This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json) Hash identifier: XAxTUpST07ry/kQVM9+gwXp3xs2DrPM/7qzftRljrZk= Subject key identifier: 28:13:98:F1:67:AB:AD:3D:05:32:F2:E0:22:56:12:C0:25:67:34:2C Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86 Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886 Certificate serial: 019B451368F3ABAFBEE4D6C5718158997261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 08:00:58 +0000 Manifest this update: Mon 22 Dec 2025 08:00:58 +0000 Manifest next update: Tue 23 Dec 2025 08:00:58 +0000 Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: LyXVl9JIPY39kYd2IKDEnlLtJjG3M3vyGVF/N+qUkZY=) 2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:68:f3:ab:af:be:e4:d6:c5:71:81:58:99:72:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886 Validity Not Before: Dec 22 08:00:58 2025 GMT Not After : Dec 23 08:00:58 2025 GMT Subject: CN=281398f167abad3d0532f2e0225612c02567342c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:52:d2:0f:1f:1e:84:1b:23:a7:a1:57:fd: ee:42:ed:09:46:cc:22:4f:64:cd:0f:c0:93:f0:55: c6:3f:7d:e9:7c:2b:ca:16:96:63:b3:93:6f:a9:a1: 9f:26:a9:c9:89:83:d5:d1:bf:87:ef:24:2c:3e:92: 0c:33:6c:2e:93:e8:08:71:74:0c:d6:17:23:75:d8: 39:ac:a1:0e:79:a1:9b:ca:0d:c8:13:f0:b8:ce:76: 63:a5:35:ff:ff:5f:80:96:6d:25:ec:0e:6b:e4:eb: 11:97:fd:20:ac:a3:f9:8b:a6:17:6b:ec:de:7c:04: 49:8d:32:16:86:55:42:8c:34:f2:06:96:b9:0d:ba: 18:84:6e:23:c4:a4:d2:88:26:23:da:4d:6f:d3:f1: 9e:4f:99:6d:b4:2e:b8:78:18:c7:08:9e:6c:4d:9f: 0f:37:ef:3c:a7:3f:59:cb:97:10:c2:1e:f1:17:6c: af:fb:ee:44:a3:95:0c:61:6d:29:4b:c8:10:e7:18: 84:fe:2f:20:75:92:ff:c0:69:29:46:b6:3f:81:00: 81:a1:ce:73:ef:3f:29:d7:d2:41:ce:b1:c9:2a:45: 95:4f:59:26:23:0f:9a:2d:d9:73:e3:41:d1:cd:27: ea:02:3e:cf:2a:1d:d0:2f:a0:9d:78:30:ca:6d:94: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:13:98:F1:67:AB:AD:3D:05:32:F2:E0:22:56:12:C0:25:67:34:2C X509v3 Authority Key Identifier: keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:42:b5:44:32:93:c5:1e:ed:fa:9b:d0:6d:65:bf:40:a9:c2: 2d:5d:6b:f6:f6:c0:f2:d4:1d:f2:56:37:53:ac:1b:30:5f:fb: 76:54:19:64:14:98:92:c1:6f:9b:13:d7:21:54:ed:0a:09:6f: 3a:ad:23:c3:0d:7b:ac:10:40:31:2b:64:76:66:02:f7:6b:e9: 4d:1a:86:76:ef:43:04:f9:10:75:4d:c4:f1:73:59:a2:0e:aa: e3:8e:40:e2:bd:d8:63:f6:82:6e:d1:47:44:ae:c8:20:21:77: 93:f3:c9:36:ba:be:57:3f:f1:68:30:8a:7d:a9:ba:6e:3e:53: ff:38:d5:49:be:ea:97:1f:1f:64:5e:5d:cf:89:fd:91:42:77: d3:4a:30:da:d6:f0:a1:c8:0f:83:1d:e9:0b:d0:a6:dd:01:fa: a6:0f:4c:b8:21:63:e8:e9:ce:39:0a:e8:83:1a:01:59:97:ce: 01:63:89:ee:7e:ec:29:37:2e:ef:a4:b5:25:a2:1f:30:7e:96: 0b:42:d0:a3:91:e3:26:32:22:b3:1d:3a:a2:e5:f8:aa:09:bd: 5e:3b:07:2a:0b:1c:9a:4a:7a:73:f5:82:f3:a4:de:7e:76:a3: 4e:ed:6c:62:7e:bd:a9:42:8c:b6:9c:e4:29:fe:69:e6:fb:12: f9:23:ad:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE2jzq6++5NbFcYFYmXJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjFiZmVhMDMwNWM0OGU5NDllNmMyNDlmNDgxMGI0Njkw NWM4ODYwHhcNMjUxMjIyMDgwMDU4WhcNMjUxMjIzMDgwMDU4WjAzMTEwLwYDVQQD EygyODEzOThmMTY3YWJhZDNkMDUzMmYyZTAyMjU2MTJjMDI1NjczNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiZS0g8fHoQbI6ehV/3uQu0JRswi T2TND8CT8FXGP33pfCvKFpZjs5NvqaGfJqnJiYPV0b+H7yQsPpIMM2wuk+gIcXQM 1hcjddg5rKEOeaGbyg3IE/C4znZjpTX//1+Alm0l7A5r5OsRl/0grKP5i6YXa+ze fARJjTIWhlVCjDTyBpa5DboYhG4jxKTSiCYj2k1v0/GeT5lttC64eBjHCJ5sTZ8P N+88pz9Zy5cQwh7xF2yv++5Eo5UMYW0pS8gQ5xiE/i8gdZL/wGkpRrY/gQCBoc5z 7z8p19JBzrHJKkWVT1kmIw+aLdlz40HRzSfqAj7PKh3QL6CdeDDKbZTwgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgTmPFnq609BTLy4CJWEsAlZzQsMB8GA1UdIwQY MBaAFAMhv+oDBcSOlJ5sJJ9IELRpBciGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMt NTYwYzllN2MwNzQ3LzEvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMtNTYwYzllN2MwNzQ3 LzEvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEK1RDKT xR7t+pvQbWW/QKnCLV1r9vbA8tQd8lY3U6wbMF/7dlQZZBSYksFvmxPXIVTtCglv Oq0jww17rBBAMStkdmYC92vpTRqGdu9DBPkQdU3E8XNZog6q445A4r3YY/aCbtFH RK7IICF3k/PJNrq+Vz/xaDCKfam6bj5T/zjVSb7qlx8fZF5dz4n9kUJ300ow2tbw ocgPgx3pC9Cm3QH6pg9MuCFj6OnOOQrogxoBWZfOAWOJ7n7sKTcu76S1JaIfMH6W C0LQo5HjJjIisx06ouX4qgm9XjsHKgscmkp6c/WC86TefnajTu1sYn69qUKMtpzk Kf5p5vsS+SOtfw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:11:46 2025 by rpki-client