This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json) Hash identifier: YxeIT9QBD7qbAYjL1h2+3qSQ8+wXKJs/bGMIiMyMWIc= Subject key identifier: 3D:50:08:D6:DE:1D:F4:B1:18:81:5B:C4:B7:2B:A4:FA:34:B6:44:E7 Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Certificate serial: 019B44DC9C86F78F4142119F628C88E3A5C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft Manifest number: 02B0 Signing time: Mon 22 Dec 2025 07:01:07 +0000 Manifest this update: Mon 22 Dec 2025 07:01:07 +0000 Manifest next update: Tue 23 Dec 2025 07:01:07 +0000 Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: ql3qsXd4VeioaZRkEI0OhpiUF+3oSzQn8uPRXIBjBiQ=) 2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=) 3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:9c:86:f7:8f:41:42:11:9f:62:8c:88:e3:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Validity Not Before: Dec 22 07:01:07 2025 GMT Not After : Dec 23 07:01:07 2025 GMT Subject: CN=3d5008d6de1df4b118815bc4b72ba4fa34b644e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:fa:d5:8e:85:7b:c3:c9:2d:71:87:28:ff: 83:6f:74:f9:8c:64:2e:24:eb:4c:97:2c:dc:b5:70: 13:c3:ee:fc:7a:15:01:d3:10:0b:9d:d2:9b:3e:6a: 1a:bb:ea:bf:ff:89:c6:75:34:0b:09:b3:70:f4:91: 4f:53:53:c6:68:f4:e6:98:21:b8:88:f8:da:fd:da: 15:73:21:4b:c6:7a:4f:ef:67:10:2e:92:82:58:af: 2f:60:87:81:ea:30:f3:ff:eb:1c:2e:f2:96:9a:2b: 90:64:29:5d:47:1f:f8:99:07:36:f2:31:ff:9d:52: 58:ad:de:dd:2f:b5:1f:19:5e:1c:ea:9a:e0:e9:2f: 46:5f:a6:34:cb:17:8b:e1:1a:40:c3:03:44:d5:fe: 8b:01:70:ba:ef:94:74:d1:0f:2a:2c:57:04:ab:16: 28:96:92:3a:ed:ff:32:59:58:08:06:16:73:14:cf: 3e:93:20:14:61:bd:66:35:82:94:92:98:fd:3c:d2: b7:2a:30:9f:40:99:eb:3b:1f:3e:68:92:ba:61:6a: 0f:bd:47:e2:a4:9d:92:73:49:26:60:a8:7e:cc:64: 4a:c8:dc:97:98:dc:27:c4:36:44:59:ea:bd:84:d9: 74:68:89:d1:b1:aa:19:29:4f:e5:67:2b:ed:7f:a5: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:08:D6:DE:1D:F4:B1:18:81:5B:C4:B7:2B:A4:FA:34:B6:44:E7 X509v3 Authority Key Identifier: keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:20:49:f7:6b:61:d0:1f:fa:74:e5:f1:1f:fe:ae:9e:91:43: 45:5f:0b:e4:d4:6a:d1:92:f3:b3:05:0c:25:34:47:d9:16:e0: 34:19:cb:2d:4c:aa:d8:54:35:6f:b8:62:31:f4:b4:c1:0c:99: db:1f:f9:17:22:41:65:cd:aa:6e:cf:55:3d:90:63:63:15:be: d7:f1:07:e2:c1:0c:a5:ac:e6:ad:3e:5b:6e:5e:d9:8c:dd:23: 11:80:8f:57:32:f3:c8:95:c8:7c:df:f9:41:51:0d:ac:68:d6: 1a:f3:2b:ad:b7:23:3c:48:70:8e:cb:d0:0e:78:cf:22:ae:12: 8d:d0:18:81:39:4f:d5:35:d9:d9:a6:f6:74:97:19:87:bb:81: b1:0d:81:d7:f9:57:f6:e1:f0:60:e5:05:ee:13:15:ee:c6:13: e6:90:52:60:9b:7f:4c:60:ed:b9:ad:de:95:91:56:13:19:18: 72:f1:54:3f:c0:2a:4b:bc:35:17:0b:39:f0:fa:f8:a3:ef:df: f7:41:b2:f5:a4:07:f7:84:f5:64:2f:cb:91:ec:d2:73:54:4a: 02:de:bb:7e:da:ca:29:00:3d:50:bd:34:23:8b:e8:ae:67:c8: 25:73:73:c4:03:0e:6a:19:c3:d6:59:c0:97:62:c4:0b:3a:8c: 3c:07:4c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3JyG949BQhGfYoyI46XAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj ZWYzMWYwHhcNMjUxMjIyMDcwMTA3WhcNMjUxMjIzMDcwMTA3WjAzMTEwLwYDVQQD EygzZDUwMDhkNmRlMWRmNGIxMTg4MTViYzRiNzJiYTRmYTM0YjY0NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTb61Y6Fe8PJLXGHKP+Db3T5jGQu JOtMlyzctXATw+78ehUB0xALndKbPmoau+q//4nGdTQLCbNw9JFPU1PGaPTmmCG4 iPja/doVcyFLxnpP72cQLpKCWK8vYIeB6jDz/+scLvKWmiuQZCldRx/4mQc28jH/ nVJYrd7dL7UfGV4c6prg6S9GX6Y0yxeL4RpAwwNE1f6LAXC675R00Q8qLFcEqxYo lpI67f8yWVgIBhZzFM8+kyAUYb1mNYKUkpj9PNK3KjCfQJnrOx8+aJK6YWoPvUfi pJ2Sc0kmYKh+zGRKyNyXmNwnxDZEWeq9hNl0aInRsaoZKU/lZyvtf6X4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1QCNbeHfSxGIFbxLcrpPo0tkTnMB8GA1UdIwQY MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3 LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCBJ92th 0B/6dOXxH/6unpFDRV8L5NRq0ZLzswUMJTRH2RbgNBnLLUyq2FQ1b7hiMfS0wQyZ 2x/5FyJBZc2qbs9VPZBjYxW+1/EH4sEMpazmrT5bbl7ZjN0jEYCPVzLzyJXIfN/5 QVENrGjWGvMrrbcjPEhwjsvQDnjPIq4SjdAYgTlP1TXZ2ab2dJcZh7uBsQ2B1/lX 9uHwYOUF7hMV7sYT5pBSYJt/TGDtua3elZFWExkYcvFUP8AqS7w1Fws58Pr4o+/f 90Gy9aQH94T1ZC/LkezSc1RKAt67ftrKKQA9UL00I4vormfIJXNzxAMOahnD1lnA l2LECzqMPAdMSQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:46:18 2025 by rpki-client