This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json) Hash identifier: 34dIfJec9SAj0cC6CY1HdWOsyq1C+8kMZIc1E+XkMjM= Subject key identifier: E2:A1:84:99:FE:C6:D4:72:EA:00:DB:31:BA:49:72:17:0F:C2:EB:89 Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Certificate serial: 019B7110BD009CD153A988990BB8789CC9D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 21:01:20 +0000 Manifest this update: Tue 30 Dec 2025 21:01:20 +0000 Manifest next update: Wed 31 Dec 2025 21:01:20 +0000 Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=) 2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: QS+Ra5KxOTWAe2FRgoGrMpBncle0TPGad/ldL4C9gvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:bd:00:9c:d1:53:a9:88:99:0b:b8:78:9c:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Validity Not Before: Dec 30 21:01:20 2025 GMT Not After : Dec 31 21:01:20 2025 GMT Subject: CN=e2a18499fec6d472ea00db31ba4972170fc2eb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:57:ca:54:6c:08:9f:3b:f7:34:c9:3b:c9: 03:32:26:38:ea:40:82:18:1f:6a:a0:3c:c3:04:04: 91:1c:5e:41:42:af:a8:d7:d5:65:7d:d4:fb:0c:04: 8c:25:9a:45:79:8a:69:3e:f1:83:8e:2e:44:a6:52: 52:36:61:4f:0f:b8:45:bf:73:d3:27:2f:21:b0:57: 38:6a:27:59:48:17:0e:a4:3c:35:c7:c6:ee:c9:db: b1:6c:4b:ec:3c:92:bf:15:2b:d2:a9:17:65:8a:a9: c1:d7:f7:35:75:48:22:0c:d7:fa:7e:9d:de:a2:0d: d4:f7:cc:75:85:2e:89:19:60:ab:e3:f9:f3:ae:98: 97:e7:88:63:34:60:de:c8:6f:ca:92:c8:11:5a:d2: a6:a9:d1:d9:e8:88:6a:98:36:9c:52:42:ca:64:fd: d7:61:c3:86:c3:19:5f:14:2b:e4:54:95:de:ee:64: a9:2d:53:ec:59:d1:36:3c:8b:ae:13:18:b6:c3:95: 1d:2d:4d:84:f6:12:d8:0c:3c:fc:24:ec:6e:46:8b: 31:2d:d0:b6:4e:59:b0:8c:ea:c2:7b:ef:02:ac:13: 10:21:c8:81:7a:cb:d9:b3:73:57:07:c9:72:bc:fc: e2:f2:fb:7e:a5:1e:f7:26:4e:40:6a:ab:bb:22:9f: ba:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:84:99:FE:C6:D4:72:EA:00:DB:31:BA:49:72:17:0F:C2:EB:89 X509v3 Authority Key Identifier: keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a0:5d:3a:81:ea:bc:6f:3d:ae:96:db:c4:70:98:b7:09:86: f7:17:ba:57:dc:a3:e9:4f:59:09:a2:19:4e:fc:ab:18:42:72: a4:9b:04:87:19:e1:92:ea:4f:df:f3:95:5e:fc:21:5c:6b:b8: f1:88:02:73:16:37:52:93:f8:22:a6:8f:59:11:73:13:2a:39: 4e:45:5e:05:2c:d6:a5:99:17:fe:8f:fa:27:c5:5f:50:d7:2f: 32:85:3d:03:31:4e:14:c7:a4:1c:82:e7:23:74:0a:07:29:58: fc:41:62:4a:09:d2:e2:c6:de:d0:06:87:04:f9:aa:f6:e2:03: 30:60:48:42:57:da:a5:2c:72:a1:71:d5:45:fa:44:1d:3c:ef: 09:03:6a:d7:a8:b1:18:9a:92:4c:b7:38:0c:1d:76:a9:ec:1d: 2c:67:4d:70:05:2d:ab:c1:49:10:5d:4a:ad:d6:76:05:ad:c4: 8a:a5:11:60:1a:3c:5f:fc:b7:ef:15:37:0d:86:aa:ba:25:7c: 10:ec:19:f7:fe:ec:7d:af:8e:77:d4:2c:4a:22:8a:7c:1c:dc: 8c:ec:97:1f:9c:bd:6d:ab:0d:f8:48:9f:2d:01:0d:a4:86:be: eb:80:43:f4:21:a7:4f:c6:8a:0b:e8:ef:f5:8e:b1:3e:68:b1: 3f:b8:f5:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEL0AnNFTqYiZC7h4nMnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmFiMDkxNjhlN2NjNjZiNjYzYzYxNjJkNWM4ZDQ1NDk2 NWNjZTIwHhcNMjUxMjMwMjEwMTIwWhcNMjUxMjMxMjEwMTIwWjAzMTEwLwYDVQQD EyhlMmExODQ5OWZlYzZkNDcyZWEwMGRiMzFiYTQ5NzIxNzBmYzJlYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HpXylRsCJ879zTJO8kDMiY46kCC GB9qoDzDBASRHF5BQq+o19VlfdT7DASMJZpFeYppPvGDji5EplJSNmFPD7hFv3PT Jy8hsFc4aidZSBcOpDw1x8buyduxbEvsPJK/FSvSqRdliqnB1/c1dUgiDNf6fp3e og3U98x1hS6JGWCr4/nzrpiX54hjNGDeyG/KksgRWtKmqdHZ6IhqmDacUkLKZP3X YcOGwxlfFCvkVJXe7mSpLVPsWdE2PIuuExi2w5UdLU2E9hLYDDz8JOxuRosxLdC2 TlmwjOrCe+8CrBMQIciBesvZs3NXB8lyvPzi8vt+pR73Jk5Aaqu7Ip+6MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKhhJn+xtRy6gDbMbpJchcPwuuJMB8GA1UdIwQY MBaAFGr6sJFo58xmtmPGFi1cjUVJZcziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgt NWYzMzgxYjA3MWRhLzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgtNWYzMzgxYjA3MWRh LzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaBdOoHq vG89rpbbxHCYtwmG9xe6V9yj6U9ZCaIZTvyrGEJypJsEhxnhkupP3/OVXvwhXGu4 8YgCcxY3UpP4IqaPWRFzEyo5TkVeBSzWpZkX/o/6J8VfUNcvMoU9AzFOFMekHILn I3QKBylY/EFiSgnS4sbe0AaHBPmq9uIDMGBIQlfapSxyoXHVRfpEHTzvCQNq16ix GJqSTLc4DB12qewdLGdNcAUtq8FJEF1KrdZ2Ba3EiqURYBo8X/y37xU3DYaquiV8 EOwZ9/7sfa+Od9QsSiKKfBzcjOyXH5y9basN+EifLQENpIa+64BD9CGnT8aKC+jv 9Y6xPmixP7j10A== -----END CERTIFICATE-----Generated at Wed Dec 31 03:44:01 2025 by rpki-client