This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft File: aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json) Hash identifier: y1wltgv5dUoKUp8oQKao6T/AuOyNp7lQR2gRo5Ib9Jc= Subject key identifier: 1D:A9:F8:06:B0:76:D6:57:1D:2C:22:43:70:FA:68:0C:F3:F6:CA:3A Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877 Certificate serial: 019B4B8358A2A60997DCB8AD8607BE0AC1DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft Manifest number: 08A0 Signing time: Tue 23 Dec 2025 14:00:57 +0000 Manifest this update: Tue 23 Dec 2025 14:00:57 +0000 Manifest next update: Wed 24 Dec 2025 14:00:57 +0000 Files and hashes: 1: PxyIfomodD9RHY4nPMUQ_8FG_F0.roa (hash: GQBwkJMiYlMRNPb5m5PsI1lq6MhgUy7JaZpjCwR+Ch8=) 2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: L9VfbbxSbb3NbX10X0O/KtwDcqZ74aEqk4HomEeLshs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:58:a2:a6:09:97:dc:b8:ad:86:07:be:0a:c1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877 Validity Not Before: Dec 23 14:00:57 2025 GMT Not After : Dec 24 14:00:57 2025 GMT Subject: CN=1da9f806b076d6571d2c224370fa680cf3f6ca3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:50:85:58:bf:e9:07:40:af:76:93:66:5c: cc:17:1c:40:7f:b9:88:27:5e:de:6c:5d:5d:7d:7c: df:57:e6:b4:de:c3:64:e5:d2:ac:fb:e3:3a:21:da: cd:d2:f7:e7:c1:1a:02:bd:16:2d:28:ce:cf:ea:1c: 5d:a4:be:40:3a:f5:1a:0e:79:00:90:1e:f4:b8:af: 7c:35:77:cb:d2:39:a5:e0:f6:8f:53:af:e6:e2:b6: f0:b4:56:e4:7a:6f:e5:72:e7:b4:ed:7f:d1:d7:69: c1:3c:29:e4:a1:9d:83:90:08:29:41:2e:d9:27:6d: f1:aa:51:97:68:29:0b:f6:c3:a9:e0:55:73:12:db: 14:0c:28:b6:6d:b4:e3:7a:ff:42:2e:28:46:37:cb: 3a:67:23:c1:15:71:69:b0:ff:51:ed:c3:c9:ac:3d: 42:9a:4e:c3:7d:61:50:88:9f:22:b6:d5:d0:a6:f3: 0b:a1:e4:20:4f:83:6f:18:f7:4d:fb:9f:7f:5c:fc: 87:89:b2:e8:25:38:2b:aa:ef:5f:de:3a:95:08:0b: 08:77:f7:1b:c9:db:90:1c:cf:e7:15:1f:fd:39:02: 8a:39:e1:41:4b:92:b4:00:85:16:50:0f:78:99:6b: d6:ad:13:5c:42:ea:20:b5:cc:82:40:69:77:de:27: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A9:F8:06:B0:76:D6:57:1D:2C:22:43:70:FA:68:0C:F3:F6:CA:3A X509v3 Authority Key Identifier: keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:69:a3:b7:4e:08:9b:1b:30:9a:78:a1:76:f1:ef:5e:5a:d8: 3e:f6:30:88:1c:4a:97:6c:78:ec:68:98:23:21:cf:f1:a5:00: 02:fe:28:cf:b7:c2:a1:31:7f:a7:15:3b:b6:5c:bc:95:88:1b: 4e:f4:63:aa:1b:f6:e5:28:95:cd:22:52:73:8f:38:9f:ce:d3: e4:48:3f:f4:e1:bd:ee:8a:59:4a:0b:9a:65:a1:62:c4:95:fe: 7e:a8:5d:50:50:51:b8:3f:bf:45:5f:f8:a6:b5:30:71:11:0f: c3:f5:e7:29:10:1f:88:dd:7f:ac:37:c7:86:85:7b:54:30:f9: 2e:62:3a:7c:72:48:ba:f3:90:30:3b:db:6b:7b:6e:52:5b:aa: fe:0f:33:87:65:c0:52:f2:18:41:17:ec:0b:2d:87:cd:46:8a: 02:52:e6:51:59:89:6b:7c:0a:f6:91:60:49:f9:7e:1d:db:5e: 2e:59:3e:2c:a7:b5:81:f8:eb:ee:2e:f5:0f:04:1f:7d:b2:92: ef:9a:d3:55:00:da:26:19:91:a4:7b:ee:8b:02:b7:9f:68:76: 2e:db:7f:0a:5e:a7:22:34:f6:7c:60:bb:4d:d9:3a:1f:fd:04: 68:75:97:96:11:77:2d:33:f4:14:14:64:3b:43:9c:20:a7:dd: 4c:35:80:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg1iipgmX3Lithge+CsHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTFkNDU1MWQyNmE1MWMwZjkyYjc3YzJkMzc4ZmIzNDc1 OGI4NzcwHhcNMjUxMjIzMTQwMDU3WhcNMjUxMjI0MTQwMDU3WjAzMTEwLwYDVQQD EygxZGE5ZjgwNmIwNzZkNjU3MWQyYzIyNDM3MGZhNjgwY2YzZjZjYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ORQhVi/6QdAr3aTZlzMFxxAf7mI J17ebF1dfXzfV+a03sNk5dKs++M6IdrN0vfnwRoCvRYtKM7P6hxdpL5AOvUaDnkA kB70uK98NXfL0jml4PaPU6/m4rbwtFbkem/lcue07X/R12nBPCnkoZ2DkAgpQS7Z J23xqlGXaCkL9sOp4FVzEtsUDCi2bbTjev9CLihGN8s6ZyPBFXFpsP9R7cPJrD1C mk7DfWFQiJ8ittXQpvMLoeQgT4NvGPdN+59/XPyHibLoJTgrqu9f3jqVCAsId/cb yduQHM/nFR/9OQKKOeFBS5K0AIUWUA94mWvWrRNcQuogtcyCQGl33idaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2p+AawdtZXHSwiQ3D6aAzz9so6MB8GA1UdIwQY MBaAFGlR1FUdJqUcD5K3fC03j7NHWLh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAt YTJlZGE5NDZlZDI5LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAtYTJlZGE5NDZlZDI5 LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWmjt04I mxswmnihdvHvXlrYPvYwiBxKl2x47GiYIyHP8aUAAv4oz7fCoTF/pxU7tly8lYgb TvRjqhv25SiVzSJSc484n87T5Eg/9OG97opZSguaZaFixJX+fqhdUFBRuD+/RV/4 prUwcREPw/XnKRAfiN1/rDfHhoV7VDD5LmI6fHJIuvOQMDvba3tuUluq/g8zh2XA UvIYQRfsCy2HzUaKAlLmUVmJa3wK9pFgSfl+HdteLlk+LKe1gfjr7i71DwQffbKS 75rTVQDaJhmRpHvuiwK3n2h2Ltt/Cl6nIjT2fGC7Tdk6H/0EaHWXlhF3LTP0FBRk O0OcIKfdTDWAMg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:54:28 2025 by rpki-client