This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json) Hash identifier: 2jkL5uTFNq3UsNkJ6B6nvHU5GcX+0MAPLuvPEU3eeqg= Subject key identifier: 5F:4B:FE:97:1B:7F:9A:1D:DC:C7:2D:7E:3D:7E:E9:5A:A7:F5:A4:0B Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Certificate serial: 019B4092035B5E2A7E869617420693869C0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 11:01:09 +0000 Manifest this update: Sun 21 Dec 2025 11:01:09 +0000 Manifest next update: Mon 22 Dec 2025 11:01:09 +0000 Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: gWhtbMGCBkqlKeqp7RIk9PfS1ToQ8iajRQhYjSgt7Go=) 2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:03:5b:5e:2a:7e:86:96:17:42:06:93:86:9c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Validity Not Before: Dec 21 11:01:09 2025 GMT Not After : Dec 22 11:01:09 2025 GMT Subject: CN=5f4bfe971b7f9a1ddcc72d7e3d7ee95aa7f5a40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:d3:0b:54:02:38:24:49:41:52:e2:b3:41: 19:2a:aa:6d:18:03:ef:9f:f7:1e:ce:41:34:a1:32: 9d:46:c3:92:56:e5:cc:ac:79:19:b1:1f:c7:86:a8: 2f:ec:b7:d3:a3:e3:63:ec:e9:4b:48:36:ef:6b:4a: af:e0:d6:b3:6a:e1:b8:cb:c9:db:1a:8b:0d:0a:38: 75:d4:0c:c5:f7:83:cd:5e:2a:32:9e:09:2d:1e:ac: 6d:c9:ee:8e:6b:ac:d8:f1:47:8e:ff:96:4d:61:82: 5f:d4:7d:6e:bf:b8:5e:df:f8:cd:a6:58:37:b6:68: b4:f0:aa:0b:35:47:2e:2f:ff:8b:18:92:d5:c3:af: e4:5f:c5:ef:82:2e:45:73:7a:26:84:a4:68:7a:f9: f5:ce:78:e0:28:7c:d8:bf:c7:21:d6:12:a7:ba:cb: b6:12:92:40:9b:fa:45:8c:c0:2b:0b:dd:b7:85:52: d1:88:ce:ec:1e:09:fe:d4:84:a9:2d:2b:57:e2:39: fc:62:fc:6d:a7:63:b2:09:af:b0:89:16:8c:7c:58: a7:fe:c2:25:69:01:c5:b3:1b:ab:22:ea:c4:d2:68: cd:6d:22:26:eb:1b:db:e7:24:14:7e:c5:09:01:2c: b0:58:ae:49:5b:0d:b4:39:eb:ad:b8:47:fb:43:1c: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4B:FE:97:1B:7F:9A:1D:DC:C7:2D:7E:3D:7E:E9:5A:A7:F5:A4:0B X509v3 Authority Key Identifier: keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2d:bb:ee:5b:78:a7:63:87:31:7c:a4:a3:0b:1d:63:45:e9: 1f:30:39:d3:50:aa:c3:20:9e:d6:ce:0c:a6:f6:6f:14:58:b8: 93:d6:de:36:70:e4:8e:59:a1:77:ac:0a:12:10:3d:98:92:50: df:60:07:5b:f7:14:63:4f:f8:7d:47:65:9b:47:c1:be:fb:cd: 64:ba:16:fe:bb:73:b7:d7:1b:77:20:da:65:19:0d:8a:40:95: dd:90:2e:80:51:72:1a:d1:56:0b:ff:06:bf:66:45:7b:68:45: 4f:0b:4c:42:6a:e5:4b:13:64:99:3d:5d:ad:aa:14:38:c7:94: 63:54:7b:df:67:b4:58:4a:ea:0f:02:2b:2a:a1:ef:4d:6c:ab: 3e:e5:17:58:14:62:04:70:44:5d:9d:ad:03:8e:6f:9d:ad:4a: 2e:c4:19:cf:df:b0:dd:00:cd:28:28:65:ca:15:d6:3e:4c:da: 51:aa:30:19:30:cf:e9:6e:50:af:38:75:56:60:e3:8a:48:d5: 51:b4:c1:46:25:1b:98:a6:69:cd:2b:17:75:1a:49:24:7a:0b: 74:ea:6c:58:13:c4:23:19:71:2d:4b:1f:b1:8b:30:d9:65:86: 9a:81:3e:81:1b:85:23:a0:32:f8:d3:b7:00:f1:90:d7:97:49: f5:86:cb:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkgNbXip+hpYXQgaThpwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzM0ZjgzNzNiZTdmZmIxYTM1ZWIzODg2MDU2NWJjM2M0 NTFiZTYwHhcNMjUxMjIxMTEwMTA5WhcNMjUxMjIyMTEwMTA5WjAzMTEwLwYDVQQD Eyg1ZjRiZmU5NzFiN2Y5YTFkZGNjNzJkN2UzZDdlZTk1YWE3ZjVhNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9DTC1QCOCRJQVLis0EZKqptGAPv n/cezkE0oTKdRsOSVuXMrHkZsR/Hhqgv7LfTo+Nj7OlLSDbva0qv4NazauG4y8nb GosNCjh11AzF94PNXioyngktHqxtye6Oa6zY8UeO/5ZNYYJf1H1uv7he3/jNplg3 tmi08KoLNUcuL/+LGJLVw6/kX8Xvgi5Fc3omhKRoevn1znjgKHzYv8ch1hKnusu2 EpJAm/pFjMArC923hVLRiM7sHgn+1ISpLStX4jn8Yvxtp2OyCa+wiRaMfFin/sIl aQHFsxurIurE0mjNbSIm6xvb5yQUfsUJASywWK5JWw20OeutuEf7QxwQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9L/pcbf5od3Mctfj1+6Vqn9aQLMB8GA1UdIwQY MBaAFALDT4Nzvn/7GjXrOIYFZbw8RRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQt ZTQ1MWI1OTA3ZWE0LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQtZTQ1MWI1OTA3ZWE0 LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArS277lt4 p2OHMXykowsdY0XpHzA501CqwyCe1s4MpvZvFFi4k9beNnDkjlmhd6wKEhA9mJJQ 32AHW/cUY0/4fUdlm0fBvvvNZLoW/rtzt9cbdyDaZRkNikCV3ZAugFFyGtFWC/8G v2ZFe2hFTwtMQmrlSxNkmT1draoUOMeUY1R732e0WErqDwIrKqHvTWyrPuUXWBRi BHBEXZ2tA45vna1KLsQZz9+w3QDNKChlyhXWPkzaUaowGTDP6W5Qrzh1VmDjikjV UbTBRiUbmKZpzSsXdRpJJHoLdOpsWBPEIxlxLUsfsYsw2WWGmoE+gRuFI6Ay+NO3 APGQ15dJ9YbLMA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:46:23 2025 by rpki-client