This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: YLH2LrKQ/LnPp4vYSef+2a7IoMInTbwb2JNBfvrYAbo= Subject key identifier: 14:AC:48:57:85:C9:A8:9C:48:D6:39:5B:7A:0D:A4:CD:A6:13:83:C0 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B56754FF816602CA29630D6C84D24EA34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 122D Signing time: Thu 25 Dec 2025 17:01:27 +0000 Manifest this update: Thu 25 Dec 2025 17:01:27 +0000 Manifest next update: Fri 26 Dec 2025 17:01:27 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: XROSp1RuB7DlQbd/5oYyPLTgIiwCpCVKgy0HrONNqvk=) 5: GNzsCq9UcoPEjNUJsHvqEaDTmhI.roa (hash: UUPKwITy6fppL/i4iIfPQtQ+oEwY++MmCUS8CWuHxoc=) 6: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 7: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 8: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 9: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:75:4f:f8:16:60:2c:a2:96:30:d6:c8:4d:24:ea:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Dec 25 17:01:27 2025 GMT Not After : Dec 26 17:01:27 2025 GMT Subject: CN=14ac485785c9a89c48d6395b7a0da4cda61383c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:ac:5b:13:e9:db:e5:b2:7f:8f:42:1c:4b: d5:61:3f:1a:27:eb:a7:8f:66:a0:16:2c:26:50:d3: b9:99:0c:e2:3d:05:1a:c4:7a:ff:4c:ec:d4:93:09: ee:0b:3a:ac:2d:b8:43:bf:8d:d0:02:6d:ae:99:9b: dc:10:82:97:10:dc:3d:b4:fc:7b:04:bf:df:03:94: 2e:a6:fb:f1:d4:04:6d:8a:fe:69:6f:58:43:9e:75: 48:d3:45:a0:0e:2d:22:d0:5f:40:b3:33:fd:f3:a5: 03:d2:93:86:32:6f:2f:8b:5e:c6:29:47:10:83:ed: 4f:51:c1:48:b9:89:0e:71:07:d1:88:e7:c1:f9:86: a4:11:ad:00:33:88:27:b4:56:25:9d:56:4b:cf:e0: 2c:90:1e:24:45:d4:bf:dd:82:53:0f:b1:50:1d:0e: 02:68:68:b7:b1:c6:fe:f6:0a:b2:26:cd:6d:05:63: 5a:07:7c:05:d6:6a:d8:d7:08:89:00:ce:48:33:16: 9a:03:7a:f0:72:61:45:ea:89:cc:8a:89:76:9f:70: 06:44:44:57:54:3c:b5:56:e0:d1:36:35:cf:a0:a5: e4:e3:04:6b:3b:16:12:71:90:22:78:08:61:f4:5b: 16:9e:48:23:d2:ad:a8:57:c4:2d:bf:ea:53:de:21: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AC:48:57:85:C9:A8:9C:48:D6:39:5B:7A:0D:A4:CD:A6:13:83:C0 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:82:d8:1c:c9:7e:64:2f:34:1a:22:d3:a7:ce:b2:0c:98:fb: 9f:f3:ce:5c:f2:6a:18:e9:76:51:33:fe:76:b7:f9:80:07:2e: 64:48:53:28:37:f6:aa:eb:49:3b:12:8e:ad:5f:f4:0a:3e:d6: 09:f3:30:c2:40:5e:28:82:cb:42:c8:6e:fe:e6:34:13:34:7e: cd:b0:f5:5e:cc:2e:d6:e3:6e:be:aa:fe:79:f7:7e:53:b2:a8: c1:46:5f:b8:6a:50:a2:3c:1e:76:b1:30:1c:aa:02:47:e3:a8: aa:c9:96:50:f0:04:28:fd:cd:1f:46:e9:cf:68:fa:1d:1a:5d: 6b:39:e1:9c:43:67:54:14:d4:77:e7:bd:3f:9d:a0:12:81:58: 68:5d:57:5e:0b:c7:42:43:f2:7e:60:20:e3:58:b9:ce:e9:25: 81:ef:10:c7:cb:0c:d1:ec:ab:0f:ef:5b:f0:1e:5c:75:95:bf: d8:b5:17:5d:28:6f:ca:d1:f2:66:32:39:d2:df:c1:41:cf:74: ea:57:1c:62:ab:d4:3c:57:85:db:72:51:b5:17:ab:34:dc:b9: b6:83:34:a6:19:51:99:72:24:bd:52:e7:b1:78:09:67:17:e3: 66:bd:5e:de:99:bf:1e:b2:14:4c:70:f5:24:85:9f:d2:00:49: 8c:6c:24:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdU/4FmAsopYw1shNJOo0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUxMjI1MTcwMTI3WhcNMjUxMjI2MTcwMTI3WjAzMTEwLwYDVQQD EygxNGFjNDg1Nzg1YzlhODljNDhkNjM5NWI3YTBkYTRjZGE2MTM4M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0GsWxPp2+Wyf49CHEvVYT8aJ+un j2agFiwmUNO5mQziPQUaxHr/TOzUkwnuCzqsLbhDv43QAm2umZvcEIKXENw9tPx7 BL/fA5Qupvvx1ARtiv5pb1hDnnVI00WgDi0i0F9AszP986UD0pOGMm8vi17GKUcQ g+1PUcFIuYkOcQfRiOfB+YakEa0AM4gntFYlnVZLz+AskB4kRdS/3YJTD7FQHQ4C aGi3scb+9gqyJs1tBWNaB3wF1mrY1wiJAM5IMxaaA3rwcmFF6onMiol2n3AGRERX VDy1VuDRNjXPoKXk4wRrOxYScZAieAhh9FsWnkgj0q2oV8Qtv+pT3iE31wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSsSFeFyaicSNY5W3oNpM2mE4PAMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoLYHMl+ ZC80GiLTp86yDJj7n/POXPJqGOl2UTP+drf5gAcuZEhTKDf2qutJOxKOrV/0Cj7W CfMwwkBeKILLQshu/uY0EzR+zbD1Xswu1uNuvqr+efd+U7KowUZfuGpQojwedrEw HKoCR+OoqsmWUPAEKP3NH0bpz2j6HRpdaznhnENnVBTUd+e9P52gEoFYaF1XXgvH QkPyfmAg41i5zuklge8Qx8sM0eyrD+9b8B5cdZW/2LUXXShvytHyZjI50t/BQc90 6lccYqvUPFeF23JRtRerNNy5toM0phlRmXIkvVLnsXgJZxfjZr1e3pm/HrIUTHD1 JIWf0gBJjGwktw== -----END CERTIFICATE-----Generated at Thu Dec 25 22:13:41 2025 by rpki-client