This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft File: AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json) Hash identifier: wmDqJMgrF5ZOuQ5dKx2vy6RxKyAf4X+FfnATvXDsoR0= Subject key identifier: B1:2E:27:88:47:3E:5C:21:E5:BB:63:6C:83:51:8D:15:A2:7F:72:F3 Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22 Certificate issuer: /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222 Certificate serial: 019B6CC6E2B424EAAF1EBE880294973DEBCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft Manifest number: 09F0 Signing time: Tue 30 Dec 2025 01:02:11 +0000 Manifest this update: Tue 30 Dec 2025 01:02:11 +0000 Manifest next update: Wed 31 Dec 2025 01:02:11 +0000 Files and hashes: 1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=) 2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: cx82YhR7d5EjMbFcivytqbAOVPeGF6cTvWwScCXXcYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:e2:b4:24:ea:af:1e:be:88:02:94:97:3d:eb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222 Validity Not Before: Dec 30 01:02:11 2025 GMT Not After : Dec 31 01:02:11 2025 GMT Subject: CN=b12e2788473e5c21e5bb636c83518d15a27f72f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:c8:a5:5c:6d:6b:5f:3d:6e:5d:32:a0:53: 34:e5:4e:81:e4:ab:d0:b4:dc:3b:3a:6b:61:01:91: e9:5e:f2:cd:b9:4a:2d:3d:71:e4:8d:74:6d:b8:f1: c4:f9:d0:42:56:76:0e:cc:bd:20:1f:49:2f:f4:85: e2:d7:d9:4f:f2:b6:e6:aa:f7:8b:d3:9b:43:4e:3d: 0a:91:de:cb:8c:78:c0:03:fb:ea:9c:c2:e8:1f:11: 4d:ee:64:cd:c3:c4:d0:39:c9:c2:4e:0d:5a:ac:3c: 45:fa:08:d3:53:d3:51:65:65:5f:7d:c7:0f:c1:5e: 12:ea:9e:89:d7:18:d0:0d:ca:af:33:e1:15:66:e9: 8f:32:b5:39:d6:da:cc:f6:23:ce:59:62:02:3d:96: 5a:a8:a7:0e:75:04:f3:c9:b6:cb:df:a9:b4:87:81: c4:9a:ad:87:da:27:06:6f:09:58:d9:a8:5a:d9:ad: 59:34:43:60:b7:d6:d1:33:3a:44:5e:4c:5f:76:e2: d5:18:75:6b:68:8f:f7:73:1e:44:54:f8:22:f1:5e: d4:b1:cd:3b:f2:f7:c4:9a:a4:44:d9:41:2c:74:17: 5b:0b:ca:46:b2:5e:fd:73:fe:3c:72:89:6d:18:c1: ea:25:54:89:e1:c2:75:5c:62:45:69:c0:20:38:d9: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2E:27:88:47:3E:5C:21:E5:BB:63:6C:83:51:8D:15:A2:7F:72:F3 X509v3 Authority Key Identifier: keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a2:6b:02:51:d9:d7:82:20:50:54:4b:c3:e9:c7:77:67:11: 6b:b8:0b:ad:7c:e9:fe:20:b9:61:f6:92:ed:1c:13:07:6c:91: 2e:b0:0c:0d:b4:ab:01:bd:eb:0e:54:68:4d:f9:7b:0c:bd:3b: bb:9b:a3:4c:a8:72:1f:8e:04:9d:d9:c0:f2:63:b8:d5:f6:a7: 85:7b:75:25:a2:5c:6f:f0:e2:86:1c:e2:46:fa:57:6b:26:e9: 68:db:ef:50:2c:6a:dc:7e:90:3c:fe:11:e6:9d:ff:5a:92:96: 0d:0a:b8:40:a6:e3:7f:f5:b9:c5:dd:4e:f4:db:63:e7:59:68: e4:c4:50:cc:bf:83:af:67:4c:88:1a:ea:93:ff:64:e7:75:5c: 2e:8a:92:35:55:68:ca:7b:2d:a0:0f:0f:8c:b1:00:69:9d:38: 42:bf:33:5d:86:b3:04:60:e4:dd:12:e9:a2:ab:55:3c:48:53: ea:0e:99:89:28:01:79:32:cc:1e:08:26:d3:58:d6:8a:0f:48: 7a:5b:63:96:7e:02:ad:83:b8:a6:9a:cf:85:c2:80:5a:90:21: a5:66:51:ed:f9:20:cd:77:7c:00:af:7c:28:5c:63:4c:06:3a: a9:2d:19:70:3b:06:8f:f5:83:a5:46:44:84:30:e8:89:f3:9e: 3b:68:6a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxuK0JOqvHr6IApSXPevMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZjU2MjYyYzllOGM3ZDEzNDRkZjJiMGY4YzI1ZGExM2Fi ZDYyMjIwHhcNMjUxMjMwMDEwMjExWhcNMjUxMjMxMDEwMjExWjAzMTEwLwYDVQQD EyhiMTJlMjc4ODQ3M2U1YzIxZTViYjYzNmM4MzUxOGQxNWEyN2Y3MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbLIpVxta189bl0yoFM05U6B5KvQ tNw7OmthAZHpXvLNuUotPXHkjXRtuPHE+dBCVnYOzL0gH0kv9IXi19lP8rbmqveL 05tDTj0Kkd7LjHjAA/vqnMLoHxFN7mTNw8TQOcnCTg1arDxF+gjTU9NRZWVffccP wV4S6p6J1xjQDcqvM+EVZumPMrU51trM9iPOWWICPZZaqKcOdQTzybbL36m0h4HE mq2H2icGbwlY2aha2a1ZNENgt9bRMzpEXkxfduLVGHVraI/3cx5EVPgi8V7Usc07 8vfEmqRE2UEsdBdbC8pGsl79c/48coltGMHqJVSJ4cJ1XGJFacAgONkExwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEuJ4hHPlwh5btjbINRjRWif3LzMB8GA1UdIwQY MBaAFAL1YmLJ6MfRNE3ysPjCXaE6vWIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDIt ZDRiYzc3MmE5MmJkLzEvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDItZDRiYzc3MmE5MmJk LzEvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKJrAlHZ 14IgUFRLw+nHd2cRa7gLrXzp/iC5YfaS7RwTB2yRLrAMDbSrAb3rDlRoTfl7DL07 u5ujTKhyH44EndnA8mO41fanhXt1JaJcb/DihhziRvpXaybpaNvvUCxq3H6QPP4R 5p3/WpKWDQq4QKbjf/W5xd1O9Ntj51lo5MRQzL+Dr2dMiBrqk/9k53VcLoqSNVVo ynstoA8PjLEAaZ04Qr8zXYazBGDk3RLpoqtVPEhT6g6ZiSgBeTLMHggm01jWig9I eltjln4CrYO4pprPhcKAWpAhpWZR7fkgzXd8AK98KFxjTAY6qS0ZcDsGj/WDpUZE hDDoifOeO2hqKw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:55 2025 by rpki-client