This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json) Hash identifier: bW/3murMVtD7xxwvzYqlDdmpoo07+0JemVEoUQsfsFI= Subject key identifier: 8C:73:75:D3:B6:D1:1A:39:02:8D:5B:95:FC:2B:8D:35:CF:8F:C2:1D Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d Certificate serial: 019B4392B57B5502B5EC2D70E10EA1FE8653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft Manifest number: 13FF Signing time: Mon 22 Dec 2025 01:00:46 +0000 Manifest this update: Mon 22 Dec 2025 01:00:46 +0000 Manifest next update: Tue 23 Dec 2025 01:00:46 +0000 Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: QuwtHE2dqcToWZqzkfJ4A0z/NdVQ1HUHrX+6Agknz8s=) 2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=) 3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:b5:7b:55:02:b5:ec:2d:70:e1:0e:a1:fe:86:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d Validity Not Before: Dec 22 01:00:46 2025 GMT Not After : Dec 23 01:00:46 2025 GMT Subject: CN=8c7375d3b6d11a39028d5b95fc2b8d35cf8fc21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:74:35:20:38:e2:9f:c5:e5:cb:70:ba:f0: 95:f7:c8:99:da:f7:f9:19:83:31:bc:00:52:34:6b: 5a:98:52:f4:a7:14:9b:c5:83:9e:9f:bf:43:12:78: 62:ed:69:2c:73:2c:53:c0:2c:7f:f5:36:43:e4:e0: 55:c9:32:4b:dd:1d:0e:0e:2f:bd:c8:c3:cc:66:0e: 85:be:9e:69:00:45:59:ae:0d:7c:98:39:88:9f:b3: 85:ff:9c:e2:13:09:26:fb:6f:f3:2a:d6:08:75:cb: f1:fc:91:26:05:8c:6a:46:8c:2e:9e:37:0b:d3:49: 06:f8:66:9c:8a:69:8a:9d:50:a6:61:cf:42:18:96: 41:fc:6e:0e:28:00:d7:c9:d2:b6:e9:e6:c8:a6:45: d1:1b:9b:b1:c9:b2:4d:d9:4c:b0:43:6d:98:67:97: 37:26:03:2c:99:d5:bb:69:e8:00:0a:d2:da:38:73: 30:99:0c:a1:8e:f6:aa:12:41:b1:20:74:06:7d:37: 29:fe:0b:71:92:86:f2:5e:a1:0e:2c:28:7e:8f:91: 8d:da:c3:73:fc:35:11:c3:2d:54:d9:8a:77:71:a8: 38:ca:ef:e8:3f:06:5a:72:e3:be:90:f5:aa:f9:82: a2:de:20:e0:e2:55:c6:0f:28:f1:59:e7:e2:26:1f: 02:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:73:75:D3:B6:D1:1A:39:02:8D:5B:95:FC:2B:8D:35:CF:8F:C2:1D X509v3 Authority Key Identifier: keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1c:6e:16:e5:9b:6b:70:e1:9f:20:e7:fc:ab:28:fe:40:c4: a8:62:14:f6:5c:90:d3:0d:29:74:9c:ea:7f:e3:70:ca:07:d7: d3:33:e4:5f:d4:67:e2:2d:e9:ed:07:9d:71:f7:29:8b:04:b1: fa:e7:b3:d7:a5:4a:f1:bc:65:cc:38:31:a3:7c:06:a6:08:2f: ce:50:be:b7:39:87:0b:68:cf:03:bd:50:12:a2:3e:1e:5e:8f: b8:03:af:cb:9d:5e:c3:f3:57:bf:1c:85:a1:69:d0:3a:4b:d0: ef:3b:ac:f3:d6:df:4e:30:67:61:c8:8e:17:48:34:51:ca:ba: b2:00:c2:bf:97:37:9f:20:56:e5:52:14:5f:4b:e3:1b:39:f3: 1d:d4:7e:f3:c9:3d:93:6f:dc:05:2c:a5:00:9a:33:6d:30:05: 20:38:36:90:54:ec:fc:3f:1f:a7:d9:36:21:81:cd:e5:76:fe: 09:61:20:f1:45:92:63:a7:52:af:3b:78:0d:22:43:60:57:62: 84:4f:e2:42:5c:77:77:19:e0:54:f3:07:80:2e:69:ce:ff:64: 17:9d:e8:87:5a:e3:b5:d7:30:d1:6f:91:e4:ec:41:13:02:02: fb:ab:4a:c0:09:f6:c1:dd:f7:ea:7d:a0:d8:e8:d9:e1:80:9e: 40:af:e7:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkrV7VQK17C1w4Q6h/oZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz MDU1MmQwHhcNMjUxMjIyMDEwMDQ2WhcNMjUxMjIzMDEwMDQ2WjAzMTEwLwYDVQQD Eyg4YzczNzVkM2I2ZDExYTM5MDI4ZDViOTVmYzJiOGQzNWNmOGZjMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZ0NSA44p/F5ctwuvCV98iZ2vf5 GYMxvABSNGtamFL0pxSbxYOen79DEnhi7WkscyxTwCx/9TZD5OBVyTJL3R0ODi+9 yMPMZg6Fvp5pAEVZrg18mDmIn7OF/5ziEwkm+2/zKtYIdcvx/JEmBYxqRowunjcL 00kG+GacimmKnVCmYc9CGJZB/G4OKADXydK26ebIpkXRG5uxybJN2UywQ22YZ5c3 JgMsmdW7aegACtLaOHMwmQyhjvaqEkGxIHQGfTcp/gtxkobyXqEOLCh+j5GN2sNz /DURwy1U2Yp3cag4yu/oPwZacuO+kPWq+YKi3iDg4lXGDyjxWefiJh8C5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxzddO20Ro5Ao1blfwrjTXPj8IdMB8GA1UdIwQY MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4 LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxxuFuWb a3DhnyDn/Kso/kDEqGIU9lyQ0w0pdJzqf+NwygfX0zPkX9Rn4i3p7QedcfcpiwSx +uez16VK8bxlzDgxo3wGpggvzlC+tzmHC2jPA71QEqI+Hl6PuAOvy51ew/NXvxyF oWnQOkvQ7zus89bfTjBnYciOF0g0Ucq6sgDCv5c3nyBW5VIUX0vjGznzHdR+88k9 k2/cBSylAJozbTAFIDg2kFTs/D8fp9k2IYHN5Xb+CWEg8UWSY6dSrzt4DSJDYFdi hE/iQlx3dxngVPMHgC5pzv9kF53oh1rjtdcw0W+R5OxBEwIC+6tKwAn2wd336n2g 2OjZ4YCeQK/naQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:09 2025 by rpki-client