This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json) Hash identifier: d8NjAfnk/X5fm1fFKmJMeOsvuYO4dcTS7gwoXjJ7tbI= Subject key identifier: A8:D1:00:C7:72:16:21:B8:8B:98:D9:4C:5C:90:A8:E7:A2:13:41:AB Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Certificate serial: 019AF3BFF06849D9BA4A3B39C51F8F92592C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft Manifest number: 04 Signing time: Sat 06 Dec 2025 13:00:33 +0000 Manifest this update: Sat 06 Dec 2025 13:00:33 +0000 Manifest next update: Sun 07 Dec 2025 13:00:33 +0000 Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: CMcou1nezt0/+HActrTGzDE/4sPL3hm0r6VDbc1RfZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:f0:68:49:d9:ba:4a:3b:39:c5:1f:8f:92:59:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Validity Not Before: Dec 6 13:00:33 2025 GMT Not After : Dec 7 13:00:33 2025 GMT Subject: CN=a8d100c7721621b88b98d94c5c90a8e7a21341ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:54:bc:07:60:22:d9:f0:00:8f:b8:56:e5: 0d:9d:66:f1:34:df:24:35:14:9f:05:6b:ee:c3:8a: 58:de:00:ad:90:95:24:92:2e:59:7d:ab:a4:5f:a2: 69:a3:61:63:7c:bf:e3:c8:46:f9:7f:52:b8:6b:26: 81:f8:ea:27:0e:68:42:69:d5:13:7c:95:8d:38:38: aa:61:ef:cf:45:2a:9a:10:f5:7d:20:d4:36:bb:6a: c7:a4:83:f7:99:c5:47:2e:06:71:e5:f4:49:98:ea: f2:fd:76:44:42:3a:c3:4d:a4:75:7f:97:b2:58:b5: 51:54:70:27:a2:9d:d6:c8:4d:2f:c1:a0:75:eb:e2: a6:25:ff:c0:30:79:fe:83:f7:2d:40:4c:37:7d:2d: 50:23:8c:2f:7c:a7:fd:75:c8:47:d7:92:24:55:d8: 62:a8:fa:a4:70:f7:1a:82:cb:db:25:38:8a:ed:4b: 6a:be:eb:6c:2e:07:6a:6e:6e:87:0d:e2:b1:bb:ba: 3e:d4:6a:a5:4d:f9:e9:a7:8a:34:9a:34:9e:b6:ce: 03:45:b3:8c:ee:4a:4e:83:ec:4a:e4:e5:8f:26:2a: 2f:7c:10:a1:03:be:85:32:5c:fd:1f:9d:90:25:bf: 0d:31:ea:c2:4b:ea:75:db:eb:43:c5:9d:4a:ea:43: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:00:C7:72:16:21:B8:8B:98:D9:4C:5C:90:A8:E7:A2:13:41:AB X509v3 Authority Key Identifier: keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:42:ec:b6:54:1e:42:f1:63:a0:d5:96:d1:c9:6a:bf:03:57: bb:ad:63:eb:d2:43:e5:5b:ad:86:4d:9c:ba:84:50:4a:36:d6: 9d:03:41:d8:53:bf:b2:25:b2:80:6a:c5:82:c8:ef:c9:13:dd: 8a:9a:a6:f8:a2:78:89:0c:42:d3:af:54:d4:5c:b4:cb:47:d7: a8:2c:1d:27:ee:f5:f0:4d:3d:8c:d8:4e:a2:bf:8f:14:9d:58: f6:78:bc:cc:f0:68:51:c1:42:48:38:d7:d6:f6:f5:cb:23:c1: 8b:99:41:5b:80:57:95:7f:aa:91:2a:8b:b7:ca:26:88:69:0e: ed:9c:d5:d7:65:75:7b:3d:fe:d3:8a:36:ae:f2:51:9c:c9:b7: d7:4d:f4:f4:df:a7:c9:d6:99:54:77:9a:9d:96:0c:b6:cf:fd: 98:94:96:8b:d3:a6:48:4c:9e:06:de:c7:07:6a:03:0c:22:38: fe:a9:97:b2:02:6a:e3:a2:b3:9f:77:d6:d4:9a:92:03:ac:88: 2c:40:70:11:33:50:15:ee:5c:b9:16:bd:10:4f:40:79:b6:b3: fc:b6:6f:6d:a6:04:da:e9:e2:7d:b8:27:6c:dc:86:a8:f0:d2: d8:20:8c:97:93:3f:b4:02:66:b4:95:5d:bf:34:13:a3:31:74: f5:60:24:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/BoSdm6Sjs5xR+PklksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw NjQ5YTAwHhcNMjUxMjA2MTMwMDMzWhcNMjUxMjA3MTMwMDMzWjAzMTEwLwYDVQQD EyhhOGQxMDBjNzcyMTYyMWI4OGI5OGQ5NGM1YzkwYThlN2EyMTM0MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyZUvAdgItnwAI+4VuUNnWbxNN8k NRSfBWvuw4pY3gCtkJUkki5ZfaukX6Jpo2FjfL/jyEb5f1K4ayaB+OonDmhCadUT fJWNODiqYe/PRSqaEPV9INQ2u2rHpIP3mcVHLgZx5fRJmOry/XZEQjrDTaR1f5ey WLVRVHAnop3WyE0vwaB16+KmJf/AMHn+g/ctQEw3fS1QI4wvfKf9dchH15IkVdhi qPqkcPcagsvbJTiK7UtqvutsLgdqbm6HDeKxu7o+1GqlTfnpp4o0mjSets4DRbOM 7kpOg+xK5OWPJiovfBChA76FMlz9H52QJb8NMerCS+p12+tDxZ1K6kOidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjRAMdyFiG4i5jZTFyQqOeiE0GrMB8GA1UdIwQY MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt Y2E0MWM3MmNhZjk2LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2 LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoELstlQe QvFjoNWW0clqvwNXu61j69JD5Vuthk2cuoRQSjbWnQNB2FO/siWygGrFgsjvyRPd ipqm+KJ4iQxC069U1Fy0y0fXqCwdJ+718E09jNhOor+PFJ1Y9ni8zPBoUcFCSDjX 1vb1yyPBi5lBW4BXlX+qkSqLt8omiGkO7ZzV12V1ez3+04o2rvJRnMm310309N+n ydaZVHeanZYMts/9mJSWi9OmSEyeBt7HB2oDDCI4/qmXsgJq46Kzn3fW1JqSA6yI LEBwETNQFe5cuRa9EE9Aebaz/LZvbaYE2unifbgnbNyGqPDS2CCMl5M/tAJmtJVd vzQTozF09WAkOg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:36 2025 by rpki-client