This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json) Hash identifier: 6SYX8TEctJKtj4OnPKqaVByhm13JC5O/AEyAqykuR0U= Subject key identifier: ED:B7:7C:ED:C1:8E:D0:07:72:8C:8D:E4:B6:82:83:4B:B3:EE:C4:B5 Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26 Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26 Certificate serial: 019B74ED178D6823A97ADA888349DF073ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 15:00:53 +0000 Manifest this update: Wed 31 Dec 2025 15:00:53 +0000 Manifest next update: Thu 01 Jan 2026 15:00:53 +0000 Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: /IBF+k6qmBbRAY9oHduhm6Rjw8t8wxNFS3l+BuN28Hg=) 2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:17:8d:68:23:a9:7a:da:88:83:49:df:07:3e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26 Validity Not Before: Dec 31 15:00:53 2025 GMT Not After : Jan 1 15:00:53 2026 GMT Subject: CN=edb77cedc18ed007728c8de4b682834bb3eec4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:47:17:f3:b4:45:28:b1:49:96:9e:6a:03: ae:18:67:3a:a7:4d:f8:5b:dd:4b:a3:37:03:ba:ec: a1:f2:32:f8:e7:92:b2:7e:69:e7:3c:c1:b9:64:f2: 4a:49:f8:f0:b2:b4:3b:eb:3b:3c:e6:5f:e0:df:25: ec:ce:ac:8d:9b:ea:0e:6e:ab:b4:34:2f:5d:0a:71: 35:f2:ca:24:e5:11:ea:93:cf:e2:96:56:9d:08:f5: 5f:6a:20:3e:cb:61:37:39:63:5f:78:d2:f2:bd:db: 6a:01:b3:79:ed:3f:ac:df:6a:59:99:70:fa:ee:b2: c6:f5:6f:6f:3d:ea:de:cf:ed:f7:f1:d5:7a:8d:1a: 9b:79:04:8d:80:60:0c:9d:d5:84:4a:81:63:27:9f: 35:c3:09:86:13:2b:e0:c2:23:ca:60:ab:3a:2b:d4: f2:b5:9d:1d:ac:27:d5:29:4e:06:97:24:9e:7d:7e: 79:3b:73:c2:33:41:97:b7:04:ca:76:6f:3a:c3:bc: 03:f0:4d:d6:53:b2:39:d8:79:92:91:7f:a7:f6:ac: 61:6a:fa:df:73:7d:5b:60:09:58:27:02:d5:f0:d0: 2e:53:2c:08:5f:a9:2e:2c:e3:22:5b:71:ff:6e:05: d0:67:fb:59:3f:22:ce:11:f2:0d:38:3f:92:9e:53: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B7:7C:ED:C1:8E:D0:07:72:8C:8D:E4:B6:82:83:4B:B3:EE:C4:B5 X509v3 Authority Key Identifier: keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:81:6d:e1:eb:cf:3e:d2:a5:75:2a:7f:7c:86:ef:c1:14: c9:28:0e:f6:e9:24:14:6f:d1:89:c6:67:9f:f7:b0:05:aa:43: a4:82:d2:97:9a:e1:76:ae:f1:89:1d:0a:de:90:1f:22:2f:28: bd:fd:9e:49:bf:d7:e8:1a:5b:7f:63:b0:55:57:73:10:fa:96: 30:98:29:9d:18:7f:67:1d:06:bb:4a:89:a1:a1:d9:1a:37:82: 58:f0:88:74:a2:12:ab:8d:b7:bb:69:6b:82:7e:ce:b0:be:2f: 67:f3:b6:47:98:64:f7:fe:60:1a:20:06:55:0d:08:77:b6:48: f4:10:d7:7d:78:b9:d0:14:7a:7d:74:e7:88:2e:d4:cf:3d:7f: 94:6a:42:8d:6d:67:dc:93:63:60:d8:95:94:14:b2:67:6e:f7: 64:0d:73:e0:64:fb:ee:7c:2e:ab:c4:2d:a9:b0:1a:49:2c:49: 4c:9a:76:ab:2e:77:6a:c2:39:a5:b1:de:1f:01:0e:71:04:0d: 42:1d:cd:fb:4d:e6:14:d5:a9:37:92:00:6c:9a:94:31:ed:6b: 1f:29:74:4a:19:7f:c3:3a:22:55:eb:e5:8e:03:2a:1f:b0:6b: df:a4:3f:b8:67:51:43:12:fd:d0:25:fa:9c:03:c5:b0:c6:c2: ae:cd:ad:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07ReNaCOpetqIg0nfBz7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwODU1ZGQ4OTcyNTZlODZkYTNjYmU2OTk0ZTk0Y2UyZTk2 OWFmMjYwHhcNMjUxMjMxMTUwMDUzWhcNMjYwMTAxMTUwMDUzWjAzMTEwLwYDVQQD EyhlZGI3N2NlZGMxOGVkMDA3NzI4YzhkZTRiNjgyODM0YmIzZWVjNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoBHF/O0RSixSZaeagOuGGc6p034 W91LozcDuuyh8jL455KyfmnnPMG5ZPJKSfjwsrQ76zs85l/g3yXszqyNm+oObqu0 NC9dCnE18sok5RHqk8/illadCPVfaiA+y2E3OWNfeNLyvdtqAbN57T+s32pZmXD6 7rLG9W9vPerez+338dV6jRqbeQSNgGAMndWESoFjJ581wwmGEyvgwiPKYKs6K9Ty tZ0drCfVKU4GlySefX55O3PCM0GXtwTKdm86w7wD8E3WU7I52HmSkX+n9qxhavrf c31bYAlYJwLV8NAuUywIX6kuLOMiW3H/bgXQZ/tZPyLOEfINOD+SnlMlDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO23fO3BjtAHcoyN5LaCg0uz7sS1MB8GA1UdIwQY MBaAFACFXdiXJW6G2jy+aZTpTOLpaa8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUt ODg2ZjY2YmI2ZWU4LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUtODg2ZjY2YmI2ZWU4 LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/6BbeHr zz7SpXUqf3yG78EUySgO9ukkFG/RicZnn/ewBapDpILSl5rhdq7xiR0K3pAfIi8o vf2eSb/X6Bpbf2OwVVdzEPqWMJgpnRh/Zx0Gu0qJoaHZGjeCWPCIdKISq423u2lr gn7OsL4vZ/O2R5hk9/5gGiAGVQ0Id7ZI9BDXfXi50BR6fXTniC7Uzz1/lGpCjW1n 3JNjYNiVlBSyZ273ZA1z4GT77nwuq8QtqbAaSSxJTJp2qy53asI5pbHeHwEOcQQN Qh3N+03mFNWpN5IAbJqUMe1rHyl0Shl/wzoiVevljgMqH7Br36Q/uGdRQxL90CX6 nAPFsMbCrs2tUw== -----END CERTIFICATE-----Generated at Thu Jan 1 00:46:41 2026 by rpki-client