This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft File: AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json) Hash identifier: uGEuWk3KNnTXmNWtu2Tz390EjuQ/UTmVe3RaPBE7uYE= Subject key identifier: 47:15:FE:CC:7D:B3:5E:10:17:73:D8:B7:18:75:E5:A4:EE:1F:C1:21 Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567 Certificate serial: 019B360EA191C1CED05BB91293B670AAFCF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft Manifest number: 1159 Signing time: Fri 19 Dec 2025 10:01:27 +0000 Manifest this update: Fri 19 Dec 2025 10:01:27 +0000 Manifest next update: Sat 20 Dec 2025 10:01:27 +0000 Files and hashes: 1: 9Q2RHv269wPiesXqtuAqx5hcH88.roa (hash: wl+INHVpEi+t5QzVsEqpFRnOOYgn09RgHODGqfcm7so=) 2: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: D5X3RoAFbMR+VPejCxhSKBeIvoDWIIJP1J77OLoZtpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:a1:91:c1:ce:d0:5b:b9:12:93:b6:70:aa:fc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567 Validity Not Before: Dec 19 10:01:27 2025 GMT Not After : Dec 20 10:01:27 2025 GMT Subject: CN=4715fecc7db35e101773d8b71875e5a4ee1fc121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:40:e2:32:0b:18:9d:76:38:8c:37:1c:bf: 7c:d0:68:17:c5:aa:77:00:70:26:34:2a:b5:53:f3: 31:e7:98:57:4e:40:d0:b5:56:07:b3:85:4b:b8:f8: f7:c2:1a:74:1d:12:28:79:7a:0a:6e:39:2f:89:69: e8:be:91:b9:c0:ae:79:00:55:40:b1:fc:9c:27:22: e9:1b:9a:10:20:63:dd:cf:48:ba:87:8a:f2:37:df: 65:4d:99:18:ed:76:99:4c:a3:0f:b1:4f:c8:3f:e7: 10:9e:22:e1:89:db:ac:0d:20:8f:fe:f0:bf:b9:d8: a6:bd:6a:d0:c1:d1:22:df:94:ce:7b:ae:04:1d:53: 3d:0f:94:bf:9b:60:b2:25:2f:8c:65:86:63:3c:a4: 34:f4:ea:55:38:f6:4f:e3:95:c4:80:5e:0d:e9:e2: 19:e4:f1:27:07:42:15:00:dc:f7:a9:c9:77:cf:f4: 53:0d:66:d3:b5:4b:03:e0:7c:f9:22:df:fe:e2:f0: e8:99:9d:45:62:3d:06:7a:48:7a:db:82:9b:22:96: 78:5d:20:49:50:95:e4:50:0a:e7:27:89:f2:11:5d: 49:04:50:44:c6:44:3e:df:b4:62:79:62:0f:19:c6: 66:ef:cc:6f:0f:79:8d:28:ba:3a:ae:0b:ca:be:7c: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:FE:CC:7D:B3:5E:10:17:73:D8:B7:18:75:E5:A4:EE:1F:C1:21 X509v3 Authority Key Identifier: keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:15:3d:58:ca:3c:ee:cb:6d:bc:cc:ce:c5:53:a4:ce:88:65: d0:7c:86:0f:f7:d9:9b:0b:d2:5f:30:36:a3:62:a6:3c:c8:ec: 6f:b8:23:72:63:d3:1e:d8:4d:7f:cc:71:bc:78:cd:4a:c9:b7: 04:82:11:53:7f:55:90:37:89:78:ee:08:d7:94:ea:d4:fb:a5: f5:54:02:f5:bb:c4:54:3d:c0:21:d2:3a:bb:f9:3c:db:84:56: 50:f2:87:b8:4b:2e:a2:79:49:35:17:73:54:ab:7a:06:80:95: a8:47:41:d8:b0:9b:89:a8:4e:c1:71:3f:38:b3:80:bd:58:af: 1b:bf:65:7d:7f:ee:2e:8b:27:7a:c0:34:12:21:07:42:ad:37: 9d:91:3d:05:47:4b:17:1f:c7:f3:63:74:1b:12:57:c1:b4:79: de:47:39:fc:be:d8:da:d0:f3:af:0d:8a:4e:2f:60:de:57:1a: 8a:ff:f1:33:b9:6d:eb:34:bf:60:8e:ee:47:6d:dc:95:c1:5c: 1c:2f:57:5a:8b:1a:4f:d1:9a:da:04:23:3b:fe:99:e6:1f:9d: a6:03:51:a8:95:b0:a7:44:dc:54:ab:52:b7:33:0e:cf:c1:cf: 7e:8b:de:2c:36:bf:43:0c:5f:66:51:47:54:21:6d:55:33:a1: ae:3c:aa:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DqGRwc7QW7kSk7ZwqvzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNGVmZGZkMDY0N2NjYmE3MzRiMmEwNTY2MDEyNGViOGMw Njc1NjcwHhcNMjUxMjE5MTAwMTI3WhcNMjUxMjIwMTAwMTI3WjAzMTEwLwYDVQQD Eyg0NzE1ZmVjYzdkYjM1ZTEwMTc3M2Q4YjcxODc1ZTVhNGVlMWZjMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/1A4jILGJ12OIw3HL980GgXxap3 AHAmNCq1U/Mx55hXTkDQtVYHs4VLuPj3whp0HRIoeXoKbjkviWnovpG5wK55AFVA sfycJyLpG5oQIGPdz0i6h4ryN99lTZkY7XaZTKMPsU/IP+cQniLhidusDSCP/vC/ udimvWrQwdEi35TOe64EHVM9D5S/m2CyJS+MZYZjPKQ09OpVOPZP45XEgF4N6eIZ 5PEnB0IVANz3qcl3z/RTDWbTtUsD4Hz5It/+4vDomZ1FYj0Gekh624KbIpZ4XSBJ UJXkUArnJ4nyEV1JBFBExkQ+37RieWIPGcZm78xvD3mNKLo6rgvKvnyhywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcV/sx9s14QF3PYtxh15aTuH8EhMB8GA1UdIwQY MBaAFAFO/f0GR8y6c0sqBWYBJOuMBnVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUt ZmM2Y2RhYWYyNTBiLzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUtZmM2Y2RhYWYyNTBi LzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghU9WMo8 7sttvMzOxVOkzohl0HyGD/fZmwvSXzA2o2KmPMjsb7gjcmPTHthNf8xxvHjNSsm3 BIIRU39VkDeJeO4I15Tq1Pul9VQC9bvEVD3AIdI6u/k824RWUPKHuEsuonlJNRdz VKt6BoCVqEdB2LCbiahOwXE/OLOAvVivG79lfX/uLosnesA0EiEHQq03nZE9BUdL Fx/H82N0GxJXwbR53kc5/L7Y2tDzrw2KTi9g3lcaiv/xM7lt6zS/YI7uR23clcFc HC9XWosaT9Ga2gQjO/6Z5h+dpgNRqJWwp0TcVKtStzMOz8HPfoveLDa/QwxfZlFH VCFtVTOhrjyqQA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:32 2025 by rpki-client