This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json) Hash identifier: D0aA3l+X63w6D+e9pqLTK95gNSXvEF5aLMobxjpHcHM= Subject key identifier: A3:12:D3:8E:40:D6:5D:9E:74:70:EA:32:4B:91:E9:DC:FA:08:BA:02 Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Certificate serial: 019B40C8AB33CF32EC33035FB62F940517D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:00:51 +0000 Manifest this update: Sun 21 Dec 2025 12:00:51 +0000 Manifest next update: Mon 22 Dec 2025 12:00:51 +0000 Files and hashes: 1: 5xRTqzcHFHVQo8fAk9jdOEDWcNo.roa (hash: o6t7ExGzOX2KWBxMdFDPPoJaZWdADyyPaXoKd8DGN1w=) 2: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: VXA7d578Q9ZquF39XnPqSdyHWGIlIT4NQUxUF1khcyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ab:33:cf:32:ec:33:03:5f:b6:2f:94:05:17:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Validity Not Before: Dec 21 12:00:51 2025 GMT Not After : Dec 22 12:00:51 2025 GMT Subject: CN=a312d38e40d65d9e7470ea324b91e9dcfa08ba02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:a1:af:f1:50:c5:4f:a6:84:30:a8:0b:c6: 5d:8c:76:d6:d3:a0:7a:96:ba:67:9e:bb:81:26:43: 15:9e:70:54:7f:0d:2e:bc:e7:b0:df:e2:d8:22:10: 67:e9:77:b1:cc:64:56:79:57:c1:84:5f:f3:a2:76: de:32:32:e1:5a:ee:77:39:87:37:23:f6:fb:9a:71: 2e:05:9c:88:f4:d0:1c:e0:ac:8f:7a:91:1d:97:e7: 60:59:f1:a9:e0:52:c4:4a:3a:4b:b1:21:e2:8f:e2: 3e:70:c7:66:15:aa:d3:1b:50:54:79:bb:44:ec:e9: 54:d7:38:a1:a3:1f:d1:0c:f2:8a:d1:41:88:3d:da: 08:1d:3a:66:81:81:d7:7f:be:21:aa:5f:0d:ae:ae: 10:71:72:90:08:8a:0a:e8:58:65:b8:2f:31:fc:f4: 6d:40:1d:51:09:b6:a1:0e:ec:1a:2a:ea:c4:0c:f8: fd:27:4e:42:0f:5b:43:c7:26:e3:dc:9c:e3:33:78: 7c:90:a0:70:95:49:27:f2:bb:59:f6:dc:3f:65:2d: 15:7e:e4:1b:fe:ab:f1:cb:e8:ad:d2:c7:e3:70:ec: e8:7a:86:e3:18:e9:00:1b:d9:cf:a2:12:4a:e1:6f: 2c:1f:61:ef:46:b3:dc:39:9e:d3:d2:71:a2:0b:e3: 8e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:12:D3:8E:40:D6:5D:9E:74:70:EA:32:4B:91:E9:DC:FA:08:BA:02 X509v3 Authority Key Identifier: keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bc:ed:8e:79:72:21:32:6e:49:cf:32:e6:a9:a2:49:50:46: e0:7c:aa:20:46:9c:a1:cd:7d:10:8d:37:14:48:0f:5c:aa:dc: 83:05:f8:25:e4:57:74:9e:f9:c6:4a:13:2f:8d:7c:78:a5:4c: 05:35:c5:97:39:fa:cd:13:ed:61:e2:42:6f:49:dc:98:37:f4: 2b:1e:e6:ad:bb:e5:6a:03:98:f0:23:00:05:63:47:99:44:a7: 7f:39:cb:93:db:7b:94:8e:e7:a9:6e:31:66:5e:94:ff:21:d8: ab:88:aa:59:79:e4:2f:06:8f:39:19:29:d7:58:1a:da:c0:ab: ba:df:42:b9:88:f6:a0:ad:0e:8e:61:14:9e:62:ee:1b:73:2c: 4d:5a:f5:1c:8b:84:37:44:cb:84:58:aa:b4:9e:9c:e2:a8:9d: eb:01:e6:7d:14:65:5b:96:37:9a:f9:1b:c4:bc:27:88:ea:76: 02:00:81:37:98:41:12:59:30:64:b3:e9:b2:a0:96:6a:9c:81: 62:e2:d5:d7:d5:eb:7d:34:d2:7e:3c:43:b7:c7:fc:9d:ad:38: df:10:c9:7c:f1:67:20:95:ab:02:77:84:95:3a:c6:be:77:e8: 4d:c8:2a:59:a2:98:5b:85:dc:91:99:41:bb:d0:cf:e8:eb:d3: 68:05:ef:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyKszzzLsMwNfti+UBRfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmFiMDkxNjhlN2NjNjZiNjYzYzYxNjJkNWM4ZDQ1NDk2 NWNjZTIwHhcNMjUxMjIxMTIwMDUxWhcNMjUxMjIyMTIwMDUxWjAzMTEwLwYDVQQD EyhhMzEyZDM4ZTQwZDY1ZDllNzQ3MGVhMzI0YjkxZTlkY2ZhMDhiYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dehr/FQxU+mhDCoC8ZdjHbW06B6 lrpnnruBJkMVnnBUfw0uvOew3+LYIhBn6XexzGRWeVfBhF/zonbeMjLhWu53OYc3 I/b7mnEuBZyI9NAc4KyPepEdl+dgWfGp4FLESjpLsSHij+I+cMdmFarTG1BUebtE 7OlU1zihox/RDPKK0UGIPdoIHTpmgYHXf74hql8Nrq4QcXKQCIoK6FhluC8x/PRt QB1RCbahDuwaKurEDPj9J05CD1tDxybj3JzjM3h8kKBwlUkn8rtZ9tw/ZS0VfuQb /qvxy+it0sfjcOzoeobjGOkAG9nPohJK4W8sH2HvRrPcOZ7T0nGiC+OOiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMS045A1l2edHDqMkuR6dz6CLoCMB8GA1UdIwQY MBaAFGr6sJFo58xmtmPGFi1cjUVJZcziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgt NWYzMzgxYjA3MWRhLzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgtNWYzMzgxYjA3MWRh LzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7ztjnly ITJuSc8y5qmiSVBG4HyqIEacoc19EI03FEgPXKrcgwX4JeRXdJ75xkoTL418eKVM BTXFlzn6zRPtYeJCb0ncmDf0Kx7mrbvlagOY8CMABWNHmUSnfznLk9t7lI7nqW4x Zl6U/yHYq4iqWXnkLwaPORkp11ga2sCrut9CuYj2oK0OjmEUnmLuG3MsTVr1HIuE N0TLhFiqtJ6c4qid6wHmfRRlW5Y3mvkbxLwniOp2AgCBN5hBElkwZLPpsqCWapyB YuLV19XrfTTSfjxDt8f8na043xDJfPFnIJWrAneElTrGvnfoTcgqWaKYW4XckZlB u9DP6OvTaAXvIA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:13:41 2025 by rpki-client