This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: I4OA1pkR9SPmBn8QiPK4vbvC4+jnUsoTei/2A0sIPlg= Subject key identifier: 56:FF:C6:6B:C2:D3:97:9D:39:64:F4:11:90:1B:B4:5A:8E:63:E7:89 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B3F48B51D2B54C775E64EB13EAEA0E984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1221 Signing time: Sun 21 Dec 2025 05:01:28 +0000 Manifest this update: Sun 21 Dec 2025 05:01:28 +0000 Manifest next update: Mon 22 Dec 2025 05:01:28 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: rf9fDawjyYy+HyS78ewDDUCWiW+vfSWxEVuPWz/3yJ0=) 5: GNzsCq9UcoPEjNUJsHvqEaDTmhI.roa (hash: UUPKwITy6fppL/i4iIfPQtQ+oEwY++MmCUS8CWuHxoc=) 6: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 7: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 8: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 9: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:b5:1d:2b:54:c7:75:e6:4e:b1:3e:ae:a0:e9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Dec 21 05:01:28 2025 GMT Not After : Dec 22 05:01:28 2025 GMT Subject: CN=56ffc66bc2d3979d3964f411901bb45a8e63e789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:0a:6a:97:ea:b7:f8:f6:f6:13:50:44:ff: 9d:92:c7:93:e6:66:43:08:49:26:f6:78:a4:1e:43: 17:0a:9c:74:89:6b:06:8e:c9:0d:9e:b1:c5:1b:12: 49:47:2f:9a:33:d7:f0:63:fa:1a:56:f8:df:1a:d4: 04:30:bc:ca:09:8d:f9:b1:bd:16:a2:ad:c1:44:1e: 14:7f:d3:ae:e7:d6:6a:fa:be:cd:73:5c:35:81:62: 96:39:68:e9:b3:04:cc:59:90:d9:9d:36:b6:19:16: 47:21:40:2e:b7:a0:a3:e0:47:98:0a:c0:61:bf:69: ea:fd:5a:9f:86:4a:df:5f:55:25:6f:f3:51:0c:18: ef:6e:f9:4f:e3:82:25:8f:51:d6:14:24:08:ef:48: 48:d9:f6:70:f0:cb:8f:08:71:e5:b8:f6:3c:34:e0: 81:5c:fe:c1:4a:f0:c7:4b:50:be:fc:d0:9f:fe:a3: d5:aa:4f:82:ed:df:0c:45:79:66:70:ee:a6:09:80: 5e:c3:10:50:90:14:13:65:68:7f:f5:fb:e5:9e:92: d4:df:01:b3:66:0c:79:a8:a5:dc:0d:69:c2:fa:c7: a5:3e:67:b7:ab:f0:e3:1a:b5:49:0c:95:8c:a2:f2: 5d:df:04:c8:71:51:ba:43:8f:76:f7:9f:a6:ea:47: 0d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FF:C6:6B:C2:D3:97:9D:39:64:F4:11:90:1B:B4:5A:8E:63:E7:89 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:60:52:1d:e2:66:39:04:44:5d:5b:e8:d7:0b:d4:df:80:13: 20:da:00:92:4e:55:17:fa:ac:93:71:ef:b0:d1:98:c2:29:bd: bf:04:d1:0a:ad:bc:2f:8e:c2:a6:2d:45:fa:44:ec:f4:54:54: 0e:18:8d:27:b4:ae:8a:2e:c8:19:29:cb:dd:f5:77:d3:55:a9: d8:4d:aa:5f:3f:23:e6:0f:47:53:f1:35:31:d3:b3:3e:ee:84: b8:4f:6a:03:38:ea:60:cb:c4:ba:e1:44:e1:97:5d:c2:39:e2: 3f:44:7a:88:22:52:03:f0:05:ba:7f:54:cb:0d:7c:38:f3:04: d4:94:32:ea:33:b0:76:c2:99:9a:9d:cb:06:1f:3a:06:85:9a: f6:77:42:22:97:fa:5b:02:22:b6:04:1e:bf:d3:b8:fc:20:50: ce:d6:6c:55:df:68:a7:5b:f5:f4:55:db:0b:fb:d7:98:dc:20: cc:d4:e3:d4:50:99:3f:90:6c:37:7a:5c:0d:5d:6d:16:95:55: 76:62:b5:61:19:db:84:08:0b:67:9d:01:11:49:ed:81:a5:8c: 08:29:f2:88:ee:11:36:47:f0:98:93:f4:9a:36:0c:1a:0f:1f: a6:c8:6e:0c:c1:c1:25:26:1c:7a:d1:cc:79:8b:25:cf:b2:f8: 47:21:91:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SLUdK1THdeZOsT6uoOmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUxMjIxMDUwMTI4WhcNMjUxMjIyMDUwMTI4WjAzMTEwLwYDVQQD Eyg1NmZmYzY2YmMyZDM5NzlkMzk2NGY0MTE5MDFiYjQ1YThlNjNlNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSwKapfqt/j29hNQRP+dkseT5mZD CEkm9nikHkMXCpx0iWsGjskNnrHFGxJJRy+aM9fwY/oaVvjfGtQEMLzKCY35sb0W oq3BRB4Uf9Ou59Zq+r7Nc1w1gWKWOWjpswTMWZDZnTa2GRZHIUAut6Cj4EeYCsBh v2nq/VqfhkrfX1Ulb/NRDBjvbvlP44Ilj1HWFCQI70hI2fZw8MuPCHHluPY8NOCB XP7BSvDHS1C+/NCf/qPVqk+C7d8MRXlmcO6mCYBewxBQkBQTZWh/9fvlnpLU3wGz Zgx5qKXcDWnC+selPme3q/DjGrVJDJWMovJd3wTIcVG6Q49295+m6kcNkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb/xmvC05edOWT0EZAbtFqOY+eJMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmBSHeJm OQREXVvo1wvU34ATINoAkk5VF/qsk3HvsNGYwim9vwTRCq28L47Cpi1F+kTs9FRU DhiNJ7Suii7IGSnL3fV301Wp2E2qXz8j5g9HU/E1MdOzPu6EuE9qAzjqYMvEuuFE 4ZddwjniP0R6iCJSA/AFun9Uyw18OPME1JQy6jOwdsKZmp3LBh86BoWa9ndCIpf6 WwIitgQev9O4/CBQztZsVd9op1v19FXbC/vXmNwgzNTj1FCZP5BsN3pcDV1tFpVV dmK1YRnbhAgLZ50BEUntgaWMCCnyiO4RNkfwmJP0mjYMGg8fpshuDMHBJSYcetHM eYslz7L4RyGRcg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:45:55 2025 by rpki-client