This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json) Hash identifier: WERIgPXf86Eh/I0lPAvgZnua5rpzkmViZy+TAvD1Cv8= Subject key identifier: E1:67:F5:20:E0:F2:50:8C:43:97:8D:83:75:AC:B4:CC:46:C5:F0:02 Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d Certificate serial: 019B44A5571407D3F9709EBD75CC07500A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft Manifest number: 1064 Signing time: Mon 22 Dec 2025 06:00:44 +0000 Manifest this update: Mon 22 Dec 2025 06:00:44 +0000 Manifest next update: Tue 23 Dec 2025 06:00:44 +0000 Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: BsyV0RuOhYpK4n0RBrZ4kVNjeOYRSeNd6yWhkteAtPw=) 2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=) 3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=) 4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:57:14:07:d3:f9:70:9e:bd:75:cc:07:50:0a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d Validity Not Before: Dec 22 06:00:44 2025 GMT Not After : Dec 23 06:00:44 2025 GMT Subject: CN=e167f520e0f2508c43978d8375acb4cc46c5f002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:79:3c:9c:a8:a1:3e:ca:6c:93:d7:97:e7: 01:3e:f9:a7:cf:97:03:30:52:d8:c0:07:46:bd:d5: b0:21:6f:9e:f6:ed:7c:94:ca:a5:08:64:bc:f1:6e: 51:29:83:cd:07:be:c7:04:42:a4:48:2d:bb:4d:02: 60:d9:53:48:de:29:3d:cd:ed:26:95:c5:8b:3f:4b: 43:89:ea:01:52:31:ca:e8:1d:b9:b6:a6:b3:13:09: a9:3e:5d:fd:70:29:7c:c7:0a:4f:6a:e4:7d:da:2d: fe:8a:ac:e3:a5:f6:aa:5b:b2:4b:00:9f:39:1d:68: 41:18:e5:f0:70:45:00:1b:34:01:0a:ce:49:e0:9a: fe:29:33:06:57:15:ad:c6:94:f6:c4:a2:a5:4b:fc: 29:ac:be:41:9a:d3:34:e8:2e:b4:04:9d:ee:93:fb: 80:1d:45:5e:9a:9f:0c:a7:db:6c:24:5d:08:84:49: fd:8e:95:f1:6e:d3:9c:58:4c:15:24:69:cd:36:d8: a9:e9:a7:b3:79:1e:9b:0b:fe:7b:7b:b4:f0:16:11: bc:8c:8f:6b:93:8d:a1:8a:e6:bb:e8:5e:eb:b8:86: 30:1f:d8:90:db:09:f5:01:b9:89:90:55:49:0e:ca: 29:c8:fa:5d:4e:aa:81:60:a4:01:85:75:2e:a6:f6: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:67:F5:20:E0:F2:50:8C:43:97:8D:83:75:AC:B4:CC:46:C5:F0:02 X509v3 Authority Key Identifier: keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d5:b2:e7:37:0f:ef:5f:ea:45:06:80:bb:f7:a4:2c:90:08: 20:78:64:be:a5:b4:ed:9a:99:82:37:e8:49:16:50:4d:68:00: 61:e6:7f:45:0b:11:11:26:02:02:c8:08:dc:14:d1:eb:91:2f: 82:11:aa:74:09:ea:88:42:09:df:c4:0d:6f:6c:e6:35:e1:eb: 9a:bc:63:04:3f:83:f0:b8:d6:55:57:4f:1b:4b:3b:c8:ec:e2: 57:37:70:e9:c8:5d:49:76:66:fe:8a:be:9e:a5:32:d6:67:ba: 54:b6:13:60:7a:26:9a:43:49:fe:66:7e:1c:03:9c:32:4c:67: c4:f2:6b:63:6c:ed:67:cc:37:2a:30:39:18:93:7c:ce:8e:38: b0:f0:94:e9:c8:d3:88:32:16:1c:31:89:c4:69:9c:f7:a0:2f: 32:b4:3b:b6:e5:8a:84:2c:ec:b1:60:b5:d2:e5:bb:4c:46:a9: 95:16:67:bd:86:c7:9b:22:af:99:43:51:70:78:40:5f:05:3d: 24:23:87:43:b2:79:3b:08:ca:b0:7b:a8:64:74:f6:d9:fd:3e: a4:70:c6:2f:20:5a:a8:84:2d:47:13:81:ec:88:a2:03:f4:fb: b8:b4:e5:bf:89:2b:52:cc:c8:38:96:b6:ce:4a:a5:97:14:c1: 88:b9:9c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpVcUB9P5cJ69dcwHUApbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz NTJmNWQwHhcNMjUxMjIyMDYwMDQ0WhcNMjUxMjIzMDYwMDQ0WjAzMTEwLwYDVQQD EyhlMTY3ZjUyMGUwZjI1MDhjNDM5NzhkODM3NWFjYjRjYzQ2YzVmMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5p5PJyooT7KbJPXl+cBPvmnz5cD MFLYwAdGvdWwIW+e9u18lMqlCGS88W5RKYPNB77HBEKkSC27TQJg2VNI3ik9ze0m lcWLP0tDieoBUjHK6B25tqazEwmpPl39cCl8xwpPauR92i3+iqzjpfaqW7JLAJ85 HWhBGOXwcEUAGzQBCs5J4Jr+KTMGVxWtxpT2xKKlS/wprL5BmtM06C60BJ3uk/uA HUVemp8Mp9tsJF0IhEn9jpXxbtOcWEwVJGnNNtip6aezeR6bC/57e7TwFhG8jI9r k42hiua76F7ruIYwH9iQ2wn1AbmJkFVJDsopyPpdTqqBYKQBhXUupvaHIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFn9SDg8lCMQ5eNg3WstMxGxfACMB8GA1UdIwQY MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt MGRmN2RmNGQ1YjAxLzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9Wy5zcP 71/qRQaAu/ekLJAIIHhkvqW07ZqZgjfoSRZQTWgAYeZ/RQsRESYCAsgI3BTR65Ev ghGqdAnqiEIJ38QNb2zmNeHrmrxjBD+D8LjWVVdPG0s7yOziVzdw6chdSXZm/oq+ nqUy1me6VLYTYHommkNJ/mZ+HAOcMkxnxPJrY2ztZ8w3KjA5GJN8zo44sPCU6cjT iDIWHDGJxGmc96AvMrQ7tuWKhCzssWC10uW7TEaplRZnvYbHmyKvmUNRcHhAXwU9 JCOHQ7J5OwjKsHuoZHT22f0+pHDGLyBaqIQtRxOB7IiiA/T7uLTlv4krUszIOJa2 zkqllxTBiLmc/g== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:26 2025 by rpki-client