This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json) Hash identifier: FBow7EdJ/MlmMXWddtDpkGYSQ6GeIzqOQAjxlRLNjiw= Subject key identifier: 1C:31:81:FF:76:1E:BF:3D:38:C8:DA:45:3E:C5:0A:8A:07:5B:67:A2 Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91 Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91 Certificate serial: 019B717E6A8C6FBB7A7E137A0EEE96BE290F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft Manifest number: 0E44 Signing time: Tue 30 Dec 2025 23:01:08 +0000 Manifest this update: Tue 30 Dec 2025 23:01:08 +0000 Manifest next update: Wed 31 Dec 2025 23:01:08 +0000 Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: WTImEwENCFSa1Yf49aKTJF+zVAcBtREbg7asu3BzhSU=) 2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:6a:8c:6f:bb:7a:7e:13:7a:0e:ee:96:be:29:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91 Validity Not Before: Dec 30 23:01:08 2025 GMT Not After : Dec 31 23:01:08 2025 GMT Subject: CN=1c3181ff761ebf3d38c8da453ec50a8a075b67a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:98:09:34:6e:e3:26:80:1a:b8:a4:1e:ef: 44:3e:79:09:51:78:e8:83:00:5e:60:35:8f:93:f4: f4:eb:ae:ee:f9:a5:26:04:fa:df:03:e4:76:70:73: 49:b3:5c:17:58:d0:7d:c5:b3:70:b0:57:c9:ec:5a: 56:34:ec:09:d1:23:3f:64:99:91:ee:ac:28:d1:f8: 96:e2:df:2b:2f:01:f6:a9:7c:fd:18:ef:d7:6b:9b: b9:e4:b6:62:eb:6a:b1:55:1f:c1:28:55:70:6d:61: 7c:74:fa:2d:5d:2a:a8:d5:bf:0c:14:13:f6:2d:8f: 22:9e:d0:cb:74:c0:5d:ae:9e:c9:f9:94:b9:ab:8f: 58:26:cd:33:79:2d:7d:fc:0c:2c:46:7a:3f:41:95: 62:31:2f:52:72:8f:11:cc:0b:78:7c:c7:3d:f5:18: 7c:40:c5:fe:d6:e2:ca:5c:1d:da:fb:ab:9b:4d:d8: c7:fc:ca:6f:75:f2:b7:bf:ad:06:0b:1a:5a:c6:66: b2:ae:89:e6:eb:85:34:ac:da:55:e8:5f:66:89:1a: f5:db:bf:49:48:38:99:c4:0d:b5:36:55:3f:e7:71: d1:d0:5d:6e:cc:b9:e6:fe:0a:3e:3e:26:40:0e:67: ab:a3:2c:f1:df:91:d8:d2:74:1c:59:93:54:73:4d: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:31:81:FF:76:1E:BF:3D:38:C8:DA:45:3E:C5:0A:8A:07:5B:67:A2 X509v3 Authority Key Identifier: keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fc:44:63:1d:c8:cc:04:d5:ca:e7:06:1d:5b:0a:e3:b1:ee: 44:03:2a:32:3a:90:95:d2:43:5d:bc:3f:96:3e:c9:06:bf:b8: a1:36:12:bc:5b:0b:b7:9b:e8:fd:ca:44:25:8f:be:3c:ac:16: 7c:58:6d:42:5b:61:14:85:d6:e9:f5:b5:a3:f6:a3:5d:72:b5: 8a:c7:cd:2d:23:18:e8:1c:e7:db:ca:13:e5:4b:99:b4:e2:6c: 62:dd:c5:2e:3c:d1:6a:fe:0a:e9:85:3e:46:d8:02:e3:d9:4f: e4:e6:b0:4e:c1:1a:3b:c2:ba:1b:db:ee:64:de:85:74:9c:90: ae:2a:5c:64:3a:bb:5e:07:d9:60:57:ae:86:cb:ae:e8:30:31: 88:15:25:35:ea:87:49:e2:72:8e:1d:c2:fb:e5:9a:1f:51:10: 87:72:a1:f4:02:c4:e0:28:12:0f:d8:b3:13:6d:1d:a8:53:50: 64:b6:47:34:d1:bf:4c:9d:08:ed:cf:5e:39:af:f1:b4:11:9e: a4:c9:9b:88:ab:19:bf:5d:b2:71:13:cd:39:99:27:46:5d:b0: 9d:c3:54:87:01:d0:d3:d1:d6:b9:79:0c:94:25:b8:51:d7:77: b8:2f:e8:f7:29:c8:4f:e3:1c:68:68:13:4e:b5:8f:dc:97:b1: bb:7f:71:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfmqMb7t6fhN6Du6WvikPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwODNmNjk3OTU0ZWM3Y2M0OTJlNWFhNDZjYzhlZjEzZmM4 ZWRhOTEwHhcNMjUxMjMwMjMwMTA4WhcNMjUxMjMxMjMwMTA4WjAzMTEwLwYDVQQD EygxYzMxODFmZjc2MWViZjNkMzhjOGRhNDUzZWM1MGE4YTA3NWI2N2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq36YCTRu4yaAGrikHu9EPnkJUXjo gwBeYDWPk/T0667u+aUmBPrfA+R2cHNJs1wXWNB9xbNwsFfJ7FpWNOwJ0SM/ZJmR 7qwo0fiW4t8rLwH2qXz9GO/Xa5u55LZi62qxVR/BKFVwbWF8dPotXSqo1b8MFBP2 LY8intDLdMBdrp7J+ZS5q49YJs0zeS19/AwsRno/QZViMS9Sco8RzAt4fMc99Rh8 QMX+1uLKXB3a+6ubTdjH/MpvdfK3v60GCxpaxmayronm64U0rNpV6F9miRr1279J SDiZxA21NlU/53HR0F1uzLnm/go+PiZADmeroyzx35HY0nQcWZNUc03mowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwxgf92Hr89OMjaRT7FCooHW2eiMB8GA1UdIwQY MBaAFACD9peVTsfMSS5apGzI7xP8jtqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMt ODE5ZGIxNmI2NmVlLzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMtODE5ZGIxNmI2NmVl LzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfxEYx3I zATVyucGHVsK47HuRAMqMjqQldJDXbw/lj7JBr+4oTYSvFsLt5vo/cpEJY++PKwW fFhtQlthFIXW6fW1o/ajXXK1isfNLSMY6Bzn28oT5UuZtOJsYt3FLjzRav4K6YU+ RtgC49lP5OawTsEaO8K6G9vuZN6FdJyQripcZDq7XgfZYFeuhsuu6DAxiBUlNeqH SeJyjh3C++WaH1EQh3Kh9ALE4CgSD9izE20dqFNQZLZHNNG/TJ0I7c9eOa/xtBGe pMmbiKsZv12ycRPNOZknRl2wncNUhwHQ09HWuXkMlCW4Udd3uC/o9ynIT+McaGgT TrWP3Jexu39xCQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:09:57 2025 by rpki-client