This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json) Hash identifier: 73wwzwXRSM32+v7fM1ONAbOj7L+l+JXWBOAGq92I8rw= Subject key identifier: 43:CB:8A:4E:94:64:20:83:2E:37:9E:01:7D:30:39:E4:53:FB:18:AE Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf Certificate serial: 019B4701C6FCDFBC004394495E67D2A3BFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft Manifest number: 09AE Signing time: Mon 22 Dec 2025 17:00:57 +0000 Manifest this update: Mon 22 Dec 2025 17:00:57 +0000 Manifest next update: Tue 23 Dec 2025 17:00:57 +0000 Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: SKc6hu8L7iJZ/wBTd0FAiK59Seyga0HfDsSlJjOqgTM=) 2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:c6:fc:df:bc:00:43:94:49:5e:67:d2:a3:bf:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf Validity Not Before: Dec 22 17:00:57 2025 GMT Not After : Dec 23 17:00:57 2025 GMT Subject: CN=43cb8a4e946420832e379e017d3039e453fb18ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:80:00:a2:5f:20:b6:fa:fe:da:4a:4e:ce: 54:67:01:32:9a:e9:b7:eb:bc:d9:7a:98:3d:da:41: fa:b8:5b:0a:8b:0e:cf:44:3d:d2:8f:3c:65:cd:4f: 49:90:a8:cb:8d:d2:e6:5c:4f:06:79:3f:84:ed:5c: 74:fe:37:ec:d4:35:7d:56:f5:f9:5b:6e:22:58:b0: b8:5f:49:d2:e6:b0:d6:36:f4:44:ec:c1:56:dc:0f: da:02:20:03:ba:49:08:5d:dd:13:de:cb:cd:a8:1b: 4e:45:09:13:4a:6d:56:67:65:9b:56:2a:9b:f3:f8: 62:c7:27:c7:3b:11:bd:a2:db:9f:1f:2e:6b:cc:fe: 96:08:3a:5c:22:c2:d5:35:aa:a8:ad:51:94:9e:90: c8:48:e2:1f:5c:92:9f:31:22:dd:82:b5:d6:e1:c9: 08:51:5d:14:0a:43:a3:cb:72:c1:21:f8:f2:33:d9: 7e:fc:e8:8f:6b:0f:fe:c7:bb:95:d2:56:85:2f:8a: 59:86:41:a9:db:97:27:1b:4f:49:80:69:19:d8:2d: f2:e7:0c:d9:e8:c6:23:7b:db:4f:c0:c5:a1:d1:f9: 3e:a6:de:90:12:14:35:d8:df:1f:3b:0c:ac:91:fe: 3d:d9:5d:b9:cc:d6:ca:ad:99:37:05:c9:5f:7d:db: 45:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:8A:4E:94:64:20:83:2E:37:9E:01:7D:30:39:E4:53:FB:18:AE X509v3 Authority Key Identifier: keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e7:6f:32:a8:e3:5a:d0:b7:24:6e:73:fe:8d:39:99:b1:70: 17:cc:68:8f:a0:4d:f3:44:02:8a:79:46:78:91:f0:06:7d:28: dc:f7:f7:19:34:e3:b3:6b:f5:0e:5e:4e:a6:ce:b6:64:8e:4a: d8:c3:75:84:fc:ff:65:3a:1b:85:08:26:ff:18:5d:fd:ac:b2: 86:cc:18:09:04:0d:60:2a:16:15:7e:ef:3e:e6:10:2d:f0:18: cc:0a:18:e3:24:ef:a9:6e:1f:6e:bd:83:70:8f:da:7a:d6:b5: 0f:23:9d:bf:9b:6a:93:77:ac:47:76:2f:68:a7:b9:3b:c8:4e: a0:f4:30:c3:5f:31:d3:33:7a:1f:d7:ee:e9:08:c0:30:95:19: 5d:47:10:74:a1:4a:29:74:bb:56:13:ea:51:b3:75:34:d5:28: 11:8f:14:41:41:46:85:01:1d:9d:0d:fd:fe:a4:c5:4a:a5:ba: a9:8a:2d:1b:48:03:30:aa:ae:74:e1:f2:2b:a5:71:4a:09:9e: 28:69:21:2b:ec:d3:01:c4:bf:ce:3b:b4:e6:60:0b:c6:5d:c6: f5:e6:22:78:17:18:4d:75:63:6c:11:9c:a2:52:22:19:05:54: d8:32:02:4f:e7:30:45:56:93:62:4a:51:82:f4:78:6c:2d:89: 3c:c4:32:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAcb837wAQ5RJXmfSo7/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYTBkNTg2OGM3YTQxZDZmZTlkY2JjZjkzODA1YWM0MmNi ZGJkYmYwHhcNMjUxMjIyMTcwMDU3WhcNMjUxMjIzMTcwMDU3WjAzMTEwLwYDVQQD Eyg0M2NiOGE0ZTk0NjQyMDgzMmUzNzllMDE3ZDMwMzllNDUzZmIxOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VyAAKJfILb6/tpKTs5UZwEymum3 67zZepg92kH6uFsKiw7PRD3SjzxlzU9JkKjLjdLmXE8GeT+E7Vx0/jfs1DV9VvX5 W24iWLC4X0nS5rDWNvRE7MFW3A/aAiADukkIXd0T3svNqBtORQkTSm1WZ2WbViqb 8/hixyfHOxG9otufHy5rzP6WCDpcIsLVNaqorVGUnpDISOIfXJKfMSLdgrXW4ckI UV0UCkOjy3LBIfjyM9l+/OiPaw/+x7uV0laFL4pZhkGp25cnG09JgGkZ2C3y5wzZ 6MYje9tPwMWh0fk+pt6QEhQ12N8fOwyskf492V25zNbKrZk3BclffdtFBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPLik6UZCCDLjeeAX0wOeRT+xiuMB8GA1UdIwQY MBaAFAGg1YaMekHW/p3Lz5OAWsQsvb2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMt MTQ2ZTBiMTc4MDg1LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMtMTQ2ZTBiMTc4MDg1 LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOdvMqjj WtC3JG5z/o05mbFwF8xoj6BN80QCinlGeJHwBn0o3Pf3GTTjs2v1Dl5Ops62ZI5K 2MN1hPz/ZTobhQgm/xhd/ayyhswYCQQNYCoWFX7vPuYQLfAYzAoY4yTvqW4fbr2D cI/aeta1DyOdv5tqk3esR3YvaKe5O8hOoPQww18x0zN6H9fu6QjAMJUZXUcQdKFK KXS7VhPqUbN1NNUoEY8UQUFGhQEdnQ39/qTFSqW6qYotG0gDMKqudOHyK6VxSgme KGkhK+zTAcS/zju05mALxl3G9eYieBcYTXVjbBGcolIiGQVU2DICT+cwRVaTYkpR gvR4bC2JPMQyeQ== -----END CERTIFICATE-----Generated at Tue Dec 23 02:51:19 2025 by rpki-client