This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json) Hash identifier: D7AwKph0sgWlHfUtH7rsKMGp7amyJGUkZc1MO98Tgmc= Subject key identifier: 2D:CA:AF:9A:81:66:E6:C4:5E:BF:B8:BD:5F:6B:24:77:ED:F5:F6:5F Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85 Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85 Certificate serial: 019B2A780E9A84799BF74C6624936798F885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 04:01:09 +0000 Manifest this update: Wed 17 Dec 2025 04:01:09 +0000 Manifest next update: Thu 18 Dec 2025 04:01:09 +0000 Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: joT85vEQbuacRDUu9uT2NkGB/jsBdGDpIt8JCM3R0tc=) 2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:0e:9a:84:79:9b:f7:4c:66:24:93:67:98:f8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85 Validity Not Before: Dec 17 04:01:09 2025 GMT Not After : Dec 18 04:01:09 2025 GMT Subject: CN=2dcaaf9a8166e6c45ebfb8bd5f6b2477edf5f65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:76:3e:41:1d:20:64:66:dc:86:17:4e:8d: dd:0d:30:63:21:70:b2:c8:31:ef:8c:53:2b:e3:d7: 60:8a:24:63:04:86:b0:5a:ca:2a:64:ff:0d:cf:35: 51:f6:a0:36:24:2b:6c:8b:60:ae:fc:00:a4:6c:ed: 4f:37:12:f2:0d:ce:95:ad:df:b9:62:61:1c:be:ba: 94:f1:5a:12:fd:cd:b8:ae:2c:b3:4d:17:ef:c2:f4: d3:71:79:a9:2b:17:8b:d6:38:49:b6:bc:d7:1a:05: f0:e7:74:44:08:64:3a:f1:26:b4:be:d6:d4:67:5c: db:ad:26:c9:e8:31:a0:af:73:dc:21:a5:63:e6:ff: 5d:6c:bc:de:27:2d:af:43:73:22:23:b8:9b:4e:e6: 93:26:90:87:ba:a3:e0:5a:e0:ce:d6:97:a3:3a:eb: 48:96:63:ce:e1:b4:49:41:bc:01:f5:97:9a:15:e5: 9d:d3:33:5b:fa:5f:16:84:61:97:b9:9d:28:80:8a: 71:55:c8:58:84:93:ae:c0:9f:e2:ff:55:e0:90:b1: c3:1f:58:b3:67:d1:3a:43:83:bc:53:1d:20:7b:18: 0c:e5:2b:ad:87:22:4b:bd:b6:d7:cb:52:4c:62:b2: f7:82:ec:6d:d0:b6:7b:a8:63:27:18:71:64:ae:f9: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:AF:9A:81:66:E6:C4:5E:BF:B8:BD:5F:6B:24:77:ED:F5:F6:5F X509v3 Authority Key Identifier: keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:30:06:47:a4:f0:fa:8d:84:a9:11:d1:36:b0:68:6d:65:c6: f1:0f:5d:57:86:62:d3:40:5b:6c:3c:f1:0d:63:53:6e:54:6f: f9:d6:82:b7:91:ab:d4:ab:31:d5:f9:88:28:2e:e2:db:8b:f9: 27:65:65:66:a0:ca:c9:8f:3f:9f:a9:56:77:55:ab:b3:4c:53: f2:80:79:62:81:2d:3f:53:f5:82:e3:63:dd:e0:52:12:11:6f: 61:b1:62:aa:f7:f8:e8:fc:12:e8:18:06:1b:68:cf:7f:a6:fd: f7:1d:09:8a:0b:e8:a6:85:60:d7:a4:88:83:c3:31:49:fd:03: 95:37:b5:ff:cf:48:47:42:b1:68:73:5a:83:44:ad:a4:1a:41: 90:a8:cf:c5:ec:45:28:a2:82:ec:d7:be:43:70:99:b2:d8:4c: 49:55:fd:2a:b7:2c:d5:1b:fc:6c:00:13:93:e2:fa:fc:93:8c: e0:cb:20:6a:43:ad:2e:05:85:82:9d:8d:7f:f9:e8:6b:a7:ff: 9a:7f:f9:66:82:7b:bd:5b:2f:eb:6d:f4:ef:b8:f0:d5:48:eb: 15:f7:0f:b6:e3:9a:bf:0b:6c:d2:20:23:bc:32:10:b4:2d:fe: 23:62:1a:1c:94:14:8f:f2:26:99:87:27:9e:8f:ff:79:de:4f: ac:40:db:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeA6ahHmb90xmJJNnmPiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOGNjNmY0NjZhMjQxNjU3YmY1ZWM1MmE2MzBkYWViMDEy MjJmODUwHhcNMjUxMjE3MDQwMTA5WhcNMjUxMjE4MDQwMTA5WjAzMTEwLwYDVQQD EygyZGNhYWY5YTgxNjZlNmM0NWViZmI4YmQ1ZjZiMjQ3N2VkZjVmNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/J2PkEdIGRm3IYXTo3dDTBjIXCy yDHvjFMr49dgiiRjBIawWsoqZP8NzzVR9qA2JCtsi2Cu/ACkbO1PNxLyDc6Vrd+5 YmEcvrqU8VoS/c24riyzTRfvwvTTcXmpKxeL1jhJtrzXGgXw53RECGQ68Sa0vtbU Z1zbrSbJ6DGgr3PcIaVj5v9dbLzeJy2vQ3MiI7ibTuaTJpCHuqPgWuDO1pejOutI lmPO4bRJQbwB9ZeaFeWd0zNb+l8WhGGXuZ0ogIpxVchYhJOuwJ/i/1XgkLHDH1iz Z9E6Q4O8Ux0gexgM5SuthyJLvbbXy1JMYrL3guxt0LZ7qGMnGHFkrvlZ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3Kr5qBZubEXr+4vV9rJHft9fZfMB8GA1UdIwQY MBaAFAGMxvRmokFle/XsUqYw2usBIi+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEt YmU4ZDhjNjdkZjk1LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEtYmU4ZDhjNjdkZjk1 LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjAGR6Tw +o2EqRHRNrBobWXG8Q9dV4Zi00BbbDzxDWNTblRv+daCt5Gr1Ksx1fmIKC7i24v5 J2VlZqDKyY8/n6lWd1Wrs0xT8oB5YoEtP1P1guNj3eBSEhFvYbFiqvf46PwS6BgG G2jPf6b99x0JigvopoVg16SIg8MxSf0DlTe1/89IR0KxaHNag0StpBpBkKjPxexF KKKC7Ne+Q3CZsthMSVX9Krcs1Rv8bAATk+L6/JOM4MsgakOtLgWFgp2Nf/noa6f/ mn/5ZoJ7vVsv623077jw1UjrFfcPtuOavwts0iAjvDIQtC3+I2IaHJQUj/ImmYcn no//ed5PrEDb+w== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:21 2025 by rpki-client