This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json) Hash identifier: xi2Svd3qtkE3Cq9oznYVOT6rm1pJW1mIPeK/DOhlsxc= Subject key identifier: 53:C0:0F:22:FC:90:05:31:98:42:89:61:B6:4F:69:A2:8B:17:3F:7D Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2 Certificate serial: 019B4A3A0038B9CA724930E5C51269BA8EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft Manifest number: 0F54 Signing time: Tue 23 Dec 2025 08:01:13 +0000 Manifest this update: Tue 23 Dec 2025 08:01:13 +0000 Manifest next update: Wed 24 Dec 2025 08:01:13 +0000 Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: 2tzitypTX4wBa3+uczJP041iVaIOeozutVi/U67Lkzo=) 2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3a:00:38:b9:ca:72:49:30:e5:c5:12:69:ba:8e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2 Validity Not Before: Dec 23 08:01:13 2025 GMT Not After : Dec 24 08:01:13 2025 GMT Subject: CN=53c00f22fc90053198428961b64f69a28b173f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:df:bf:19:7b:a0:c0:34:8c:8f:6d:e3:54: f8:c2:47:c9:6e:c9:1c:df:48:1f:77:77:ad:98:d8: cb:16:13:7e:38:2e:a6:7a:1c:b8:26:2c:90:dd:c7: e7:6d:81:47:ca:43:ea:15:ae:d5:5b:1e:6c:a2:0a: 50:55:6d:4f:b7:8c:d1:fd:09:0e:88:3e:ee:23:31: 85:53:5e:96:ae:0f:d4:43:b1:45:8f:2a:5e:ef:14: bd:65:ef:93:9e:51:a5:c0:16:db:4d:fb:56:b8:6a: 44:28:9d:8c:73:e4:36:84:7f:9d:94:b9:2d:8c:38: 2c:57:df:90:16:0e:f3:b4:53:ac:ed:28:05:2b:3c: c3:cf:f9:63:b8:c1:cf:5b:46:c4:6f:cd:aa:3c:7c: e1:9c:6a:ab:eb:05:08:3a:4a:42:52:ba:9c:a8:66: 98:5d:36:09:aa:6f:7b:ee:0f:87:d1:32:f9:7c:dc: 3e:34:a5:f9:a0:b0:81:3c:0b:a4:63:23:56:cf:a6: fd:ff:3b:57:b4:5d:b6:07:e8:dd:44:d6:8c:4a:75: e4:2a:a4:52:8d:62:07:be:d1:68:41:d8:94:a0:e9: 1f:55:2a:30:4f:98:d4:a6:b6:50:20:1c:1d:22:f7: da:ef:04:c1:69:17:f5:38:1b:33:c5:98:28:23:0b: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C0:0F:22:FC:90:05:31:98:42:89:61:B6:4F:69:A2:8B:17:3F:7D X509v3 Authority Key Identifier: keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:56:a9:89:5d:d5:69:cf:0e:7b:f7:4c:c5:45:45:14:f7:9b: 6b:ca:df:ef:59:96:8a:31:67:2d:d6:dd:69:e9:d2:6d:8b:f5: db:34:51:e6:96:f4:03:d5:e6:ba:26:b2:34:50:7d:1f:66:7b: a5:b8:3e:07:45:d8:c7:c6:db:b0:66:34:66:01:61:d3:13:1a: 78:a8:91:df:36:52:98:1a:4c:f1:31:e9:68:9d:d7:85:80:67: 2c:6e:2f:02:ec:ed:57:6a:1c:32:7b:b9:5f:d4:79:0f:7e:d0: 11:a5:ec:f8:b3:8e:d5:56:3c:6c:a4:97:1f:44:f4:e5:df:02: 1c:32:3f:e9:84:0c:4d:89:ef:6f:91:38:6d:84:60:cd:10:84: d0:0d:a3:77:49:54:c1:c5:3b:33:16:33:dd:99:a3:c0:1e:21: 59:f5:f1:a2:14:34:ba:93:05:ec:30:62:dc:4b:ff:b9:5c:c7: b9:29:14:7c:a6:1a:4b:2c:5a:d9:74:79:39:39:b0:27:0d:d2: 4d:5a:1e:42:20:91:fa:ff:95:4e:d5:5e:92:22:c4:b5:6a:d2: d6:b5:84:e4:37:5c:b6:84:c4:a5:07:d8:7e:6f:5b:92:00:e7: bf:3a:d0:f7:58:79:0a:fc:46:2e:d6:4d:2b:1b:e0:be:20:f3: b0:20:24:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOgA4ucpySTDlxRJpuo7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMw MjVhYzIwHhcNMjUxMjIzMDgwMTEzWhcNMjUxMjI0MDgwMTEzWjAzMTEwLwYDVQQD Eyg1M2MwMGYyMmZjOTAwNTMxOTg0Mjg5NjFiNjRmNjlhMjhiMTczZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1vfvxl7oMA0jI9t41T4wkfJbskc 30gfd3etmNjLFhN+OC6mehy4JiyQ3cfnbYFHykPqFa7VWx5sogpQVW1Pt4zR/QkO iD7uIzGFU16Wrg/UQ7FFjype7xS9Ze+TnlGlwBbbTftWuGpEKJ2Mc+Q2hH+dlLkt jDgsV9+QFg7ztFOs7SgFKzzDz/ljuMHPW0bEb82qPHzhnGqr6wUIOkpCUrqcqGaY XTYJqm977g+H0TL5fNw+NKX5oLCBPAukYyNWz6b9/ztXtF22B+jdRNaMSnXkKqRS jWIHvtFoQdiUoOkfVSowT5jUprZQIBwdIvfa7wTBaRf1OBszxZgoIwtsvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPADyL8kAUxmEKJYbZPaaKLFz99MB8GA1UdIwQY MBaAFGmH1Hk14RN9VEQm21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1Zjgt OWM5NTM1OTRkNmIxLzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIx LzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVapiV3V ac8Oe/dMxUVFFPeba8rf71mWijFnLdbdaenSbYv12zRR5pb0A9XmuiayNFB9H2Z7 pbg+B0XYx8bbsGY0ZgFh0xMaeKiR3zZSmBpM8THpaJ3XhYBnLG4vAuztV2ocMnu5 X9R5D37QEaXs+LOO1VY8bKSXH0T05d8CHDI/6YQMTYnvb5E4bYRgzRCE0A2jd0lU wcU7MxYz3ZmjwB4hWfXxohQ0upMF7DBi3Ev/uVzHuSkUfKYaSyxa2XR5OTmwJw3S TVoeQiCR+v+VTtVekiLEtWrS1rWE5DdctoTEpQfYfm9bkgDnvzrQ91h5CvxGLtZN KxvgviDzsCAkHg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:45:11 2025 by rpki-client