This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft File: aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json) Hash identifier: OpTEHo0MosQO8buqLouOoaYmI8oyrl+Osh8AjnJcGKs= Subject key identifier: 31:43:0C:B9:38:9C:42:52:E4:0A:D4:4B:EA:0C:93:25:86:9D:DA:C4 Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92 Certificate serial: 019B36B403DC0BA0891AB46667E1927022A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft Manifest number: 0B28 Signing time: Fri 19 Dec 2025 13:02:05 +0000 Manifest this update: Fri 19 Dec 2025 13:02:05 +0000 Manifest next update: Sat 20 Dec 2025 13:02:05 +0000 Files and hashes: 1: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (hash: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=) 2: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (hash: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=) 3: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (hash: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=) 4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: WLtwo8vg7EbhI8RBprQsgQMPWiC5jjadvFw0O45rjdI=) 5: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (hash: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:03:dc:0b:a0:89:1a:b4:66:67:e1:92:70:22:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92 Validity Not Before: Dec 19 13:02:05 2025 GMT Not After : Dec 20 13:02:05 2025 GMT Subject: CN=31430cb9389c4252e40ad44bea0c9325869ddac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:a1:21:ae:d3:65:27:a7:19:d0:33:d0:3e: da:60:29:e3:17:6a:47:2a:95:ac:af:7c:0c:4a:9e: ea:bc:43:51:eb:cc:6c:8c:c7:82:8d:8b:ea:2e:b1: 09:ab:ba:36:29:d2:fa:b8:de:43:04:15:a0:77:fd: ab:28:77:a4:67:6c:90:e6:61:a6:4b:d4:e9:e9:a8: cf:2d:74:d0:34:af:7c:76:05:63:34:0e:f1:7b:14: 3e:6b:3d:0e:e1:df:ed:2a:f7:f4:5a:14:2d:3e:a4: a4:2a:88:e2:28:1b:e0:66:49:86:fc:86:17:28:94: 25:f8:0b:aa:3f:c3:ad:94:a0:58:db:42:e6:e5:7c: ef:8a:c3:18:84:51:16:4c:23:9b:d7:12:1d:37:dc: 56:74:c4:33:b2:26:40:53:8d:8e:41:3e:82:46:be: 11:01:e7:14:a2:fc:20:58:39:5a:f4:56:e3:5b:06: 2f:82:dc:7c:66:3b:55:1a:94:04:5c:89:14:7f:0f: d8:fe:37:01:7c:c9:dd:e4:44:18:9b:ae:30:71:c2: 25:56:41:4b:d8:70:b9:55:2c:3a:81:b4:15:10:30: ea:de:ba:c6:af:4f:2d:9f:8a:45:27:ed:0c:a5:fe: f5:85:ab:9c:00:2a:d7:ad:d8:57:55:ee:17:b9:1f: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:43:0C:B9:38:9C:42:52:E4:0A:D4:4B:EA:0C:93:25:86:9D:DA:C4 X509v3 Authority Key Identifier: keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7d:5e:59:e2:bf:04:0c:9b:db:7e:69:0f:99:94:22:5d:1e: 80:64:3f:c8:ad:be:ef:c8:f1:b1:35:fd:13:f1:80:e6:17:e6: 38:34:9d:a2:56:46:a7:28:5e:bd:c5:bc:46:86:07:a4:1f:6e: 7f:1c:57:77:48:8e:2b:c9:5e:1a:46:fd:7c:be:23:5b:64:a4: d9:9b:6b:d4:ca:4f:3a:bf:1e:f7:af:c0:3a:65:8e:63:c2:8a: e3:42:5a:93:b2:e2:44:f5:a2:81:bf:1f:ca:13:07:40:08:41: ce:04:28:0e:ce:4c:e2:85:f3:7b:bd:f3:8e:20:88:55:84:a2: a4:0d:24:78:54:e9:e8:ee:7d:d4:38:36:e0:78:ff:be:14:d8: ec:6f:95:e6:44:24:c6:3b:03:d8:37:3d:12:01:e6:b5:ea:cb: d0:d0:f6:95:d3:fe:48:17:ee:3d:30:8d:55:6c:d1:76:b3:6a: 2f:c2:5c:b5:8c:ab:ca:df:95:89:71:c3:29:c7:6d:dc:c3:fa: 1d:19:c1:56:f7:d2:6b:92:b7:25:af:a1:ff:7d:3d:c7:1e:97: b9:35:3e:35:8a:3f:a1:be:72:b5:17:84:c4:00:5b:69:c0:97: 7c:b2:34:63:bd:76:7c:1d:8e:51:8d:fc:88:cb:d3:fd:cb:e4: 3c:24:9c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tAPcC6CJGrRmZ+GScCKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0 ZjJkOTIwHhcNMjUxMjE5MTMwMjA1WhcNMjUxMjIwMTMwMjA1WjAzMTEwLwYDVQQD EygzMTQzMGNiOTM4OWM0MjUyZTQwYWQ0NGJlYTBjOTMyNTg2OWRkYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC2hIa7TZSenGdAz0D7aYCnjF2pH KpWsr3wMSp7qvENR68xsjMeCjYvqLrEJq7o2KdL6uN5DBBWgd/2rKHekZ2yQ5mGm S9Tp6ajPLXTQNK98dgVjNA7xexQ+az0O4d/tKvf0WhQtPqSkKojiKBvgZkmG/IYX KJQl+AuqP8OtlKBY20Lm5XzvisMYhFEWTCOb1xIdN9xWdMQzsiZAU42OQT6CRr4R AecUovwgWDla9FbjWwYvgtx8ZjtVGpQEXIkUfw/Y/jcBfMnd5EQYm64wccIlVkFL 2HC5VSw6gbQVEDDq3rrGr08tn4pFJ+0Mpf71haucACrXrdhXVe4XuR/9twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFDDLk4nEJS5ArUS+oMkyWGndrEMB8GA1UdIwQY MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt MGUxYjhmZWE4OTEzLzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIH1eWeK/ BAyb235pD5mUIl0egGQ/yK2+78jxsTX9E/GA5hfmODSdolZGpyhevcW8RoYHpB9u fxxXd0iOK8leGkb9fL4jW2Sk2Ztr1MpPOr8e96/AOmWOY8KK40Jak7LiRPWigb8f yhMHQAhBzgQoDs5M4oXze73zjiCIVYSipA0keFTp6O591Dg24Hj/vhTY7G+V5kQk xjsD2Dc9EgHmterL0ND2ldP+SBfuPTCNVWzRdrNqL8JctYyryt+ViXHDKcdt3MP6 HRnBVvfSa5K3Ja+h/309xx6XuTU+NYo/ob5ytReExABbacCXfLI0Y712fB2OUY38 iMvT/cvkPCScJw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:28 2025 by rpki-client