This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: xPbV0V459urDO+mJjLl/lvgRSFV80sKN4wjg6e2MmJE= Subject key identifier: 72:9B:DC:57:3F:01:C4:B3:74:0B:C4:99:05:2E:8F:A7:66:29:AF:A1 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B3D59BF491DF4E973F486024A0CEDE566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1220 Signing time: Sat 20 Dec 2025 20:00:50 +0000 Manifest this update: Sat 20 Dec 2025 20:00:50 +0000 Manifest next update: Sun 21 Dec 2025 20:00:50 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: Jtwm8WLHoiKVU0izMFHACRn4GhjzJ9lygU5KG2sZ17g=) 5: GNzsCq9UcoPEjNUJsHvqEaDTmhI.roa (hash: UUPKwITy6fppL/i4iIfPQtQ+oEwY++MmCUS8CWuHxoc=) 6: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 7: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 8: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 9: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:bf:49:1d:f4:e9:73:f4:86:02:4a:0c:ed:e5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Dec 20 20:00:50 2025 GMT Not After : Dec 21 20:00:50 2025 GMT Subject: CN=729bdc573f01c4b3740bc499052e8fa76629afa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:05:8d:d3:ed:3f:30:67:c2:48:ce:c2:14: 8e:54:8d:e6:16:77:83:b0:07:9d:dc:d9:68:92:b4: 9a:bc:d0:d9:ca:01:23:2c:ee:89:fe:b5:9d:91:dc: 91:d1:6d:f9:51:f7:3a:e0:67:b3:95:80:91:5d:84: 2b:5d:9f:36:5e:6f:05:95:44:64:68:af:25:14:bd: b9:82:c0:6d:68:f1:07:d3:6e:19:d7:33:e1:4d:a2: 3e:4b:56:09:a4:10:fb:a4:87:57:01:fe:d2:b3:a2: 85:30:a2:ae:3d:01:a3:25:08:35:08:87:1a:7c:02: 89:d7:b7:6e:ae:bf:38:0b:be:ff:44:67:b5:9f:45: 1d:da:99:46:19:18:fd:76:d9:f2:82:fa:a8:ea:1f: c5:64:55:4f:96:f9:6e:5a:e0:0a:ac:29:70:7b:3b: cc:77:30:ed:cc:35:c3:e1:de:28:63:2b:aa:42:7b: 97:ed:94:97:98:f8:51:ae:57:a8:4e:4b:fe:07:b6: 0d:b3:39:39:69:ee:25:38:9b:d2:2f:52:8c:2e:32: 39:f4:b9:d9:a4:b3:5f:93:de:dc:b5:ee:92:a9:12: c3:cf:da:58:80:c7:b6:01:39:10:c6:06:ae:3b:ca: be:51:fa:ba:08:f2:a7:a7:2f:50:7b:3a:32:ad:64: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9B:DC:57:3F:01:C4:B3:74:0B:C4:99:05:2E:8F:A7:66:29:AF:A1 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b4:3e:e9:fa:eb:68:46:c3:34:38:52:ce:2d:52:ce:7b:5f: 04:8f:a0:e6:1c:83:5b:22:b9:99:74:58:2a:54:ea:af:dd:0d: 61:58:23:ff:a7:f4:e1:a8:fd:1d:ba:c7:cd:64:5f:9a:36:2f: e4:7f:78:7d:f5:3d:41:c8:d1:b8:cf:f3:8b:f1:c1:e5:6c:f0: cf:17:cc:c8:7b:3e:ff:76:90:b5:06:85:f7:4c:01:46:4a:b9: 9d:ef:fe:17:14:0b:13:8e:53:1c:87:5b:fd:26:57:9b:1f:31: cf:2f:0b:78:de:e7:6c:f4:d4:19:19:cb:80:5b:f4:19:8c:cb: 74:4e:1b:04:92:e3:b8:43:30:81:04:e5:06:03:e2:81:91:30: 7a:9f:d2:a8:6a:35:66:e5:73:a8:ee:56:c0:ce:88:d5:4a:d9: 28:98:3d:55:6d:d5:d6:1d:9e:93:0c:4a:5c:99:98:5c:60:4d: c6:10:e3:95:6a:59:73:de:80:c5:86:2b:5e:9e:d4:3c:c7:1e: 87:f8:09:62:6c:8d:3d:47:e0:d1:7b:07:9d:8c:6a:e9:cc:43: 51:34:66:e8:5e:51:17:80:4a:36:6f:61:7b:4f:cb:3c:bf:c1: 13:97:30:b8:44:f9:7b:50:9f:66:99:97:4e:a3:a9:cd:8d:59: 63:85:3d:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wb9JHfTpc/SGAkoM7eVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUxMjIwMjAwMDUwWhcNMjUxMjIxMjAwMDUwWjAzMTEwLwYDVQQD Eyg3MjliZGM1NzNmMDFjNGIzNzQwYmM0OTkwNTJlOGZhNzY2MjlhZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLkFjdPtPzBnwkjOwhSOVI3mFneD sAed3NlokrSavNDZygEjLO6J/rWdkdyR0W35Ufc64GezlYCRXYQrXZ82Xm8FlURk aK8lFL25gsBtaPEH024Z1zPhTaI+S1YJpBD7pIdXAf7Ss6KFMKKuPQGjJQg1CIca fAKJ17durr84C77/RGe1n0Ud2plGGRj9dtnygvqo6h/FZFVPlvluWuAKrClwezvM dzDtzDXD4d4oYyuqQnuX7ZSXmPhRrleoTkv+B7YNszk5ae4lOJvSL1KMLjI59LnZ pLNfk97cte6SqRLDz9pYgMe2ATkQxgauO8q+Ufq6CPKnpy9QezoyrWQsgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKb3Fc/AcSzdAvEmQUuj6dmKa+hMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbQ+6frr aEbDNDhSzi1SzntfBI+g5hyDWyK5mXRYKlTqr90NYVgj/6f04aj9HbrHzWRfmjYv 5H94ffU9QcjRuM/zi/HB5WzwzxfMyHs+/3aQtQaF90wBRkq5ne/+FxQLE45THIdb /SZXmx8xzy8LeN7nbPTUGRnLgFv0GYzLdE4bBJLjuEMwgQTlBgPigZEwep/SqGo1 ZuVzqO5WwM6I1UrZKJg9VW3V1h2ekwxKXJmYXGBNxhDjlWpZc96AxYYrXp7UPMce h/gJYmyNPUfg0XsHnYxq6cxDUTRm6F5RF4BKNm9he0/LPL/BE5cwuET5e1CfZpmX TqOpzY1ZY4U9tQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:18 2025 by rpki-client