This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json) Hash identifier: JHDY1/++v4J8SjTbpYrrzNTjQdip8hnM6zzFM9o8K3A= Subject key identifier: 9E:BF:BA:67:BF:37:EE:CE:12:FF:2B:B7:39:BA:2C:8E:6E:78:8D:6F Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f Certificate serial: 019B424A806EDB34B64D337EF5AECEC9B56E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft Manifest number: 0D93 Signing time: Sun 21 Dec 2025 19:02:17 +0000 Manifest this update: Sun 21 Dec 2025 19:02:17 +0000 Manifest next update: Mon 22 Dec 2025 19:02:17 +0000 Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: LMT85gXKOLnlYc6QiFJPR5k6cK7EUJnvOIsRR2BYRy4=) 2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:80:6e:db:34:b6:4d:33:7e:f5:ae:ce:c9:b5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f Validity Not Before: Dec 21 19:02:17 2025 GMT Not After : Dec 22 19:02:17 2025 GMT Subject: CN=9ebfba67bf37eece12ff2bb739ba2c8e6e788d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:68:c8:1b:c5:b5:e6:61:3c:ec:f2:26:82: d3:c6:15:26:11:72:20:77:ce:77:4b:6a:08:b3:2b: 5a:20:60:05:d8:7f:80:4f:b1:04:44:66:c7:a2:cf: 32:ad:cc:f4:72:92:43:a3:7e:39:83:84:37:d9:6b: 36:14:76:64:81:7a:6d:11:5f:7f:e9:59:e4:a3:cb: 4f:60:21:e6:9f:c8:a5:9e:cc:45:67:b7:ed:89:71: fc:34:37:d1:44:de:ac:44:ca:75:3b:69:28:d2:d8: d0:63:c0:5f:f5:ac:ff:f3:7e:58:51:cc:b4:02:c4: 3d:04:58:6f:0e:33:e9:c8:e2:e5:3d:0d:b7:14:34: 71:08:d8:36:8c:3f:06:27:b2:3e:74:34:6c:ab:ca: 6e:b0:18:96:a0:70:8b:c3:d6:17:4f:43:a5:ff:17: f5:42:29:5f:bb:97:fc:50:d7:2f:4e:af:54:a3:a5: 4f:85:66:3c:48:2c:39:20:d4:c3:c0:7f:69:10:1f: ae:01:23:2d:d4:e8:3c:94:33:50:88:e1:a3:79:01: 50:55:2a:03:7f:65:4b:f5:70:1a:06:7f:30:0d:b7: e1:38:a8:d1:62:4e:31:84:cd:72:68:ac:02:c8:19: 55:e1:31:33:b0:47:83:f8:d0:b4:d2:60:52:84:8c: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:BA:67:BF:37:EE:CE:12:FF:2B:B7:39:BA:2C:8E:6E:78:8D:6F X509v3 Authority Key Identifier: keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:d8:9a:a2:bf:60:50:f2:6c:17:52:97:da:b7:84:4f:61: be:ef:12:93:51:79:02:29:d2:23:e5:83:86:ba:f1:dc:aa:05: b2:26:12:78:94:1e:a9:bd:57:eb:1a:60:00:ad:bc:77:e0:b2: 09:3e:94:01:a3:4e:07:79:dc:29:ed:77:46:42:d4:4e:1b:dc: 56:14:91:64:d6:25:ad:fb:de:1e:76:89:0e:7e:52:48:45:1a: a7:e5:51:ee:51:d4:4f:1a:23:f5:d7:ff:f5:81:fe:65:49:cf: 22:92:dc:d8:73:2c:3a:da:e7:77:6e:39:b0:f2:9d:d0:0e:5c: cb:92:d2:1e:91:7a:b6:25:64:f0:c7:80:8a:d4:13:bc:63:2e: 3e:0c:49:cb:53:00:a4:da:cb:49:36:67:12:cb:a3:53:cc:7d: 61:01:05:f6:9c:c9:e3:37:a9:55:ae:6c:6c:d2:ea:20:90:60: b4:60:d0:78:78:71:85:d9:3c:e4:7a:8a:f6:84:53:5f:a2:d1: 81:7d:21:4a:1d:33:ad:05:ae:89:bd:49:ec:62:d9:11:98:00: 88:3d:09:b1:d4:da:e6:79:92:c5:f0:f7:e0:68:e9:9f:ad:2c: 00:fd:52:3d:69:54:a3:91:3f:15:db:17:ca:e8:ab:9d:c4:29: c7:fc:6b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSoBu2zS2TTN+9a7OybVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi ZDViMGYwHhcNMjUxMjIxMTkwMjE3WhcNMjUxMjIyMTkwMjE3WjAzMTEwLwYDVQQD Eyg5ZWJmYmE2N2JmMzdlZWNlMTJmZjJiYjczOWJhMmM4ZTZlNzg4ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNoyBvFteZhPOzyJoLTxhUmEXIg d853S2oIsytaIGAF2H+AT7EERGbHos8yrcz0cpJDo345g4Q32Ws2FHZkgXptEV9/ 6Vnko8tPYCHmn8ilnsxFZ7ftiXH8NDfRRN6sRMp1O2ko0tjQY8Bf9az/835YUcy0 AsQ9BFhvDjPpyOLlPQ23FDRxCNg2jD8GJ7I+dDRsq8pusBiWoHCLw9YXT0Ol/xf1 Qilfu5f8UNcvTq9Uo6VPhWY8SCw5INTDwH9pEB+uASMt1Og8lDNQiOGjeQFQVSoD f2VL9XAaBn8wDbfhOKjRYk4xhM1yaKwCyBlV4TEzsEeD+NC00mBShIy/YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6/ume/N+7OEv8rtzm6LI5ueI1vMB8GA1UdIwQY MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3 LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkjYmqK/ YFDybBdSl9q3hE9hvu8Sk1F5AinSI+WDhrrx3KoFsiYSeJQeqb1X6xpgAK28d+Cy CT6UAaNOB3ncKe13RkLUThvcVhSRZNYlrfveHnaJDn5SSEUap+VR7lHUTxoj9df/ 9YH+ZUnPIpLc2HMsOtrnd245sPKd0A5cy5LSHpF6tiVk8MeAitQTvGMuPgxJy1MA pNrLSTZnEsujU8x9YQEF9pzJ4zepVa5sbNLqIJBgtGDQeHhxhdk85HqK9oRTX6LR gX0hSh0zrQWuib1J7GLZEZgAiD0JsdTa5nmSxfD34Gjpn60sAP1SPWlUo5E/FdsX yuirncQpx/xryQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:01:26 2025 by rpki-client