This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json) Hash identifier: 10ZqT+bCoxOAMiqkkkeAZNZ69s9Mp1NuesDn/IfCBv8= Subject key identifier: AD:43:D8:4D:B6:C1:A8:23:A2:A7:0A:FB:E4:30:94:73:52:0E:02:D9 Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f Certificate serial: 019B6F5915043478395516130FE6E4E74534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft Manifest number: 10DE Signing time: Tue 30 Dec 2025 13:01:07 +0000 Manifest this update: Tue 30 Dec 2025 13:01:07 +0000 Manifest next update: Wed 31 Dec 2025 13:01:07 +0000 Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: 1A3uaqsk2ksDWAAYOewsqCB+Fiafp0oppmsDTsLa6G0=) 2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:59:15:04:34:78:39:55:16:13:0f:e6:e4:e7:45:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f Validity Not Before: Dec 30 13:01:07 2025 GMT Not After : Dec 31 13:01:07 2025 GMT Subject: CN=ad43d84db6c1a823a2a70afbe4309473520e02d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:e2:ce:e1:d8:53:70:57:87:a2:81:ed:7f: 8c:5a:a0:4c:74:a9:80:51:08:2a:70:2b:5a:d3:35: e6:0d:6d:ad:8e:8c:0d:54:b2:18:28:c8:9f:af:83: 87:e3:61:3f:13:8d:09:15:95:fb:08:4b:7a:ab:8e: c9:85:58:33:60:f7:5d:26:de:d4:4e:34:a0:dc:65: fe:0f:95:9d:2b:12:2d:5a:3f:bc:7a:52:43:0c:6e: 3e:48:cf:1b:87:cc:ef:8c:37:ac:00:f4:ad:e0:b4: 3a:ce:fd:f5:36:6c:93:0c:ea:6d:22:d9:2d:07:8f: 36:ba:0c:5a:e5:e0:4b:fc:5c:ec:37:9c:1e:38:80: 8a:8b:88:cb:82:57:8c:98:31:b0:7d:52:80:f3:ae: 65:df:86:ab:76:6d:23:10:05:a5:5c:4e:9a:bd:35: 39:84:6b:a6:44:9c:e8:e9:8f:f9:fb:58:6e:52:20: d1:c6:97:c8:87:69:99:fd:ff:70:ce:ca:c4:d2:78: 65:42:4c:ff:ed:c1:dc:b1:af:11:af:f7:b7:f9:c6: c5:e6:7d:10:21:c5:e9:6b:d2:11:49:64:d6:60:04: 55:c6:f8:da:ca:d1:48:2a:8c:ad:96:86:4d:a4:f1: 6c:eb:31:cc:95:b3:9a:a7:bc:c2:c7:a4:f9:7f:92: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:43:D8:4D:B6:C1:A8:23:A2:A7:0A:FB:E4:30:94:73:52:0E:02:D9 X509v3 Authority Key Identifier: keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d8:19:be:41:3b:1d:d9:54:e4:fb:82:82:25:a7:9d:9f:f3: a4:48:6f:1b:ad:c6:55:1c:bc:30:c7:17:84:cd:0c:ae:24:ab: 3b:8a:4e:da:58:f2:98:e4:42:55:83:22:9f:70:45:94:7d:da: a5:ac:02:01:fe:77:9b:ca:f1:e8:9b:da:f4:53:ee:cf:11:75: a6:84:51:c3:9b:b6:64:b2:c8:ef:0c:60:45:d2:e7:e7:ad:1d: cc:9e:68:aa:19:4c:36:b9:1b:b1:b2:49:7f:06:9d:53:26:95: 31:3e:06:f4:c6:44:39:e2:91:27:5d:6c:44:64:69:c5:0c:3e: 10:2f:e0:d7:14:75:2d:a0:d2:95:8f:f2:cb:f2:e2:f7:9b:c1: 94:4b:c2:2a:40:97:07:ce:98:a2:3f:32:f6:40:a0:41:07:db: 90:34:37:37:e2:9a:c5:89:ac:bd:fc:bf:e4:f8:3b:b3:30:f3: 15:d5:b1:a2:fb:b3:d7:7e:0d:90:7d:cd:06:b9:5c:8d:69:cf: 9c:a4:0d:8c:08:7e:62:7d:c0:34:79:73:bd:fa:ce:4e:06:13: d9:fe:a2:59:10:cf:3f:52:7c:16:61:f7:24:1a:6f:6b:8c:ea: 4f:db:fe:ac:fd:0b:4a:ca:0d:cf:94:66:60:27:4f:53:a1:69: bd:9e:82:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWRUENHg5VRYTD+bk50U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh NTQ0NmYwHhcNMjUxMjMwMTMwMTA3WhcNMjUxMjMxMTMwMTA3WjAzMTEwLwYDVQQD EyhhZDQzZDg0ZGI2YzFhODIzYTJhNzBhZmJlNDMwOTQ3MzUyMGUwMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SbizuHYU3BXh6KB7X+MWqBMdKmA UQgqcCta0zXmDW2tjowNVLIYKMifr4OH42E/E40JFZX7CEt6q47JhVgzYPddJt7U TjSg3GX+D5WdKxItWj+8elJDDG4+SM8bh8zvjDesAPSt4LQ6zv31NmyTDOptItkt B482ugxa5eBL/FzsN5weOICKi4jLgleMmDGwfVKA865l34ardm0jEAWlXE6avTU5 hGumRJzo6Y/5+1huUiDRxpfIh2mZ/f9wzsrE0nhlQkz/7cHcsa8Rr/e3+cbF5n0Q IcXpa9IRSWTWYARVxvjaytFIKoytloZNpPFs6zHMlbOap7zCx6T5f5Ku6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1D2E22wagjoqcK++QwlHNSDgLZMB8GA1UdIwQY MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdgZvkE7 HdlU5PuCgiWnnZ/zpEhvG63GVRy8MMcXhM0MriSrO4pO2ljymORCVYMin3BFlH3a pawCAf53m8rx6Jva9FPuzxF1poRRw5u2ZLLI7wxgRdLn560dzJ5oqhlMNrkbsbJJ fwadUyaVMT4G9MZEOeKRJ11sRGRpxQw+EC/g1xR1LaDSlY/yy/Li95vBlEvCKkCX B86Yoj8y9kCgQQfbkDQ3N+KaxYmsvfy/5Pg7szDzFdWxovuz134NkH3NBrlcjWnP nKQNjAh+Yn3ANHlzvfrOTgYT2f6iWRDPP1J8FmH3JBpva4zqT9v+rP0LSsoNz5Rm YCdPU6FpvZ6CTg== -----END CERTIFICATE-----Generated at Tue Dec 30 15:01:06 2025 by rpki-client