This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json) Hash identifier: ak9qVDZznMSyZfq+bwkOMTWwkUnE3K5fCmOrmxhpK5s= Subject key identifier: 0A:50:95:CC:99:09:DB:4B:6F:51:7C:98:97:FD:B9:C6:E9:40:3F:AD Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9 Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9 Certificate serial: 019B30E7F1046EFC9410CC9277399EE66B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft Manifest number: 0B23 Signing time: Thu 18 Dec 2025 10:01:05 +0000 Manifest this update: Thu 18 Dec 2025 10:01:05 +0000 Manifest next update: Fri 19 Dec 2025 10:01:05 +0000 Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: 5HL/F+RYI3Ez8RmvFUeHE7LE5mb22GEu6GDBwpwkZUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:f1:04:6e:fc:94:10:cc:92:77:39:9e:e6:6b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9 Validity Not Before: Dec 18 10:01:05 2025 GMT Not After : Dec 19 10:01:05 2025 GMT Subject: CN=0a5095cc9909db4b6f517c9897fdb9c6e9403fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:b6:98:a6:2d:a8:47:3d:63:18:64:f8:79: 66:f8:68:b4:1f:ab:c3:f3:7f:92:56:98:53:51:45: b5:53:7e:73:89:a0:f9:30:14:bf:ba:a7:f0:63:6e: f9:c5:db:88:1c:4a:ff:cb:e5:0b:da:ba:a9:0b:51: 30:53:c5:9b:e8:e5:3f:b5:f8:8c:b4:a2:f6:17:a1: b0:ba:81:e9:99:4e:5c:ee:8f:fb:76:70:c7:db:a2: a6:79:21:db:e3:f4:48:c2:e9:34:57:37:4e:01:3d: 85:d5:04:b6:c5:9f:37:35:e2:c6:01:b6:27:f3:55: 0b:53:96:a7:35:2d:74:b9:de:8e:ea:84:3a:19:ed: 4f:b8:0b:a7:8c:c5:f7:d2:87:fc:a5:54:92:4a:f5: da:4d:b4:b1:22:d8:00:cd:7f:f1:c0:d6:3d:62:33: c5:b8:fe:c8:18:b6:23:10:39:ba:3b:f3:7c:3a:47: 68:45:50:11:7c:70:57:83:73:1e:f8:48:d9:4b:ac: 9e:28:f4:43:8b:85:2f:9a:45:eb:33:ce:c0:a0:ba: a6:7b:e5:f1:02:95:b2:27:93:b9:06:39:8a:a1:f0: 6d:5e:26:bf:fb:e0:ab:eb:d2:28:2c:e3:51:f3:17: 83:3d:80:47:0c:2b:db:7c:7c:62:d1:5a:44:c2:4f: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:95:CC:99:09:DB:4B:6F:51:7C:98:97:FD:B9:C6:E9:40:3F:AD X509v3 Authority Key Identifier: keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:42:28:35:b4:ae:11:51:8f:2e:1c:4d:5f:3a:71:93:f3:05: 64:29:fb:a0:42:99:49:8f:4e:68:94:66:53:2a:b6:9a:80:05: b5:8b:52:5f:70:fb:0c:db:a6:3d:5b:73:80:85:5e:d9:ef:7a: 7f:d6:6b:71:69:f2:42:f3:b8:b6:22:2a:0d:b0:6b:1e:30:d5: b3:bb:1f:1a:97:f9:3c:e1:c4:f5:14:e3:da:20:99:47:de:b4: ea:2e:2b:07:ce:05:c5:45:04:59:d9:34:30:e9:8b:99:38:31: b9:cf:9d:e1:31:f9:fa:ef:46:8b:9f:2d:77:bb:ed:3a:2c:e6: f5:d5:a5:14:6f:fe:b0:52:bf:46:4e:4b:ba:6e:fc:7f:c0:6b: eb:90:e7:b4:0f:af:1a:e1:e7:40:ee:c4:8f:1e:70:e4:ea:b5: 6f:48:42:5c:3c:c4:86:2e:11:60:ab:28:1f:df:d9:78:67:09: 01:c8:11:83:71:b2:97:35:97:21:fa:48:fd:e6:72:2f:49:ee: 1e:fa:47:88:34:c6:54:86:ee:59:6b:0f:2e:75:dc:d4:b5:0a: b7:a3:85:9d:41:3e:90:0e:cb:3b:b7:69:5d:48:a3:79:65:e9: 1c:a0:49:e9:e1:9a:7f:4e:df:bb:60:84:85:9c:4a:13:c2:95: 83:ba:27:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw5/EEbvyUEMySdzme5muOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTlkNmJjYWVlOTM4NjI1YzFiZmEwZDMyMjdjMGViYmFi YWFhZDkwHhcNMjUxMjE4MTAwMTA1WhcNMjUxMjE5MTAwMTA1WjAzMTEwLwYDVQQD EygwYTUwOTVjYzk5MDlkYjRiNmY1MTdjOTg5N2ZkYjljNmU5NDAzZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvS2mKYtqEc9Yxhk+Hlm+Gi0H6vD 83+SVphTUUW1U35ziaD5MBS/uqfwY275xduIHEr/y+UL2rqpC1EwU8Wb6OU/tfiM tKL2F6GwuoHpmU5c7o/7dnDH26KmeSHb4/RIwuk0VzdOAT2F1QS2xZ83NeLGAbYn 81ULU5anNS10ud6O6oQ6Ge1PuAunjMX30of8pVSSSvXaTbSxItgAzX/xwNY9YjPF uP7IGLYjEDm6O/N8OkdoRVARfHBXg3Me+EjZS6yeKPRDi4UvmkXrM87AoLqme+Xx ApWyJ5O5BjmKofBtXia/++Cr69IoLONR8xeDPYBHDCvbfHxi0VpEwk8leQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApQlcyZCdtLb1F8mJf9ucbpQD+tMB8GA1UdIwQY MBaAFGlZ1ryu6ThiXBv6DTInwOu6uqrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDct Y2MxY2FjZWNjNmUyLzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDctY2MxY2FjZWNjNmUy LzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUIoNbSu EVGPLhxNXzpxk/MFZCn7oEKZSY9OaJRmUyq2moAFtYtSX3D7DNumPVtzgIVe2e96 f9ZrcWnyQvO4tiIqDbBrHjDVs7sfGpf5POHE9RTj2iCZR9606i4rB84FxUUEWdk0 MOmLmTgxuc+d4TH5+u9Gi58td7vtOizm9dWlFG/+sFK/Rk5Lum78f8Br65DntA+v GuHnQO7Ejx5w5Oq1b0hCXDzEhi4RYKsoH9/ZeGcJAcgRg3GylzWXIfpI/eZyL0nu HvpHiDTGVIbuWWsPLnXc1LUKt6OFnUE+kA7LO7dpXUijeWXpHKBJ6eGaf07fu2CE hZxKE8KVg7onFw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:11 2025 by rpki-client