This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json) Hash identifier: Fe+oh3zyF9ORU0CRqgCKfw+Xjp4KaKREtrRLViQkzKo= Subject key identifier: B8:CD:E9:F1:8B:9B:00:54:3E:D2:BD:C1:14:A7:42:B5:4B:73:60:80 Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Certificate serial: 019B5F784CBFE78F3D4DB251D62A17AA525B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft Manifest number: 06BE Signing time: Sat 27 Dec 2025 11:01:17 +0000 Manifest this update: Sat 27 Dec 2025 11:01:17 +0000 Manifest next update: Sun 28 Dec 2025 11:01:17 +0000 Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: oXJzjuoVsWgeOq9B8LwbIKohu5yovr+CUTrS6+hNV9Q=) 2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=) 3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:78:4c:bf:e7:8f:3d:4d:b2:51:d6:2a:17:aa:52:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Validity Not Before: Dec 27 11:01:17 2025 GMT Not After : Dec 28 11:01:17 2025 GMT Subject: CN=b8cde9f18b9b00543ed2bdc114a742b54b736080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ed:b8:48:54:28:58:eb:32:2d:ac:e2:8c:f7: 05:12:6e:e0:b1:38:9e:3e:4b:c8:23:ab:a6:30:02: 72:af:56:98:d9:7e:2b:5d:23:68:fb:ae:60:22:a2: 40:49:2b:65:52:8f:d3:e7:5f:ed:5e:d4:3d:52:8d: 95:8a:25:9a:a2:e5:ef:65:3b:74:69:af:87:fb:05: fb:ec:ab:a7:15:65:9f:f1:3f:ed:35:9c:11:d1:f4: c5:19:d9:68:87:38:e2:76:ca:21:c3:d4:af:78:f4: 46:7f:df:c3:4a:f7:11:cd:e6:4b:fe:35:d4:55:32: de:f8:cd:92:82:d9:4a:d2:d3:35:13:07:e4:dd:f0: 1c:63:ec:96:20:72:89:93:e7:f5:46:f9:db:56:84: 07:79:87:c6:d1:10:29:fd:43:4f:23:03:2b:1c:b8: 6a:2a:1c:0f:49:0c:8c:57:3b:d8:b1:72:25:af:90: b9:76:cd:57:a3:32:c3:3f:cd:3b:f3:a9:59:64:c1: 2f:bb:24:46:77:91:26:d8:f9:06:c5:a1:f2:00:30: 8e:e8:bc:6a:35:f8:df:bf:bc:26:c8:bb:f2:c1:bc: 4c:ba:1e:81:9a:7d:fc:88:bf:68:7f:b1:6d:68:e5: 6c:bf:35:46:5b:f1:f7:b5:06:1d:58:78:e5:2e:06: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CD:E9:F1:8B:9B:00:54:3E:D2:BD:C1:14:A7:42:B5:4B:73:60:80 X509v3 Authority Key Identifier: keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:94:91:fc:81:a0:c9:7c:01:3a:90:a4:a7:9f:61:60:c3:2e: 8b:3e:ca:ec:a0:16:ed:29:18:11:80:d9:5b:b7:6b:9e:e3:b5: 8c:5a:83:f6:f3:d8:36:06:f1:66:8b:15:59:8b:4d:9d:4d:27: 98:03:2e:44:a4:d9:8d:ff:8b:f5:6a:1e:1a:f5:7a:6a:12:b4: 2d:58:ce:42:6e:4a:15:e9:0d:e3:b5:8f:c3:10:43:8b:cb:38: 88:0e:86:f5:b7:a7:5f:a3:61:ca:b7:6e:d5:e8:1e:51:05:0e: 8b:2b:e5:fc:bd:ab:63:28:9f:d9:6b:a6:27:fd:aa:35:f7:8c: 67:c7:80:b7:22:cd:e1:f2:60:37:a7:6a:6a:92:e5:20:8e:de: 6a:d7:12:79:c8:23:95:08:75:2e:ee:e7:74:8d:5f:94:c1:52: b7:4c:55:41:b4:c4:6b:97:e8:dd:d5:7c:d4:8d:6d:06:59:e7: f0:45:74:55:63:3b:c1:72:1a:99:28:e4:da:d5:d8:bf:7d:da: e1:85:41:bb:97:3a:44:2a:d0:04:8a:eb:7e:86:5d:07:68:e4: 7b:99:76:e2:27:09:96:97:06:32:eb:93:b8:0d:b5:35:ad:55: b9:3e:07:a0:fe:50:fe:1d:18:61:55:fc:28:38:f8:bd:e9:b0: 8b:b7:ae:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfeEy/5489TbJR1ioXqlJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjNhYTAxNDBiNzk4MzUwMGVhODI5ZjNjMzZiYmZiNjVh Zjk5NzIwHhcNMjUxMjI3MTEwMTE3WhcNMjUxMjI4MTEwMTE3WjAzMTEwLwYDVQQD EyhiOGNkZTlmMThiOWIwMDU0M2VkMmJkYzExNGE3NDJiNTRiNzM2MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+24SFQoWOsyLazijPcFEm7gsTie PkvII6umMAJyr1aY2X4rXSNo+65gIqJASStlUo/T51/tXtQ9Uo2ViiWaouXvZTt0 aa+H+wX77KunFWWf8T/tNZwR0fTFGdlohzjidsohw9SvePRGf9/DSvcRzeZL/jXU VTLe+M2SgtlK0tM1Ewfk3fAcY+yWIHKJk+f1RvnbVoQHeYfG0RAp/UNPIwMrHLhq KhwPSQyMVzvYsXIlr5C5ds1XozLDP80786lZZMEvuyRGd5Em2PkGxaHyADCO6Lxq Nfjfv7wmyLvywbxMuh6Bmn38iL9of7FtaOVsvzVGW/H3tQYdWHjlLgbghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjN6fGLmwBUPtK9wRSnQrVLc2CAMB8GA1UdIwQY MBaAFGrzqgFAt5g1AOqCnzw2u/tlr5lyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTkt YjhmM2I3NzllNTRiLzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTktYjhmM2I3NzllNTRi LzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJSR/IGg yXwBOpCkp59hYMMuiz7K7KAW7SkYEYDZW7drnuO1jFqD9vPYNgbxZosVWYtNnU0n mAMuRKTZjf+L9WoeGvV6ahK0LVjOQm5KFekN47WPwxBDi8s4iA6G9benX6Nhyrdu 1egeUQUOiyvl/L2rYyif2WumJ/2qNfeMZ8eAtyLN4fJgN6dqapLlII7eatcSecgj lQh1Lu7ndI1flMFSt0xVQbTEa5fo3dV81I1tBlnn8EV0VWM7wXIamSjk2tXYv33a 4YVBu5c6RCrQBIrrfoZdB2jke5l24icJlpcGMuuTuA21Na1VuT4HoP5Q/h0YYVX8 KDj4vemwi7euFA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:45:59 2025 by rpki-client