This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft File: AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json) Hash identifier: JxYaxpGH2spLmivdSVgN23DPjl7ptPQGLD0UG2p0Nis= Subject key identifier: 29:D7:93:17:11:AB:EF:BE:F1:6D:07:17:E7:84:C0:1C:17:80:B7:F8 Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52 Certificate issuer: /CN=01423ad4d629b2f828b79f00ac40388e37b8e252 Certificate serial: 019B454A8840A302FC3B17E4BBA27B5CA6BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft Manifest number: 13C1 Signing time: Mon 22 Dec 2025 09:01:10 +0000 Manifest this update: Mon 22 Dec 2025 09:01:10 +0000 Manifest next update: Tue 23 Dec 2025 09:01:10 +0000 Files and hashes: 1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: /BBt0Bpn6gsxEzi2XxII+G4DQVJoZLWZqqzJuI4eopw=) 2: ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa (hash: ul6C7Hw2mOMrIR7JJ3pVvWUBrEsSVBHfGtaoivQYtXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:88:40:a3:02:fc:3b:17:e4:bb:a2:7b:5c:a6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252 Validity Not Before: Dec 22 09:01:10 2025 GMT Not After : Dec 23 09:01:10 2025 GMT Subject: CN=29d7931711abefbef16d0717e784c01c1780b7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:49:94:37:64:0b:47:c3:37:68:7b:34:57:1c: 16:c7:22:24:de:e4:de:db:5b:b4:8a:c6:75:b2:b4: d5:99:7e:2b:cd:24:dc:94:b0:4d:48:dc:03:a6:cc: 00:0f:90:03:36:8c:ea:9b:0a:e5:6a:9a:7a:5b:c5: 28:f2:02:56:be:ad:23:6e:99:87:ce:01:0a:2f:02: ab:36:8d:e5:76:8c:fa:9e:44:38:e9:43:b2:8a:35: 0f:33:dd:d4:cf:10:ce:fe:ad:6a:77:bf:07:ea:37: 82:75:0d:7c:c5:c8:4b:23:ed:c5:d5:34:a5:64:eb: ca:c4:8b:d0:41:7f:d7:28:8f:d6:66:81:57:86:07: 8a:f2:eb:84:ab:97:5b:51:5a:71:bd:53:06:89:e9: eb:0b:cd:db:c8:2b:af:20:a5:76:6c:c0:a7:b1:f5: 0d:04:84:c4:76:3f:7f:18:11:fc:00:91:99:fe:9a: d4:39:f4:ad:32:52:c2:16:46:01:61:6b:9a:b4:2e: d4:c5:65:fe:30:3a:27:71:91:42:ae:e1:85:2c:f0: b6:8d:6d:c5:e3:6a:e1:fd:58:ab:61:57:3f:12:34: b4:48:98:98:56:72:89:ec:e1:6f:a3:fe:90:3c:28: bb:ce:34:f8:2e:bd:80:85:65:2c:65:5a:d9:d4:d6: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:93:17:11:AB:EF:BE:F1:6D:07:17:E7:84:C0:1C:17:80:B7:F8 X509v3 Authority Key Identifier: keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:c1:13:81:7d:4b:45:91:ed:8b:49:a3:2d:8a:ba:70:6c: db:91:06:75:c7:94:1e:21:0d:f3:11:6d:6b:6d:5b:91:9f:83: 53:c4:16:40:c8:6b:a1:b5:04:d1:44:e3:7e:4d:f2:57:21:ea: 9d:29:53:2b:90:c8:d1:54:ef:8c:7b:8f:84:e6:01:4a:e7:63: e5:8e:ea:5d:fd:f4:4f:1e:24:43:c6:9f:e0:1f:5b:74:1f:a9: 22:77:a7:b5:26:ff:49:fd:f5:5a:c5:1f:80:74:3d:b6:30:6e: aa:99:c4:e2:99:c5:25:94:1e:6e:28:78:a2:c5:c1:3a:9f:e3: 4c:a4:e3:ec:39:60:8f:17:3c:2e:f3:4f:71:79:76:32:e6:37: 6f:dd:f2:00:e6:12:20:86:d9:93:eb:f3:b4:45:89:af:43:c9: 4a:bd:9d:fa:ce:bb:56:3b:c9:6e:b7:ee:5d:6c:44:a6:a8:25: 23:b1:80:17:ea:88:83:19:84:c3:ef:3f:d0:8c:1f:a3:c4:6a: 8b:fe:93:2e:c2:3d:ef:96:58:61:4e:53:be:c3:16:92:0f:89: b9:a7:46:6e:20:6d:c1:43:ee:78:3a:62:03:9f:26:73:0b:c6: 5c:a6:4f:9c:50:4c:87:3b:90:b9:28:8f:14:94:d0:3b:7f:26: c5:d4:4a:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSohAowL8Oxfku6J7XKa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDIzYWQ0ZDYyOWIyZjgyOGI3OWYwMGFjNDAzODhlMzdi OGUyNTIwHhcNMjUxMjIyMDkwMTEwWhcNMjUxMjIzMDkwMTEwWjAzMTEwLwYDVQQD EygyOWQ3OTMxNzExYWJlZmJlZjE2ZDA3MTdlNzg0YzAxYzE3ODBiN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EmUN2QLR8M3aHs0VxwWxyIk3uTe 21u0isZ1srTVmX4rzSTclLBNSNwDpswAD5ADNozqmwrlapp6W8Uo8gJWvq0jbpmH zgEKLwKrNo3ldoz6nkQ46UOyijUPM93UzxDO/q1qd78H6jeCdQ18xchLI+3F1TSl ZOvKxIvQQX/XKI/WZoFXhgeK8uuEq5dbUVpxvVMGienrC83byCuvIKV2bMCnsfUN BITEdj9/GBH8AJGZ/prUOfStMlLCFkYBYWuatC7UxWX+MDoncZFCruGFLPC2jW3F 42rh/VirYVc/EjS0SJiYVnKJ7OFvo/6QPCi7zjT4Lr2AhWUsZVrZ1NYASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnXkxcRq+++8W0HF+eEwBwXgLf4MB8GA1UdIwQY MBaAFAFCOtTWKbL4KLefAKxAOI43uOJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVJNjFOWXBzdmdvdDU4QXJFQTRqamU0NGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzZkYmQtNTVlYi00ZGU0LWI2Yjkt ODM5MTk2MzQ1YjZkLzEvQVVJNjFOWXBzdmdvdDU4QXJFQTRqamU0NGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzZkYmQtNTVlYi00ZGU0LWI2YjktODM5MTk2MzQ1YjZk LzEvQVVJNjFOWXBzdmdvdDU4QXJFQTRqamU0NGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7rBE4F9 S0WR7YtJoy2KunBs25EGdceUHiEN8xFta21bkZ+DU8QWQMhrobUE0UTjfk3yVyHq nSlTK5DI0VTvjHuPhOYBSudj5Y7qXf30Tx4kQ8af4B9bdB+pInentSb/Sf31WsUf gHQ9tjBuqpnE4pnFJZQebih4osXBOp/jTKTj7Dlgjxc8LvNPcXl2MuY3b93yAOYS IIbZk+vztEWJr0PJSr2d+s67VjvJbrfuXWxEpqglI7GAF+qIgxmEw+8/0Iwfo8Rq i/6TLsI975ZYYU5TvsMWkg+JuadGbiBtwUPueDpiA58mcwvGXKZPnFBMhzuQuSiP FJTQO38mxdRK5g== -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:50 2025 by rpki-client