This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json) Hash identifier: 9k4/K0Ic+it3BBrjsbtdorquRLFaukyLqGXF9uJJ0vk= Subject key identifier: F4:CD:42:86:BC:23:EA:05:EC:2F:FC:F3:C1:CF:E6:DA:D4:7B:30:21 Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Certificate serial: 019B62794CA2879C9B3384A438A1C530E009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft Manifest number: 0872 Signing time: Sun 28 Dec 2025 01:01:15 +0000 Manifest this update: Sun 28 Dec 2025 01:01:15 +0000 Manifest next update: Mon 29 Dec 2025 01:01:15 +0000 Files and hashes: 1: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: OC49VnrrbCzwNPRe474X2F4V6gx3n68gLAojCt4dTb8=) 2: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=) 3: USUwNqXAmKM8gCgpmaifdth2hJ4.roa (hash: dUbC8Qp7CGpNXjvMgeVikpMPAaWUU03LQwDK+csc06U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:4c:a2:87:9c:9b:33:84:a4:38:a1:c5:30:e0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Validity Not Before: Dec 28 01:01:15 2025 GMT Not After : Dec 29 01:01:15 2025 GMT Subject: CN=f4cd4286bc23ea05ec2ffcf3c1cfe6dad47b3021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:8c:8c:f0:e1:89:02:a4:3e:58:d4:14:a0: a6:74:eb:f3:e0:67:7f:6d:3c:3b:c8:0c:0d:1b:dc: 20:b2:6a:6d:f0:82:04:53:c6:b9:7f:97:72:52:35: 49:39:7a:6f:d9:81:f2:7e:22:69:b9:44:a4:9f:9c: e4:5d:eb:35:0a:c7:c6:74:69:0a:c9:03:02:08:32: 56:93:35:1e:fb:ea:4d:89:cd:36:b1:7e:af:60:b8: 70:57:63:86:e0:2e:b9:b0:d4:d2:08:43:ec:42:d8: cc:00:c0:91:af:32:24:fa:1b:0f:90:c3:5b:e4:35: 17:f8:fb:18:eb:46:4e:20:9e:0b:38:57:c4:46:a4: 65:3d:6d:b6:fc:0a:7e:48:3f:d6:54:5a:be:ed:f2: 92:92:42:09:f9:3e:77:77:e7:d5:0b:fe:60:f2:03: 69:8d:9b:8e:d5:4a:e9:7a:43:f1:af:2e:90:ba:4d: 61:6f:f9:4b:19:e0:67:f1:bf:6a:08:ad:7b:b4:37: 37:92:6b:6c:dd:21:6d:8d:33:73:a1:71:7f:73:07: 8f:ea:1a:6f:aa:ef:3c:bd:0b:df:32:4d:d4:c6:10: 13:8e:dd:39:ee:9f:fe:7d:36:93:5c:84:97:81:11: 56:1c:bb:23:d4:fb:1b:10:d6:a1:aa:1d:0f:52:88: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CD:42:86:BC:23:EA:05:EC:2F:FC:F3:C1:CF:E6:DA:D4:7B:30:21 X509v3 Authority Key Identifier: keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ee:d4:b9:f7:70:1f:65:a9:c7:1e:85:c5:89:8e:e9:f2:e0: 1b:c7:63:52:e7:53:98:b4:a5:98:ef:08:92:09:84:1a:06:c9: cb:b3:dc:61:ec:6e:02:98:19:9b:4a:55:45:92:d1:65:ab:b4: 7e:b6:3e:a8:31:22:9d:ff:a4:4b:d0:62:12:04:ea:ba:13:d2: c5:07:7f:88:03:74:2e:11:4c:9c:e8:38:3d:0a:dc:77:32:95: b3:bb:db:63:4b:60:4c:49:f5:70:cb:57:00:b5:3f:8a:e3:31: 82:3b:dc:39:57:8b:3a:34:96:25:fd:20:33:71:5d:23:90:05: 65:dd:bd:4c:d7:ad:6f:dc:e6:ed:b6:d9:75:d8:11:cc:9f:ac: df:66:9d:c9:94:bd:df:81:5d:83:8e:ff:c7:64:1e:b5:25:77: ec:2e:f9:08:f8:d3:c6:25:ef:96:a0:f5:54:11:56:3a:e4:e5: 87:cf:94:60:a7:00:db:ae:c3:92:1d:35:1d:f9:44:7c:6d:ce: 21:50:5b:7f:54:6a:1a:9c:5c:c0:ad:64:29:5b:37:28:df:db: 47:62:14:89:f6:b9:df:da:7b:65:8f:ad:40:39:d9:bc:92:52: ff:e3:91:99:34:da:23:fc:fd:d7:fe:26:cd:a5:4b:de:ba:c8: 9e:2c:4e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieUyih5ybM4SkOKHFMOAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz ZmQzYmEwHhcNMjUxMjI4MDEwMTE1WhcNMjUxMjI5MDEwMTE1WjAzMTEwLwYDVQQD EyhmNGNkNDI4NmJjMjNlYTA1ZWMyZmZjZjNjMWNmZTZkYWQ0N2IzMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLGMjPDhiQKkPljUFKCmdOvz4Gd/ bTw7yAwNG9wgsmpt8IIEU8a5f5dyUjVJOXpv2YHyfiJpuUSkn5zkXes1CsfGdGkK yQMCCDJWkzUe++pNic02sX6vYLhwV2OG4C65sNTSCEPsQtjMAMCRrzIk+hsPkMNb 5DUX+PsY60ZOIJ4LOFfERqRlPW22/Ap+SD/WVFq+7fKSkkIJ+T53d+fVC/5g8gNp jZuO1UrpekPxry6Quk1hb/lLGeBn8b9qCK17tDc3kmts3SFtjTNzoXF/cweP6hpv qu88vQvfMk3UxhATjt057p/+fTaTXISXgRFWHLsj1PsbENahqh0PUoiCuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTNQoa8I+oF7C/888HP5trUezAhMB8GA1UdIwQY MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt NGQyYzRkYTcyMWQ0LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0 LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe7Uufdw H2Wpxx6FxYmO6fLgG8djUudTmLSlmO8IkgmEGgbJy7PcYexuApgZm0pVRZLRZau0 frY+qDEinf+kS9BiEgTquhPSxQd/iAN0LhFMnOg4PQrcdzKVs7vbY0tgTEn1cMtX ALU/iuMxgjvcOVeLOjSWJf0gM3FdI5AFZd29TNetb9zm7bbZddgRzJ+s32adyZS9 34Fdg47/x2QetSV37C75CPjTxiXvlqD1VBFWOuTlh8+UYKcA267Dkh01HflEfG3O IVBbf1RqGpxcwK1kKVs3KN/bR2IUifa539p7ZY+tQDnZvJJS/+ORmTTaI/z91/4m zaVL3rrInixO6g== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:32 2025 by rpki-client