This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json) Hash identifier: w8xqCR0YxkDJyKKv7zP35L8nsBoC4X2d4AXTaZPC26o= Subject key identifier: 8C:32:DE:6C:B2:55:45:C1:D6:8E:EE:50:C3:74:C7:D7:FC:62:F2:53 Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2 Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2 Certificate serial: 019B50E0969FD94CCE6057C9B5D93ED02E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft Manifest number: 0CB3 Signing time: Wed 24 Dec 2025 15:00:54 +0000 Manifest this update: Wed 24 Dec 2025 15:00:54 +0000 Manifest next update: Thu 25 Dec 2025 15:00:54 +0000 Files and hashes: 1: 5d3BkT4g6BSm4A2tPk7SLnm-a2o.roa (hash: r7O0hom8hw87s+SCAknwxnQSAbbhz820jIMuUD9IwqI=) 2: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: N/CSumvOuUwcC48U2KShZOOqnOuKg+6WDY9JjZCz5qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:96:9f:d9:4c:ce:60:57:c9:b5:d9:3e:d0:2e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2 Validity Not Before: Dec 24 15:00:54 2025 GMT Not After : Dec 25 15:00:54 2025 GMT Subject: CN=8c32de6cb25545c1d68eee50c374c7d7fc62f253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:ad:cc:11:76:3c:8c:6b:53:3e:0a:77:55: 2f:b3:72:9e:cf:57:88:f2:2c:5c:11:34:1b:a0:00: e8:1f:8c:e2:7a:e3:26:50:53:2e:df:f4:1b:9e:ce: 3a:f4:14:7d:d6:70:37:fc:27:64:98:58:bc:84:9e: 25:d0:bf:d5:13:62:0e:c5:5a:a1:5e:d9:dd:09:1e: 45:51:26:45:77:fd:b1:04:97:cc:4f:ac:6f:7d:67: 28:bc:67:a5:57:84:c6:42:43:38:6e:a2:e0:5c:7d: a4:38:28:58:99:36:6f:1c:5e:15:59:0d:74:56:0f: 78:94:9d:a4:23:78:c5:09:e1:ea:f2:3d:8b:98:29: 72:4d:4f:5f:fa:a6:64:0e:b2:09:d4:fe:dd:45:2d: 2a:f8:60:d5:19:b7:20:29:00:3a:38:4f:c9:f7:7d: 73:69:95:29:dc:a6:c3:a8:18:3e:34:68:27:1c:41: 4e:03:e5:d0:c1:53:0c:9b:d2:bd:3c:9a:31:9e:0e: 76:91:ca:99:16:4b:6c:81:9c:a0:e4:4d:74:9c:b8: f3:1b:6b:52:22:5c:32:be:46:c7:eb:94:ff:16:67: 62:46:d0:6a:a9:9c:9d:13:4d:2c:7e:dc:77:4d:b0: 3c:9b:c5:28:00:31:97:9e:c6:27:b9:1e:21:b5:c5: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:DE:6C:B2:55:45:C1:D6:8E:EE:50:C3:74:C7:D7:FC:62:F2:53 X509v3 Authority Key Identifier: keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3f:cd:be:51:57:aa:9e:1a:35:67:14:44:a8:3c:1e:ef:ec: ae:2d:c0:4e:a2:64:8d:5e:b6:db:f1:96:e4:f4:d1:bd:86:6b: 7e:5e:8e:cd:65:03:ed:bc:f7:42:d0:9e:7e:c2:97:ee:14:ea: 72:6d:5f:fe:a4:25:ec:de:40:a6:a5:72:cf:08:51:6f:72:0d: 2d:f4:34:b6:e2:da:c9:36:c5:22:16:83:89:a2:6e:da:bd:b8: 03:59:ce:44:8a:f8:18:17:a9:ec:95:75:90:1a:a3:d4:5f:2f: f8:c5:9c:66:c8:eb:d3:d1:35:3f:ad:31:e6:b2:9d:14:f7:61: 34:91:36:16:ef:b7:9a:83:71:f1:9c:c2:07:3c:08:0d:37:68: 18:17:ec:b1:1f:ac:a9:95:d1:25:7a:c0:82:7f:b8:50:30:41: 15:c7:9f:0b:e8:91:e8:c6:6c:9e:52:32:21:47:23:7e:98:44: 8f:53:11:79:79:28:76:49:f6:7d:ca:69:50:23:6b:eb:53:dd: e9:04:66:46:75:9a:14:38:55:a3:2a:f6:ab:ea:97:93:ff:a7: 8f:57:34:87:c3:b6:55:41:1c:60:8f:0c:bc:5e:e7:0a:90:ee: eb:cd:2e:73:ce:f3:57:ca:dc:5c:1e:02:a2:43:26:74:07:a6: 6f:74:cf:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4Jaf2UzOYFfJtdk+0C5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZmM1YzA2NGY1MTU5YzhhMWZhNDA2NmM4Y2I4ZmY3MDE2 NzFkZDIwHhcNMjUxMjI0MTUwMDU0WhcNMjUxMjI1MTUwMDU0WjAzMTEwLwYDVQQD Eyg4YzMyZGU2Y2IyNTU0NWMxZDY4ZWVlNTBjMzc0YzdkN2ZjNjJmMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTKtzBF2PIxrUz4Kd1Uvs3Kez1eI 8ixcETQboADoH4zieuMmUFMu3/Qbns469BR91nA3/CdkmFi8hJ4l0L/VE2IOxVqh XtndCR5FUSZFd/2xBJfMT6xvfWcovGelV4TGQkM4bqLgXH2kOChYmTZvHF4VWQ10 Vg94lJ2kI3jFCeHq8j2LmClyTU9f+qZkDrIJ1P7dRS0q+GDVGbcgKQA6OE/J931z aZUp3KbDqBg+NGgnHEFOA+XQwVMMm9K9PJoxng52kcqZFktsgZyg5E10nLjzG2tS IlwyvkbH65T/FmdiRtBqqZydE00sftx3TbA8m8UoADGXnsYnuR4htcWdNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwy3myyVUXB1o7uUMN0x9f8YvJTMB8GA1UdIwQY MBaAFAL8XAZPUVnIofpAZsjLj/cBZx3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEt NzkyYTkxYzVjYTJiLzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEtNzkyYTkxYzVjYTJi LzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT/NvlFX qp4aNWcURKg8Hu/sri3ATqJkjV622/GW5PTRvYZrfl6OzWUD7bz3QtCefsKX7hTq cm1f/qQl7N5ApqVyzwhRb3INLfQ0tuLayTbFIhaDiaJu2r24A1nORIr4GBep7JV1 kBqj1F8v+MWcZsjr09E1P60x5rKdFPdhNJE2Fu+3moNx8ZzCBzwIDTdoGBfssR+s qZXRJXrAgn+4UDBBFcefC+iR6MZsnlIyIUcjfphEj1MReXkodkn2fcppUCNr61Pd 6QRmRnWaFDhVoyr2q+qXk/+nj1c0h8O2VUEcYI8MvF7nCpDu680uc87zV8rcXB4C okMmdAemb3TP2Q== -----END CERTIFICATE-----Generated at Wed Dec 24 18:03:10 2025 by rpki-client