This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json) Hash identifier: fR/uAbZ4+20XsDJKr/GnOo4X3tdJ1mN/Nbuc48P/hpw= Subject key identifier: 02:19:14:FE:2D:3F:6F:11:2E:04:C2:99:6A:17:B4:F7:26:5D:A8:AA Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89 Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289 Certificate serial: 019B488263A9AF9AA11DCF1F74790CE27BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 00:01:03 +0000 Manifest this update: Tue 23 Dec 2025 00:01:03 +0000 Manifest next update: Wed 24 Dec 2025 00:01:03 +0000 Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: /gsN3qDsstIPQDLkdOR2X+naFM6tPT2Fx5xKLDMMb1c=) 2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:63:a9:af:9a:a1:1d:cf:1f:74:79:0c:e2:7b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289 Validity Not Before: Dec 23 00:01:03 2025 GMT Not After : Dec 24 00:01:03 2025 GMT Subject: CN=021914fe2d3f6f112e04c2996a17b4f7265da8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:46:35:6a:56:4f:96:9b:17:16:65:06:cc: da:a0:8b:71:c3:5e:bd:3c:13:6b:bc:c3:15:f4:94: d8:c6:19:8c:18:5a:18:42:2b:6e:66:1b:53:56:2c: ef:e6:9e:42:41:f2:a0:d4:57:82:27:25:a5:86:1a: 7e:db:50:d2:bd:f6:bd:fb:13:bf:29:bc:54:c6:e8: 7f:2b:32:d3:cb:77:27:c7:ac:01:04:a0:09:7f:2f: e0:0c:d9:33:7d:14:14:de:78:b1:7d:dc:fc:6b:65: 1c:a2:81:ac:21:05:16:e6:38:88:e7:67:21:7c:6b: 16:ad:4e:9f:f5:9c:50:1a:8d:8a:1b:46:c7:06:63: 90:a6:53:7f:c3:ae:47:e0:9d:5d:2b:1d:65:23:98: 7b:b7:89:55:47:07:3f:b3:fd:d3:c6:b4:d8:c8:c1: ba:19:cd:98:47:f9:88:00:39:e0:81:2a:a4:28:a2: a9:e5:91:c3:65:43:3d:b2:58:10:22:c4:b5:e3:38: d5:b2:5e:6d:68:55:66:60:57:03:3c:12:34:f0:19: ac:c9:ff:f9:11:a3:1e:3c:2b:82:4a:23:be:e9:c1: 48:95:c3:23:6b:53:5e:28:26:db:d5:71:5b:31:40: 2f:56:90:42:0d:b2:0c:5a:99:c6:b0:f7:ec:4d:67: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:19:14:FE:2D:3F:6F:11:2E:04:C2:99:6A:17:B4:F7:26:5D:A8:AA X509v3 Authority Key Identifier: keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:90:0c:fc:96:7a:8e:4d:2b:36:4c:77:ec:64:b7:21:46:ac: 1d:c9:cc:49:e1:c4:13:74:ef:18:8a:94:3a:53:47:7e:0d:58: e9:4d:a1:2b:f9:cf:b2:df:2a:ad:5a:09:a4:42:39:4b:81:53: be:57:8b:7e:bd:06:7c:ae:1d:74:86:09:1a:95:bd:88:33:f1: a1:4e:3f:9c:b0:f8:99:16:f9:a1:86:05:db:3f:89:2f:eb:ea: 1f:7d:cf:7a:ff:1d:8c:b1:df:ac:37:be:6f:86:cb:a1:ca:76: a6:23:72:99:ea:cf:fc:60:57:ff:f1:22:a9:f6:8c:a5:76:fb: 55:99:31:40:81:7d:b8:61:54:76:fa:40:71:0f:e3:97:74:b0: 8c:c1:2e:8d:36:3d:de:d6:2b:b2:44:f8:d1:d7:f3:48:29:38: fa:88:59:21:ff:13:51:31:06:87:0b:62:92:bf:13:cf:73:ab: 8e:8c:89:3c:3f:88:e4:66:b7:08:ec:85:61:5a:1f:83:17:a0: 6d:49:4d:df:4a:7d:93:6b:ec:d4:05:d0:e3:40:c6:52:38:fc: c2:24:aa:a7:33:e5:e4:93:41:c8:8b:7d:2d:ff:fd:2c:27:be: 22:85:ab:31:19:f7:79:83:d0:02:ca:93:31:4d:2f:92:c7:3e: 92:18:63:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgmOpr5qhHc8fdHkM4nvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk ODgyODkwHhcNMjUxMjIzMDAwMTAzWhcNMjUxMjI0MDAwMTAzWjAzMTEwLwYDVQQD EygwMjE5MTRmZTJkM2Y2ZjExMmUwNGMyOTk2YTE3YjRmNzI2NWRhOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3BGNWpWT5abFxZlBszaoItxw169 PBNrvMMV9JTYxhmMGFoYQituZhtTVizv5p5CQfKg1FeCJyWlhhp+21DSvfa9+xO/ KbxUxuh/KzLTy3cnx6wBBKAJfy/gDNkzfRQU3nixfdz8a2UcooGsIQUW5jiI52ch fGsWrU6f9ZxQGo2KG0bHBmOQplN/w65H4J1dKx1lI5h7t4lVRwc/s/3TxrTYyMG6 Gc2YR/mIADnggSqkKKKp5ZHDZUM9slgQIsS14zjVsl5taFVmYFcDPBI08Bmsyf/5 EaMePCuCSiO+6cFIlcMja1NeKCbb1XFbMUAvVpBCDbIMWpnGsPfsTWcwqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIZFP4tP28RLgTCmWoXtPcmXaiqMB8GA1UdIwQY MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5 LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpAM/JZ6 jk0rNkx37GS3IUasHcnMSeHEE3TvGIqUOlNHfg1Y6U2hK/nPst8qrVoJpEI5S4FT vleLfr0GfK4ddIYJGpW9iDPxoU4/nLD4mRb5oYYF2z+JL+vqH33Pev8djLHfrDe+ b4bLocp2piNymerP/GBX//EiqfaMpXb7VZkxQIF9uGFUdvpAcQ/jl3SwjMEujTY9 3tYrskT40dfzSCk4+ohZIf8TUTEGhwtikr8Tz3OrjoyJPD+I5Ga3COyFYVofgxeg bUlN30p9k2vs1AXQ40DGUjj8wiSqpzPl5JNByIt9Lf/9LCe+IoWrMRn3eYPQAsqT MU0vksc+khhjug== -----END CERTIFICATE-----Generated at Tue Dec 23 05:34:03 2025 by rpki-client