This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json) Hash identifier: MwolvMP/jkoLRVi3y4SCbOtyAt0hQ3g6zxdoxY+QbQU= Subject key identifier: 7A:F8:05:24:6F:C5:BE:B3:B6:8F:E1:56:E3:58:1C:1D:C8:02:9B:54 Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Certificate serial: 019B4FCF47A140B53B0685689C9D187580C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft Manifest number: 178E Signing time: Wed 24 Dec 2025 10:02:22 +0000 Manifest this update: Wed 24 Dec 2025 10:02:22 +0000 Manifest next update: Thu 25 Dec 2025 10:02:22 +0000 Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: 3H8UaXgvdrxDo+rPdE0wUoXHawk4SUc0z0rdmRVtvkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:47:a1:40:b5:3b:06:85:68:9c:9d:18:75:80:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Validity Not Before: Dec 24 10:02:22 2025 GMT Not After : Dec 25 10:02:22 2025 GMT Subject: CN=7af805246fc5beb3b68fe156e3581c1dc8029b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2c:ec:c2:57:8e:89:99:4b:00:0c:8a:92:87: e7:5b:ce:e2:f8:22:6e:1b:4e:55:99:f7:37:ed:f7: a2:3f:2a:ab:4d:34:e1:e4:e6:f1:af:a8:d2:66:4b: 56:98:9c:e8:13:38:2a:e5:e1:51:0c:45:9f:5a:ad: 0d:ed:85:56:e5:61:a4:f2:8d:ca:0f:5d:57:1f:b8: 90:56:4f:bd:34:dd:66:e5:15:8c:03:e7:57:37:9a: bf:99:23:28:90:2a:fc:ad:00:b2:0a:e8:f0:0d:89: 7e:d8:06:df:55:5a:1a:a5:d5:9c:ed:88:7c:05:bc: 4d:69:1e:aa:0a:86:74:9f:63:26:c0:5c:96:c5:27: 3b:45:5e:72:62:53:d4:a5:e6:cb:2f:24:18:c5:04: ca:24:fe:ce:8a:b4:73:c8:e7:61:02:b0:74:14:3c: 4e:73:27:ed:2e:39:38:78:78:39:85:e8:00:7d:6c: 00:9f:2b:09:a7:55:40:25:7f:ac:b7:90:1c:a8:57: fe:31:e5:12:8b:11:6e:10:8d:a4:e2:c5:5a:ba:15: 3b:9c:18:77:25:be:72:b8:80:b7:a2:20:36:3c:39: d9:bd:5c:01:65:53:d1:e7:38:69:08:b0:8a:6d:08: 31:30:55:63:78:61:4b:50:dc:6a:21:39:62:9b:9d: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F8:05:24:6F:C5:BE:B3:B6:8F:E1:56:E3:58:1C:1D:C8:02:9B:54 X509v3 Authority Key Identifier: keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:59:08:23:52:24:1c:d2:dc:fb:ff:d8:fa:cc:de:a7:ba:0d: 8b:d1:fe:a6:49:00:b4:f8:ad:32:42:23:75:38:e2:c6:f3:da: 3f:ec:2c:0c:0a:36:ed:41:29:2b:54:2d:47:c7:b9:39:84:4f: 6c:9a:19:4c:da:fa:69:e6:9d:c5:91:46:b7:a1:99:ef:5e:fc: b5:f4:77:1c:46:2c:58:da:26:df:da:d6:6e:3a:c4:f5:75:8a: 0c:d6:bd:70:1d:0e:b8:fa:e9:f8:14:6d:76:b7:60:86:27:47: 08:6a:a4:c1:52:d1:ee:2a:06:4f:44:a5:6c:28:f8:f1:38:51: d7:8f:0c:35:23:a7:6a:8e:58:2f:76:a5:bb:ac:fb:f3:07:9d: 14:5a:a5:c0:19:0d:50:4e:a7:e0:00:f7:f5:de:89:d0:84:c3: 5d:f5:27:2a:bd:cb:76:99:39:7d:90:ca:da:09:09:cd:8e:42: 18:62:cc:77:eb:2c:05:8c:73:33:c9:25:3f:44:f7:c7:37:f5: 77:10:62:bb:b7:de:71:ef:ff:00:61:07:7c:11:12:cc:5e:37: 76:0d:a0:13:ec:47:ac:60:ce:84:ce:ed:18:92:9f:81:55:51: 25:cc:0a:c1:00:f6:84:22:a2:52:1d:3e:88:21:8f:41:27:43: 9d:03:01:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz0ehQLU7BoVonJ0YdYDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh ZjM3YzYwHhcNMjUxMjI0MTAwMjIyWhcNMjUxMjI1MTAwMjIyWjAzMTEwLwYDVQQD Eyg3YWY4MDUyNDZmYzViZWIzYjY4ZmUxNTZlMzU4MWMxZGM4MDI5YjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkizswleOiZlLAAyKkofnW87i+CJu G05Vmfc37feiPyqrTTTh5Obxr6jSZktWmJzoEzgq5eFRDEWfWq0N7YVW5WGk8o3K D11XH7iQVk+9NN1m5RWMA+dXN5q/mSMokCr8rQCyCujwDYl+2AbfVVoapdWc7Yh8 BbxNaR6qCoZ0n2MmwFyWxSc7RV5yYlPUpebLLyQYxQTKJP7OirRzyOdhArB0FDxO cyftLjk4eHg5hegAfWwAnysJp1VAJX+st5AcqFf+MeUSixFuEI2k4sVauhU7nBh3 Jb5yuIC3oiA2PDnZvVwBZVPR5zhpCLCKbQgxMFVjeGFLUNxqITlim53clwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr4BSRvxb6zto/hVuNYHB3IAptUMB8GA1UdIwQY MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0 LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1kII1Ik HNLc+//Y+szep7oNi9H+pkkAtPitMkIjdTjixvPaP+wsDAo27UEpK1QtR8e5OYRP bJoZTNr6aeadxZFGt6GZ7178tfR3HEYsWNom39rWbjrE9XWKDNa9cB0OuPrp+BRt drdghidHCGqkwVLR7ioGT0SlbCj48ThR148MNSOnao5YL3alu6z78wedFFqlwBkN UE6n4AD39d6J0ITDXfUnKr3Ldpk5fZDK2gkJzY5CGGLMd+ssBYxzM8klP0T3xzf1 dxBiu7fece//AGEHfBESzF43dg2gE+xHrGDOhM7tGJKfgVVRJcwKwQD2hCKiUh0+ iCGPQSdDnQMB+g== -----END CERTIFICATE-----Generated at Wed Dec 24 16:46:46 2025 by rpki-client