This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json) Hash identifier: 6u2O2skplny9fTlcew0WbqKw2+nh7vPQNkZgTlvp6Ag= Subject key identifier: E9:9B:E2:E9:A8:FA:C5:D5:8B:13:4E:28:F3:CF:7B:B6:50:BD:2B:D3 Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39 Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439 Certificate serial: 019B36E9F52296003675964E26C8A32DF0A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft Manifest number: 0248 Signing time: Fri 19 Dec 2025 14:01:00 +0000 Manifest this update: Fri 19 Dec 2025 14:01:00 +0000 Manifest next update: Sat 20 Dec 2025 14:01:00 +0000 Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: Svq181P8jVlGoEixux5UsGKvcvwZcwjbfPEgtiaYLVg=) 2: tFY_1oU9xNxzF5JnlbdrLi4cQ9A.roa (hash: Sxl+M0Cfp0KqUWFjQhEzTtXSwHwXwN4AdOusnlZXPTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:f5:22:96:00:36:75:96:4e:26:c8:a3:2d:f0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439 Validity Not Before: Dec 19 14:01:00 2025 GMT Not After : Dec 20 14:01:00 2025 GMT Subject: CN=e99be2e9a8fac5d58b134e28f3cf7bb650bd2bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:7f:9f:e3:0b:09:34:c9:ba:08:31:d3:f4: 2b:c9:01:51:87:8c:25:be:f7:46:0f:d8:04:45:63: 65:51:a0:dc:44:b8:e3:67:87:94:37:ab:d5:88:04: d7:b3:6d:02:18:4a:56:bb:51:95:ca:27:10:27:71: 8d:72:91:95:a6:61:7e:dd:bd:e2:58:67:ba:75:a0: 6e:98:71:cc:56:1c:9c:b9:dd:9d:76:93:e3:18:61: a8:4c:b3:cb:39:ee:b6:25:05:b1:c6:9b:d8:13:9f: 7b:f3:6a:ae:a7:14:df:b1:fc:28:b5:9d:5d:7d:c9: b4:84:27:e7:11:88:fa:0f:00:7c:d1:9c:3b:6e:ae: 0a:b8:c2:37:81:84:d5:3f:b9:a4:7e:22:d8:6f:04: c0:2d:ba:a8:98:ac:26:0f:1a:b0:bb:d3:ba:69:21: 4d:77:9f:a8:02:cb:bb:d6:c0:20:31:55:87:e8:dc: 63:7d:6c:05:a5:05:54:a2:df:10:84:99:d9:f2:4e: ec:dd:4c:42:cf:80:10:10:42:a1:04:28:28:21:78: cc:3f:d0:6c:81:bd:1b:8e:df:fe:f4:67:0d:da:83: 13:eb:34:39:ff:73:4d:d5:de:10:2e:9c:08:a4:dc: 96:ef:38:0b:bc:46:36:27:e0:ab:be:ad:55:61:61: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9B:E2:E9:A8:FA:C5:D5:8B:13:4E:28:F3:CF:7B:B6:50:BD:2B:D3 X509v3 Authority Key Identifier: keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:84:54:33:12:54:2f:c4:c6:6e:81:5c:78:4d:5b:16:5b:41: 8a:ca:74:d5:2b:da:ea:55:1a:8b:af:22:be:10:d1:08:a7:18: 3d:25:15:e3:bb:69:91:b7:bc:e8:52:78:8a:4e:e4:1a:31:e9: 50:be:e5:df:7f:9d:3f:df:56:78:b9:79:f4:5c:bd:d5:2c:01: 34:02:09:ed:06:b0:7f:2f:1e:b9:15:f3:6d:5e:c7:4a:1b:34: 07:8f:54:a7:16:69:43:bc:5b:13:c6:b8:40:1f:4d:91:f8:3b: 2b:c4:13:4a:d8:f8:be:0c:25:5d:be:45:6d:81:17:06:d5:a5: 87:13:4f:d0:6d:f7:2e:92:73:cf:ec:1e:b6:3b:35:db:dd:67: c3:ea:0b:af:c6:62:9f:c2:df:bf:08:a9:7b:ee:48:c8:e3:eb: a5:1c:b7:49:43:a4:d9:c7:37:78:eb:e8:2b:d8:6c:9d:fa:1a: dc:02:7d:d2:66:f0:2c:21:f6:fe:a3:73:a1:44:7a:b0:d0:3f: c0:6b:3c:d0:80:52:27:1b:97:aa:cc:03:df:ad:e4:bd:c8:ec: 16:9b:99:38:95:f3:2b:e2:44:74:94:14:38:1a:3f:db:ef:65: df:8b:5c:5a:12:04:4e:ea:7b:08:55:21:37:ce:d9:b5:d6:3a: e9:47:83:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26fUilgA2dZZOJsijLfClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjFiZjI0ZmYwMjU3YjNkMDVjZjcwMjkwYTFhY2Y4N2Nl YTY0MzkwHhcNMjUxMjE5MTQwMTAwWhcNMjUxMjIwMTQwMTAwWjAzMTEwLwYDVQQD EyhlOTliZTJlOWE4ZmFjNWQ1OGIxMzRlMjhmM2NmN2JiNjUwYmQyYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb5/n+MLCTTJuggx0/QryQFRh4wl vvdGD9gERWNlUaDcRLjjZ4eUN6vViATXs20CGEpWu1GVyicQJ3GNcpGVpmF+3b3i WGe6daBumHHMVhycud2ddpPjGGGoTLPLOe62JQWxxpvYE59782qupxTfsfwotZ1d fcm0hCfnEYj6DwB80Zw7bq4KuMI3gYTVP7mkfiLYbwTALbqomKwmDxqwu9O6aSFN d5+oAsu71sAgMVWH6NxjfWwFpQVUot8QhJnZ8k7s3UxCz4AQEEKhBCgoIXjMP9Bs gb0bjt/+9GcN2oMT6zQ5/3NN1d4QLpwIpNyW7zgLvEY2J+Crvq1VYWGnhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmb4umo+sXVixNOKPPPe7ZQvSvTMB8GA1UdIwQY MBaAFAMhvyT/Alez0Fz3ApChrPh86mQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iM2NiNGMtNmUzNi00YzQ4LThmZGUt OTQwNDZhYWJmZjlkLzEvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iM2NiNGMtNmUzNi00YzQ4LThmZGUtOTQwNDZhYWJmZjlk LzEvQXlHX0pQOENWN1BRWFBjQ2tLR3MtSHpxWkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoRUMxJU L8TGboFceE1bFltBisp01Sva6lUai68ivhDRCKcYPSUV47tpkbe86FJ4ik7kGjHp UL7l33+dP99WeLl59Fy91SwBNAIJ7Qawfy8euRXzbV7HShs0B49UpxZpQ7xbE8a4 QB9Nkfg7K8QTStj4vgwlXb5FbYEXBtWlhxNP0G33LpJzz+wetjs1291nw+oLr8Zi n8Lfvwipe+5IyOPrpRy3SUOk2cc3eOvoK9hsnfoa3AJ90mbwLCH2/qNzoUR6sNA/ wGs80IBSJxuXqswD363kvcjsFpuZOJXzK+JEdJQUOBo/2+9l34tcWhIETup7CFUh N87ZtdY66UeDVg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:54:50 2025 by rpki-client