This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json) Hash identifier: fZau37qqp8c9re7fXdZMW+3Xb2QfPGCAMBuiXtf1geM= Subject key identifier: CC:B0:16:77:94:A0:34:42:D6:66:F2:6A:21:4A:20:E9:72:54:5F:7A Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Certificate serial: 019B3D59D1EA8449E2088F9DC7A4C903864F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft Manifest number: 0296 Signing time: Sat 20 Dec 2025 20:00:55 +0000 Manifest this update: Sat 20 Dec 2025 20:00:55 +0000 Manifest next update: Sun 21 Dec 2025 20:00:55 +0000 Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=) 2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: XF8BDGDeSAM49xXW4gJGl42x6zp3sGveAShPcAcKMN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d1:ea:84:49:e2:08:8f:9d:c7:a4:c9:03:86:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Validity Not Before: Dec 20 20:00:55 2025 GMT Not After : Dec 21 20:00:55 2025 GMT Subject: CN=ccb0167794a03442d666f26a214a20e972545f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:76:a5:bc:fc:5f:18:ea:ce:82:f2:db:c3: 18:72:29:55:86:ff:0f:30:0f:bd:9f:6a:a2:7b:c8: 92:70:6c:2d:dc:d8:be:31:f6:53:e6:f5:32:e8:0b: 9d:a4:9f:1c:33:61:d8:ed:12:a0:f2:95:fd:17:07: 44:a5:d4:de:d2:76:65:fc:19:b8:29:c3:be:72:eb: 4c:e9:f4:e6:41:be:54:c0:21:06:f0:0b:e8:a2:96: 89:d7:33:37:c7:d8:c0:4a:00:84:42:2a:0a:a4:43: 7b:20:ad:91:ba:e6:4e:72:98:c9:de:74:e7:ce:b8: 0c:c8:53:8a:40:d2:72:47:b1:52:d2:42:4e:21:fe: 40:65:5e:fa:ac:b8:28:57:d8:a6:5c:af:89:f1:08: ea:db:29:50:46:0b:5b:54:e8:7b:52:03:fa:98:73: 31:1c:93:30:f2:93:1f:97:8b:aa:c2:c2:44:9c:04: 7c:ee:05:67:8f:b1:14:86:6b:a7:36:bf:8b:cf:b0: bb:87:27:3a:87:22:76:8b:d9:47:e5:38:92:c5:a1: 9f:fe:88:ac:ad:a9:e6:2d:2b:d7:83:78:41:1d:65: 48:3d:c8:45:a3:c2:a3:86:8f:72:7f:2a:ca:7a:4c: c4:c1:88:b7:af:ba:27:da:e3:7d:b7:ac:bb:a8:b6: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:16:77:94:A0:34:42:D6:66:F2:6A:21:4A:20:E9:72:54:5F:7A X509v3 Authority Key Identifier: keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:01:5a:0c:21:ae:46:12:a3:b3:dc:dd:8a:6f:59:fb:db:94: cb:5e:76:3f:49:f5:94:82:98:92:87:7d:19:d2:d1:38:69:d2: fa:12:72:ab:fc:c2:59:c0:75:fb:52:3a:9a:bb:ab:9e:1f:1b: d2:72:4a:8b:b5:4a:32:ac:89:1b:24:1a:43:fc:5d:5d:88:43: 8f:c0:aa:f7:fa:28:e8:d5:03:58:64:c1:7a:64:40:ca:ec:04: c3:95:4b:d2:96:8e:d7:07:77:01:7e:63:89:6c:91:fb:f5:fc: a7:3a:45:8d:12:26:85:ed:5a:9a:04:b2:f5:34:df:c5:41:3b: c0:43:92:eb:92:c5:58:2b:d2:40:7f:10:b1:64:cc:a4:f6:26: 00:1b:0a:98:c4:83:7f:3f:1c:d3:e1:e8:81:86:69:9e:d3:cf: 08:c0:19:d2:ea:d5:11:bd:b6:47:44:e8:6a:69:09:f1:56:8a: 51:62:0d:87:72:4c:c1:93:01:66:5c:d8:df:62:1f:df:48:bb: 8b:ed:b4:3f:b1:8e:a1:6d:87:fc:09:f9:de:32:84:f9:0c:bb: d1:3e:de:ee:b3:7a:da:0e:51:cb:23:d0:36:0e:9c:ce:02:fc: a0:89:c0:01:26:71:97:f9:fc:d6:a9:fd:28:f5:9d:45:e9:42: 34:a5:bf:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdHqhEniCI+dx6TJA4ZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl YTA0YjUwHhcNMjUxMjIwMjAwMDU1WhcNMjUxMjIxMjAwMDU1WjAzMTEwLwYDVQQD EyhjY2IwMTY3Nzk0YTAzNDQyZDY2NmYyNmEyMTRhMjBlOTcyNTQ1ZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbx2pbz8XxjqzoLy28MYcilVhv8P MA+9n2qie8iScGwt3Ni+MfZT5vUy6AudpJ8cM2HY7RKg8pX9FwdEpdTe0nZl/Bm4 KcO+cutM6fTmQb5UwCEG8AvoopaJ1zM3x9jASgCEQioKpEN7IK2RuuZOcpjJ3nTn zrgMyFOKQNJyR7FS0kJOIf5AZV76rLgoV9imXK+J8Qjq2ylQRgtbVOh7UgP6mHMx HJMw8pMfl4uqwsJEnAR87gVnj7EUhmunNr+Lz7C7hyc6hyJ2i9lH5TiSxaGf/ois ranmLSvXg3hBHWVIPchFo8Kjho9yfyrKekzEwYi3r7on2uN9t6y7qLYIUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMywFneUoDRC1mbyaiFKIOlyVF96MB8GA1UdIwQY MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt OWI1NTk1MjlhZDE2LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2 LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgFaDCGu RhKjs9zdim9Z+9uUy152P0n1lIKYkod9GdLROGnS+hJyq/zCWcB1+1I6mrurnh8b 0nJKi7VKMqyJGyQaQ/xdXYhDj8Cq9/oo6NUDWGTBemRAyuwEw5VL0paO1wd3AX5j iWyR+/X8pzpFjRImhe1amgSy9TTfxUE7wEOS65LFWCvSQH8QsWTMpPYmABsKmMSD fz8c0+HogYZpntPPCMAZ0urVEb22R0ToamkJ8VaKUWINh3JMwZMBZlzY32If30i7 i+20P7GOoW2H/An53jKE+Qy70T7e7rN62g5RyyPQNg6czgL8oInAASZxl/n81qn9 KPWdRelCNKW/hQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:44 2025 by rpki-client