This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json) Hash identifier: 1NI9g62r9TNArMHmNa9TblSlM8szpp4CKPFyjys0Wb0= Subject key identifier: 2A:BB:F1:C9:3E:71:54:84:20:08:F7:80:0A:39:4A:FE:C4:75:33:2D Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e Certificate serial: 019B3757D06AE6E3BA19A29E6116BE30B0CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 16:01:00 +0000 Manifest this update: Fri 19 Dec 2025 16:01:00 +0000 Manifest next update: Sat 20 Dec 2025 16:01:00 +0000 Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: lIJ/BPWS/IpOznHyECvldTfcqpTTU+dfoVXP4die2aE=) 2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=) 3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:d0:6a:e6:e3:ba:19:a2:9e:61:16:be:30:b0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e Validity Not Before: Dec 19 16:01:00 2025 GMT Not After : Dec 20 16:01:00 2025 GMT Subject: CN=2abbf1c93e7154842008f7800a394afec475332d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:b0:85:cb:62:7e:41:2f:47:66:9d:91:22: 3c:aa:c5:2d:cb:78:0b:d8:b9:a7:4f:35:0b:0c:cb: a0:56:73:09:8c:47:76:d9:ae:50:d9:98:09:b7:2b: 5b:30:01:60:41:44:d5:a2:cc:af:07:43:4d:42:6d: 58:8e:90:4c:92:16:b8:af:ad:e0:7f:0b:16:51:05: 73:be:7f:64:f6:b8:16:88:da:b0:23:36:54:ce:92: 2b:ee:51:7b:11:14:e5:48:86:af:6c:c2:d1:16:86: 38:1a:0e:b4:ad:93:e6:88:53:4d:0d:b9:4b:d1:ab: bd:1e:65:83:77:f5:e9:00:41:d2:c6:fe:21:6e:57: 27:ca:d3:ad:bf:79:1e:c5:1c:89:49:90:c6:9f:9d: 94:da:62:48:c1:3c:31:af:c3:f5:32:db:9e:80:a5: 43:6a:84:e9:e4:cc:a1:97:ed:0c:59:19:b6:fd:61: 00:8f:27:bf:2a:88:a5:18:78:c1:a2:a1:06:f3:f8: 64:81:f1:28:1a:f3:73:9e:92:d5:3b:14:e5:ae:79: 69:34:df:87:d1:cc:b3:4c:21:30:c7:ae:c2:58:da: af:09:11:3c:8c:63:1d:22:06:4b:31:be:94:58:79: 24:2c:2b:15:c5:10:b0:d3:aa:bf:1b:d4:b4:ab:df: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BB:F1:C9:3E:71:54:84:20:08:F7:80:0A:39:4A:FE:C4:75:33:2D X509v3 Authority Key Identifier: keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:21:94:cc:f7:8f:cb:b9:a6:2f:53:1d:a2:4d:00:f4:85:45: 56:69:3f:8b:e4:bf:53:3f:86:39:68:31:0d:90:71:a7:29:01: 26:9a:f4:cf:1b:d7:f7:74:08:96:80:b8:87:f0:5e:d3:24:fe: 63:cb:be:6a:62:c2:e9:21:3b:92:9a:32:d9:ed:e8:d6:f9:75: da:ab:70:77:ef:74:ab:5d:ee:70:c5:b0:4a:50:fc:9e:6c:74: eb:a1:10:43:d4:a5:b1:03:c3:25:2a:66:3b:04:83:ac:6f:12: bc:55:9d:89:e3:1d:87:52:10:33:0e:ae:14:77:b7:41:b6:09: 03:87:9e:7a:bb:03:b1:55:c5:db:d2:65:c5:b6:57:e3:66:ea: f9:3c:d8:db:68:4f:c4:c6:09:dc:ab:cb:81:b4:68:db:db:cb: c8:58:76:46:de:fa:dd:3b:44:42:b7:ec:a3:ab:1b:3b:a8:e9: ab:96:32:31:11:7e:47:91:db:6b:e3:34:b2:d0:ff:c8:3a:ee: 7d:b7:24:3b:f4:0c:dc:b4:03:c0:f2:db:92:6a:d4:1b:da:d5: bd:bc:88:a4:f9:11:9c:ed:cc:b9:95:d6:1f:e8:9c:01:d4:18: 2d:c4:24:42:be:4b:22:ed:cf:a5:89:2a:22:cb:4f:2c:a9:b2: b1:c1:0c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V9Bq5uO6GaKeYRa+MLDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyY2M2OTE0NzZhNmU3ODk1YjBlNDU2MTE2NDQ0ZjkxOTM3 YmYwMWUwHhcNMjUxMjE5MTYwMTAwWhcNMjUxMjIwMTYwMTAwWjAzMTEwLwYDVQQD EygyYWJiZjFjOTNlNzE1NDg0MjAwOGY3ODAwYTM5NGFmZWM0NzUzMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyCwhctifkEvR2adkSI8qsUty3gL 2LmnTzULDMugVnMJjEd22a5Q2ZgJtytbMAFgQUTVosyvB0NNQm1YjpBMkha4r63g fwsWUQVzvn9k9rgWiNqwIzZUzpIr7lF7ERTlSIavbMLRFoY4Gg60rZPmiFNNDblL 0au9HmWDd/XpAEHSxv4hblcnytOtv3kexRyJSZDGn52U2mJIwTwxr8P1MtuegKVD aoTp5Myhl+0MWRm2/WEAjye/KoilGHjBoqEG8/hkgfEoGvNznpLVOxTlrnlpNN+H 0cyzTCEwx67CWNqvCRE8jGMdIgZLMb6UWHkkLCsVxRCw06q/G9S0q99/JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq78ck+cVSEIAj3gAo5Sv7EdTMtMB8GA1UdIwQY MBaAFALMaRR2pueJWw5FYRZET5GTe/AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYt YmMxOTJiYjczMDI1LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYtYmMxOTJiYjczMDI1 LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCGUzPeP y7mmL1Mdok0A9IVFVmk/i+S/Uz+GOWgxDZBxpykBJpr0zxvX93QIloC4h/Be0yT+ Y8u+amLC6SE7kpoy2e3o1vl12qtwd+90q13ucMWwSlD8nmx066EQQ9SlsQPDJSpm OwSDrG8SvFWdieMdh1IQMw6uFHe3QbYJA4eeersDsVXF29JlxbZX42bq+TzY22hP xMYJ3KvLgbRo29vLyFh2Rt763TtEQrfso6sbO6jpq5YyMRF+R5Hba+M0stD/yDru fbckO/QM3LQDwPLbkmrUG9rVvbyIpPkRnO3MuZXWH+icAdQYLcQkQr5LIu3PpYkq IstPLKmyscEMYw== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:24 2025 by rpki-client