This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json) Hash identifier: x/RXerYXdCEHy/AC1ZW+knb8m94sl96aWRBelUbPh0E= Subject key identifier: EB:9A:2C:CB:50:C8:DB:3D:C5:72:28:7B:99:BB:10:12:39:F5:1A:1C Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2 Certificate serial: 019B6B0DF3BA311AB1A505F11056403E702B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft Manifest number: 0F65 Signing time: Mon 29 Dec 2025 17:00:35 +0000 Manifest this update: Mon 29 Dec 2025 17:00:35 +0000 Manifest next update: Tue 30 Dec 2025 17:00:35 +0000 Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: J3qtBVIAIco2jrhj31aPsdMNSY9haFcjXIHxTDCWl/Y=) 2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0d:f3:ba:31:1a:b1:a5:05:f1:10:56:40:3e:70:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2 Validity Not Before: Dec 29 17:00:35 2025 GMT Not After : Dec 30 17:00:35 2025 GMT Subject: CN=eb9a2ccb50c8db3dc572287b99bb101239f51a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2f:5e:e2:01:04:ae:7e:f1:18:49:b0:ac:2d: 1f:ed:12:42:cf:a0:c8:27:01:c0:56:27:a5:c5:6f: ff:f5:0d:2d:24:91:94:e5:01:b6:23:40:e3:e1:17: 47:b7:74:c8:ba:34:57:6d:c6:18:b6:7a:a7:ee:6f: b5:11:0b:eb:da:aa:4b:74:8e:1b:85:b0:2c:bd:af: db:98:46:59:8d:2d:f9:cc:a6:dd:03:a6:b1:03:84: b6:73:b4:a1:49:20:a1:0e:3a:45:ed:66:e8:d3:44: 73:86:01:45:6f:73:15:56:2e:e5:c7:71:3b:2d:0c: b2:52:6f:b4:6a:7a:c7:53:ef:61:0a:1b:d8:f2:36: 52:7a:79:0e:af:2f:45:18:8e:b4:6b:d9:21:d7:96: 20:9e:5f:a0:6a:88:a4:84:3f:c5:b6:b1:42:89:71: 32:25:1d:d2:99:ff:46:26:85:8d:37:64:2d:48:12: 30:60:45:d0:b4:ab:79:07:dc:33:00:e6:48:68:e0: 52:55:50:58:c6:b0:02:0d:f1:79:2d:e8:13:23:39: 8e:2b:d3:2a:18:2a:69:c5:3f:46:0e:49:79:a8:99: 55:3b:40:3f:54:30:b3:57:a1:9d:01:5c:ca:44:4d: 12:8b:79:0c:19:18:25:a4:74:1c:08:57:94:ef:2c: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9A:2C:CB:50:C8:DB:3D:C5:72:28:7B:99:BB:10:12:39:F5:1A:1C X509v3 Authority Key Identifier: keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:71:a0:58:f3:7e:f1:d8:fe:0a:23:cc:83:f2:d1:b9:dd:3e: c4:eb:88:50:24:62:3f:50:8a:b8:64:20:56:23:1c:2a:a0:2e: f9:cc:9a:40:be:a8:61:8e:a7:24:00:e7:0a:62:7d:72:52:e5: b4:1b:95:cd:7c:bd:60:66:d3:32:4a:a6:72:dc:bf:cb:2e:af: 44:98:f1:49:be:1b:60:c9:69:06:84:50:47:6f:c6:58:21:a7: ca:6e:48:01:32:f0:47:40:5e:6b:11:3e:d9:b5:d7:db:47:12: 95:69:8f:89:c2:2b:04:eb:92:8a:eb:23:72:45:07:fc:d4:cc: 44:96:8d:6d:64:f1:76:3c:6a:58:a3:a2:8b:0e:c5:fe:6d:56: 86:0b:24:5b:0e:ae:b6:bd:b9:2c:78:04:db:50:dd:c4:be:6d: 16:c1:ee:c5:b5:27:c6:7b:e7:03:b9:bc:87:a2:7e:82:2d:ec: 57:62:de:0f:76:73:37:94:d0:30:91:19:b4:3a:25:95:9b:38: 82:df:2f:6b:70:5b:5e:28:d6:16:21:d8:d8:97:c8:1d:c5:ff: 17:88:d7:84:9c:e1:06:03:02:08:49:1b:7b:12:c8:87:9d:9f: 9e:59:72:81:e4:b3:4c:7b:26:0b:15:ab:c4:6d:e3:2d:85:55: 05:69:de:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDfO6MRqxpQXxEFZAPnArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMw MjVhYzIwHhcNMjUxMjI5MTcwMDM1WhcNMjUxMjMwMTcwMDM1WjAzMTEwLwYDVQQD EyhlYjlhMmNjYjUwYzhkYjNkYzU3MjI4N2I5OWJiMTAxMjM5ZjUxYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7y9e4gEErn7xGEmwrC0f7RJCz6DI JwHAVielxW//9Q0tJJGU5QG2I0Dj4RdHt3TIujRXbcYYtnqn7m+1EQvr2qpLdI4b hbAsva/bmEZZjS35zKbdA6axA4S2c7ShSSChDjpF7Wbo00RzhgFFb3MVVi7lx3E7 LQyyUm+0anrHU+9hChvY8jZSenkOry9FGI60a9kh15Ygnl+gaoikhD/FtrFCiXEy JR3Smf9GJoWNN2QtSBIwYEXQtKt5B9wzAOZIaOBSVVBYxrACDfF5LegTIzmOK9Mq GCppxT9GDkl5qJlVO0A/VDCzV6GdAVzKRE0Si3kMGRglpHQcCFeU7yyjGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuaLMtQyNs9xXIoe5m7EBI59RocMB8GA1UdIwQY MBaAFGmH1Hk14RN9VEQm21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1Zjgt OWM5NTM1OTRkNmIxLzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIx LzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnGgWPN+ 8dj+CiPMg/LRud0+xOuIUCRiP1CKuGQgViMcKqAu+cyaQL6oYY6nJADnCmJ9clLl tBuVzXy9YGbTMkqmcty/yy6vRJjxSb4bYMlpBoRQR2/GWCGnym5IATLwR0BeaxE+ 2bXX20cSlWmPicIrBOuSiusjckUH/NTMRJaNbWTxdjxqWKOiiw7F/m1WhgskWw6u tr25LHgE21DdxL5tFsHuxbUnxnvnA7m8h6J+gi3sV2LeD3ZzN5TQMJEZtDollZs4 gt8va3BbXijWFiHY2JfIHcX/F4jXhJzhBgMCCEkbexLIh52fnllygeSzTHsmCxWr xG3jLYVVBWnecQ== -----END CERTIFICATE-----Generated at Mon Dec 29 23:45:56 2025 by rpki-client