This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json) Hash identifier: E51dbwnzYg/V0o854Rw5mXVKbE00hj+BAXz1W+ce29M= Subject key identifier: 34:31:05:FF:B9:13:73:15:E8:3C:B7:82:B5:83:C6:95:08:16:67:0B Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Certificate serial: 019B3F48077D6C2D87A6496529802683EB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft Manifest number: 0297 Signing time: Sun 21 Dec 2025 05:00:43 +0000 Manifest this update: Sun 21 Dec 2025 05:00:43 +0000 Manifest next update: Mon 22 Dec 2025 05:00:43 +0000 Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=) 2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: 5I3cLGnB9gIEEbU7S79QOP0KWhajgkjvy3YLZAj91L0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:07:7d:6c:2d:87:a6:49:65:29:80:26:83:eb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Validity Not Before: Dec 21 05:00:43 2025 GMT Not After : Dec 22 05:00:43 2025 GMT Subject: CN=343105ffb9137315e83cb782b583c6950816670b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:7b:e8:f5:06:9b:98:ff:0c:4c:30:75:59: d4:61:7b:e0:45:51:c5:89:b1:31:b5:7a:64:f6:75: 2b:ee:d7:94:dc:7e:28:d5:d4:58:28:95:79:53:7e: 0b:be:97:3e:49:82:16:55:66:5f:8c:e6:e0:75:f7: dc:a7:6b:6a:0a:bb:c6:f4:cb:79:b9:9a:e5:43:7d: 80:c1:a4:c4:dd:36:5d:25:c2:47:1c:15:bc:0d:d5: bd:a3:09:e6:48:17:55:3c:c0:14:32:4f:97:02:b5: 4c:ea:e0:94:d4:fa:0c:4d:c5:4a:32:f1:6c:e1:81: 0b:f3:39:55:b3:36:10:a2:01:59:4b:84:e7:bd:bf: 97:3e:ed:36:51:95:ed:81:36:72:fc:b4:da:ae:80: 75:51:00:9c:d6:e7:df:2c:4f:ac:f8:c1:cf:68:ec: 75:39:6d:ff:87:8b:e8:e8:cd:71:5f:ea:71:14:1b: 80:9e:1a:1a:c4:26:e5:4e:9e:1e:23:9e:2f:b9:2a: 06:da:e2:34:5e:7f:5a:05:97:55:88:72:32:5b:e8: 42:bd:a1:fe:bd:c6:e5:88:fa:c4:a9:fa:f1:85:1c: 13:24:14:11:aa:a6:d3:80:e4:a7:cb:09:c9:2f:a3: 1e:53:87:35:b6:71:8c:cf:09:32:db:16:30:2f:86: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:31:05:FF:B9:13:73:15:E8:3C:B7:82:B5:83:C6:95:08:16:67:0B X509v3 Authority Key Identifier: keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:19:ee:30:e1:5d:23:97:9c:0b:b2:03:11:e5:a7:bc:0d:d5: b2:f3:ed:fa:5f:95:a7:09:c0:41:a1:a2:7c:2a:23:c5:44:79: 10:c8:7c:db:fd:0e:06:6a:a9:21:a5:02:90:4f:55:52:92:14: 7b:9c:f9:c4:b5:66:f0:ef:a4:59:ee:3f:0b:d0:0d:69:62:86: d6:3e:19:f3:f3:71:04:ef:eb:8d:f4:3c:2a:44:21:47:fa:d4: eb:61:d8:02:bf:da:6c:7a:02:0b:8c:14:4f:42:f1:c8:52:0c: 65:c3:ff:fe:4d:10:22:6c:c0:b4:fa:a8:f7:15:61:0c:46:b1: b6:3d:e4:5d:e8:60:68:98:87:f5:1f:b7:e4:37:8d:8b:79:2a: 5d:6b:94:7b:bb:dc:f1:e3:4f:e2:db:01:5e:96:73:fd:1a:8d: 27:5d:4e:49:d6:b2:08:cf:cb:c6:15:f6:ae:ab:21:9e:fd:50: 0d:e9:47:a3:d3:46:1f:79:64:31:a9:db:04:3f:70:67:61:00: e2:17:94:37:c2:92:42:63:0e:ab:1c:a3:6e:9c:76:bf:c9:ce: 99:90:75:41:30:5f:da:a7:67:d3:16:d8:51:19:9e:5a:14:15: f8:c5:3b:b6:dd:39:ef:31:b2:b6:93:52:a5:72:99:3f:ce:48: 46:86:19:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SAd9bC2HpkllKYAmg+uZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl YTA0YjUwHhcNMjUxMjIxMDUwMDQzWhcNMjUxMjIyMDUwMDQzWjAzMTEwLwYDVQQD EygzNDMxMDVmZmI5MTM3MzE1ZTgzY2I3ODJiNTgzYzY5NTA4MTY2NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05x76PUGm5j/DEwwdVnUYXvgRVHF ibExtXpk9nUr7teU3H4o1dRYKJV5U34Lvpc+SYIWVWZfjObgdffcp2tqCrvG9Mt5 uZrlQ32AwaTE3TZdJcJHHBW8DdW9ownmSBdVPMAUMk+XArVM6uCU1PoMTcVKMvFs 4YEL8zlVszYQogFZS4Tnvb+XPu02UZXtgTZy/LTaroB1UQCc1uffLE+s+MHPaOx1 OW3/h4vo6M1xX+pxFBuAnhoaxCblTp4eI54vuSoG2uI0Xn9aBZdViHIyW+hCvaH+ vcbliPrEqfrxhRwTJBQRqqbTgOSnywnJL6MeU4c1tnGMzwky2xYwL4ZdowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQxBf+5E3MV6Dy3grWDxpUIFmcLMB8GA1UdIwQY MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt OWI1NTk1MjlhZDE2LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2 LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhnuMOFd I5ecC7IDEeWnvA3VsvPt+l+VpwnAQaGifCojxUR5EMh82/0OBmqpIaUCkE9VUpIU e5z5xLVm8O+kWe4/C9ANaWKG1j4Z8/NxBO/rjfQ8KkQhR/rU62HYAr/abHoCC4wU T0LxyFIMZcP//k0QImzAtPqo9xVhDEaxtj3kXehgaJiH9R+35DeNi3kqXWuUe7vc 8eNP4tsBXpZz/RqNJ11OSdayCM/LxhX2rqshnv1QDelHo9NGH3lkManbBD9wZ2EA 4heUN8KSQmMOqxyjbpx2v8nOmZB1QTBf2qdn0xbYURmeWhQV+MU7tt057zGytpNS pXKZP85IRoYZvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:30 2025 by rpki-client