This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json) Hash identifier: GkKXQ9hJqKppBKplwleGxtd6gM1i903uN7n08gyBfg4= Subject key identifier: A7:C2:06:E6:38:8A:39:F8:9E:C6:FC:FC:EB:DC:A1:74:3E:54:2F:E1 Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86 Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886 Certificate serial: 019B3F48A0B3BEE203FCB546C4936AED39AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 05:01:22 +0000 Manifest this update: Sun 21 Dec 2025 05:01:22 +0000 Manifest next update: Mon 22 Dec 2025 05:01:22 +0000 Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: EbOD64+u5dGGVOTIkJ4V09+TmcQk55/gqNW+TYOVie8=) 2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:a0:b3:be:e2:03:fc:b5:46:c4:93:6a:ed:39:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886 Validity Not Before: Dec 21 05:01:22 2025 GMT Not After : Dec 22 05:01:22 2025 GMT Subject: CN=a7c206e6388a39f89ec6fcfcebdca1743e542fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:36:35:da:94:9d:e4:df:49:2c:5a:39:27:f7: 32:65:aa:72:67:40:f3:14:95:02:63:52:5f:96:e3: da:ca:df:f9:4b:ae:a5:74:a6:2d:fa:d0:de:ca:e9: a5:be:34:af:0a:7b:47:9e:f7:b1:79:4b:5d:3f:f1: 1a:ef:54:8f:12:06:0b:a6:40:c6:ef:5c:57:b6:37: 1c:9a:f3:e8:a4:d9:aa:f0:ff:5c:88:cb:57:3b:24: 52:b2:f7:7f:7c:2f:1c:9c:b0:19:b5:a4:7e:a7:57: 7a:a0:cb:dd:6b:1d:ff:c3:f0:e4:58:a5:7b:e8:a9: d5:63:0e:14:80:24:81:2d:e0:7b:3f:27:40:e3:9f: ae:2a:f9:8f:78:8d:7f:b5:f6:b4:73:86:a4:af:58: 46:08:81:76:83:0a:b5:f5:c7:ca:57:37:5d:c9:5d: ff:75:6f:9a:04:9e:2d:bf:ce:43:c3:78:7d:2e:c5: 0e:03:7c:e6:d4:80:3e:03:b6:c9:ed:a2:52:f1:ac: 44:fa:2c:46:e0:11:67:12:0f:3d:ee:76:85:f1:2b: d5:b9:55:20:35:6a:94:9e:13:b2:f5:fb:12:e3:9f: b5:33:b9:93:b2:50:14:ec:3a:c0:fa:77:90:a1:dd: 4b:e7:47:e6:47:d3:06:85:cd:6b:8e:f8:72:a5:62: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C2:06:E6:38:8A:39:F8:9E:C6:FC:FC:EB:DC:A1:74:3E:54:2F:E1 X509v3 Authority Key Identifier: keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:85:16:1c:65:21:0c:b2:8f:12:2e:6a:cd:b7:c8:f9:f0: d3:ef:bc:6a:e2:39:f3:7d:02:84:6a:fa:1c:83:32:6d:5d:b0: a6:cb:d9:c3:68:24:59:bf:bf:f7:1d:28:12:63:58:ad:68:bb: 0c:d9:5b:b9:0f:c4:34:7c:34:5e:28:13:7c:1d:84:74:61:13: 4d:38:89:88:cf:d8:e6:d7:b5:33:2c:c5:52:bb:fa:d6:09:88: 30:62:6e:dc:7b:d2:b2:70:61:1b:9a:f9:bd:8f:cf:50:83:aa: ca:fe:cd:ae:03:85:05:14:4f:c7:53:3e:fa:23:6d:e4:83:e3: a4:9f:47:5a:11:87:c2:3d:78:d5:88:9a:a6:a4:a5:ef:cf:90: 32:c3:a0:cd:98:fe:a9:f9:00:02:db:08:58:4c:d8:8e:b9:5c: 86:06:a2:56:ba:3a:33:bc:9c:40:9e:d7:d9:2c:ce:98:e1:45: de:4f:cf:8d:9b:cd:b6:5a:cb:17:63:f5:b6:88:cf:0c:ed:35: 80:23:e0:f6:9f:ce:71:9a:88:82:ba:ba:02:8f:9b:c0:fb:9a: fb:eb:b4:00:ff:c0:a6:a6:9b:31:55:77:fe:d8:ef:fd:19:33: 91:4b:c9:87:18:89:dc:5f:db:72:4a:9d:f8:15:c8:1f:4a:c1: 44:64:39:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKCzvuID/LVGxJNq7TmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjFiZmVhMDMwNWM0OGU5NDllNmMyNDlmNDgxMGI0Njkw NWM4ODYwHhcNMjUxMjIxMDUwMTIyWhcNMjUxMjIyMDUwMTIyWjAzMTEwLwYDVQQD EyhhN2MyMDZlNjM4OGEzOWY4OWVjNmZjZmNlYmRjYTE3NDNlNTQyZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DY12pSd5N9JLFo5J/cyZapyZ0Dz FJUCY1JfluPayt/5S66ldKYt+tDeyumlvjSvCntHnvexeUtdP/Ea71SPEgYLpkDG 71xXtjccmvPopNmq8P9ciMtXOyRSsvd/fC8cnLAZtaR+p1d6oMvdax3/w/DkWKV7 6KnVYw4UgCSBLeB7PydA45+uKvmPeI1/tfa0c4akr1hGCIF2gwq19cfKVzddyV3/ dW+aBJ4tv85Dw3h9LsUOA3zm1IA+A7bJ7aJS8axE+ixG4BFnEg897naF8SvVuVUg NWqUnhOy9fsS45+1M7mTslAU7DrA+neQod1L50fmR9MGhc1rjvhypWK2XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfCBuY4ijn4nsb8/OvcoXQ+VC/hMB8GA1UdIwQY MBaAFAMhv+oDBcSOlJ5sJJ9IELRpBciGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMt NTYwYzllN2MwNzQ3LzEvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMtNTYwYzllN2MwNzQ3 LzEvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl2FFhxl IQyyjxIuas23yPnw0++8auI5830ChGr6HIMybV2wpsvZw2gkWb+/9x0oEmNYrWi7 DNlbuQ/ENHw0XigTfB2EdGETTTiJiM/Y5te1MyzFUrv61gmIMGJu3HvSsnBhG5r5 vY/PUIOqyv7NrgOFBRRPx1M++iNt5IPjpJ9HWhGHwj141YiapqSl78+QMsOgzZj+ qfkAAtsIWEzYjrlchgaiVro6M7ycQJ7X2SzOmOFF3k/PjZvNtlrLF2P1tojPDO01 gCPg9p/OcZqIgrq6Ao+bwPua++u0AP/ApqabMVV3/tjv/RkzkUvJhxiJ3F/bckqd +BXIH0rBRGQ51A== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:22 2025 by rpki-client