This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json) Hash identifier: BcDWfb9S05md4PNVUI6JO+L/OdzPOakx+CLHKLXSpXI= Subject key identifier: 91:BE:34:5A:4D:51:81:A4:3B:79:4F:83:55:20:0F:FF:0F:BE:AA:03 Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59 Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459 Certificate serial: 019B3D9068A267905D1AEE1BDC24B23C175B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft Manifest number: 02CE Signing time: Sat 20 Dec 2025 21:00:32 +0000 Manifest this update: Sat 20 Dec 2025 21:00:32 +0000 Manifest next update: Sun 21 Dec 2025 21:00:32 +0000 Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: BR2d39FnWxJTXLE8O9fYU0SRvrIIkJ8qHRu1mgIRLz0=) 2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:68:a2:67:90:5d:1a:ee:1b:dc:24:b2:3c:17:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459 Validity Not Before: Dec 20 21:00:32 2025 GMT Not After : Dec 21 21:00:32 2025 GMT Subject: CN=91be345a4d5181a43b794f8355200fff0fbeaa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:9d:d1:1f:ad:a0:8f:09:e5:25:26:da:b5: b7:d9:b8:35:32:10:14:2a:06:52:a6:74:28:12:01: 75:a6:e5:70:80:d6:21:84:2c:62:08:77:3b:1f:9a: 92:95:63:f3:c1:fb:c9:71:86:0d:54:55:8d:fd:ea: ee:c4:76:e5:a7:f8:17:d0:70:d0:ab:cb:fc:01:3c: 07:3f:24:b4:b9:bc:6b:9f:7e:f4:79:50:fe:bf:84: 3a:07:cf:83:78:52:5d:79:58:eb:ed:5e:4f:dd:eb: e4:8e:62:40:28:06:44:ad:77:51:3a:e7:0f:90:cf: 9f:c4:7e:22:cf:2c:ea:46:3c:59:2c:f4:3d:82:f6: 04:ad:73:ba:a1:ab:92:e0:73:3d:7d:f0:d8:1a:7e: 90:25:57:d2:64:63:7d:9e:7d:42:ec:b3:50:4c:92: 29:eb:d7:4b:68:cc:e9:8e:28:bb:b8:fe:99:0d:52: b9:a1:21:b2:70:57:17:0a:82:c6:64:93:d1:ec:1c: 74:58:cf:40:59:a4:06:55:37:ef:76:50:e1:b2:b9: 8a:c1:59:77:ec:1f:94:35:b5:08:60:55:a8:27:db: 2e:53:68:b7:60:e3:78:47:9a:98:82:8a:57:d8:f7: bc:ca:13:66:96:67:31:fa:41:53:32:75:69:9d:30: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:34:5A:4D:51:81:A4:3B:79:4F:83:55:20:0F:FF:0F:BE:AA:03 X509v3 Authority Key Identifier: keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5d:72:60:0c:93:96:74:d6:5e:c2:1c:74:6b:88:25:95:4c: 62:af:73:9f:55:a4:f9:c7:eb:39:7e:b5:d7:1d:5d:3d:50:48: fd:ca:2d:59:17:16:a5:35:b2:89:8f:34:d1:fb:4c:bd:2e:83: 4d:b9:61:4c:de:a7:e9:bb:13:f5:89:82:e1:bc:79:1b:4b:26: e9:db:4d:c4:0c:2c:fd:0c:71:fd:dc:97:94:86:16:1f:e3:26: 71:24:a0:34:01:5c:a1:3c:04:dc:07:ef:e7:e4:71:5a:1a:41: af:19:05:49:e9:21:6a:a2:84:61:58:98:ae:0e:fe:e6:c8:a4: f6:e3:9b:46:4b:52:d2:b5:2b:1a:5d:e1:bc:6d:29:da:27:1b: 3d:d0:53:23:e7:c7:9d:1e:63:0e:d5:d9:ad:49:d4:25:07:76: f1:cc:44:9b:ba:13:d5:69:78:1f:37:50:bf:57:2b:64:3d:d0: f4:d1:0a:46:41:4e:a1:4a:a6:71:16:80:69:12:b4:b4:81:be: a0:b5:e0:f5:3d:71:5c:f5:0c:66:b7:6e:51:66:6c:99:7b:f7: 60:1c:85:33:16:0b:d1:4e:ed:22:7f:17:f7:a3:2c:01:10:9e: 65:01:07:dd:de:3c:50:f6:8c:62:ed:b6:ef:ed:31:b0:eb:9e: 21:b6:b6:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kGiiZ5BdGu4b3CSyPBdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj NjE0NTkwHhcNMjUxMjIwMjEwMDMyWhcNMjUxMjIxMjEwMDMyWjAzMTEwLwYDVQQD Eyg5MWJlMzQ1YTRkNTE4MWE0M2I3OTRmODM1NTIwMGZmZjBmYmVhYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qad0R+toI8J5SUm2rW32bg1MhAU KgZSpnQoEgF1puVwgNYhhCxiCHc7H5qSlWPzwfvJcYYNVFWN/eruxHblp/gX0HDQ q8v8ATwHPyS0ubxrn370eVD+v4Q6B8+DeFJdeVjr7V5P3evkjmJAKAZErXdROucP kM+fxH4izyzqRjxZLPQ9gvYErXO6oauS4HM9ffDYGn6QJVfSZGN9nn1C7LNQTJIp 69dLaMzpjii7uP6ZDVK5oSGycFcXCoLGZJPR7Bx0WM9AWaQGVTfvdlDhsrmKwVl3 7B+UNbUIYFWoJ9suU2i3YON4R5qYgopX2Pe8yhNmlmcx+kFTMnVpnTDCFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG+NFpNUYGkO3lPg1UgD/8PvqoDMB8GA1UdIwQY MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt ODBkNDk0NTkxMWRkLzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl1yYAyT lnTWXsIcdGuIJZVMYq9zn1Wk+cfrOX611x1dPVBI/cotWRcWpTWyiY800ftMvS6D TblhTN6n6bsT9YmC4bx5G0sm6dtNxAws/Qxx/dyXlIYWH+MmcSSgNAFcoTwE3Afv 5+RxWhpBrxkFSekhaqKEYViYrg7+5sik9uObRktS0rUrGl3hvG0p2icbPdBTI+fH nR5jDtXZrUnUJQd28cxEm7oT1Wl4HzdQv1crZD3Q9NEKRkFOoUqmcRaAaRK0tIG+ oLXg9T1xXPUMZrduUWZsmXv3YByFMxYL0U7tIn8X96MsARCeZQEH3d48UPaMYu22 7+0xsOueIba2Fw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:35 2025 by rpki-client