This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json) Hash identifier: 8qzDHQptXjp/WFKxReuulKBorI2MGKSv9Rmr0Gw+alg= Subject key identifier: 35:5B:7D:DC:A9:2A:1B:47:25:A0:1A:15:3C:93:5C:E1:14:09:A1:A9 Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Certificate serial: 019B6EB431EBA6600DA393BDF29713E898D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 10:01:01 +0000 Manifest this update: Tue 30 Dec 2025 10:01:01 +0000 Manifest next update: Wed 31 Dec 2025 10:01:01 +0000 Files and hashes: 1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=) 2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: EWf73meHKcKGcEfEUr05vyhbk7EDZvV2CP9lED4Ofu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:31:eb:a6:60:0d:a3:93:bd:f2:97:13:e8:98:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Validity Not Before: Dec 30 10:01:01 2025 GMT Not After : Dec 31 10:01:01 2025 GMT Subject: CN=355b7ddca92a1b4725a01a153c935ce11409a1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:d7:a3:26:15:71:d0:fd:1b:3d:fd:2c:9e: 2a:d8:56:23:65:3b:01:33:07:ec:49:e9:4b:70:07: 9a:ed:3d:18:63:2b:1f:bd:75:b5:17:12:71:2a:aa: 0a:ae:a0:a3:d6:dd:b3:9e:db:5f:21:65:2a:8c:77: 07:e4:d1:34:39:d7:90:4f:20:1c:75:c9:a3:53:05: 88:a4:11:f5:e8:40:eb:0d:67:bf:85:51:5b:be:bc: 74:55:cd:f6:97:d0:98:a6:4f:5d:30:fe:91:c9:49: 3d:7d:53:85:49:4c:02:9e:5b:87:e9:39:9f:f0:e6: bd:78:c8:18:7d:17:42:b3:ae:38:6a:61:62:4d:44: b1:11:aa:92:b1:5a:8a:2f:51:0e:b5:bf:03:fd:12: 8f:b4:46:5e:98:5a:ad:73:49:f6:a0:07:13:24:ea: 0a:ca:13:47:dd:24:38:fd:a8:b5:51:1c:df:a3:69: 73:03:a1:14:f2:4f:5d:97:8e:55:54:d6:2a:a7:49: 52:2d:94:e7:d7:58:92:ee:04:dc:cc:ff:e5:ce:f2: 9c:8d:d4:78:33:76:0a:3a:37:7f:2a:33:e1:32:27: cc:85:bd:4c:b3:07:99:b2:23:33:b2:42:f2:de:3c: 00:30:67:eb:1b:b7:31:c7:02:f1:16:30:a2:90:08: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:7D:DC:A9:2A:1B:47:25:A0:1A:15:3C:93:5C:E1:14:09:A1:A9 X509v3 Authority Key Identifier: keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:bb:03:05:5b:c1:8c:54:70:ec:e4:04:32:d5:a2:fb:56:39: 77:a4:0f:5f:d5:35:20:d3:d3:df:50:53:be:e9:27:26:b1:c4: 0e:72:34:f3:a2:9e:b6:21:a0:8a:ae:1f:dc:bd:1c:80:8c:96: 0a:49:01:d4:1e:f8:a3:97:5b:23:5a:6a:9a:47:87:17:aa:00: 4d:79:5c:b9:25:5c:2f:68:ad:f9:ab:eb:b4:94:45:92:e2:d2: 17:7f:53:a0:a8:c4:aa:b9:14:32:13:94:52:80:bb:92:14:a7: 99:0e:77:5b:e1:4b:e0:d5:fa:07:dd:8f:90:da:29:9a:d2:9d: f3:62:94:49:53:dd:77:65:5e:98:9b:f8:17:f8:51:2d:c3:18: 6b:0c:01:36:41:9a:06:99:f0:65:c3:f8:fd:5d:a9:2c:cc:2a: 22:8b:c0:3b:a3:b5:9c:f2:96:c6:e2:7a:8a:bf:5b:b5:fa:70: 2a:d7:9a:71:33:cd:24:6d:82:f5:59:45:ae:e0:db:29:9e:0a: 92:9d:f6:6c:71:35:d8:48:19:17:d8:03:cb:34:f1:84:d5:78: cf:c7:a3:87:80:27:5b:97:47:9d:d1:79:8a:44:f3:29:f2:dc: 9e:c7:d0:d0:7c:22:24:26:0d:76:f8:0b:02:25:84:dc:79:68: 3d:31:93:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutDHrpmANo5O98pcT6JjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy OTI3NGIwHhcNMjUxMjMwMTAwMTAxWhcNMjUxMjMxMTAwMTAxWjAzMTEwLwYDVQQD EygzNTViN2RkY2E5MmExYjQ3MjVhMDFhMTUzYzkzNWNlMTE0MDlhMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAjXoyYVcdD9Gz39LJ4q2FYjZTsB MwfsSelLcAea7T0YYysfvXW1FxJxKqoKrqCj1t2znttfIWUqjHcH5NE0OdeQTyAc dcmjUwWIpBH16EDrDWe/hVFbvrx0Vc32l9CYpk9dMP6RyUk9fVOFSUwCnluH6Tmf 8Oa9eMgYfRdCs644amFiTUSxEaqSsVqKL1EOtb8D/RKPtEZemFqtc0n2oAcTJOoK yhNH3SQ4/ai1URzfo2lzA6EU8k9dl45VVNYqp0lSLZTn11iS7gTczP/lzvKcjdR4 M3YKOjd/KjPhMifMhb1MsweZsiMzskLy3jwAMGfrG7cxxwLxFjCikAj4NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVbfdypKhtHJaAaFTyTXOEUCaGpMB8GA1UdIwQY MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt NTFjNzdjYzQ5MTQ2LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2 LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULsDBVvB jFRw7OQEMtWi+1Y5d6QPX9U1INPT31BTvuknJrHEDnI086KetiGgiq4f3L0cgIyW CkkB1B74o5dbI1pqmkeHF6oATXlcuSVcL2it+avrtJRFkuLSF39ToKjEqrkUMhOU UoC7khSnmQ53W+FL4NX6B92PkNopmtKd82KUSVPdd2VemJv4F/hRLcMYawwBNkGa BpnwZcP4/V2pLMwqIovAO6O1nPKWxuJ6ir9btfpwKteacTPNJG2C9VlFruDbKZ4K kp32bHE12EgZF9gDyzTxhNV4z8ejh4AnW5dHndF5ikTzKfLcnsfQ0HwiJCYNdvgL AiWE3HloPTGTdw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:30:08 2025 by rpki-client