This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json) Hash identifier: la8gv+d58tkiIWAEv8eV8dlGqtl3xxgmIqcxY7ODB1o= Subject key identifier: F5:97:5F:7E:77:06:89:E4:A7:42:4E:ED:0B:72:73:48:4E:FB:5A:B8 Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a Certificate serial: 019B4091AFFAD79123FE534DBD1EF3DEB6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 11:00:48 +0000 Manifest this update: Sun 21 Dec 2025 11:00:48 +0000 Manifest next update: Mon 22 Dec 2025 11:00:48 +0000 Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=) 2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: ftBawKoFCZUmbiX/byuSEeNQbDAQWeB4DbGb/he4+y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:af:fa:d7:91:23:fe:53:4d:bd:1e:f3:de:b6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a Validity Not Before: Dec 21 11:00:48 2025 GMT Not After : Dec 22 11:00:48 2025 GMT Subject: CN=f5975f7e770689e4a7424eed0b7273484efb5ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:a3:57:ba:ff:a4:51:e0:34:4b:ae:b0:64: fa:78:39:54:51:a0:56:f1:c7:b4:bb:65:27:84:bf: 8f:ae:28:4b:ae:89:45:98:13:62:54:d9:e9:f8:b3: 08:40:18:72:fe:38:b7:fc:60:83:44:59:13:56:37: 03:07:60:88:15:f2:7b:8a:90:50:45:e9:26:47:b8: ba:1b:62:f7:74:70:e1:04:c0:0e:d7:01:f3:f4:b3: a7:b3:4e:8f:98:34:63:6c:9e:60:f2:c0:94:c7:1c: 41:6b:88:ff:31:72:32:85:8d:94:a9:d9:f9:1b:74: 05:ba:8e:95:6e:0f:63:bc:7d:bd:68:47:38:9b:2c: 1c:db:ce:09:4d:04:ef:73:5e:30:4a:3e:6f:45:34: 89:ad:0a:b7:9e:96:74:d6:dd:94:4f:e6:be:1f:04: c3:37:3d:0a:59:68:0f:fb:ef:0d:fc:e6:ee:cb:e9: c8:e3:39:3c:84:2c:21:55:b9:fb:ed:0e:fa:f4:67: 5d:b9:10:5e:df:f0:9f:b8:d9:01:c9:31:fe:5e:81: 44:d7:e9:e0:39:36:ee:dc:8b:5a:82:8e:26:c1:66: 7f:4d:de:38:0f:83:38:54:24:23:e9:d4:1b:a1:c4: cd:5f:9d:f0:9f:4b:8b:28:8b:92:5d:62:c5:c9:6c: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:97:5F:7E:77:06:89:E4:A7:42:4E:ED:0B:72:73:48:4E:FB:5A:B8 X509v3 Authority Key Identifier: keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ce:eb:67:16:79:38:81:70:cc:86:95:6c:f7:12:a4:43:d1: 17:74:14:ce:4b:0f:eb:6f:62:b5:92:e4:e3:75:43:aa:ba:51: 0d:88:d6:bd:b9:bc:2c:01:32:17:92:ba:29:44:ea:90:68:a9: 76:86:cb:5d:86:f7:06:c5:b5:3f:70:bf:d5:7d:09:68:0f:5a: 7d:6e:94:c5:fe:ad:32:6a:61:cf:39:51:05:fc:b5:da:18:2d: 85:a3:df:45:f6:9f:d1:7a:78:06:ec:73:58:85:97:fd:2f:21: 18:00:c0:32:e5:f4:66:f9:97:49:58:35:58:6b:87:9f:74:1f: 30:22:55:e1:14:5c:8d:ce:3b:bb:a9:d9:d2:58:76:8e:60:1c: 45:8a:bd:34:1c:21:96:e7:43:a3:04:df:b9:a6:e3:e0:7e:d8: b0:9d:3a:37:43:9b:90:a3:19:4f:59:0b:71:ee:3a:7f:f7:dc: 92:e8:68:8f:6c:f1:21:dd:db:17:0e:e7:f8:97:c0:2c:bc:dc: f4:3f:8b:b4:b2:4b:f8:b3:95:d2:0b:2a:01:42:61:1f:8e:5a: 82:5b:0a:33:97:1e:8d:a6:82:e7:b9:d7:ef:83:c3:8f:10:33: 2a:fb:66:e4:d7:ec:53:10:b7:0c:2f:01:c3:93:5b:5d:b8:c4: 6e:fd:5d:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAka/615Ej/lNNvR7z3rbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODM2MTMwN2VmZDlmM2FiZWZlNjliZDE0ZGUwZTFiZDYw YjZlNmEwHhcNMjUxMjIxMTEwMDQ4WhcNMjUxMjIyMTEwMDQ4WjAzMTEwLwYDVQQD EyhmNTk3NWY3ZTc3MDY4OWU0YTc0MjRlZWQwYjcyNzM0ODRlZmI1YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfqjV7r/pFHgNEuusGT6eDlUUaBW 8ce0u2UnhL+PrihLrolFmBNiVNnp+LMIQBhy/ji3/GCDRFkTVjcDB2CIFfJ7ipBQ RekmR7i6G2L3dHDhBMAO1wHz9LOns06PmDRjbJ5g8sCUxxxBa4j/MXIyhY2Uqdn5 G3QFuo6Vbg9jvH29aEc4mywc284JTQTvc14wSj5vRTSJrQq3npZ01t2UT+a+HwTD Nz0KWWgP++8N/Obuy+nI4zk8hCwhVbn77Q769GdduRBe3/CfuNkByTH+XoFE1+ng OTbu3Itago4mwWZ/Td44D4M4VCQj6dQbocTNX53wn0uLKIuSXWLFyWwt2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWXX353Bonkp0JO7Qtyc0hO+1q4MB8GA1UdIwQY MBaAFAKDYTB+/Z86vv5pvRTeDhvWC25qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTct MjdjMjczYTYwNzg4LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTctMjdjMjczYTYwNzg4 LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC87rZxZ5 OIFwzIaVbPcSpEPRF3QUzksP629itZLk43VDqrpRDYjWvbm8LAEyF5K6KUTqkGip dobLXYb3BsW1P3C/1X0JaA9afW6Uxf6tMmphzzlRBfy12hgthaPfRfaf0Xp4Buxz WIWX/S8hGADAMuX0ZvmXSVg1WGuHn3QfMCJV4RRcjc47u6nZ0lh2jmAcRYq9NBwh ludDowTfuabj4H7YsJ06N0ObkKMZT1kLce46f/fckuhoj2zxId3bFw7n+JfALLzc 9D+LtLJL+LOV0gsqAUJhH45aglsKM5cejaaC57nX74PDjxAzKvtm5NfsUxC3DC8B w5NbXbjEbv1dNg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:25:17 2025 by rpki-client