This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft File: AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json) Hash identifier: rPJMA9NK+bIVonfi98HugAkhPsfd4EFU/5SYhpLRvqY= Subject key identifier: 4B:4D:F7:D5:27:0B:4F:55:93:3D:52:A0:B1:29:1B:AE:21:1A:60:C1 Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B Certificate issuer: /CN=02c4913823a319feba2270e1ba2ca09e435bd55b Certificate serial: 019B52CF3FCB1076E5D5369543529C3366BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft Manifest number: 144A Signing time: Thu 25 Dec 2025 00:01:12 +0000 Manifest this update: Thu 25 Dec 2025 00:01:12 +0000 Manifest next update: Fri 26 Dec 2025 00:01:12 +0000 Files and hashes: 1: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: y/rzZT39UHAR5bRErPv3yYZQMM+3QGrInL2vMEqCNlU=) 2: zqiwP0xb8bytzAumv2YPA_fNwb4.roa (hash: zCaLlPBZ2WB2CsOiMiyWuvWQI6GwLJcAhYLvd/2+eA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:3f:cb:10:76:e5:d5:36:95:43:52:9c:33:66:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b Validity Not Before: Dec 25 00:01:12 2025 GMT Not After : Dec 26 00:01:12 2025 GMT Subject: CN=4b4df7d5270b4f55933d52a0b1291bae211a60c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:4e:33:60:11:5f:99:1f:e8:21:f3:d6:91: 0a:87:52:89:18:f1:50:16:e2:1d:db:cd:44:7b:2c: 87:77:22:7e:5c:5a:10:74:d5:8c:8c:1a:47:96:9f: d7:1d:f8:64:bd:17:19:3c:63:ed:87:fd:08:9c:bc: 21:05:9f:c4:76:27:17:a0:3e:b0:b2:70:98:bf:aa: 89:0e:ab:c7:75:3b:9f:2e:c4:51:55:d7:86:70:aa: 84:f5:2d:25:df:28:8a:cd:7d:35:d8:0a:90:e9:ff: 0c:b6:5f:44:c1:a6:4e:37:c7:a3:e1:ad:f5:77:d5: 2d:40:34:2a:55:de:1d:bd:d6:c6:e5:c1:90:e1:dd: bd:ec:38:d1:0d:5b:01:eb:27:f4:40:4e:66:b4:db: d2:41:ca:a7:e9:3d:88:ac:ee:af:79:5f:15:73:db: 43:5b:0b:1e:1f:1c:99:f9:1b:3b:6b:dc:8e:27:b1: 99:09:94:f3:b4:69:b3:31:8d:22:4d:16:96:ab:cc: c5:69:0c:4c:74:06:db:eb:86:03:08:6f:7d:7a:aa: 10:81:b4:03:47:f0:a5:28:c3:7c:e2:ce:2d:b0:5d: f7:17:f2:2a:56:c8:4d:b9:aa:0f:69:7d:21:4c:50: 1b:3b:71:f7:68:1e:03:1b:80:81:f4:f3:4b:76:45: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:F7:D5:27:0B:4F:55:93:3D:52:A0:B1:29:1B:AE:21:1A:60:C1 X509v3 Authority Key Identifier: keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:97:3e:5c:bc:22:19:99:f9:d1:8c:30:7d:60:34:79:49:d3: 35:6b:0c:24:15:66:6c:c7:7c:f9:90:a2:bc:56:71:ec:91:0c: 7f:7d:52:f0:b2:68:16:6d:12:ec:dc:4d:f9:e3:be:6c:de:51: 41:23:bd:07:79:4e:4e:c3:6a:41:02:f3:12:94:fc:5a:5b:5e: e4:13:5b:80:83:71:c8:0d:b5:c1:80:7b:14:1e:fa:b0:a6:86: 74:e7:83:a2:2c:9a:08:09:4c:eb:53:47:87:ec:d4:a7:33:c2: 2f:85:b0:9a:68:5a:28:1e:39:dc:a9:3a:d9:02:b1:f8:a1:c6: 52:b5:57:43:ad:9e:dd:9a:f1:b7:80:e9:26:c0:59:34:b4:a0: b8:87:15:5b:1c:0d:e9:f8:31:05:e5:46:2e:76:bd:8b:cf:c9: 3a:1b:dd:78:0f:41:34:47:ec:9d:88:d5:6d:29:7c:3d:fb:d3: d4:10:97:07:df:d6:c9:1a:3d:78:4d:ee:ff:6c:dc:6e:4d:54: b3:5c:6e:23:e4:a1:5e:0a:38:7d:f4:bc:00:b1:af:ed:99:30: 84:42:51:7d:76:96:21:20:c9:53:0d:13:d2:b0:c7:dd:22:36: 3c:ec:56:64:88:0a:3d:9c:d3:95:00:87:45:0d:2d:c7:bc:cf: 97:41:4b:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzz/LEHbl1TaVQ1KcM2a7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzQ5MTM4MjNhMzE5ZmViYTIyNzBlMWJhMmNhMDllNDM1 YmQ1NWIwHhcNMjUxMjI1MDAwMTEyWhcNMjUxMjI2MDAwMTEyWjAzMTEwLwYDVQQD Eyg0YjRkZjdkNTI3MGI0ZjU1OTMzZDUyYTBiMTI5MWJhZTIxMWE2MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhtOM2ARX5kf6CHz1pEKh1KJGPFQ FuId281EeyyHdyJ+XFoQdNWMjBpHlp/XHfhkvRcZPGPth/0InLwhBZ/EdicXoD6w snCYv6qJDqvHdTufLsRRVdeGcKqE9S0l3yiKzX012AqQ6f8Mtl9EwaZON8ej4a31 d9UtQDQqVd4dvdbG5cGQ4d297DjRDVsB6yf0QE5mtNvSQcqn6T2IrO6veV8Vc9tD WwseHxyZ+Rs7a9yOJ7GZCZTztGmzMY0iTRaWq8zFaQxMdAbb64YDCG99eqoQgbQD R/ClKMN84s4tsF33F/IqVshNuaoPaX0hTFAbO3H3aB4DG4CB9PNLdkWmXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtN99UnC09Vkz1SoLEpG64hGmDBMB8GA1UdIwQY MBaAFALEkTgjoxn+uiJw4bosoJ5DW9VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQt ZDYzYTUxMTFmYmY3LzEvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQtZDYzYTUxMTFmYmY3 LzEvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpc+XLwi GZn50YwwfWA0eUnTNWsMJBVmbMd8+ZCivFZx7JEMf31S8LJoFm0S7NxN+eO+bN5R QSO9B3lOTsNqQQLzEpT8Wlte5BNbgINxyA21wYB7FB76sKaGdOeDoiyaCAlM61NH h+zUpzPCL4WwmmhaKB453Kk62QKx+KHGUrVXQ62e3Zrxt4DpJsBZNLSguIcVWxwN 6fgxBeVGLna9i8/JOhvdeA9BNEfsnYjVbSl8PfvT1BCXB9/WyRo9eE3u/2zcbk1U s1xuI+ShXgo4ffS8ALGv7ZkwhEJRfXaWISDJUw0T0rDH3SI2POxWZIgKPZzTlQCH RQ0tx7zPl0FLjw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:22:25 2025 by rpki-client