This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json) Hash identifier: /VS2xg2BI/8PiUZm9RGT48gSUBmcw1rjUiZv1Edflgo= Subject key identifier: 60:41:59:3E:FB:45:80:B6:32:64:34:AC:91:E7:A3:B8:97:E1:BC:F7 Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61 Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461 Certificate serial: 019AF2ADB11FB19748A423BEEDB265B204F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft Manifest number: 0A53 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: VYrIFzcViLWRVOMYshSmUxrNCxIbtZLt2rOO+yjO5Os=) 2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b1:1f:b1:97:48:a4:23:be:ed:b2:65:b2:04:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=6041593efb4580b6326434ac91e7a3b897e1bcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:41:50:b4:20:73:bc:7b:cb:a0:c3:00:90: ff:5f:da:20:c0:60:c9:e6:69:c8:a0:1d:77:ef:d7: 5e:26:78:99:97:fd:ec:73:15:61:79:c5:33:b7:4c: 8b:9e:03:9d:14:a8:dd:83:e5:e4:5c:d1:30:20:29: 1d:db:c5:71:9d:bc:5d:3b:b4:7e:87:73:87:3e:e6: f1:e7:88:aa:9b:fa:ed:91:f3:c2:8d:7b:3d:0b:3e: 98:25:bc:95:0f:39:b2:42:52:78:08:bb:33:33:15: f5:55:b4:6e:18:04:c7:bc:67:e9:1a:86:ed:db:84: 00:ab:74:22:28:13:36:38:b1:5d:89:23:e4:d2:e2: e6:b2:37:88:7a:02:4a:7c:50:05:22:df:4c:05:19: ee:0d:63:93:71:97:95:18:e3:79:6c:9c:92:7f:7e: 4f:94:90:4d:fb:bc:58:13:09:45:a3:17:a8:6f:7f: 7c:a1:ce:71:6b:1b:7c:26:5e:a7:e7:59:a5:7c:5d: 63:be:2f:88:30:45:09:f7:e1:68:0d:47:b7:db:d3: 2d:a4:02:f8:03:82:c6:84:7a:10:08:c3:4b:8f:03: 3b:18:18:db:70:ea:9e:18:3b:92:aa:1d:59:8f:3a: 63:14:17:40:9c:e1:7a:b7:9f:b0:2b:73:9e:f5:14: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:41:59:3E:FB:45:80:B6:32:64:34:AC:91:E7:A3:B8:97:E1:BC:F7 X509v3 Authority Key Identifier: keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4b:24:01:7e:16:d6:5d:89:e4:80:4c:af:68:4a:6d:09:c1: fe:ba:f9:f0:b6:b7:15:cf:c2:9c:fc:51:7d:f5:a1:e2:1a:4d: 3a:14:50:6a:44:94:36:fd:f1:9d:9a:c3:50:17:ac:86:8f:a1: 74:68:6a:dc:dd:fe:cb:0f:5f:7e:ed:88:ed:41:2b:b7:b9:aa: f8:37:3d:2a:72:8f:f2:3f:cc:37:7c:43:de:43:7e:cd:e1:46: 9c:69:95:81:e4:b3:66:61:67:40:5c:a1:2b:03:0e:b2:02:b7: f3:b4:1b:53:6b:0b:89:4b:8a:04:d9:37:d5:bd:86:7a:d3:27: 9c:b2:7b:e4:49:ed:b0:65:db:48:c3:64:71:fd:7f:8b:b6:42: c4:c3:02:fb:8d:85:8b:53:58:3a:65:81:f6:ce:ab:c7:87:9b: 6a:12:a0:19:96:31:ac:7d:69:e3:45:ed:47:67:10:7d:c7:b4: 2b:7c:ff:fa:5c:48:57:93:c6:08:76:f5:35:3b:15:17:c7:40: 79:f0:e8:3e:19:75:9b:08:6a:b3:ca:d7:f4:5e:36:b7:fc:84: 1e:c8:97:58:57:1d:98:2b:a4:a6:b1:6d:e8:ed:85:89:6f:a7: 03:1d:88:87:25:af:0e:f4:bb:8a:bc:49:ce:b3:9f:53:22:03: 82:8c:33:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbEfsZdIpCO+7bJlsgT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGM5ZDU1NDJhNWFhOGNkNWUwMTk4YWI4M2ZjZTBmOTQ3 MmE0NjEwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD Eyg2MDQxNTkzZWZiNDU4MGI2MzI2NDM0YWM5MWU3YTNiODk3ZTFiY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtApBULQgc7x7y6DDAJD/X9ogwGDJ 5mnIoB1379deJniZl/3scxVhecUzt0yLngOdFKjdg+XkXNEwICkd28VxnbxdO7R+ h3OHPubx54iqm/rtkfPCjXs9Cz6YJbyVDzmyQlJ4CLszMxX1VbRuGATHvGfpGobt 24QAq3QiKBM2OLFdiSPk0uLmsjeIegJKfFAFIt9MBRnuDWOTcZeVGON5bJySf35P lJBN+7xYEwlFoxeob398oc5xaxt8Jl6n51mlfF1jvi+IMEUJ9+FoDUe329MtpAL4 A4LGhHoQCMNLjwM7GBjbcOqeGDuSqh1ZjzpjFBdAnOF6t5+wK3Oe9RRaVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBBWT77RYC2MmQ0rJHno7iX4bz3MB8GA1UdIwQY MBaAFAAMnVVCpaqM1eAZirg/zg+UcqRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEt ZGRjYzI1ODgxMTI4LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEtZGRjYzI1ODgxMTI4 LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEskAX4W 1l2J5IBMr2hKbQnB/rr58La3Fc/CnPxRffWh4hpNOhRQakSUNv3xnZrDUBesho+h dGhq3N3+yw9ffu2I7UErt7mq+Dc9KnKP8j/MN3xD3kN+zeFGnGmVgeSzZmFnQFyh KwMOsgK387QbU2sLiUuKBNk31b2GetMnnLJ75EntsGXbSMNkcf1/i7ZCxMMC+42F i1NYOmWB9s6rx4ebahKgGZYxrH1p40XtR2cQfce0K3z/+lxIV5PGCHb1NTsVF8dA efDoPhl1mwhqs8rX9F42t/yEHsiXWFcdmCukprFt6O2FiW+nAx2IhyWvDvS7irxJ zrOfUyIDgowzeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:34 2025 by rpki-client