This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json) Hash identifier: GYKMfWCCaPu90whfCCmDWXhU6i4cDPVpiu1GhDfWjIw= Subject key identifier: DF:4E:78:18:81:94:D8:B9:23:D2:44:64:9D:AD:65:94:2B:9D:42:4A Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Certificate serial: 019B35D782377B9BC414E7BF7E5FE438890B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 09:01:14 +0000 Manifest this update: Fri 19 Dec 2025 09:01:14 +0000 Manifest next update: Sat 20 Dec 2025 09:01:14 +0000 Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: sMiPwEfa2lA6qD/i0bwUI+yTJZPUXiSk76+HNPst45Y=) 2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:82:37:7b:9b:c4:14:e7:bf:7e:5f:e4:38:89:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Validity Not Before: Dec 19 09:01:14 2025 GMT Not After : Dec 20 09:01:14 2025 GMT Subject: CN=df4e78188194d8b923d244649dad65942b9d424a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:60:17:5e:34:de:bf:74:f1:7c:27:4e:4d:bb: d7:fb:0b:8a:9d:1d:29:6e:62:0c:e3:dc:4e:3e:5f: c3:b9:a1:78:4d:2c:ff:64:f1:b1:64:d6:26:b3:13: c7:54:1b:80:c4:d0:4b:a2:85:78:a9:42:13:c5:62: 41:3b:08:8b:3c:11:8d:21:7a:1c:44:04:bd:d5:97: 9f:a1:d6:21:58:c5:c3:94:b9:86:d5:d3:2b:49:f1: 3b:e6:7f:6f:7f:99:56:98:b3:3f:d5:dd:ae:d0:d8: 0a:96:a6:2e:1d:51:70:c7:eb:6a:a0:e4:89:a1:a0: 54:c0:42:b6:d5:20:69:51:44:c5:4d:15:88:7a:8b: a5:fd:98:60:e8:4d:6c:14:d5:af:bf:a3:45:60:40: 67:39:c0:7c:de:81:17:ed:15:6a:5c:42:2b:db:82: e0:3c:e7:25:7d:9e:78:e9:fd:31:bd:02:48:54:d0: 16:1f:16:8d:b2:ea:8f:9d:dc:cc:7c:0a:16:4d:ba: 48:83:bc:08:b3:df:7c:7c:08:68:f1:40:a3:ff:f0: 18:74:2e:1a:f8:c1:88:b5:1d:04:3a:45:b2:b5:11: cc:d8:7e:c6:34:3d:58:c2:09:86:d1:31:ef:ed:1b: ce:82:d9:0f:4f:32:c1:3d:a7:2b:73:65:16:99:71: 0d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4E:78:18:81:94:D8:B9:23:D2:44:64:9D:AD:65:94:2B:9D:42:4A X509v3 Authority Key Identifier: keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a0:1e:36:d2:c8:d4:db:cf:bf:a9:55:75:25:70:4e:cf:e2: 7c:ae:2d:5e:11:42:81:a8:43:a5:a8:8c:25:33:6e:41:09:37: e8:ff:8d:b9:26:c2:4a:5f:a7:7b:23:7f:73:ae:85:f5:d5:d2: be:b2:03:32:81:b6:9c:eb:41:87:21:10:44:28:d8:8e:06:5c: 88:34:de:7e:82:93:9b:0b:1a:60:fb:a8:eb:8e:93:96:24:68: a7:33:40:ac:0a:a1:6e:e7:24:30:46:60:bd:cb:bf:ea:37:5c: ce:24:58:33:bf:3c:fc:a8:90:96:9c:ce:19:dc:bd:ea:01:b8: bd:2a:12:f8:c8:24:e1:1c:a0:f1:b1:95:d4:b3:b4:21:3f:b6: 16:a2:17:cc:fc:09:5c:e8:3e:c8:0e:70:e0:31:ae:31:06:5f: e5:20:1a:71:93:99:70:1e:a0:bb:5e:43:bf:1a:f7:0d:a6:f1: 96:b3:6c:81:78:56:bc:e8:8e:0a:63:84:bd:06:33:af:1c:c0: 9a:83:9b:57:99:85:0e:ea:23:59:41:0d:17:95:62:ce:29:55: 45:41:c5:90:e7:cd:bf:b0:b5:69:e1:d1:16:13:56:a1:9c:22: 0c:ab:97:87:a0:7d:8b:c6:58:dd:ba:cb:ca:6e:c3:5e:fb:d7: 70:c0:8b:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114I3e5vEFOe/fl/kOIkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZmJkOGQ3MmJmZmJiY2Q3NzA3NmE2YTZjYzk5NGQzNjQy ODQ5MTYwHhcNMjUxMjE5MDkwMTE0WhcNMjUxMjIwMDkwMTE0WjAzMTEwLwYDVQQD EyhkZjRlNzgxODgxOTRkOGI5MjNkMjQ0NjQ5ZGFkNjU5NDJiOWQ0MjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GAXXjTev3TxfCdOTbvX+wuKnR0p bmIM49xOPl/DuaF4TSz/ZPGxZNYmsxPHVBuAxNBLooV4qUITxWJBOwiLPBGNIXoc RAS91ZefodYhWMXDlLmG1dMrSfE75n9vf5lWmLM/1d2u0NgKlqYuHVFwx+tqoOSJ oaBUwEK21SBpUUTFTRWIeoul/Zhg6E1sFNWvv6NFYEBnOcB83oEX7RVqXEIr24Lg POclfZ546f0xvQJIVNAWHxaNsuqPndzMfAoWTbpIg7wIs998fAho8UCj//AYdC4a +MGItR0EOkWytRHM2H7GND1YwgmG0THv7RvOgtkPTzLBPacrc2UWmXENXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9OeBiBlNi5I9JEZJ2tZZQrnUJKMB8GA1UdIwQY MBaAFAL72Ncr/7vNdwdqamzJlNNkKEkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAt MjNhZjU1ZTAxOTBkLzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAtMjNhZjU1ZTAxOTBk LzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqAeNtLI 1NvPv6lVdSVwTs/ifK4tXhFCgahDpaiMJTNuQQk36P+NuSbCSl+neyN/c66F9dXS vrIDMoG2nOtBhyEQRCjYjgZciDTefoKTmwsaYPuo646TliRopzNArAqhbuckMEZg vcu/6jdcziRYM788/KiQlpzOGdy96gG4vSoS+Mgk4Ryg8bGV1LO0IT+2FqIXzPwJ XOg+yA5w4DGuMQZf5SAacZOZcB6gu15Dvxr3DabxlrNsgXhWvOiOCmOEvQYzrxzA moObV5mFDuojWUENF5VizilVRUHFkOfNv7C1aeHRFhNWoZwiDKuXh6B9i8ZY3brL ym7DXvvXcMCLuA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:31:17 2025 by rpki-client