This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json) Hash identifier: M+hv3U8SQDhbH7q7MZhxOGe8d+WJBR97eaquYv6wyTw= Subject key identifier: 65:5F:96:87:A0:8C:D7:58:0E:B9:08:E0:EE:04:D1:D1:48:46:39:90 Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b Certificate serial: 019B3D59AE19098FB1D6D0E06DD8EC91F677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft Manifest number: 0EA5 Signing time: Sat 20 Dec 2025 20:00:45 +0000 Manifest this update: Sat 20 Dec 2025 20:00:45 +0000 Manifest next update: Sun 21 Dec 2025 20:00:45 +0000 Files and hashes: 1: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: I/J9D3xq+NPUU0IB+3iHOmPut5E0MUJ/qAdoSyqFnJI=) 2: y0l08LmHC8QSfP0tR34hSAaY9y8.roa (hash: di/b00/E3HvqNjQok6vnEiSRxkUs3SsPM1HST0/CUYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ae:19:09:8f:b1:d6:d0:e0:6d:d8:ec:91:f6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b Validity Not Before: Dec 20 20:00:45 2025 GMT Not After : Dec 21 20:00:45 2025 GMT Subject: CN=655f9687a08cd7580eb908e0ee04d1d148463990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:94:aa:88:9f:e5:b1:51:f7:16:5f:6a:3e:2a: d6:fc:47:c7:e1:21:77:f4:f9:bc:fc:1d:01:b7:6c: 1a:52:3a:50:34:63:ea:79:0d:87:e3:a3:37:e7:61: 8c:9a:d3:48:10:fa:70:63:ca:e6:cb:9c:8b:ce:41: 1e:a2:2e:6a:7b:da:69:44:4b:f2:9c:69:51:d8:2a: e3:5b:a9:e2:70:14:a0:30:34:34:0c:bd:cb:11:bb: a0:95:92:d4:18:81:6f:25:93:32:73:a5:6f:05:9e: 74:d3:36:d8:1c:3f:b9:f1:10:5e:2f:6b:ad:f9:17: b7:be:d1:06:ea:5b:c8:ec:1c:21:70:1d:06:74:c7: 00:ee:56:37:12:ed:49:59:2b:66:77:29:8d:e6:cd: fc:73:65:fb:c2:16:a1:8b:14:84:aa:d1:7f:f4:2f: d5:b9:4f:fc:60:e9:ed:a4:52:5a:23:7b:04:ad:45: 8c:df:10:34:86:35:4b:53:2c:33:3f:8f:c1:5a:d4: 0d:e7:0b:e7:d1:54:69:e3:78:3a:73:df:5b:2f:32: 40:2c:c2:69:a7:eb:55:7d:27:a7:5e:a1:6d:37:b9: 79:09:b9:4e:28:c9:1d:71:cb:e5:f7:ec:d1:8e:8e: e3:e0:e8:1f:c8:11:f3:7b:fd:9f:1b:ad:f0:d1:80: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:96:87:A0:8C:D7:58:0E:B9:08:E0:EE:04:D1:D1:48:46:39:90 X509v3 Authority Key Identifier: keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d4:7d:a6:ce:bc:82:e3:51:6f:c9:4a:3e:61:35:05:95:b8: 3d:d5:42:68:d3:fa:84:85:fa:08:93:e3:ae:3f:cd:0a:61:a1: 8f:92:c5:6d:0d:56:d7:da:66:8b:e9:d4:6a:31:52:a3:e6:8e: b2:8e:ba:92:61:a2:2c:6e:10:d8:83:ca:39:e5:7b:09:c5:19: 2d:c2:95:55:ad:9f:0d:43:74:f0:73:37:ff:3f:c6:ae:8e:36: d6:e0:bb:a0:24:65:09:ec:86:89:42:37:a8:10:a1:29:f1:d9: cc:13:51:05:91:a5:ce:f1:8a:0f:32:44:72:64:17:68:d2:06: a8:da:d5:2c:74:22:39:d5:66:f8:df:fd:01:b9:ce:2d:31:a1: 62:5a:c1:fe:c2:fe:72:3c:d3:6e:a2:24:81:5c:8c:cf:6b:bb: 0c:aa:8e:0f:59:9e:b8:d6:c1:60:57:c2:bc:5a:df:12:04:b0: 15:b7:ac:1c:48:f2:bb:3d:38:c2:87:26:8e:55:d4:a1:c0:b2: 1d:9b:e8:a4:8a:3e:b7:75:ad:a0:15:ea:ce:a1:d1:61:5b:44: a1:c5:f6:73:2d:a4:75:a1:cd:59:ce:a5:52:cd:bb:ee:d4:64: bd:56:28:59:42:ae:8a:0e:da:73:f3:95:c7:f3:41:75:4b:dc: 47:df:9e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wa4ZCY+x1tDgbdjskfZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWM1MzdkMjY1NmRiNGRkMGMzYzMyZmU5ODFiM2M3NzE0 NDNlNWIwHhcNMjUxMjIwMjAwMDQ1WhcNMjUxMjIxMjAwMDQ1WjAzMTEwLwYDVQQD Eyg2NTVmOTY4N2EwOGNkNzU4MGViOTA4ZTBlZTA0ZDFkMTQ4NDYzOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJSqiJ/lsVH3Fl9qPirW/EfH4SF3 9Pm8/B0Bt2waUjpQNGPqeQ2H46M352GMmtNIEPpwY8rmy5yLzkEeoi5qe9ppREvy nGlR2CrjW6nicBSgMDQ0DL3LEbuglZLUGIFvJZMyc6VvBZ500zbYHD+58RBeL2ut +Re3vtEG6lvI7BwhcB0GdMcA7lY3Eu1JWStmdymN5s38c2X7whahixSEqtF/9C/V uU/8YOntpFJaI3sErUWM3xA0hjVLUywzP4/BWtQN5wvn0VRp43g6c99bLzJALMJp p+tVfSenXqFtN7l5CblOKMkdccvl9+zRjo7j4OgfyBHze/2fG63w0YByOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVfloegjNdYDrkI4O4E0dFIRjmQMB8GA1UdIwQY MBaAFGlcU30mVttN0MPDL+mBs8dxRD5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYt YThiZWI1NjU3ZDc2LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYtYThiZWI1NjU3ZDc2 LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdR9ps68 guNRb8lKPmE1BZW4PdVCaNP6hIX6CJPjrj/NCmGhj5LFbQ1W19pmi+nUajFSo+aO so66kmGiLG4Q2IPKOeV7CcUZLcKVVa2fDUN08HM3/z/Gro421uC7oCRlCeyGiUI3 qBChKfHZzBNRBZGlzvGKDzJEcmQXaNIGqNrVLHQiOdVm+N/9AbnOLTGhYlrB/sL+ cjzTbqIkgVyMz2u7DKqOD1meuNbBYFfCvFrfEgSwFbesHEjyuz04wocmjlXUocCy HZvopIo+t3WtoBXqzqHRYVtEocX2cy2kdaHNWc6lUs277tRkvVYoWUKuig7ac/OV x/NBdUvcR9+eDA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:14:38 2025 by rpki-client