This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft File: AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json) Hash identifier: Dk0IlcpdN6vcp0bauEGS0LHSIT5s47dus+wkdWpSrvM= Subject key identifier: 8A:3D:DD:99:32:F6:71:11:85:31:4A:02:BC:5D:BA:DF:6C:9A:8F:03 Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23 Certificate issuer: /CN=02c37210ed8a56ce0edd4574bf736b63245e5823 Certificate serial: 019B33E8B88FF0B1381040FDAD06FB638C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft Manifest number: 1712 Signing time: Fri 19 Dec 2025 00:00:48 +0000 Manifest this update: Fri 19 Dec 2025 00:00:48 +0000 Manifest next update: Sat 20 Dec 2025 00:00:48 +0000 Files and hashes: 1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: lUtWQoXep05gIWnEkdrfuJEccuWJMqyxdgGSAsl8dB0=) 2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b8:8f:f0:b1:38:10:40:fd:ad:06:fb:63:8c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823 Validity Not Before: Dec 19 00:00:48 2025 GMT Not After : Dec 20 00:00:48 2025 GMT Subject: CN=8a3ddd9932f6711185314a02bc5dbadf6c9a8f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7d:4c:91:1a:28:36:59:fd:b4:3d:7a:1c:8c: bf:0f:05:12:b6:60:50:3a:f9:2d:1a:b1:98:37:c0: 86:da:b5:be:1e:c0:9f:e6:b0:7f:90:4d:13:6c:55: 94:df:6f:c9:f8:ae:ec:1a:f7:b4:48:b7:25:29:44: ce:a3:31:65:48:8d:7b:d5:21:a0:98:51:5b:5a:2d: 25:d9:cf:70:10:05:6a:04:df:2a:fc:53:80:f6:be: 04:f9:f2:c7:3c:55:e2:88:d8:de:b1:18:f9:fa:d9: 3a:b0:42:68:4f:e2:e0:31:6c:fb:60:64:d6:bf:b0: 83:e4:b2:da:d1:3f:c2:4f:95:aa:39:a8:17:73:1d: a1:f3:68:50:48:d9:e5:41:ed:11:87:22:af:88:14: 6e:16:7f:ef:a5:71:42:6a:79:e2:01:91:2b:e8:02: 9e:b8:8f:0f:ef:a8:4e:a4:e0:87:bf:98:2a:51:42: ca:e0:e6:33:2d:25:bf:38:97:89:7e:59:9d:d1:5d: 1b:a8:9d:70:36:4b:0d:1a:89:ab:ba:55:0c:0e:cd: f3:20:e9:fd:c0:df:d9:c4:4a:3b:08:69:e7:ef:20: 6d:dd:7b:3d:8f:03:79:9a:7e:ca:67:ca:00:44:b9: a9:2a:2d:12:45:c4:08:bb:f2:c3:8a:40:49:7f:3e: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3D:DD:99:32:F6:71:11:85:31:4A:02:BC:5D:BA:DF:6C:9A:8F:03 X509v3 Authority Key Identifier: keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:94:4a:92:21:15:17:40:13:de:aa:0a:19:7e:b6:10:0d:0d: 43:9e:f8:ca:74:c0:e2:38:c8:39:4a:53:3b:5a:f6:8a:8b:48: b6:1d:46:6b:4e:c4:f4:b4:9a:35:af:8e:7f:fb:57:69:d2:9a: 2f:68:20:2b:fa:57:a0:4d:0b:bf:2c:e3:c6:e2:51:e4:b5:f0: 1b:a7:2b:7c:4d:ab:54:6f:8a:a8:ad:d4:a9:b7:b4:6d:39:3c: 30:bd:d1:21:85:92:ce:67:e9:83:90:66:a2:25:ec:87:6b:19: 1d:7c:a5:80:cd:e4:23:39:ad:d1:d4:21:7e:18:b9:36:6e:4f: fe:d0:5a:22:be:fb:71:45:d8:7c:33:8e:fe:b3:56:6d:52:74: a3:78:32:34:ad:51:15:4a:eb:c7:96:c2:2d:45:f6:cd:07:da: 71:8e:9b:f4:8d:47:5a:e9:1b:08:d7:9e:e5:aa:ac:e3:73:d2: 5d:b9:0a:6a:58:fa:78:82:fd:2e:e6:16:5c:24:47:75:7a:7c: 38:18:85:fb:78:ff:8d:10:e2:1e:70:39:6c:d2:ec:3a:c2:15: dc:ce:a4:00:45:f3:d9:4a:06:4b:08:57:3e:26:b5:76:7e:8b: 1b:7c:05:5e:28:ef:01:2f:bf:fb:ee:b3:19:48:db:96:7f:09: 3d:bb:45:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LiP8LE4EED9rQb7Y4wGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzM3MjEwZWQ4YTU2Y2UwZWRkNDU3NGJmNzM2YjYzMjQ1 ZTU4MjMwHhcNMjUxMjE5MDAwMDQ4WhcNMjUxMjIwMDAwMDQ4WjAzMTEwLwYDVQQD Eyg4YTNkZGQ5OTMyZjY3MTExODUzMTRhMDJiYzVkYmFkZjZjOWE4ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n1MkRooNln9tD16HIy/DwUStmBQ OvktGrGYN8CG2rW+HsCf5rB/kE0TbFWU32/J+K7sGve0SLclKUTOozFlSI171SGg mFFbWi0l2c9wEAVqBN8q/FOA9r4E+fLHPFXiiNjesRj5+tk6sEJoT+LgMWz7YGTW v7CD5LLa0T/CT5WqOagXcx2h82hQSNnlQe0RhyKviBRuFn/vpXFCanniAZEr6AKe uI8P76hOpOCHv5gqUULK4OYzLSW/OJeJflmd0V0bqJ1wNksNGomrulUMDs3zIOn9 wN/ZxEo7CGnn7yBt3Xs9jwN5mn7KZ8oARLmpKi0SRcQIu/LDikBJfz7GxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo93Zky9nERhTFKArxdut9smo8DMB8GA1UdIwQY MBaAFALDchDtilbODt1FdL9za2MkXlgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEt YzFmMGVhZWVkOGNlLzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEtYzFmMGVhZWVkOGNl LzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZRKkiEV F0AT3qoKGX62EA0NQ574ynTA4jjIOUpTO1r2iotIth1Ga07E9LSaNa+Of/tXadKa L2ggK/pXoE0LvyzjxuJR5LXwG6crfE2rVG+KqK3Uqbe0bTk8ML3RIYWSzmfpg5Bm oiXsh2sZHXylgM3kIzmt0dQhfhi5Nm5P/tBaIr77cUXYfDOO/rNWbVJ0o3gyNK1R FUrrx5bCLUX2zQfacY6b9I1HWukbCNee5aqs43PSXbkKalj6eIL9LuYWXCRHdXp8 OBiF+3j/jRDiHnA5bNLsOsIV3M6kAEXz2UoGSwhXPia1dn6LG3wFXijvAS+/++6z GUjbln8JPbtF/w== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:08 2025 by rpki-client