This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json) Hash identifier: PoVFN2gaOfDYDIJXTTPPbQk8CEPd6EeMV1D4LgB1Ybk= Subject key identifier: 6E:E3:B6:0B:78:05:74:C2:C8:2E:08:92:06:07:94:06:87:EE:EF:B5 Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751 Certificate serial: 019B3DC7A0B783C89208A85AF2BE323A21D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft Manifest number: 0504 Signing time: Sat 20 Dec 2025 22:00:51 +0000 Manifest this update: Sat 20 Dec 2025 22:00:51 +0000 Manifest next update: Sun 21 Dec 2025 22:00:51 +0000 Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: R2x4N7hGZ3nmQyavZ+oR4zpS5HUCAKPnRC9kvX6izhw=) 2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a0:b7:83:c8:92:08:a8:5a:f2:be:32:3a:21:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751 Validity Not Before: Dec 20 22:00:51 2025 GMT Not After : Dec 21 22:00:51 2025 GMT Subject: CN=6ee3b60b780574c2c82e08920607940687eeefb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:02:34:cf:77:2e:ed:2b:24:bc:2e:31:cc: 46:58:48:d1:f9:8d:a5:f7:2a:b4:47:48:b9:bb:4f: 62:8f:88:11:9f:8d:2c:7f:08:08:6b:21:93:c0:05: bb:75:db:c3:94:f8:15:89:69:51:3e:5d:4b:81:67: 30:30:a9:61:2b:24:5a:b6:50:5b:86:8a:33:56:72: 50:75:f2:a5:5a:9b:db:b4:71:b1:b8:a0:55:f9:7a: 7f:28:76:5d:95:0f:88:ce:1e:72:72:3e:cf:4f:96: 28:83:a9:74:65:df:21:a3:36:6e:c7:0c:11:ff:59: ea:ff:25:b3:ed:a4:3c:5a:72:16:ed:f0:68:44:c5: 7a:08:1a:c1:c8:63:90:f0:28:b9:b8:3c:c3:d1:f3: 69:46:e6:2a:89:eb:fc:06:11:70:aa:62:7c:2a:fd: c2:ce:64:29:90:76:1c:c0:05:16:0e:b9:9e:70:b9: e1:d4:7f:3c:ed:1f:e1:3f:56:e4:c5:97:9f:89:b6: d2:de:62:a8:0b:08:3a:6d:a0:cf:fb:be:8a:00:60: 9c:f1:83:14:46:b9:09:1b:a2:42:a4:aa:f7:98:db: 68:08:79:9a:73:20:0f:90:43:23:8d:aa:b3:38:a3: b5:43:8d:94:95:0d:97:e9:11:c9:df:dd:de:c3:a5: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E3:B6:0B:78:05:74:C2:C8:2E:08:92:06:07:94:06:87:EE:EF:B5 X509v3 Authority Key Identifier: keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:fa:60:20:2f:f4:c9:7f:77:0b:33:8d:77:0a:b3:d9:5f: c6:40:f9:87:7a:0a:7c:39:03:b3:5c:79:7c:e7:62:7c:32:b7: 8e:de:1d:88:c8:74:f6:2b:11:5e:7f:06:bd:69:fa:76:d9:c0: f3:d8:3c:fb:27:a5:2a:00:2b:02:cf:ab:59:c8:70:91:93:96: 44:96:64:9a:71:90:7f:58:da:33:50:f9:56:a0:4f:a1:ae:07: 71:6f:ba:3b:64:30:99:fe:c1:d6:2e:70:fd:c0:60:6d:13:46: 24:02:c8:ed:0d:3d:ce:36:ba:bd:c3:75:3b:ae:45:f3:48:b3: 33:6f:b9:dc:e4:22:25:d1:10:2e:7e:67:e3:af:83:05:d9:47: 5a:e1:db:b3:8f:d2:b8:96:f2:f9:eb:cf:68:54:e0:7f:b1:cc: f0:1f:d2:9a:2b:b1:ba:19:52:48:9b:ac:0f:8b:40:51:1a:7d: 0f:9b:6c:70:bf:0f:d0:68:09:50:c0:28:a8:8d:a5:bd:a1:74: f4:b2:ab:96:35:48:ea:90:69:38:06:38:f2:e1:e6:a7:12:28: a0:98:7f:2d:04:ad:89:94:67:f1:58:ba:c3:a5:c3:39:de:02: 9c:fc:e7:c0:8b:8b:0a:17:fb:75:1d:bd:6e:d6:15:b0:66:d3: 81:b1:d0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6C3g8iSCKha8r4yOiHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi NTY3NTEwHhcNMjUxMjIwMjIwMDUxWhcNMjUxMjIxMjIwMDUxWjAzMTEwLwYDVQQD Eyg2ZWUzYjYwYjc4MDU3NGMyYzgyZTA4OTIwNjA3OTQwNjg3ZWVlZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYoCNM93Lu0rJLwuMcxGWEjR+Y2l 9yq0R0i5u09ij4gRn40sfwgIayGTwAW7ddvDlPgViWlRPl1LgWcwMKlhKyRatlBb hoozVnJQdfKlWpvbtHGxuKBV+Xp/KHZdlQ+Izh5ycj7PT5Yog6l0Zd8hozZuxwwR /1nq/yWz7aQ8WnIW7fBoRMV6CBrByGOQ8Ci5uDzD0fNpRuYqiev8BhFwqmJ8Kv3C zmQpkHYcwAUWDrmecLnh1H887R/hP1bkxZefibbS3mKoCwg6baDP+76KAGCc8YMU RrkJG6JCpKr3mNtoCHmacyAPkEMjjaqzOKO1Q42UlQ2X6RHJ393ew6WjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7jtgt4BXTCyC4IkgYHlAaH7u+1MB8GA1UdIwQY MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt MjFkZTAzYTg1MjM1LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1 LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2b6YCAv 9Ml/dwszjXcKs9lfxkD5h3oKfDkDs1x5fOdifDK3jt4diMh09isRXn8GvWn6dtnA 89g8+yelKgArAs+rWchwkZOWRJZkmnGQf1jaM1D5VqBPoa4HcW+6O2Qwmf7B1i5w /cBgbRNGJALI7Q09zja6vcN1O65F80izM2+53OQiJdEQLn5n46+DBdlHWuHbs4/S uJby+evPaFTgf7HM8B/SmiuxuhlSSJusD4tAURp9D5tscL8P0GgJUMAoqI2lvaF0 9LKrljVI6pBpOAY48uHmpxIooJh/LQStiZRn8Vi6w6XDOd4CnPznwIuLChf7dR29 btYVsGbTgbHQxQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:16 2025 by rpki-client