This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json) Hash identifier: hz1490F/OsbJvXbnMj+zj9s7D4KIWSBsW2e4FMNkczM= Subject key identifier: A9:6F:57:B3:D3:39:FE:F7:15:DA:1B:3E:EA:6E:BF:F4:C0:53:3D:13 Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Certificate serial: 019B4C28607A5B3952935308A1BDE835BDC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 17:01:13 +0000 Manifest this update: Tue 23 Dec 2025 17:01:13 +0000 Manifest next update: Wed 24 Dec 2025 17:01:13 +0000 Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: /0weJlsCaFFj72EcPGGb5kcU++enOMGelfVFqY9Uoqk=) 2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:60:7a:5b:39:52:93:53:08:a1:bd:e8:35:bd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Validity Not Before: Dec 23 17:01:13 2025 GMT Not After : Dec 24 17:01:13 2025 GMT Subject: CN=a96f57b3d339fef715da1b3eea6ebff4c0533d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:d2:10:73:3d:fc:f8:6d:90:a0:b5:f3:4b: 30:62:c5:17:cc:5d:26:f0:1d:d0:70:23:6d:07:ba: 8d:49:79:e7:0c:ca:a1:a2:d6:c4:b6:f9:6b:78:86: 3f:a7:a4:6b:69:32:e8:1b:31:3e:5e:53:93:a2:91: 2d:0f:89:bb:59:aa:29:be:85:d7:f1:e5:ea:37:c8: 2f:df:6c:88:fc:83:f2:93:9e:ae:82:25:6f:61:7d: df:c3:85:da:eb:ee:16:07:b9:a7:17:9c:b7:6b:4e: 18:e1:6b:a3:77:35:5c:83:a2:b5:15:18:0d:83:c3: d2:b4:f5:30:8c:56:05:d8:bd:5d:2b:62:74:67:a2: 29:63:87:50:a6:5f:85:ad:24:9c:b7:c3:a8:a1:02: 08:2d:b4:e3:a6:b6:31:2e:f8:11:43:26:f2:a5:72: 55:48:31:8e:56:04:f9:c8:08:a5:a2:cb:7c:9b:03: be:bf:54:12:99:ca:ca:4e:71:eb:9a:9f:6e:f4:c0: c0:c6:bd:32:53:df:df:88:1b:da:e8:77:f9:c9:52: 7c:6c:48:88:fb:24:93:2e:91:8d:fc:d5:b8:4d:e3: cc:df:b0:7f:31:b6:40:ed:71:86:8a:62:0e:58:3e: c8:d7:6a:c4:8a:f3:6e:3f:9f:51:a1:0a:a0:5e:5f: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:57:B3:D3:39:FE:F7:15:DA:1B:3E:EA:6E:BF:F4:C0:53:3D:13 X509v3 Authority Key Identifier: keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:56:82:bd:3d:54:ba:c5:ab:15:9b:d9:34:42:55:7a:fe:5d: c1:b2:22:1f:92:7a:6c:c8:5f:07:96:27:cd:b1:78:29:79:74: 91:1b:b6:0e:09:9a:a2:69:70:d7:fa:fe:46:98:7e:42:54:b0: ae:c7:3c:69:63:d7:a7:f0:85:ae:89:f5:fe:01:08:93:35:c4: e0:c5:e2:32:4b:72:ef:6c:c5:f3:a7:c2:6f:9b:e8:52:65:50: 37:8b:d3:3f:02:68:32:91:0a:45:39:49:19:64:81:49:f2:8c: c5:78:08:97:5e:78:84:41:da:8a:74:c5:72:91:47:f2:22:57: 06:79:38:9b:44:52:de:b5:db:5f:bb:b2:f8:a9:81:0a:fb:88: 46:4c:58:1e:a6:cb:f8:eb:ec:d9:49:dd:bd:50:69:50:de:94: 3b:66:bd:51:69:4c:dd:e3:65:99:b3:d7:bc:d7:0d:0f:c6:fd: 7c:3b:03:39:6d:b0:62:ee:35:d9:cb:c6:d7:74:39:eb:1f:5a: 7a:30:92:54:84:95:1e:32:2c:1a:9d:d0:4c:aa:e8:56:d9:38: 6a:64:2f:36:ce:c8:0e:35:df:8f:eb:0b:58:5b:ec:be:71:c1: 07:84:8f:91:3d:16:5c:62:d8:d6:96:12:6b:68:9b:67:b6:e9: 15:71:09:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKGB6WzlSk1MIob3oNb3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzM0ZjgzNzNiZTdmZmIxYTM1ZWIzODg2MDU2NWJjM2M0 NTFiZTYwHhcNMjUxMjIzMTcwMTEzWhcNMjUxMjI0MTcwMTEzWjAzMTEwLwYDVQQD EyhhOTZmNTdiM2QzMzlmZWY3MTVkYTFiM2VlYTZlYmZmNGMwNTMzZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKDSEHM9/PhtkKC180swYsUXzF0m 8B3QcCNtB7qNSXnnDMqhotbEtvlreIY/p6RraTLoGzE+XlOTopEtD4m7WaopvoXX 8eXqN8gv32yI/IPyk56ugiVvYX3fw4Xa6+4WB7mnF5y3a04Y4WujdzVcg6K1FRgN g8PStPUwjFYF2L1dK2J0Z6IpY4dQpl+FrSSct8OooQIILbTjprYxLvgRQybypXJV SDGOVgT5yAilost8mwO+v1QSmcrKTnHrmp9u9MDAxr0yU9/fiBva6Hf5yVJ8bEiI +ySTLpGN/NW4TePM37B/MbZA7XGGimIOWD7I12rEivNuP59RoQqgXl9VewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlvV7PTOf73FdobPupuv/TAUz0TMB8GA1UdIwQY MBaAFALDT4Nzvn/7GjXrOIYFZbw8RRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQt ZTQ1MWI1OTA3ZWE0LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQtZTQ1MWI1OTA3ZWE0 LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVaCvT1U usWrFZvZNEJVev5dwbIiH5J6bMhfB5YnzbF4KXl0kRu2Dgmaomlw1/r+Rph+QlSw rsc8aWPXp/CFron1/gEIkzXE4MXiMkty72zF86fCb5voUmVQN4vTPwJoMpEKRTlJ GWSBSfKMxXgIl154hEHainTFcpFH8iJXBnk4m0RS3rXbX7uy+KmBCvuIRkxYHqbL +Ovs2UndvVBpUN6UO2a9UWlM3eNlmbPXvNcND8b9fDsDOW2wYu412cvG13Q56x9a ejCSVISVHjIsGp3QTKroVtk4amQvNs7IDjXfj+sLWFvsvnHBB4SPkT0WXGLY1pYS a2ibZ7bpFXEJLQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:53:11 2025 by rpki-client