This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json) Hash identifier: XhnYI+aZ21UHXrOOd1ig+xsNidTRAQHmjlH+4GIgvtM= Subject key identifier: B5:18:44:87:0F:38:98:5E:CE:B6:B1:4E:2C:27:A6:44:39:4D:BE:63 Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b Certificate serial: 019B5D53DD4B71A0B70D121FB01CDB7AD395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft Manifest number: 131A Signing time: Sat 27 Dec 2025 01:02:15 +0000 Manifest this update: Sat 27 Dec 2025 01:02:15 +0000 Manifest next update: Sun 28 Dec 2025 01:02:15 +0000 Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=) 2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: X66PoAnV2c3g4zaTPojuiO+x/wr93L417s25o97WwGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:dd:4b:71:a0:b7:0d:12:1f:b0:1c:db:7a:d3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b Validity Not Before: Dec 27 01:02:15 2025 GMT Not After : Dec 28 01:02:15 2025 GMT Subject: CN=b51844870f38985eceb6b14e2c27a644394dbe63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:e6:b4:d1:fc:96:eb:af:39:38:c7:47:a3: ba:2f:ea:74:46:92:11:1d:8f:34:b1:d8:d1:4b:e7: 65:cc:b7:ef:52:71:6a:60:f0:13:c1:78:2f:66:ae: 29:88:99:1f:91:38:ff:00:76:0c:2b:b3:8e:9c:1b: 60:7e:e5:83:19:cd:f7:95:9d:a3:4e:a4:bc:6f:c5: 0c:1d:6b:09:a6:de:bf:11:d9:33:c9:ef:9e:16:9e: c9:6c:47:e5:5f:45:87:5c:3d:a8:fe:12:a7:3d:5a: c6:f2:c2:1f:f0:30:9f:0e:bf:cf:fb:fd:39:86:7d: 05:9f:74:ef:c0:d2:66:79:ae:83:8c:5b:a9:39:67: 98:79:1c:af:79:52:c5:a4:2e:84:15:47:77:e6:b6: e6:9a:8e:89:a0:c7:0e:49:e9:45:ba:33:65:98:31: 9e:bd:9a:2c:f2:db:39:89:85:de:52:fc:02:08:28: 59:b0:87:58:24:29:1a:96:cc:f6:9e:6b:4a:f6:2a: 08:9f:72:76:5e:7e:5b:fe:0f:ad:51:7e:8e:b2:31: 59:67:7f:56:7b:f1:55:cb:44:5c:69:f4:22:6b:97: 3d:53:22:93:6f:b7:c8:03:58:ba:e7:b8:e1:5c:32: 70:35:7f:53:e2:8d:21:ae:74:23:e3:9f:23:da:b2: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:18:44:87:0F:38:98:5E:CE:B6:B1:4E:2C:27:A6:44:39:4D:BE:63 X509v3 Authority Key Identifier: keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:34:db:ca:9d:4c:96:33:6e:37:e9:b3:ba:ba:8c:f3:64:15: 56:10:69:6b:2f:90:2e:3d:61:7b:f9:e2:03:e6:f3:fc:ba:51: b6:10:28:e4:dd:df:59:42:b7:6c:6d:25:4f:f4:a3:6b:b4:ee: d1:5f:3c:0c:e4:08:a4:50:57:a6:57:2d:0a:18:be:75:72:d6: f3:96:07:c2:0d:29:98:fd:fc:e9:df:e2:55:0b:63:4e:4f:a5: 9c:41:c1:b2:71:9d:c7:ba:5f:a7:80:d2:cf:0c:ca:96:dc:4f: 42:2c:64:f6:32:a9:8f:78:fe:f6:1f:83:11:d5:b9:30:82:00: 8b:60:bb:3e:fd:44:bf:6b:89:00:41:fb:90:51:6a:7f:47:7c: a8:50:f4:29:80:b8:c5:e7:c4:65:2f:92:ff:95:32:46:7a:fd: c4:2b:ee:c1:57:42:44:03:87:99:df:73:b9:dc:52:1c:f1:05: 57:96:b4:2f:1b:97:fa:58:12:c4:e2:e4:a2:ee:67:60:71:ba: 3b:cd:df:de:7e:7e:cd:cc:c4:49:04:6f:d4:60:b8:09:8c:36: 80:ce:59:56:9f:d0:28:a7:e1:5b:d3:6c:be:63:1d:f2:41:da: 4c:0c:08:55:2e:4c:50:fa:0c:86:11:19:bf:f8:46:50:a8:84: 8e:91:cb:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU91LcaC3DRIfsBzbetOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDQ4N2EwNGY1YWE0NDJiZTUxOWExN2NiMmJiMjJkNzgz ZGYyM2IwHhcNMjUxMjI3MDEwMjE1WhcNMjUxMjI4MDEwMjE1WjAzMTEwLwYDVQQD EyhiNTE4NDQ4NzBmMzg5ODVlY2ViNmIxNGUyYzI3YTY0NDM5NGRiZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHmtNH8luuvOTjHR6O6L+p0RpIR HY80sdjRS+dlzLfvUnFqYPATwXgvZq4piJkfkTj/AHYMK7OOnBtgfuWDGc33lZ2j TqS8b8UMHWsJpt6/Edkzye+eFp7JbEflX0WHXD2o/hKnPVrG8sIf8DCfDr/P+/05 hn0Fn3TvwNJmea6DjFupOWeYeRyveVLFpC6EFUd35rbmmo6JoMcOSelFujNlmDGe vZos8ts5iYXeUvwCCChZsIdYJCkalsz2nmtK9ioIn3J2Xn5b/g+tUX6OsjFZZ39W e/FVy0RcafQia5c9UyKTb7fIA1i657jhXDJwNX9T4o0hrnQj458j2rIx2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUYRIcPOJhezraxTiwnpkQ5Tb5jMB8GA1UdIwQY MBaAFPwEh6BPWqRCvlGaF8srsi14PfI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEt MWIzYTM2ZTFhY2E4LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEtMWIzYTM2ZTFhY2E4 LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjTbyp1M ljNuN+mzurqM82QVVhBpay+QLj1he/niA+bz/LpRthAo5N3fWUK3bG0lT/Sja7Tu 0V88DOQIpFBXplctChi+dXLW85YHwg0pmP386d/iVQtjTk+lnEHBsnGdx7pfp4DS zwzKltxPQixk9jKpj3j+9h+DEdW5MIIAi2C7Pv1Ev2uJAEH7kFFqf0d8qFD0KYC4 xefEZS+S/5UyRnr9xCvuwVdCRAOHmd9zudxSHPEFV5a0LxuX+lgSxOLkou5nYHG6 O83f3n5+zczESQRv1GC4CYw2gM5ZVp/QKKfhW9NsvmMd8kHaTAwIVS5MUPoMhhEZ v/hGUKiEjpHLxQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:28 2025 by rpki-client