This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json) Hash identifier: qGL+zmDxVbZTxFQ9eETk/HF3H4Zq2xb/uxLA84sgEYA= Subject key identifier: 72:DB:07:11:08:0A:2F:9E:8A:65:04:BB:F9:CD:32:25:43:58:1B:51 Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Certificate serial: 019B37C55059CEE5857107C71B541A0CCE02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft Manifest number: 28 Signing time: Fri 19 Dec 2025 18:00:36 +0000 Manifest this update: Fri 19 Dec 2025 18:00:36 +0000 Manifest next update: Sat 20 Dec 2025 18:00:36 +0000 Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: YWyI8OH54dnKvLZsP7TjpF+8cXtDA/tvQ497bAS6BcY=) 2: arNLaBtahYzSMYJAuzHqKxs2Hgw.roa (hash: BbVBy5nyfq0Gu2fS199DMSV7v7c8xvvXQRZLHZy+4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:50:59:ce:e5:85:71:07:c7:1b:54:1a:0c:ce:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Validity Not Before: Dec 19 18:00:36 2025 GMT Not After : Dec 20 18:00:36 2025 GMT Subject: CN=72db0711080a2f9e8a6504bbf9cd322543581b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:bb:a5:57:c8:89:17:74:85:5e:f2:70:b9: 0a:bc:ae:cd:5e:56:86:b6:d8:27:36:fa:63:da:d0: f8:d5:ea:23:bf:5d:96:45:4d:ca:09:b3:12:00:ec: f8:66:80:61:4f:58:ea:ae:62:1c:bb:a9:c0:88:b2: 88:06:0b:76:aa:70:28:24:13:5c:dc:16:58:33:da: a3:25:70:53:76:24:83:4e:a0:ae:81:6a:9c:23:24: 24:b6:bd:99:8a:74:8d:d2:f8:16:8a:b8:9c:a6:38: 50:59:92:96:d1:23:b6:27:2d:35:c4:ac:77:f9:cf: e0:54:35:0a:ba:31:64:65:2e:19:37:ca:5e:eb:fd: 70:50:eb:d4:e1:ea:bb:d1:8c:62:e7:da:5c:98:3c: 70:01:ee:00:54:07:49:03:42:b8:1e:35:36:7c:b1: a2:92:62:21:0c:53:bb:53:22:bf:79:52:6b:d7:86: 55:8c:73:f9:b2:91:9d:3c:da:53:8d:55:16:77:59: 6c:1a:81:31:56:46:cf:7b:2a:88:3f:40:03:68:cd: 06:2c:00:b0:13:9d:4d:5f:38:90:4a:97:2d:54:6e: 97:ce:ee:21:4d:97:11:62:0e:33:15:22:b1:a2:02: 9a:50:44:b1:b6:0a:ff:c8:0b:d7:ed:6e:5a:c0:17: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:07:11:08:0A:2F:9E:8A:65:04:BB:F9:CD:32:25:43:58:1B:51 X509v3 Authority Key Identifier: keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1d:6f:09:45:d8:8f:f7:c8:64:fd:e5:ae:95:f2:d0:f7:3f: ea:eb:73:5e:68:ce:87:db:b6:99:e0:dd:0e:24:67:a3:b9:16: f0:46:82:0c:67:2c:4f:e3:cb:7c:ce:c9:7c:c1:44:9d:a2:ee: 45:59:18:69:3b:c5:7e:a9:d0:4f:8b:a0:47:f7:f9:0e:e1:fb: ed:d7:ed:4d:b4:eb:93:f3:8f:f9:c9:60:76:19:fc:28:19:37: c4:36:8f:cb:12:32:02:9a:a5:3b:1f:a2:f8:8a:b5:e8:bf:64: dd:8f:bc:82:92:6f:44:52:06:74:3d:8a:5c:76:d7:a4:8a:eb: ad:9c:50:0c:c9:97:7e:2d:a3:64:60:d1:5e:01:f5:cc:38:7a: 69:9f:df:2d:f4:69:f1:aa:10:c8:06:33:f5:ae:fa:d2:98:d5: 14:e2:5f:15:c2:9f:24:fa:99:f1:18:0d:70:3b:88:3c:06:8e: d8:b5:6a:6f:dd:76:de:cc:60:ad:7d:b2:0d:3a:15:69:46:3e: 78:20:1e:fb:34:36:51:51:1c:32:2f:55:bf:34:f3:f6:33:a8: ca:56:8c:60:66:fa:6d:ae:4f:c3:0f:ea:e9:dc:ec:56:ec:6a: 03:a9:4d:50:46:d1:26:d5:3c:87:11:a7:dc:e1:ee:6c:c0:37: 5c:31:47:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xVBZzuWFcQfHG1QaDM4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw NjQ5YTAwHhcNMjUxMjE5MTgwMDM2WhcNMjUxMjIwMTgwMDM2WjAzMTEwLwYDVQQD Eyg3MmRiMDcxMTA4MGEyZjllOGE2NTA0YmJmOWNkMzIyNTQzNTgxYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr467pVfIiRd0hV7ycLkKvK7NXlaG ttgnNvpj2tD41eojv12WRU3KCbMSAOz4ZoBhT1jqrmIcu6nAiLKIBgt2qnAoJBNc 3BZYM9qjJXBTdiSDTqCugWqcIyQktr2ZinSN0vgWiricpjhQWZKW0SO2Jy01xKx3 +c/gVDUKujFkZS4ZN8pe6/1wUOvU4eq70Yxi59pcmDxwAe4AVAdJA0K4HjU2fLGi kmIhDFO7UyK/eVJr14ZVjHP5spGdPNpTjVUWd1lsGoExVkbPeyqIP0ADaM0GLACw E51NXziQSpctVG6Xzu4hTZcRYg4zFSKxogKaUESxtgr/yAvX7W5awBeJhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLbBxEICi+eimUEu/nNMiVDWBtRMB8GA1UdIwQY MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt Y2E0MWM3MmNhZjk2LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2 LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB1vCUXY j/fIZP3lrpXy0Pc/6utzXmjOh9u2meDdDiRno7kW8EaCDGcsT+PLfM7JfMFEnaLu RVkYaTvFfqnQT4ugR/f5DuH77dftTbTrk/OP+clgdhn8KBk3xDaPyxIyApqlOx+i +Iq16L9k3Y+8gpJvRFIGdD2KXHbXpIrrrZxQDMmXfi2jZGDRXgH1zDh6aZ/fLfRp 8aoQyAYz9a760pjVFOJfFcKfJPqZ8RgNcDuIPAaO2LVqb9123sxgrX2yDToVaUY+ eCAe+zQ2UVEcMi9VvzTz9jOoylaMYGb6ba5Pww/q6dzsVuxqA6lNUEbRJtU8hxGn 3OHubMA3XDFH7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:17 2025 by rpki-client