This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json) Hash identifier: Mi2mC0Is1ciQ0eikvfcO/ienF6Mt3fWUGATipU8bdvA= Subject key identifier: F6:C5:AF:EA:7A:D3:14:8C:27:D3:29:5A:48:0A:F1:11:48:8A:00:AC Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b Certificate serial: 019B3DC779C10C0F6AB10FEE5D4DBF8DEF66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft Manifest number: 0FF0 Signing time: Sat 20 Dec 2025 22:00:41 +0000 Manifest this update: Sat 20 Dec 2025 22:00:41 +0000 Manifest next update: Sun 21 Dec 2025 22:00:41 +0000 Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: 8me1pHUKMakItXQ6qCgEO0ZC2Unkk0PQIJ1OdgzSOeQ=) 2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:79:c1:0c:0f:6a:b1:0f:ee:5d:4d:bf:8d:ef:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b Validity Not Before: Dec 20 22:00:41 2025 GMT Not After : Dec 21 22:00:41 2025 GMT Subject: CN=f6c5afea7ad3148c27d3295a480af111488a00ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:49:bd:8a:5c:85:1d:c2:3d:18:ed:f5:8d: d9:65:75:95:91:f0:40:55:b0:64:c5:db:92:52:58: 43:cb:9c:2d:38:b5:93:b4:61:23:6e:95:ab:d2:78: 0a:01:33:e5:a8:19:29:62:76:1c:f5:88:95:86:fd: b7:b4:0b:36:cf:65:c7:2f:b1:50:36:d7:f8:2e:20: 9a:58:0c:0a:65:59:10:cd:89:13:34:44:c1:8a:49: 79:02:de:38:61:f7:34:be:eb:0c:dc:3d:ee:69:3d: 60:98:91:bc:82:d6:bb:3e:c7:35:85:f8:0d:ed:ae: 04:8c:fe:43:86:cd:81:43:09:96:85:99:d2:f0:90: fe:92:c8:db:f6:2d:7a:87:1a:65:ef:07:20:93:56: c9:fc:88:f9:33:e1:0d:5d:72:b3:dc:ce:25:c0:61: b8:52:b2:f5:32:a5:c4:14:e0:c0:36:ce:f6:39:6b: a8:9d:69:f6:ec:49:3e:94:1e:ea:5b:ab:2a:01:c9: 2a:99:2b:7d:8a:e9:5a:12:1f:7b:e2:8f:29:6e:b5: 8a:26:85:a9:9e:f3:06:4e:aa:fd:7d:b2:2a:6d:13: b6:5c:e6:55:42:87:4d:3c:9a:6e:a2:8b:0e:af:72: 33:5f:12:48:5f:c6:e7:85:7f:24:26:ce:e7:fa:14: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C5:AF:EA:7A:D3:14:8C:27:D3:29:5A:48:0A:F1:11:48:8A:00:AC X509v3 Authority Key Identifier: keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:dc:91:f4:a2:c9:60:d2:64:fd:c5:bf:78:6f:61:c9:3d:20: 6b:47:c4:9a:93:ec:3c:fd:e7:5b:55:7c:e0:d4:00:2b:72:9f: c8:72:a4:d7:83:e4:06:47:7b:7c:a1:66:2d:bd:d1:47:a4:e8: 8d:37:01:45:d1:82:02:cf:fc:25:30:2a:41:b8:19:fb:4d:8b: 4b:ca:85:5b:4c:e1:09:9d:dc:63:f9:5d:2a:6e:61:cc:a6:b1: 62:a4:e9:cf:14:9f:91:bc:af:72:7c:9b:29:06:e9:8a:d5:f1: 79:53:c1:86:0a:a9:4f:95:e6:03:fe:00:59:45:e9:d8:18:af: 0f:3f:13:19:1f:e3:fc:e6:96:3b:35:78:9c:4a:fd:ef:69:3e: 83:52:40:2b:a4:39:ad:68:15:06:ad:80:df:22:e5:7e:1d:44: 1e:84:cf:73:f8:99:9f:7b:b3:a0:41:eb:32:e9:3c:33:38:ad: 24:b2:d1:4e:35:ee:56:b5:cd:5a:2a:2e:df:47:6f:75:41:76: b5:59:02:4a:86:08:9b:55:65:b5:84:f9:37:ba:d2:d3:0e:49: b8:03:ba:ad:9e:9c:2c:0a:93:96:ca:a7:70:2b:40:ce:94:d0: 73:c7:3f:43:51:f7:3a:4e:3c:02:f3:76:a4:22:a8:2a:36:1d: d8:f6:25:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3nBDA9qsQ/uXU2/je9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOGIyMGZmMDk4ZTZiN2NiYzhiNmFmMGQ2ODAwNjVlNmI5 MDYwMGIwHhcNMjUxMjIwMjIwMDQxWhcNMjUxMjIxMjIwMDQxWjAzMTEwLwYDVQQD EyhmNmM1YWZlYTdhZDMxNDhjMjdkMzI5NWE0ODBhZjExMTQ4OGEwMGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWlJvYpchR3CPRjt9Y3ZZXWVkfBA VbBkxduSUlhDy5wtOLWTtGEjbpWr0ngKATPlqBkpYnYc9YiVhv23tAs2z2XHL7FQ Ntf4LiCaWAwKZVkQzYkTNETBikl5At44Yfc0vusM3D3uaT1gmJG8gta7Psc1hfgN 7a4EjP5Dhs2BQwmWhZnS8JD+ksjb9i16hxpl7wcgk1bJ/Ij5M+ENXXKz3M4lwGG4 UrL1MqXEFODANs72OWuonWn27Ek+lB7qW6sqAckqmSt9iulaEh974o8pbrWKJoWp nvMGTqr9fbIqbRO2XOZVQodNPJpuoosOr3IzXxJIX8bnhX8kJs7n+hTcPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbFr+p60xSMJ9MpWkgK8RFIigCsMB8GA1UdIwQY MBaAFAGLIP8Jjmt8vItq8NaABl5rkGALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEt OTEyN2Y0MjlhNDhkLzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEtOTEyN2Y0MjlhNDhk LzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdyR9KLJ YNJk/cW/eG9hyT0ga0fEmpPsPP3nW1V84NQAK3KfyHKk14PkBkd7fKFmLb3RR6To jTcBRdGCAs/8JTAqQbgZ+02LS8qFW0zhCZ3cY/ldKm5hzKaxYqTpzxSfkbyvcnyb KQbpitXxeVPBhgqpT5XmA/4AWUXp2BivDz8TGR/j/OaWOzV4nEr972k+g1JAK6Q5 rWgVBq2A3yLlfh1EHoTPc/iZn3uzoEHrMuk8MzitJLLRTjXuVrXNWiou30dvdUF2 tVkCSoYIm1VltYT5N7rS0w5JuAO6rZ6cLAqTlsqncCtAzpTQc8c/Q1H3Ok48AvN2 pCKoKjYd2PYlEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:20 2025 by rpki-client