This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json) Hash identifier: aEVTUiTKSxbHC4ycbhURbE3x70VY6g/cD6Iqfsgfnjs= Subject key identifier: E9:DC:19:96:7F:DC:09:24:C2:41:40:FB:75:B8:7E:CB:BB:6B:40:D1 Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Certificate serial: 019B4C28506DAC5F4A8B3E66CE3706AC0D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft Manifest number: 06B4 Signing time: Tue 23 Dec 2025 17:01:08 +0000 Manifest this update: Tue 23 Dec 2025 17:01:08 +0000 Manifest next update: Wed 24 Dec 2025 17:01:08 +0000 Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: QMAzvgarSirEn/is+bOTti+QloenTITKHCLuU25OBpA=) 2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=) 3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:50:6d:ac:5f:4a:8b:3e:66:ce:37:06:ac:0d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Validity Not Before: Dec 23 17:01:08 2025 GMT Not After : Dec 24 17:01:08 2025 GMT Subject: CN=e9dc19967fdc0924c24140fb75b87ecbbb6b40d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:ba:86:8d:b5:ff:8b:78:21:c3:93:1c:9f: 8e:c7:80:3d:ae:ef:09:ff:e2:f8:01:d4:a4:eb:b7: 60:24:8b:81:be:eb:b5:a4:9e:2e:88:22:9d:1c:e9: 9e:7f:1c:c7:b3:6f:f3:77:2f:32:af:a1:83:76:3f: a7:fc:68:76:2a:ca:7f:a8:4e:41:08:50:d0:19:f5: 64:a4:ca:0c:1c:02:17:4c:60:42:5b:d3:6c:12:3d: 2b:88:4f:39:fc:8d:f9:a9:bf:27:70:d8:bb:1d:fb: e4:44:af:f0:0e:5a:90:03:5d:20:95:7d:f9:a7:13: 13:11:b5:6a:4d:02:9c:91:81:e1:e4:b3:9e:25:ba: fc:6f:34:8b:86:df:c7:d9:e3:e4:e0:20:89:e5:0b: f7:c6:5f:bd:06:e4:6f:0f:30:84:cd:ce:9c:b2:3f: 2a:0f:03:f3:b6:af:6e:aa:d1:e9:4f:b0:cd:11:04: 33:fd:80:e6:d6:58:29:57:fc:18:34:2f:e9:ef:da: c5:67:5f:f9:34:59:a0:a7:cb:f7:81:98:60:e1:7c: f5:0b:58:39:03:8b:c1:6d:ab:7f:19:11:eb:22:cc: 12:1d:74:28:57:14:37:cc:e1:74:b3:40:c2:58:e6: 0f:87:f7:fc:c2:03:7e:38:0e:47:c9:98:1f:5e:a1: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DC:19:96:7F:DC:09:24:C2:41:40:FB:75:B8:7E:CB:BB:6B:40:D1 X509v3 Authority Key Identifier: keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:0d:86:2a:53:31:e7:d5:bd:b3:5f:d8:60:63:6f:5f:60:64: d6:79:5a:e9:e3:1e:85:b3:a4:c7:ce:bb:b2:da:16:f0:65:e5: ce:48:10:a6:95:e4:ee:6f:b2:af:e1:a9:ee:7a:03:8b:19:0f: 5d:6d:3e:53:e3:15:8a:71:f5:b9:82:98:8d:26:c3:8b:82:51: 48:dd:be:88:32:fd:09:98:4d:4d:7f:8b:b1:27:b7:cf:0b:c3: 8d:db:c7:4a:bd:a8:74:f4:0b:c0:3b:f7:02:2b:3a:e3:c9:4a: 83:49:5b:dd:96:ba:c2:15:bf:9c:65:c4:a0:c7:56:16:84:6c: 80:51:de:f4:47:3d:1b:87:e2:20:00:e1:b8:fb:f5:54:03:c4: a7:9f:ea:f5:c7:81:ee:85:38:77:d8:a2:30:f6:d2:f1:c4:9e: a5:f7:d8:d3:7f:66:cc:03:2f:d2:e7:2e:3c:85:0c:fb:63:6a: 84:02:3d:a4:bc:20:94:0a:99:27:11:2d:91:41:f5:23:2a:2b: 95:a3:4e:0d:4d:c4:d0:1c:d1:d7:13:06:5a:b2:a9:9f:6f:52: 81:bf:1c:aa:4d:98:cf:a8:4c:e3:1a:e5:3a:f2:24:31:5b:71: 8b:fb:b1:d3:28:41:f9:f4:53:3f:e1:a3:cb:d6:b0:b1:cf:8f: 23:e1:a5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKFBtrF9Kiz5mzjcGrA1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjNhYTAxNDBiNzk4MzUwMGVhODI5ZjNjMzZiYmZiNjVh Zjk5NzIwHhcNMjUxMjIzMTcwMTA4WhcNMjUxMjI0MTcwMTA4WjAzMTEwLwYDVQQD EyhlOWRjMTk5NjdmZGMwOTI0YzI0MTQwZmI3NWI4N2VjYmJiNmI0MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsy6ho21/4t4IcOTHJ+Ox4A9ru8J /+L4AdSk67dgJIuBvuu1pJ4uiCKdHOmefxzHs2/zdy8yr6GDdj+n/Gh2Ksp/qE5B CFDQGfVkpMoMHAIXTGBCW9NsEj0riE85/I35qb8ncNi7HfvkRK/wDlqQA10glX35 pxMTEbVqTQKckYHh5LOeJbr8bzSLht/H2ePk4CCJ5Qv3xl+9BuRvDzCEzc6csj8q DwPztq9uqtHpT7DNEQQz/YDm1lgpV/wYNC/p79rFZ1/5NFmgp8v3gZhg4Xz1C1g5 A4vBbat/GRHrIswSHXQoVxQ3zOF0s0DCWOYPh/f8wgN+OA5HyZgfXqHsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOncGZZ/3AkkwkFA+3W4fsu7a0DRMB8GA1UdIwQY MBaAFGrzqgFAt5g1AOqCnzw2u/tlr5lyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTkt YjhmM2I3NzllNTRiLzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTktYjhmM2I3NzllNTRi LzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEw2GKlMx 59W9s1/YYGNvX2Bk1nla6eMehbOkx867stoW8GXlzkgQppXk7m+yr+Gp7noDixkP XW0+U+MVinH1uYKYjSbDi4JRSN2+iDL9CZhNTX+LsSe3zwvDjdvHSr2odPQLwDv3 Ais648lKg0lb3Za6whW/nGXEoMdWFoRsgFHe9Ec9G4fiIADhuPv1VAPEp5/q9ceB 7oU4d9iiMPbS8cSepffY039mzAMv0ucuPIUM+2NqhAI9pLwglAqZJxEtkUH1Iyor laNODU3E0BzR1xMGWrKpn29Sgb8cqk2Yz6hM4xrlOvIkMVtxi/ux0yhB+fRTP+Gj y9awsc+PI+Gl1A== -----END CERTIFICATE-----Generated at Wed Dec 24 00:12:27 2025 by rpki-client