This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft File: au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json) Hash identifier: L1m7ozg/Y7sgFPtIV9P0No/TRsAmEr1ocsEMPeYwuHg= Subject key identifier: 82:DA:E0:6F:BB:F8:27:84:A8:3F:5D:FA:5E:07:F0:66:F7:8C:DB:A8 Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7 Certificate issuer: /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7 Certificate serial: 019B3DFED66AFB9C22EB42D121E062759EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft Manifest number: 0203 Signing time: Sat 20 Dec 2025 23:01:09 +0000 Manifest this update: Sat 20 Dec 2025 23:01:09 +0000 Manifest next update: Sun 21 Dec 2025 23:01:09 +0000 Files and hashes: 1: SLNfseIE8KrK16-g51WWVsIWzog.roa (hash: PhvvB8pkV5yupURojyUaN4uVfLhKeqMoLY3RiCBeGmQ=) 2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: xGiZtz8F3Dz7zdby6nY9xSr6OB2avfEzeY9JKE5HJLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d6:6a:fb:9c:22:eb:42:d1:21:e0:62:75:9e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7 Validity Not Before: Dec 20 23:01:09 2025 GMT Not After : Dec 21 23:01:09 2025 GMT Subject: CN=82dae06fbbf82784a83f5dfa5e07f066f78cdba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:da:b1:b0:bf:4c:51:ac:a7:89:8f:02:ce: 3e:35:2b:48:84:9a:d8:f6:b3:cb:c0:12:9c:37:2d: ff:d6:1d:b4:ec:72:76:93:c7:7c:4e:66:cf:78:20: 37:df:cd:77:11:c0:ed:d9:a8:89:92:4e:fc:22:73: e2:ee:85:f3:e5:97:bc:ad:81:50:41:b9:b6:de:5b: e1:b6:5f:cc:b3:fd:e9:25:e8:a9:8d:37:3e:87:81: 09:bc:f6:b6:de:e3:60:50:36:54:6a:b3:35:e1:e0: 70:b0:19:5c:fe:dd:cf:c9:34:ce:e9:a6:06:b1:27: 04:07:98:65:a5:0d:79:2a:b5:7d:7d:96:d8:27:f7: 07:3d:38:75:4b:b0:d1:29:7c:18:26:10:e9:b2:0f: 3f:72:33:9f:7c:1b:0f:ba:a3:20:bd:83:d9:c0:66: 86:be:a3:50:75:01:da:92:17:34:b8:85:73:bc:75: 64:6b:92:71:7d:aa:a3:b7:d3:ad:7f:ef:e7:f7:a5: eb:d1:f3:59:08:99:a4:09:b1:b5:0b:2f:11:d2:97: dc:11:39:97:11:7c:50:95:71:b3:65:fb:a8:be:62: aa:8b:90:69:ae:49:62:a7:54:ec:c0:cc:c6:8a:63: 7a:2e:13:82:a2:08:f7:62:46:a2:a1:1b:7c:72:01: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DA:E0:6F:BB:F8:27:84:A8:3F:5D:FA:5E:07:F0:66:F7:8C:DB:A8 X509v3 Authority Key Identifier: keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:9e:43:5c:9d:4f:69:5b:9d:b4:b9:72:9c:a6:17:1c:14: 95:51:98:9c:90:ad:e7:eb:a2:c1:6f:23:95:2e:0e:9e:03:59: 35:24:4c:2c:aa:24:e4:12:8f:f0:88:9c:a9:27:7c:33:4b:6e: 8f:13:ee:41:bb:16:35:81:06:c5:04:6c:39:62:d1:bf:d0:00: a5:6a:a9:62:64:86:99:62:8d:f9:14:32:f6:e2:56:65:d0:d4: 11:e3:75:48:19:d7:a9:56:86:ea:9f:81:a3:93:9b:8a:6e:bb: c5:8a:e2:77:57:e3:a0:3a:b2:c6:66:37:0c:58:9e:a2:57:38: 7e:ea:79:0c:5f:72:de:63:b3:a7:e1:fb:6b:0e:ca:30:d8:01: bf:3f:98:90:4d:de:ac:06:bf:17:f2:6d:f8:39:2c:3e:10:02: f7:dd:50:ab:47:eb:73:89:51:9f:03:e9:ff:e6:9c:6d:18:68: 22:f4:48:2a:5b:3d:07:1e:07:bd:95:c0:08:e7:30:08:fd:11: 62:5f:94:fe:42:ee:d2:50:59:75:ca:02:3d:3f:30:de:1d:e6: a9:7c:9f:44:68:30:8a:34:1f:8b:14:68:8c:d5:24:55:0b:aa: 62:4a:02:14:74:0a:da:71:db:5b:51:d2:32:25:2c:9f:7e:05: 5c:11:01:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tZq+5wi60LRIeBidZ63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZWRiYmM1NmRhZjg1ZmEzZjM4N2M2MDUyZGM3MmQ1ZDcy MTNiZjcwHhcNMjUxMjIwMjMwMTA5WhcNMjUxMjIxMjMwMTA5WjAzMTEwLwYDVQQD Eyg4MmRhZTA2ZmJiZjgyNzg0YTgzZjVkZmE1ZTA3ZjA2NmY3OGNkYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl13asbC/TFGsp4mPAs4+NStIhJrY 9rPLwBKcNy3/1h207HJ2k8d8TmbPeCA33813EcDt2aiJkk78InPi7oXz5Ze8rYFQ Qbm23lvhtl/Ms/3pJeipjTc+h4EJvPa23uNgUDZUarM14eBwsBlc/t3PyTTO6aYG sScEB5hlpQ15KrV9fZbYJ/cHPTh1S7DRKXwYJhDpsg8/cjOffBsPuqMgvYPZwGaG vqNQdQHakhc0uIVzvHVka5Jxfaqjt9Otf+/n96Xr0fNZCJmkCbG1Cy8R0pfcETmX EXxQlXGzZfuovmKqi5Bprklip1TswMzGimN6LhOCogj3YkaioRt8cgFppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILa4G+7+CeEqD9d+l4H8Gb3jNuoMB8GA1UdIwQY MBaAFGrtu8Vtr4X6Pzh8YFLcctXXITv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgt NDliNzVjMTgzNDlhLzEvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgtNDliNzVjMTgzNDlh LzEvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQOeQ1yd T2lbnbS5cpymFxwUlVGYnJCt5+uiwW8jlS4OngNZNSRMLKok5BKP8IicqSd8M0tu jxPuQbsWNYEGxQRsOWLRv9AApWqpYmSGmWKN+RQy9uJWZdDUEeN1SBnXqVaG6p+B o5Obim67xYrid1fjoDqyxmY3DFieolc4fup5DF9y3mOzp+H7aw7KMNgBvz+YkE3e rAa/F/Jt+DksPhAC991Qq0frc4lRnwPp/+acbRhoIvRIKls9Bx4HvZXACOcwCP0R Yl+U/kLu0lBZdcoCPT8w3h3mqXyfRGgwijQfixRojNUkVQuqYkoCFHQK2nHbW1HS MiUsn34FXBEBuw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:35:39 2025 by rpki-client