This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft File: aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json) Hash identifier: xIg5mMPTr966qsjGAjbvOpDfYa245FZ0O1ZLQ9fIKLQ= Subject key identifier: 35:D2:C0:30:DF:8F:45:95:03:C3:02:A2:A5:E9:B4:CF:5D:46:A8:3C Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92 Certificate serial: 019B3C7F1D818C353FC6DB960F14786810BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft Manifest number: 0B2B Signing time: Sat 20 Dec 2025 16:02:02 +0000 Manifest this update: Sat 20 Dec 2025 16:02:02 +0000 Manifest next update: Sun 21 Dec 2025 16:02:02 +0000 Files and hashes: 1: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (hash: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=) 2: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (hash: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=) 3: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (hash: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=) 4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: f4piAw2WgKYIY9TIv2ZoH08ezM7PuQyvTZFfpEq9ojg=) 5: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (hash: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:1d:81:8c:35:3f:c6:db:96:0f:14:78:68:10:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92 Validity Not Before: Dec 20 16:02:02 2025 GMT Not After : Dec 21 16:02:02 2025 GMT Subject: CN=35d2c030df8f459503c302a2a5e9b4cf5d46a83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:0a:2f:27:92:a4:a3:f7:02:a2:83:fc:74: 68:c8:f5:1f:10:27:f6:ab:05:23:5d:1b:bd:6c:68: 97:78:57:20:24:0e:19:a5:8c:32:18:47:67:94:21: 51:88:b1:ff:66:e1:83:bd:7f:0a:5a:3b:57:c9:90: 44:ff:f0:bd:6d:1f:be:62:b7:19:02:e3:1d:ad:9e: 81:19:7c:1f:95:73:85:ab:85:1d:70:be:4a:b1:bb: 2f:2b:eb:95:1a:f5:47:d0:b0:91:3c:f8:f7:24:b6: 9b:95:ae:ed:35:1b:92:10:d7:62:5d:6e:e8:90:73: d1:96:66:d0:9c:40:fd:ef:b8:8d:f8:f2:f3:30:d3: 59:94:5c:12:3e:f0:c1:51:c3:a7:19:ab:67:74:9a: 85:7d:eb:c1:e6:92:33:4d:98:18:1b:bc:0f:29:d1: 40:b0:dd:2a:0c:90:03:0c:bf:a7:b1:eb:c5:bd:ec: 49:f7:7e:a4:28:8d:eb:b2:cb:78:31:d2:53:88:43: 47:54:17:1c:7f:f1:c2:58:21:28:de:d5:19:b0:ae: 50:11:38:1a:35:17:98:97:de:2a:b7:38:5e:7c:7b: c7:5d:77:6b:e2:10:15:5e:85:08:cb:70:ec:9e:26: e8:6c:15:45:93:d9:a7:70:f9:32:aa:1f:f1:f1:a0: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D2:C0:30:DF:8F:45:95:03:C3:02:A2:A5:E9:B4:CF:5D:46:A8:3C X509v3 Authority Key Identifier: keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:7a:7c:0c:fe:de:26:d6:5f:62:ec:0d:d2:ad:06:01:85: fe:44:24:ec:96:5b:81:3c:c0:09:f9:83:af:5d:06:87:dc:41: d1:51:a0:fd:4a:c5:70:c0:4b:29:5b:ea:d3:82:20:3e:38:85: ab:70:be:f9:2b:cd:ad:05:96:66:33:4d:3c:e0:b9:4c:c4:f9: 87:cb:ce:f4:5c:0a:65:1e:df:c7:62:a0:07:93:3e:8f:82:bd: 19:6d:02:cf:82:3c:99:a4:d7:f5:97:5b:83:b6:28:e9:f2:d7: 40:c6:5a:78:97:db:2a:9e:cf:ee:7c:87:16:09:60:46:4e:59: 87:ba:e5:3d:a8:ef:fd:45:d5:3d:cd:e9:18:0c:c5:3e:ca:83: d6:f3:3f:ab:9e:00:a6:58:0a:2e:ae:44:56:fa:c2:a1:bd:db: a4:c1:b1:94:30:c1:af:aa:f9:84:9d:8c:ef:bd:3e:04:d0:16: de:6a:96:43:a1:b9:02:f4:7b:af:2c:6d:5c:d7:21:e4:2d:cb: a4:6b:3a:b4:59:d2:47:ce:2f:f6:f0:08:06:9e:60:10:d2:f5: f7:e8:c7:20:3d:4c:f6:e8:36:69:67:91:8d:0e:e6:53:58:db: 13:f0:a3:97:26:82:42:73:2b:a2:63:72:46:88:82:18:9c:48: 48:d4:ea:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fx2BjDU/xtuWDxR4aBC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0 ZjJkOTIwHhcNMjUxMjIwMTYwMjAyWhcNMjUxMjIxMTYwMjAyWjAzMTEwLwYDVQQD EygzNWQyYzAzMGRmOGY0NTk1MDNjMzAyYTJhNWU5YjRjZjVkNDZhODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSwKLyeSpKP3AqKD/HRoyPUfECf2 qwUjXRu9bGiXeFcgJA4ZpYwyGEdnlCFRiLH/ZuGDvX8KWjtXyZBE//C9bR++YrcZ AuMdrZ6BGXwflXOFq4UdcL5KsbsvK+uVGvVH0LCRPPj3JLabla7tNRuSENdiXW7o kHPRlmbQnED977iN+PLzMNNZlFwSPvDBUcOnGatndJqFfevB5pIzTZgYG7wPKdFA sN0qDJADDL+nsevFvexJ936kKI3rsst4MdJTiENHVBccf/HCWCEo3tUZsK5QETga NReYl94qtzhefHvHXXdr4hAVXoUIy3DsnibobBVFk9mncPkyqh/x8aD9iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXSwDDfj0WVA8MCoqXptM9dRqg8MB8GA1UdIwQY MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt MGUxYjhmZWE4OTEzLzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF896fAz+ 3ibWX2LsDdKtBgGF/kQk7JZbgTzACfmDr10Gh9xB0VGg/UrFcMBLKVvq04IgPjiF q3C++SvNrQWWZjNNPOC5TMT5h8vO9FwKZR7fx2KgB5M+j4K9GW0Cz4I8maTX9Zdb g7Yo6fLXQMZaeJfbKp7P7nyHFglgRk5Zh7rlPajv/UXVPc3pGAzFPsqD1vM/q54A plgKLq5EVvrCob3bpMGxlDDBr6r5hJ2M770+BNAW3mqWQ6G5AvR7ryxtXNch5C3L pGs6tFnSR84v9vAIBp5gENL19+jHID1M9ug2aWeRjQ7mU1jbE/CjlyaCQnMromNy RoiCGJxISNTqLA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:16 2025 by rpki-client