This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json) Hash identifier: urH9BuPSL7Jqaz9YuGpHydW3EQkMGWisfmzF41ah4PQ= Subject key identifier: 22:DB:5D:F4:9E:18:CD:6E:A4:89:34:D6:36:92:3A:2C:DA:40:49:DB Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e Certificate serial: 019B5F410057DF39DBD48842042410AB7627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft Manifest number: 11FC Signing time: Sat 27 Dec 2025 10:00:53 +0000 Manifest this update: Sat 27 Dec 2025 10:00:53 +0000 Manifest next update: Sun 28 Dec 2025 10:00:53 +0000 Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=) 2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: +6GZkYdjHWjrhgCx9S87TTpu0IvbP455lVEBgQOPDj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:00:57:df:39:db:d4:88:42:04:24:10:ab:76:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e Validity Not Before: Dec 27 10:00:53 2025 GMT Not After : Dec 28 10:00:53 2025 GMT Subject: CN=22db5df49e18cd6ea48934d636923a2cda4049db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:b8:1b:2c:df:a0:8b:a1:ba:58:c7:e7:f8: 09:d3:dc:4f:2a:47:59:65:00:e7:af:79:dc:f7:82: f5:16:7e:27:99:94:89:0c:8a:d3:10:57:0b:31:25: 8c:c3:fa:b2:13:23:19:9e:6d:20:96:a5:03:12:f3: 5a:f1:c1:0b:81:28:24:a0:ef:fe:21:30:d5:39:e5: 89:35:62:64:5d:a1:30:9e:27:89:4f:47:39:32:9e: b0:40:ef:0d:2f:6d:e7:c8:04:95:aa:72:f9:c4:8d: ab:fe:e0:0b:87:0a:3e:9d:8c:03:8a:ae:6e:f7:5e: 79:46:c0:71:60:ba:aa:40:f2:61:06:cd:cd:37:1c: fe:71:bc:55:65:af:0e:df:cc:9a:96:b2:38:50:0c: aa:7c:b6:23:50:d1:07:66:6b:35:7e:65:86:54:5e: 1c:53:4d:49:f4:01:96:96:f6:d9:c5:6e:de:f3:87: 94:46:5f:b8:49:f7:10:b6:aa:15:5e:f9:14:1a:49: b0:19:70:be:1b:43:58:3d:c6:72:2f:22:1f:61:f9: 00:33:5b:36:8e:6e:0a:7f:e2:d8:b4:1f:fa:39:55: f5:7d:0a:64:39:a0:88:bb:ba:7f:f8:95:0b:11:57: b1:37:2a:eb:b4:82:69:2d:57:d4:c2:df:3d:ba:cf: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:5D:F4:9E:18:CD:6E:A4:89:34:D6:36:92:3A:2C:DA:40:49:DB X509v3 Authority Key Identifier: keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:05:5c:dd:b2:9c:eb:09:19:f9:bb:d7:61:32:40:41:d7:07: b3:73:12:92:10:64:34:0f:ce:c7:c6:7d:7e:5c:a7:f3:c3:96: 5e:19:4b:1b:a9:70:64:b4:32:b8:af:21:5a:3c:f5:2e:3f:6b: ad:2c:06:d8:c7:89:06:ac:82:a9:c0:cf:c5:f2:e7:22:6d:75: 36:8a:a8:7b:f0:24:f0:7d:d9:f2:a1:7d:42:64:d6:32:36:ef: 54:04:fc:c0:98:e4:1b:97:cd:bc:16:0b:23:c9:62:1a:61:60: 3c:30:72:46:5e:7f:72:a2:e2:84:dc:cf:23:1c:1a:a0:68:16: 2b:71:b8:72:33:a5:92:18:9c:18:e3:a8:e7:62:11:f7:8c:2e: 1b:36:26:2c:f1:6d:40:ff:52:e5:8f:da:1a:a9:77:ff:49:85: 92:73:c6:80:a9:eb:49:fd:5e:9d:3d:32:d9:29:6e:03:7e:d6: cf:66:f3:05:03:d2:61:e0:94:6b:f0:14:9d:5d:a8:28:04:df: 2d:97:3d:06:a6:f9:24:02:dc:bf:38:85:7d:d5:02:e3:04:69: 30:37:51:21:61:c9:7e:46:78:b7:98:f8:fd:b1:52:67:8b:f7: ab:ce:51:45:ff:e5:11:57:70:71:bd:32:49:08:a3:f1:93:fa: 24:fb:e4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQQBX3znb1IhCBCQQq3YnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODU0YTU3YWIwZDhhM2M5MjJjOGY2YTc5YWE4ZmU4YTZh MmMwOWUwHhcNMjUxMjI3MTAwMDUzWhcNMjUxMjI4MTAwMDUzWjAzMTEwLwYDVQQD EygyMmRiNWRmNDllMThjZDZlYTQ4OTM0ZDYzNjkyM2EyY2RhNDA0OWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqm4GyzfoIuhuljH5/gJ09xPKkdZ ZQDnr3nc94L1Fn4nmZSJDIrTEFcLMSWMw/qyEyMZnm0glqUDEvNa8cELgSgkoO/+ ITDVOeWJNWJkXaEwnieJT0c5Mp6wQO8NL23nyASVqnL5xI2r/uALhwo+nYwDiq5u 9155RsBxYLqqQPJhBs3NNxz+cbxVZa8O38yalrI4UAyqfLYjUNEHZms1fmWGVF4c U01J9AGWlvbZxW7e84eURl+4SfcQtqoVXvkUGkmwGXC+G0NYPcZyLyIfYfkAM1s2 jm4Kf+LYtB/6OVX1fQpkOaCIu7p/+JULEVexNyrrtIJpLVfUwt89us/YIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLbXfSeGM1upIk01jaSOizaQEnbMB8GA1UdIwQY MBaAFGmFSlerDYo8kiyPanmqj+imosCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQt NTIzOGIwMzU0NWNhLzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQtNTIzOGIwMzU0NWNh LzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAVc3bKc 6wkZ+bvXYTJAQdcHs3MSkhBkNA/Ox8Z9flyn88OWXhlLG6lwZLQyuK8hWjz1Lj9r rSwG2MeJBqyCqcDPxfLnIm11Noqoe/Ak8H3Z8qF9QmTWMjbvVAT8wJjkG5fNvBYL I8liGmFgPDByRl5/cqLihNzPIxwaoGgWK3G4cjOlkhicGOOo52IR94wuGzYmLPFt QP9S5Y/aGql3/0mFknPGgKnrSf1enT0y2SluA37Wz2bzBQPSYeCUa/AUnV2oKATf LZc9Bqb5JALcvziFfdUC4wRpMDdRIWHJfkZ4t5j4/bFSZ4v3q85RRf/lEVdwcb0y SQij8ZP6JPvktw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:26:12 2025 by rpki-client