This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json) Hash identifier: g3iX9iEoPELdlEcYpA/vsYp7qO9nvFXdFeykjtOoJcw= Subject key identifier: 3F:9A:8F:AD:ED:7A:D5:EF:8E:6F:76:28:6A:A3:20:5F:06:E1:5B:23 Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Certificate serial: 019AF240172AAE642A6DD45688BF5DD8A283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: jACMRi/ZS+l4EABtNgx+XH3KG1SYf9dWjfIas5ro42s=) 2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:17:2a:ae:64:2a:6d:d4:56:88:bf:5d:d8:a2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=3f9a8faded7ad5ef8e6f76286aa3205f06e15b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:fa:da:c2:7a:0f:20:b1:ab:cd:6c:94:c5: 48:b0:71:14:fe:50:e3:31:2f:5f:66:91:e5:7f:e9: ea:41:04:e0:99:9e:f8:8a:ec:54:0e:1b:b3:e0:c7: d0:a9:47:55:15:d0:8d:f7:3c:88:55:4a:ff:40:da: f5:a8:23:b7:8e:e1:cb:2a:21:85:5c:cf:f0:c9:69: 5e:4b:01:ce:51:66:27:b7:ee:fd:b8:ec:21:91:d3: 23:6b:51:08:61:ac:4f:8e:8e:c3:96:cf:d3:56:86: c9:d8:8f:d1:d8:0c:1c:5d:87:f7:e8:4c:29:91:af: af:97:a0:ec:f2:ee:62:6e:3a:13:c3:95:e6:7d:62: c2:8a:e5:75:7d:fb:4f:b9:be:79:da:bd:f3:af:c9: c0:73:4d:9a:ca:b4:59:e8:69:45:a4:8b:52:e2:ed: de:07:74:b2:db:0d:46:24:05:77:8d:6c:e8:62:69: e9:95:bb:3a:3e:3a:80:7b:01:00:14:b6:02:5f:66: 1c:cb:50:e3:af:8a:b8:98:aa:53:35:2d:be:08:ef: ac:27:27:dc:94:71:19:dc:6d:c1:81:56:0d:7d:8a: 76:c5:d4:62:61:0e:8b:0a:0b:21:f2:f0:66:03:80: 3f:82:90:38:46:28:90:8a:68:2e:a7:a2:1d:f6:e2: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9A:8F:AD:ED:7A:D5:EF:8E:6F:76:28:6A:A3:20:5F:06:E1:5B:23 X509v3 Authority Key Identifier: keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c5:3c:c9:01:18:54:62:f3:da:f3:5e:a4:98:52:aa:aa:b1: f0:5a:2d:95:c8:c0:40:48:3d:33:d5:6c:cd:ac:8f:92:14:f2: 74:1e:ad:f3:51:32:c2:6c:9b:d3:91:17:c7:9f:63:8c:f6:f8: 3b:34:28:97:0e:bd:a2:6a:7a:cc:a6:4d:ab:3e:56:f0:fb:d4: db:21:ac:0c:c2:b6:3b:e6:4e:d0:fc:44:3b:77:2e:36:39:d4: 1b:6d:23:49:24:f5:6e:78:a3:9e:f3:f1:a3:d9:66:52:14:7b: 6f:c6:29:d2:bd:ee:d7:d8:75:94:7a:6d:12:46:48:e5:53:82: 41:0c:8a:c8:ba:7a:80:91:17:57:ce:dd:85:69:09:87:e9:64: 27:ac:d9:eb:41:23:96:97:20:52:0e:b8:96:ed:28:98:0f:4c: 80:48:55:50:86:96:22:a3:d0:76:59:f8:26:11:51:8d:10:71: 26:3c:32:c4:cf:54:5d:45:8c:26:5d:24:e4:a6:ba:4a:95:a8: 73:63:03:32:61:4e:c9:c5:0d:4b:b5:d2:76:52:ef:11:e2:4d: 01:61:02:a0:04:c2:fb:6e:53:cd:9a:4b:b0:51:be:59:e1:d8: 32:03:df:06:40:6b:3f:a3:4a:aa:06:de:fb:ab:f3:43:2a:2f: 18:2c:78:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBcqrmQqbdRWiL9d2KKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZmJkOGQ3MmJmZmJiY2Q3NzA3NmE2YTZjYzk5NGQzNjQy ODQ5MTYwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EygzZjlhOGZhZGVkN2FkNWVmOGU2Zjc2Mjg2YWEzMjA1ZjA2ZTE1YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx/62sJ6DyCxq81slMVIsHEU/lDj MS9fZpHlf+nqQQTgmZ74iuxUDhuz4MfQqUdVFdCN9zyIVUr/QNr1qCO3juHLKiGF XM/wyWleSwHOUWYnt+79uOwhkdMja1EIYaxPjo7Dls/TVobJ2I/R2AwcXYf36Ewp ka+vl6Ds8u5ibjoTw5XmfWLCiuV1fftPub552r3zr8nAc02ayrRZ6GlFpItS4u3e B3Sy2w1GJAV3jWzoYmnplbs6PjqAewEAFLYCX2Ycy1Djr4q4mKpTNS2+CO+sJyfc lHEZ3G3BgVYNfYp2xdRiYQ6LCgsh8vBmA4A/gpA4RiiQimgup6Id9uLa5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+aj63tetXvjm92KGqjIF8G4VsjMB8GA1UdIwQY MBaAFAL72Ncr/7vNdwdqamzJlNNkKEkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAt MjNhZjU1ZTAxOTBkLzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAtMjNhZjU1ZTAxOTBk LzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8U8yQEY VGLz2vNepJhSqqqx8FotlcjAQEg9M9VszayPkhTydB6t81Eywmyb05EXx59jjPb4 OzQolw69omp6zKZNqz5W8PvU2yGsDMK2O+ZO0PxEO3cuNjnUG20jSST1bnijnvPx o9lmUhR7b8Yp0r3u19h1lHptEkZI5VOCQQyKyLp6gJEXV87dhWkJh+lkJ6zZ60Ej lpcgUg64lu0omA9MgEhVUIaWIqPQdln4JhFRjRBxJjwyxM9UXUWMJl0k5Ka6SpWo c2MDMmFOycUNS7XSdlLvEeJNAWECoATC+25TzZpLsFG+WeHYMgPfBkBrP6NKqgbe +6vzQyovGCx4FA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:40 2025 by rpki-client