This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json) Hash identifier: YJ3Pr0xzJlJtqn0ciIG9F/WhGPm2aGDPvJxsNMw2p4E= Subject key identifier: A6:9A:15:5A:67:71:B5:8E:18:F3:5A:3C:5E:5C:F9:EE:18:C0:CC:1F Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43 Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343 Certificate serial: 019B3F48A112755A4ED685C105FAD8659FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft Manifest number: 0D54 Signing time: Sun 21 Dec 2025 05:01:22 +0000 Manifest this update: Sun 21 Dec 2025 05:01:22 +0000 Manifest next update: Mon 22 Dec 2025 05:01:22 +0000 Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: 1JqG+/Ft3KCADWN2xzWICwl+cWYDedGZPQoXUvuwQlo=) 2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:a1:12:75:5a:4e:d6:85:c1:05:fa:d8:65:9f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343 Validity Not Before: Dec 21 05:01:22 2025 GMT Not After : Dec 22 05:01:22 2025 GMT Subject: CN=a69a155a6771b58e18f35a3c5e5cf9ee18c0cc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:7b:3c:0a:92:2b:61:a2:90:4b:98:a0:3e: b6:1b:6a:a7:be:a7:80:a2:b2:59:fd:5b:ac:67:e2: c3:09:51:58:0a:02:4a:bf:7c:84:ba:49:83:e8:6a: 63:5d:c0:72:1e:e6:f1:8d:8b:c3:bb:85:6c:bf:37: c7:40:df:5d:28:c1:fa:0e:7a:ce:fb:12:eb:20:54: ad:07:11:c3:18:8c:cc:78:04:64:d5:73:5f:82:71: 45:82:ed:0c:82:86:31:a7:bb:60:fa:fd:85:ce:cb: e6:b3:78:a3:aa:75:a7:0c:b4:91:99:da:35:ea:4f: a2:1e:f3:da:ff:21:16:2b:d9:4d:05:45:bd:dd:81: 8f:f6:2b:ba:65:9e:b8:c8:41:8d:6e:93:40:7c:3a: ea:2c:1e:64:72:9a:9b:46:d7:75:0d:9b:ac:ea:91: 24:ee:06:c7:67:af:21:95:bc:a7:39:e6:3a:e1:c4: 8a:f4:29:25:3d:10:12:26:01:0c:80:a1:58:c6:dd: f7:90:ed:9a:13:ca:65:9f:28:59:5b:5b:2f:b0:01: c3:ad:f4:da:9e:f5:f7:f8:de:56:cf:b9:0c:77:41: ca:ab:34:b3:d6:52:04:34:97:9e:88:6f:43:cb:8e: e7:c0:18:fe:53:1e:2b:22:c4:1b:2e:00:6a:c2:1e: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9A:15:5A:67:71:B5:8E:18:F3:5A:3C:5E:5C:F9:EE:18:C0:CC:1F X509v3 Authority Key Identifier: keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f8:e6:97:a3:8a:96:25:33:ff:2d:2f:a3:e4:79:47:fa:29: 23:d2:89:94:91:6f:2d:03:dc:6c:46:14:9e:d0:1a:e4:f3:07: c6:3d:d6:59:8a:3c:90:8a:26:f6:0e:f2:e8:74:83:22:4a:8d: be:1c:da:59:ba:7a:7a:b4:f4:46:32:3a:c0:a3:1a:60:1e:41: 9a:f8:75:bd:ee:7a:87:9f:ee:1a:1b:c3:8f:42:b6:2f:e2:40: f6:b4:98:d5:58:76:7e:36:03:0f:2c:a2:26:9a:b6:cd:ea:cf: bf:c4:b5:39:66:57:e7:4a:94:1a:1c:38:73:d0:da:13:8a:06: 3b:ee:d3:b7:f9:ea:6e:9a:9a:30:bc:13:15:c1:d9:09:b5:83: bc:44:b7:70:a0:ec:1c:c6:de:28:9d:d5:b9:a1:ae:f8:75:ff: b8:0f:f3:10:33:47:db:ab:c1:79:72:06:e9:b7:56:e4:69:bf: 11:4b:13:f0:39:98:2b:77:e5:a7:cf:50:03:c0:ba:4d:5a:49: 2f:9a:f5:81:92:54:19:cf:56:4e:99:ec:d0:9b:64:04:84:de: eb:90:8e:cf:be:49:50:9b:46:5e:21:b7:11:39:84:e0:99:1d: b2:24:f8:a4:05:b0:dc:38:00:11:f0:25:1c:18:44:87:2b:b5: e4:3d:15:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKESdVpO1oXBBfrYZZ/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGQwZmVlMmNkNTY2OTY1Y2EwOGRiNTUwNjYzY2IyMGI0 MTIzNDMwHhcNMjUxMjIxMDUwMTIyWhcNMjUxMjIyMDUwMTIyWjAzMTEwLwYDVQQD EyhhNjlhMTU1YTY3NzFiNThlMThmMzVhM2M1ZTVjZjllZTE4YzBjYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKx7PAqSK2GikEuYoD62G2qnvqeA orJZ/VusZ+LDCVFYCgJKv3yEukmD6GpjXcByHubxjYvDu4VsvzfHQN9dKMH6DnrO +xLrIFStBxHDGIzMeARk1XNfgnFFgu0MgoYxp7tg+v2Fzsvms3ijqnWnDLSRmdo1 6k+iHvPa/yEWK9lNBUW93YGP9iu6ZZ64yEGNbpNAfDrqLB5kcpqbRtd1DZus6pEk 7gbHZ68hlbynOeY64cSK9CklPRASJgEMgKFYxt33kO2aE8plnyhZW1svsAHDrfTa nvX3+N5Wz7kMd0HKqzSz1lIENJeeiG9Dy47nwBj+Ux4rIsQbLgBqwh4l4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaaFVpncbWOGPNaPF5c+e4YwMwfMB8GA1UdIwQY MBaAFAAND+4s1WaWXKCNtVBmPLILQSNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTkt Yjk0MWJhOTIxYjNmLzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTktYjk0MWJhOTIxYjNm LzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/jml6OK liUz/y0vo+R5R/opI9KJlJFvLQPcbEYUntAa5PMHxj3WWYo8kIom9g7y6HSDIkqN vhzaWbp6erT0RjI6wKMaYB5Bmvh1ve56h5/uGhvDj0K2L+JA9rSY1Vh2fjYDDyyi Jpq2zerPv8S1OWZX50qUGhw4c9DaE4oGO+7Tt/nqbpqaMLwTFcHZCbWDvES3cKDs HMbeKJ3VuaGu+HX/uA/zEDNH26vBeXIG6bdW5Gm/EUsT8DmYK3flp89QA8C6TVpJ L5r1gZJUGc9WTpns0JtkBITe65COz75JUJtGXiG3ETmE4JkdsiT4pAWw3DgAEfAl HBhEhyu15D0VAg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:12:17 2025 by rpki-client