This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json) Hash identifier: B2gFGcNrmhXFvZazhWKC8QltDLUoYGgk9TsEE86UM9I= Subject key identifier: 7E:51:3D:F2:D7:E6:2F:9B:84:4F:DE:20:E3:27:86:6C:FC:53:C3:DC Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9 Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9 Certificate serial: 019AF12E5A036064B8C4B8D19B5E83734245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft Manifest number: 0B02 Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: Yvhv17h8jRQ4Z1bY4DPql4kG5An80dlbmp1Iw2AUWIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5a:03:60:64:b8:c4:b8:d1:9b:5e:83:73:42:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9 Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=7e513df2d7e62f9b844fde20e327866cfc53c3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:ee:aa:ae:3f:4d:2c:44:a0:2f:ae:91:07: ba:b0:4b:76:c4:46:47:49:44:ce:7d:4b:81:da:60: 23:07:75:35:79:a4:4e:f4:74:1d:ba:51:31:ef:06: 32:3d:c7:d4:fa:69:f7:bd:65:8b:eb:28:8f:d6:ef: 8c:d9:15:d7:e3:d7:2d:f6:6f:b2:e9:0d:b4:d0:f4: 74:2c:46:16:26:92:a1:40:aa:aa:7d:d8:a0:5b:a3: bb:c2:86:5a:b7:e2:6a:d2:bb:63:9e:6e:ce:c2:7f: 0f:5c:68:e8:9d:a0:66:13:eb:d0:66:7b:66:9d:ea: a9:93:8a:d2:98:f9:44:78:74:62:3e:ba:d0:69:41: 40:cb:76:0b:6d:72:6d:3b:6a:18:ac:f4:0c:42:21: e9:f8:43:51:f9:9e:24:e4:a4:9b:f0:60:b6:72:c6: 34:1f:28:e3:2f:b0:da:79:77:b2:35:9d:6f:a5:72: 1d:5a:8c:f6:4e:f9:4d:e1:90:18:43:35:f8:3a:ee: 03:6f:2e:cc:06:7f:5b:5f:2e:db:5a:ac:ce:b2:29: 17:b2:2f:30:8f:8d:3b:ce:1e:4c:a6:d1:26:3f:1f: 8a:ad:50:fd:ab:8c:12:e2:e4:b8:31:74:af:7e:4d: 64:4a:10:29:02:30:d3:bf:e5:b0:68:49:e4:17:2f: af:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:51:3D:F2:D7:E6:2F:9B:84:4F:DE:20:E3:27:86:6C:FC:53:C3:DC X509v3 Authority Key Identifier: keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:06:28:64:b8:07:98:ff:48:55:9f:99:a8:44:db:af:a7:65: a2:89:3a:7a:fb:87:ca:65:6c:1f:4d:4d:dc:20:61:6a:34:9a: 62:5c:2a:2c:55:76:d4:42:e1:1b:a8:37:10:2d:b0:4a:5a:82: 7b:d6:ee:6f:0a:55:95:6a:9d:89:b6:a2:d9:04:69:c2:97:3a: 7c:5b:88:94:7d:03:95:90:d8:30:c3:58:d3:26:0f:93:09:d5: ee:e2:29:4a:5a:cb:b5:be:29:29:a4:e2:1d:e5:f1:d7:6b:3f: 97:28:a3:0e:6b:50:a8:75:b7:15:68:72:86:8c:92:7a:9f:a2: ec:13:33:d3:e3:f3:86:d2:7c:60:89:72:e6:68:f9:1b:f9:2c: f6:eb:d9:43:9b:88:a3:1b:d7:04:0f:97:7c:93:7b:5b:82:03: f4:2d:eb:cb:e4:bf:c4:1d:83:b9:9b:df:69:20:3e:77:d1:62: e0:da:d9:87:0d:67:0a:14:f0:7b:a7:a9:4b:f1:72:21:c5:56: 2c:a8:a4:34:07:f1:ba:b4:73:9d:ab:9f:ed:cd:1c:6d:be:c0: 62:2c:f4:ac:1e:e5:45:92:fd:70:21:c5:d2:20:0d:2a:38:5b: f2:88:f3:a3:7b:f6:ad:6b:a7:15:1b:1c:03:4e:ac:b9:e7:2c: 47:39:16:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLloDYGS4xLjRm16Dc0JFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTlkNmJjYWVlOTM4NjI1YzFiZmEwZDMyMjdjMGViYmFi YWFhZDkwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD Eyg3ZTUxM2RmMmQ3ZTYyZjliODQ0ZmRlMjBlMzI3ODY2Y2ZjNTNjM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutbuqq4/TSxEoC+ukQe6sEt2xEZH SUTOfUuB2mAjB3U1eaRO9HQdulEx7wYyPcfU+mn3vWWL6yiP1u+M2RXX49ct9m+y 6Q200PR0LEYWJpKhQKqqfdigW6O7woZat+Jq0rtjnm7Own8PXGjonaBmE+vQZntm neqpk4rSmPlEeHRiPrrQaUFAy3YLbXJtO2oYrPQMQiHp+ENR+Z4k5KSb8GC2csY0 HyjjL7DaeXeyNZ1vpXIdWoz2TvlN4ZAYQzX4Ou4Dby7MBn9bXy7bWqzOsikXsi8w j407zh5MptEmPx+KrVD9q4wS4uS4MXSvfk1kShApAjDTv+WwaEnkFy+vMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5RPfLX5i+bhE/eIOMnhmz8U8PcMB8GA1UdIwQY MBaAFGlZ1ryu6ThiXBv6DTInwOu6uqrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDct Y2MxY2FjZWNjNmUyLzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDctY2MxY2FjZWNjNmUy LzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwYoZLgH mP9IVZ+ZqETbr6dlook6evuHymVsH01N3CBhajSaYlwqLFV21ELhG6g3EC2wSlqC e9bubwpVlWqdibai2QRpwpc6fFuIlH0DlZDYMMNY0yYPkwnV7uIpSlrLtb4pKaTi HeXx12s/lyijDmtQqHW3FWhyhoySep+i7BMz0+PzhtJ8YIly5mj5G/ks9uvZQ5uI oxvXBA+XfJN7W4ID9C3ry+S/xB2DuZvfaSA+d9Fi4NrZhw1nChTwe6epS/FyIcVW LKikNAfxurRznauf7c0cbb7AYiz0rB7lRZL9cCHF0iANKjhb8ojzo3v2rWunFRsc A06suecsRzkWaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:09 2025 by rpki-client