This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json) Hash identifier: yTboJBKda3H0VDz5a8UJ+EfobReaKuw9bvWsTWtTIVo= Subject key identifier: 53:83:15:2D:D9:00:AA:31:DD:D7:FF:94:E0:1C:EE:28:F6:06:32:C2 Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad Certificate serial: 019B54BDB53F01D1694529D4DF037D20E4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft Manifest number: 08AC Signing time: Thu 25 Dec 2025 09:01:17 +0000 Manifest this update: Thu 25 Dec 2025 09:01:17 +0000 Manifest next update: Fri 26 Dec 2025 09:01:17 +0000 Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: ECCPidiik0K+cQyfNYQ+C+8fJYoWWw4IHhdcbxv41os=) 2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:b5:3f:01:d1:69:45:29:d4:df:03:7d:20:e4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad Validity Not Before: Dec 25 09:01:17 2025 GMT Not After : Dec 26 09:01:17 2025 GMT Subject: CN=5383152dd900aa31ddd7ff94e01cee28f60632c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:23:28:cd:01:d7:dc:88:ba:dc:ae:0d:cc: 97:7d:39:26:37:fb:4e:f2:12:3d:42:3c:f4:f8:84: 32:e1:a8:3a:3d:44:cd:4b:a6:13:f4:a0:1b:c4:bf: 40:da:d6:ed:f3:c4:56:29:74:84:ff:17:ce:e2:9f: 79:d6:58:99:a5:ab:06:73:ac:ac:68:52:98:fd:f8: a1:df:4e:cb:93:82:ab:d3:33:83:74:55:f6:0c:d7: cc:67:9d:41:0d:7f:0d:a8:66:4b:df:41:28:55:48: dc:39:68:de:9c:94:3d:c8:4a:18:a2:af:fd:e5:b5: 2b:10:26:4c:2f:70:23:21:31:0c:a3:01:93:4d:69: 84:05:e1:4e:70:71:ac:49:05:dc:dc:ec:e4:75:6d: b5:a6:4b:c8:be:f4:9f:ae:78:56:2f:5c:d8:47:f1: b3:56:82:c4:be:e8:58:b9:bf:20:61:c8:7d:8c:ab: 42:33:1e:02:e3:bc:8c:cf:f9:98:8d:4e:f1:92:22: e6:9f:ba:e7:39:a6:9f:cc:45:b3:a5:79:c0:88:8d: 2d:ea:c2:95:8e:87:88:6b:53:d9:1d:a2:01:93:a7: 2f:87:bd:92:de:6b:fe:a1:a9:26:69:76:3e:68:d7: a9:4a:30:9f:01:ff:e0:68:d4:01:39:5b:00:09:4b: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:83:15:2D:D9:00:AA:31:DD:D7:FF:94:E0:1C:EE:28:F6:06:32:C2 X509v3 Authority Key Identifier: keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e9:d9:a3:e5:11:a9:a9:9a:9f:14:e9:4b:ce:18:24:b7:64: a2:20:09:5b:e2:73:19:d6:13:4e:4b:c1:52:fd:a8:18:f7:e3: 50:5d:e9:34:06:ac:32:a6:ec:f0:44:49:2c:8c:09:39:c4:c9: 1e:ff:b6:8a:d6:23:98:1f:2e:b0:69:20:6c:3f:4d:7d:09:a8: 7b:e1:04:e2:19:55:78:1a:f2:32:96:46:e1:31:79:2e:ca:7b: c7:d3:78:97:b3:4e:fb:eb:5e:f4:05:e4:f4:fe:33:65:be:8f: 1f:cc:cf:55:96:89:79:82:22:fa:0f:3d:99:4c:bf:4a:46:de: 0e:71:ed:0d:ee:1e:9f:56:7a:8e:1e:ff:9e:8b:bb:e3:16:0a: 36:36:5b:3e:98:bb:dc:e5:4e:ae:73:3d:e3:e5:da:be:a8:ec: 67:69:55:76:57:cf:af:0a:72:db:b6:fd:44:81:59:83:b8:4b: 9a:32:36:26:3f:c5:c7:4b:77:77:0c:be:b7:65:75:c6:83:71: 6d:f4:1c:f1:e1:0b:c7:69:40:5e:72:8c:3e:9d:5d:35:60:89: 86:fe:a6:a9:2f:b1:b7:d3:33:02:18:20:fa:a5:35:56:f4:70: a5:70:f3:66:c9:52:de:a7:28:e6:48:d1:8c:42:c9:58:58:81: 4d:25:80:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvbU/AdFpRSnU3wN9IOSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0 ZjJiYWQwHhcNMjUxMjI1MDkwMTE3WhcNMjUxMjI2MDkwMTE3WjAzMTEwLwYDVQQD Eyg1MzgzMTUyZGQ5MDBhYTMxZGRkN2ZmOTRlMDFjZWUyOGY2MDYzMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLojKM0B19yIutyuDcyXfTkmN/tO 8hI9Qjz0+IQy4ag6PUTNS6YT9KAbxL9A2tbt88RWKXSE/xfO4p951liZpasGc6ys aFKY/fih307Lk4Kr0zODdFX2DNfMZ51BDX8NqGZL30EoVUjcOWjenJQ9yEoYoq/9 5bUrECZML3AjITEMowGTTWmEBeFOcHGsSQXc3OzkdW21pkvIvvSfrnhWL1zYR/Gz VoLEvuhYub8gYch9jKtCMx4C47yMz/mYjU7xkiLmn7rnOaafzEWzpXnAiI0t6sKV joeIa1PZHaIBk6cvh72S3mv+oakmaXY+aNepSjCfAf/gaNQBOVsACUtF6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFODFS3ZAKox3df/lOAc7ij2BjLCMB8GA1UdIwQY MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOnZo+UR qamanxTpS84YJLdkoiAJW+JzGdYTTkvBUv2oGPfjUF3pNAasMqbs8ERJLIwJOcTJ Hv+2itYjmB8usGkgbD9NfQmoe+EE4hlVeBryMpZG4TF5Lsp7x9N4l7NO++te9AXk 9P4zZb6PH8zPVZaJeYIi+g89mUy/SkbeDnHtDe4en1Z6jh7/nou74xYKNjZbPpi7 3OVOrnM94+XavqjsZ2lVdlfPrwpy27b9RIFZg7hLmjI2Jj/Fx0t3dwy+t2V1xoNx bfQc8eELx2lAXnKMPp1dNWCJhv6mqS+xt9MzAhgg+qU1VvRwpXDzZslS3qco5kjR jELJWFiBTSWArg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:20:14 2025 by rpki-client