a:1e:df:20:6b:79:47:64:ff:42:01:ff: 6c:8b:f0:a2:9b:76:c5:79:68:ba:d4:60:52:38:df: 1c:4c:77:4a:94:ad:03:8c:76:53:95:9d:fc:06:be: bb:04:d1:1e:2e:1c:0e:03:a6:f6:19:c9:32:0e:94: 1c:d5:86:54:2e:48:6a:b0:67:a2:50:d1:85:b6:1f: ad:e9:de:f4:dc:60:66:56:00:3b:35:11:58:aa:0a: ba:d8:87:ec:00:9e:f0:e4:60:13:65:46:36:0d:bd: 45:52:36:65:99:02:bb:da:46:9f:13:97:3e:75:93: c3:8e:30:e2:c1:5e:99:a1:04:d4:a1:77:94:11:21: 4f:ea:d7:f9:6c:bf:49:52:ba:6a:a9:6d:cb:41:c5: 4e:54:88:9c:9a:32:2c:2d:1e:4e:14:a5:5f:b2:d7: f2:2f:83:99:f3:3e:54:12:b4:b4:ff:8d:18:01:ad: a5:8e:14:bf:f7:22:ac:b2:35:19:90:24:4e:31:6a: 69:b5:e1:cb:7f:1a:40:03:01:6b:bc:d0:46:4d:01: e0:c6:f3:ab:9d:06:74:ee:28:a2:af:da:78:83:87: 9b:d6:f9:6a:1b:e8:b7:bc:2f:db:18:47:48:5b:c3: 4a:03:d5:18:04:39:07:03:83:30:73:14:a2:e7:2a: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:21:65:E4:C2:17:B0:B6:25:A7:93:7D:B2:C8:7E:78:2F:30:6F X509v3 Authority Key Identifier: keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b1:4a:cb:d6:ad:50:dc:12:4e:70:67:a7:93:e7:cd:94:98: c8:88:65:65:02:3d:05:50:c3:d1:d0:ef:a4:2c:25:8e:f9:b5: b0:48:95:8e:c7:3a:49:5e:1b:27:75:0c:b6:bc:78:be:ea:0c: 61:08:19:ab:c2:52:a4:aa:e8:dc:bc:fa:e9:9a:2d:f5:a6:44: c2:16:ac:cd:aa:82:8e:27:2b:b9:61:59:ab:6d:f8:cd:3f:cb: e6:76:7f:98:72:b9:8a:98:4a:fd:88:30:b4:8f:e0:aa:77:1d: af:8d:4a:5c:f4:26:75:16:a1:ed:f0:52:6f:8a:88:62:bf:9a: 8d:d5:30:08:c5:b5:cd:a0:42:a2:26:15:e7:fa:aa:8c:9a:6c: d0:08:7b:c9:03:72:b5:b4:b8:d0:56:c6:e1:5b:a5:8a:06:93: 9a:7f:aa:a5:be:b8:e6:6e:f3:11:ef:a5:d7:20:8b:d9:32:9a: dd:9a:e9:19:86:87:ae:3c:1c:31:b7:b8:a6:31:26:bb:5c:64: c5:d6:38:d2:e5:c5:9c:3c:33:5e:1d:f3:07:a0:0b:6c:f5:10: c3:7b:1b:ab:8a:da:53:ab:64:39:2e:ca:c3:5f:28:6e:74:f1: 08:25:a2:5e:b3:62:bd:05:a8:6f:77:6f:98:12:61:6a:cd:6a: 02:87:a3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lk1zsexzITMYDSTkVMCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzJjMTg3ZDk4YjQ2MDM4MDRlZDExNjVhZGI0NTA5YjYz MGE4M2EwHhcNMjUxMjA2MTUwMTA2WhcNMjUxMjA3MTUwMTA2WjAzMTEwLwYDVQQD EyhmY2ExMjE2NWU0YzIxN2IwYjYyNWE3OTM3ZGIyYzg3ZTc4MmYzMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnelaHt8ga3lHZP9CAf9si/Cim3bF eWi61GBSON8cTHdKlK0DjHZTlZ38Br67BNEeLhwOA6b2GckyDpQc1YZULkhqsGei UNGFth+t6d703GBmVgA7NRFYqgq62IfsAJ7w5GATZUY2Db1FUjZlmQK72kafE5c+ dZPDjjDiwV6ZoQTUoXeUESFP6tf5bL9JUrpqqW3LQcVOVIicmjIsLR5OFKVfstfy L4OZ8z5UErS0/40YAa2ljhS/9yKssjUZkCROMWppteHLfxpAAwFrvNBGTQHgxvOr nQZ07iiir9p4g4eb1vlqG+i3vC/bGEdIW8NKA9UYBDkHA4MwcxSi5yo9GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyhIWXkwhewtiWnk32yyH54LzBvMB8GA1UdIwQY MBaAFALCwYfZi0YDgE7RFlrbRQm2MKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMt N2ZlYjE4YjlmNTUyLzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMtN2ZlYjE4YjlmNTUy LzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7FKy9at UNwSTnBnp5PnzZSYyIhlZQI9BVDD0dDvpCwljvm1sEiVjsc6SV4bJ3UMtrx4vuoM YQgZq8JSpKro3Lz66Zot9aZEwhaszaqCjicruWFZq234zT/L5nZ/mHK5iphK/Ygw tI/gqncdr41KXPQmdRah7fBSb4qIYr+ajdUwCMW1zaBCoiYV5/qqjJps0Ah7yQNy tbS40FbG4VuligaTmn+qpb645m7zEe+l1yCL2TKa3ZrpGYaHrjwcMbe4pjEmu1xk xdY40uXFnDwzXh3zB6ALbPUQw3sbq4raU6tkOS7Kw18obnTxCCWiXrNivQWob3dv mBJhas1qAoej7g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:31 2025 by rpki-client