This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json) Hash identifier: N90mP/P7Y3Db73gqQtkSqjv1jEOW6QQvzzgJoxFwKr8= Subject key identifier: 72:1D:BA:BF:7C:B9:94:84:D3:EC:BC:36:BB:CE:D6:55:89:B2:7C:8F Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b Certificate serial: 019B4581803102BCDF6AB03B628A41C468E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft Manifest number: 0595 Signing time: Mon 22 Dec 2025 10:01:13 +0000 Manifest this update: Mon 22 Dec 2025 10:01:13 +0000 Manifest next update: Tue 23 Dec 2025 10:01:13 +0000 Files and hashes: 1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=) 2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: 2ninO1eyWSkTKP1PSg1PtL2i2wBgPF+dtmm6mtBNSXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:80:31:02:bc:df:6a:b0:3b:62:8a:41:c4:68:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b Validity Not Before: Dec 22 10:01:13 2025 GMT Not After : Dec 23 10:01:13 2025 GMT Subject: CN=721dbabf7cb99484d3ecbc36bbced65589b27c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:66:1b:3f:90:05:bd:ee:7b:97:a0:3a:30:e9: f1:a0:94:fc:11:89:51:13:a4:80:d4:b1:25:e3:1b: 71:52:d3:51:e7:c6:66:80:ef:9f:7f:44:7a:d5:0f: 6d:f6:ec:10:68:a3:5a:b1:38:bc:57:e5:ae:4c:9c: 6a:2d:11:d4:3d:e7:3f:8d:c8:7f:13:7a:09:72:97: 3d:4d:d8:37:bf:cb:df:e6:ca:93:16:be:0a:60:59: 88:c7:db:73:44:69:61:ac:84:97:46:d8:76:ee:e2: 82:cf:b1:a3:d4:f0:f9:3b:27:c2:a3:ec:bc:86:d9: 7f:b8:46:eb:a0:86:28:a1:bc:5c:c1:c2:bd:13:04: 85:fc:f1:67:dc:88:b6:64:c2:7a:f3:51:33:1a:fa: 24:a4:47:f1:86:cf:86:50:62:ec:36:6d:0b:cd:1d: a7:83:c9:e2:bf:d2:85:85:01:29:6b:63:27:d7:65: 1c:97:15:55:3d:9a:19:ed:e6:57:3f:fe:90:e6:1d: 3d:dd:da:93:b0:a0:09:df:4d:18:ec:2f:df:db:53: 84:41:e3:1e:ff:63:f0:c8:c9:2e:61:5d:49:59:14: ff:a1:cb:93:2d:37:c3:9c:1e:26:4a:fb:bb:82:9c: 4a:f8:dd:d0:f3:f0:04:b0:5c:3f:a7:d1:33:84:34: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:BA:BF:7C:B9:94:84:D3:EC:BC:36:BB:CE:D6:55:89:B2:7C:8F X509v3 Authority Key Identifier: keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:16:35:d3:71:61:80:d6:3f:61:d4:e5:ec:d3:05:ca:52:79: 1c:c0:00:a9:03:72:31:f1:1a:c5:0b:0f:24:9b:55:46:6b:ad: 9a:92:45:e2:ca:bb:cd:3e:09:a2:05:7e:a2:d0:b1:b2:3f:ea: 90:d1:31:68:8f:d8:de:33:54:5d:40:11:14:94:bc:16:1f:43: 95:85:de:53:a1:8d:75:29:3e:22:f4:da:09:09:cf:50:94:05: ea:0d:82:54:74:58:92:2e:b4:a4:d8:30:d2:53:ca:83:f4:47: 8f:a0:63:8c:d8:73:d4:a5:89:f2:89:76:c2:9c:13:39:23:34: 9c:2b:97:47:e1:13:e8:68:23:67:21:2d:9c:7c:39:48:8b:cd: 30:8e:02:0f:88:61:32:ac:a7:9e:9f:80:02:8d:de:68:f3:31: c1:dc:5d:e0:56:e3:de:ca:b5:19:fd:5a:b7:0a:90:06:b0:5d: a0:39:b7:36:6b:a1:3e:26:e6:16:50:d9:90:4f:a7:29:d4:91: 9c:d0:fb:75:7f:0b:2b:a7:f3:59:46:4b:8a:4b:6b:95:89:83: d3:01:1d:5c:fe:e7:7a:01:81:ee:b1:c0:89:df:c3:87:ab:32: f9:26:c8:68:d4:bd:b9:d4:6a:8a:7c:83:45:7b:28:d7:3e:1f: 17:e8:fe:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgYAxArzfarA7YopBxGjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMmI5ZDJkZTUzNzEwYjMxNThlNDJmMjI4ODkxMDllMmM0 MGY0M2IwHhcNMjUxMjIyMTAwMTEzWhcNMjUxMjIzMTAwMTEzWjAzMTEwLwYDVQQD Eyg3MjFkYmFiZjdjYjk5NDg0ZDNlY2JjMzZiYmNlZDY1NTg5YjI3YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmYbP5AFve57l6A6MOnxoJT8EYlR E6SA1LEl4xtxUtNR58ZmgO+ff0R61Q9t9uwQaKNasTi8V+WuTJxqLRHUPec/jch/ E3oJcpc9Tdg3v8vf5sqTFr4KYFmIx9tzRGlhrISXRth27uKCz7Gj1PD5OyfCo+y8 htl/uEbroIYoobxcwcK9EwSF/PFn3Ii2ZMJ681EzGvokpEfxhs+GUGLsNm0LzR2n g8niv9KFhQEpa2Mn12UclxVVPZoZ7eZXP/6Q5h093dqTsKAJ300Y7C/f21OEQeMe /2PwyMkuYV1JWRT/ocuTLTfDnB4mSvu7gpxK+N3Q8/AEsFw/p9EzhDT58QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIdur98uZSE0+y8NrvO1lWJsnyPMB8GA1UdIwQY MBaAFAMrnS3lNxCzFY5C8iiJEJ4sQPQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODIt NGQxOWE4ZGUwYWJhLzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODItNGQxOWE4ZGUwYWJh LzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRY103Fh gNY/YdTl7NMFylJ5HMAAqQNyMfEaxQsPJJtVRmutmpJF4sq7zT4JogV+otCxsj/q kNExaI/Y3jNUXUARFJS8Fh9DlYXeU6GNdSk+IvTaCQnPUJQF6g2CVHRYki60pNgw 0lPKg/RHj6BjjNhz1KWJ8ol2wpwTOSM0nCuXR+ET6GgjZyEtnHw5SIvNMI4CD4hh Mqynnp+AAo3eaPMxwdxd4Fbj3sq1Gf1atwqQBrBdoDm3NmuhPibmFlDZkE+nKdSR nND7dX8LK6fzWUZLiktrlYmD0wEdXP7negGB7rHAid/Dh6sy+SbIaNS9udRqinyD RXso1z4fF+j+Xw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:31 2025 by rpki-client