This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json) Hash identifier: i0KJ2jObykga64VuuwAjte36FZqJJiybHcwGMlsrRpI= Subject key identifier: 4B:ED:3D:33:55:E0:64:9D:65:E3:D4:B1:0A:97:93:CB:77:82:B3:17 Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93 Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93 Certificate serial: 019AF12CE780DD0BECC821E69AA35278898E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft Manifest number: 0DD5 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: bNtD1LUuGZ0NH+z9o4GbSfvLn0Of4tlj5wCx4BgO+JE=) 2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e7:80:dd:0b:ec:c8:21:e6:9a:a3:52:78:89:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=4bed3d3355e0649d65e3d4b10a9793cb7782b317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:ab:a7:1f:78:85:8c:50:cd:25:8c:fd:bf: 63:da:c9:54:68:14:ae:89:32:72:db:08:22:50:a6: 93:03:2f:80:1a:e2:9a:a1:f4:c4:7a:c3:14:49:88: 65:2f:a5:11:8c:5e:b2:d7:59:e4:35:68:8d:15:35: 27:67:cc:7f:e7:c4:cb:99:c6:4d:4f:74:08:d3:4c: cf:2b:60:6e:df:2f:51:c5:ca:73:66:94:81:cb:68: 47:63:68:2e:3a:a3:5d:e6:60:97:3d:d9:3a:7c:cc: ec:0f:c0:bb:bf:86:71:1a:fb:9b:f4:c3:f9:86:71: a0:63:40:21:c7:4f:bd:7c:d0:c7:da:93:f8:c3:f1: a4:56:1e:1f:22:20:98:63:96:5a:58:8f:b1:76:69: e6:f6:e1:c9:9f:52:1f:f8:76:fa:df:ce:c5:3f:13: 04:6c:56:7f:b7:2c:cf:ff:aa:a8:b3:44:c7:c8:17: 70:1a:5d:36:f7:7d:2c:45:26:b1:00:29:74:c5:a6: 7b:ef:14:e7:e5:57:dd:69:b4:59:07:5a:a8:c7:c4: 99:88:8e:82:9a:9d:9c:c7:e4:bf:d9:68:e9:45:46: 1c:ff:20:80:b5:ca:36:91:a2:9d:3d:a9:ac:5f:18: 4c:4c:89:fe:bc:e9:a4:eb:16:3a:87:d8:ed:81:5b: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:ED:3D:33:55:E0:64:9D:65:E3:D4:B1:0A:97:93:CB:77:82:B3:17 X509v3 Authority Key Identifier: keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7e:cb:76:a0:b0:a5:14:40:e1:81:9f:26:8d:ab:42:1e:7e: 9e:b7:25:99:7a:93:70:9f:72:94:12:a4:11:02:2f:9c:6c:e2: af:8d:4d:dd:88:ac:4e:e7:b0:b2:15:38:38:ac:ac:3d:e3:f2: a0:b4:10:10:52:93:e7:71:33:ac:e8:9b:c7:56:ce:e5:ad:74: fe:31:9c:e3:3f:13:bd:74:f7:34:84:c3:27:e2:4f:63:66:ab: f8:4b:04:36:df:d9:70:4b:cd:f0:64:a3:3e:b2:bd:a0:de:f5: 17:8c:23:18:30:e6:da:3d:50:7c:84:66:fa:29:9d:2d:7a:8e: 33:10:b1:b5:d6:71:fd:e7:c1:b5:34:56:43:48:3d:4e:36:6e: 64:97:e1:da:8d:ab:82:0b:f1:d5:0b:0b:b9:9a:20:10:22:67: 87:46:83:fe:9c:f9:7a:cd:78:cd:ff:fa:f1:66:2e:9a:33:e5: b4:40:7b:b1:9e:c9:9b:fc:1c:60:a8:b9:3e:e1:89:3b:1c:47: 48:4b:f2:92:b9:44:df:d4:99:9b:4f:79:77:5d:a0:44:c3:b8: 82:3e:44:19:0e:e8:7a:9c:19:ea:26:b8:d6:b6:a0:62:d2:0d: c3:df:70:d3:eb:3a:5c:cf:cb:53:e5:e3:d2:55:96:0d:6e:7b: e0:46:15:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOeA3QvsyCHmmqNSeImOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjA1NzQ4NTJjNmJiOTIzZmNiMzgwNDI1YzRmZDNlZDVj MGJhOTMwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD Eyg0YmVkM2QzMzU1ZTA2NDlkNjVlM2Q0YjEwYTk3OTNjYjc3ODJiMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcGrpx94hYxQzSWM/b9j2slUaBSu iTJy2wgiUKaTAy+AGuKaofTEesMUSYhlL6URjF6y11nkNWiNFTUnZ8x/58TLmcZN T3QI00zPK2Bu3y9RxcpzZpSBy2hHY2guOqNd5mCXPdk6fMzsD8C7v4ZxGvub9MP5 hnGgY0Ahx0+9fNDH2pP4w/GkVh4fIiCYY5ZaWI+xdmnm9uHJn1If+Hb6387FPxME bFZ/tyzP/6qos0THyBdwGl02930sRSaxACl0xaZ77xTn5VfdabRZB1qox8SZiI6C mp2cx+S/2WjpRUYc/yCAtco2kaKdPamsXxhMTIn+vOmk6xY6h9jtgVsRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvtPTNV4GSdZePUsQqXk8t3grMXMB8GA1UdIwQY MBaAFAEgV0hSxruSP8s4BCXE/T7VwLqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2Qt ZDViMWRiZGQxYjVmLzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2QtZDViMWRiZGQxYjVm LzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX7LdqCw pRRA4YGfJo2rQh5+nrclmXqTcJ9ylBKkEQIvnGzir41N3YisTuewshU4OKysPePy oLQQEFKT53EzrOibx1bO5a10/jGc4z8TvXT3NITDJ+JPY2ar+EsENt/ZcEvN8GSj PrK9oN71F4wjGDDm2j1QfIRm+imdLXqOMxCxtdZx/efBtTRWQ0g9TjZuZJfh2o2r ggvx1QsLuZogECJnh0aD/pz5es14zf/68WYumjPltEB7sZ7Jm/wcYKi5PuGJOxxH SEvykrlE39SZm095d12gRMO4gj5EGQ7oepwZ6ia41ragYtINw99w0+s6XM/LU+Xj 0lWWDW574EYVQg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:15 2025 by rpki-client