This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json) Hash identifier: N4Ze7eL/N8IXZMmO3xbyBaZc6C1rXWJrpYtSNreiLBk= Subject key identifier: BF:1D:5E:0C:B9:34:D7:85:90:B3:BF:F3:52:4F:56:6F:15:5D:C0:12 Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f Certificate serial: 019B3F11556967796DDF63934C56974127CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft Manifest number: 10C5 Signing time: Sun 21 Dec 2025 04:00:59 +0000 Manifest this update: Sun 21 Dec 2025 04:00:59 +0000 Manifest next update: Mon 22 Dec 2025 04:00:59 +0000 Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: H3d939qkic6rogrziGMkgvtlhFE1yqv4dIm86y/knWY=) 2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:55:69:67:79:6d:df:63:93:4c:56:97:41:27:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f Validity Not Before: Dec 21 04:00:59 2025 GMT Not After : Dec 22 04:00:59 2025 GMT Subject: CN=bf1d5e0cb934d78590b3bff3524f566f155dc012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:26:95:75:87:b2:6b:05:54:ba:39:0a:1f: 33:70:46:19:c1:f2:60:6a:3f:ea:0e:66:23:04:cd: cd:5c:25:08:14:38:67:c1:0e:a9:45:fb:9b:b1:ac: 86:7e:33:c7:9a:e8:a0:1b:b1:f9:6b:13:5c:c6:2d: 0d:bd:76:72:c8:a9:7a:56:10:49:c6:bb:17:ed:ca: db:4c:79:2e:1f:42:83:3d:e5:94:04:ed:b2:9b:a3: 1b:65:e4:cb:9c:f1:19:ec:18:50:ba:e0:fe:63:7d: 5d:4d:dc:e4:74:59:58:91:70:d3:8e:30:83:56:b4: fd:b6:46:85:5a:1c:be:41:41:d9:3c:c2:9f:98:8b: a7:3b:e7:34:91:cb:bc:fe:f7:40:e4:26:4f:fd:c9: cf:5c:7f:85:16:37:54:43:df:41:61:62:df:1c:0e: 07:9f:24:e0:1c:cd:a0:be:a4:b5:00:1d:f0:2f:04: f3:3f:5d:a7:6a:e3:39:ec:a6:d2:c3:e1:d5:b9:8a: c2:b5:7d:d2:ea:20:e2:75:4f:d0:94:e1:e2:d0:0d: 6f:89:31:39:78:87:6c:31:b6:8d:ab:9c:c3:6c:f2: 07:57:e3:a8:2a:f0:91:58:c9:95:57:13:e6:b0:64: cf:56:a9:d6:7f:1f:bc:3c:7c:1b:d5:ac:03:76:ad: 99:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1D:5E:0C:B9:34:D7:85:90:B3:BF:F3:52:4F:56:6F:15:5D:C0:12 X509v3 Authority Key Identifier: keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:38:97:5c:b1:39:ca:aa:90:2b:aa:57:fa:44:3d:b6:1d:43: ac:e0:a2:15:40:45:7a:84:66:84:8f:d0:5f:bd:60:f4:50:36: 5a:76:ea:77:81:a5:33:9a:4f:73:14:f0:e5:6c:1f:d8:6c:48: 42:8e:2c:6b:b0:42:46:f3:38:24:d4:b8:4e:35:f2:0a:23:3c: e5:8a:e3:60:0c:0a:8d:00:7e:a1:7d:a5:4d:f1:38:20:1a:e4: f7:9e:2f:0e:df:a2:48:59:de:40:cd:4a:19:44:1a:66:fd:d2: 1d:a9:b0:03:87:8f:58:08:28:1e:09:0f:1d:a5:2e:1f:ed:12: 6c:19:9f:d6:9d:44:e1:9c:ed:f2:9f:e7:bc:c3:a8:20:43:1f: 79:61:fa:3b:1e:aa:56:57:79:11:a5:db:25:38:9f:90:ff:c8: 0b:0c:bd:d6:99:80:92:b8:3e:40:bc:ca:d0:ff:e8:ae:9a:6e: e1:38:de:e0:9d:60:7f:94:d9:8d:bd:99:bf:a1:ff:eb:87:f7: 1e:49:d8:04:5d:a3:c4:63:20:89:6d:33:41:0e:07:a8:ba:17: 51:23:86:dd:01:b7:a7:12:73:1c:dc:3f:98:af:56:b0:88:87: 3f:e2:0f:f4:8a:e5:8f:3d:92:79:3a:27:14:bf:65:92:50:4a: 51:7f:0d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EVVpZ3lt32OTTFaXQSfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh NTQ0NmYwHhcNMjUxMjIxMDQwMDU5WhcNMjUxMjIyMDQwMDU5WjAzMTEwLwYDVQQD EyhiZjFkNWUwY2I5MzRkNzg1OTBiM2JmZjM1MjRmNTY2ZjE1NWRjMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28AmlXWHsmsFVLo5Ch8zcEYZwfJg aj/qDmYjBM3NXCUIFDhnwQ6pRfubsayGfjPHmuigG7H5axNcxi0NvXZyyKl6VhBJ xrsX7crbTHkuH0KDPeWUBO2ym6MbZeTLnPEZ7BhQuuD+Y31dTdzkdFlYkXDTjjCD VrT9tkaFWhy+QUHZPMKfmIunO+c0kcu8/vdA5CZP/cnPXH+FFjdUQ99BYWLfHA4H nyTgHM2gvqS1AB3wLwTzP12nauM57KbSw+HVuYrCtX3S6iDidU/QlOHi0A1viTE5 eIdsMbaNq5zDbPIHV+OoKvCRWMmVVxPmsGTPVqnWfx+8PHwb1awDdq2ZOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8dXgy5NNeFkLO/81JPVm8VXcASMB8GA1UdIwQY MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjiXXLE5 yqqQK6pX+kQ9th1DrOCiFUBFeoRmhI/QX71g9FA2Wnbqd4GlM5pPcxTw5Wwf2GxI Qo4sa7BCRvM4JNS4TjXyCiM85YrjYAwKjQB+oX2lTfE4IBrk954vDt+iSFneQM1K GUQaZv3SHamwA4ePWAgoHgkPHaUuH+0SbBmf1p1E4Zzt8p/nvMOoIEMfeWH6Ox6q Vld5EaXbJTifkP/ICwy91pmAkrg+QLzK0P/orppu4Tje4J1gf5TZjb2Zv6H/64f3 HknYBF2jxGMgiW0zQQ4HqLoXUSOG3QG3pxJzHNw/mK9WsIiHP+IP9Irljz2SeTon FL9lklBKUX8NIg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:46:55 2025 by rpki-client