This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json) Hash identifier: LB5b73y2WLvzIWHpFgCvPc9IbcWoKo7TqDhKX6gnZ8Q= Subject key identifier: 27:72:E6:42:47:6C:8D:2C:60:D9:DC:49:52:31:FF:42:58:B0:87:B1 Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d Certificate serial: 019B3721751F81D4EE3AFFE570EC6B881FC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft Manifest number: 06A4 Signing time: Fri 19 Dec 2025 15:01:38 +0000 Manifest this update: Fri 19 Dec 2025 15:01:38 +0000 Manifest next update: Sat 20 Dec 2025 15:01:38 +0000 Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: JJa/Nm9gchmtgk/Et8QYtOOsDG2NEoJUJ8sSy1N+aAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:75:1f:81:d4:ee:3a:ff:e5:70:ec:6b:88:1f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d Validity Not Before: Dec 19 15:01:38 2025 GMT Not After : Dec 20 15:01:38 2025 GMT Subject: CN=2772e642476c8d2c60d9dc495231ff4258b087b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:fa:67:37:fd:16:00:dc:9c:7f:5f:2c:27: d1:58:f0:ac:ad:b1:67:ce:38:d9:4c:9b:56:a8:10: 2c:b9:60:4c:6f:0b:c9:8a:1e:44:d1:03:33:b5:9b: 65:2a:72:8f:2b:92:e9:29:79:d2:29:60:b3:43:35: 4a:1c:8d:a1:92:ed:49:ee:e4:7e:d7:72:66:02:d3: 5a:63:9e:92:27:d2:90:fa:c8:19:ca:cf:fd:1d:0c: 3c:b7:6b:d4:ed:13:7e:f7:5e:0e:01:cb:78:fb:79: fe:df:21:01:d3:19:b8:ac:f6:92:2a:d1:6f:02:b6: 61:64:a1:56:2a:78:10:ad:1c:fe:9b:b4:1d:f8:6c: 4d:29:28:bf:b8:b0:12:83:52:48:00:37:d1:51:aa: 48:8d:83:70:a2:5c:34:4b:c5:c2:69:c7:68:50:71: 7e:56:79:1e:3c:6d:c3:c8:8b:b2:86:5f:60:b7:35: 9c:e4:a5:75:df:88:29:d1:0e:05:b0:18:76:b3:0d: 47:27:46:75:f0:a5:ba:db:1e:0c:4d:25:23:98:ff: da:5b:1a:66:48:9e:25:81:08:dd:01:40:76:82:b7: 59:70:01:97:2c:81:2a:9e:af:aa:41:85:63:3d:4e: 07:bd:e6:d8:e0:58:da:d2:55:6c:93:6d:4d:d1:13: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:72:E6:42:47:6C:8D:2C:60:D9:DC:49:52:31:FF:42:58:B0:87:B1 X509v3 Authority Key Identifier: keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:36:11:71:79:6d:52:a4:49:12:36:cd:e4:84:62:0c:81:8b: 4b:15:f3:cc:09:34:6d:1d:4e:89:2a:81:64:8f:59:8b:10:ef: a7:20:dc:e4:41:92:a1:41:3f:97:8c:e0:8e:f2:0d:99:e6:72: 2c:92:bf:58:6b:94:a7:8d:4e:ac:fa:4b:c8:05:75:c6:69:4e: 4a:0e:2f:f6:a7:8b:fb:78:b5:58:49:37:08:09:d2:bc:7b:2a: 07:14:cc:c6:da:38:ab:7d:71:f1:df:47:a7:c6:12:2c:97:ca: c6:d6:b4:35:2c:6d:ee:a6:66:35:3b:19:23:86:33:6f:3c:04: d1:42:fa:76:ff:80:f3:54:74:3b:63:bf:a2:61:0b:29:15:2f: 56:7d:e7:60:8b:85:8a:1f:c7:ec:3f:c9:09:37:58:36:79:af: 60:c6:13:9c:f4:65:eb:5e:d8:f3:64:dc:ac:97:d2:dd:30:54: d7:24:65:a0:29:0d:22:35:9b:e4:d1:56:9d:3b:65:23:f2:aa: ce:24:28:2b:0f:08:4f:37:4a:c8:a2:20:2c:66:86:e5:b1:d8: 65:f6:91:7c:cd:4a:a1:1d:f9:e0:9b:cf:f7:73:bb:3c:5b:9f: f2:c9:16:17:d9:ff:df:0f:ce:95:88:55:0a:e1:7f:6d:50:1a: 3e:4b:89:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IXUfgdTuOv/lcOxriB/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMGIwYWU2NTRjMjlkN2YxZjBkNGUyZDM1MTZhYjdkZWYw Y2IyOWQwHhcNMjUxMjE5MTUwMTM4WhcNMjUxMjIwMTUwMTM4WjAzMTEwLwYDVQQD EygyNzcyZTY0MjQ3NmM4ZDJjNjBkOWRjNDk1MjMxZmY0MjU4YjA4N2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn76Zzf9FgDcnH9fLCfRWPCsrbFn zjjZTJtWqBAsuWBMbwvJih5E0QMztZtlKnKPK5LpKXnSKWCzQzVKHI2hku1J7uR+ 13JmAtNaY56SJ9KQ+sgZys/9HQw8t2vU7RN+914OAct4+3n+3yEB0xm4rPaSKtFv ArZhZKFWKngQrRz+m7Qd+GxNKSi/uLASg1JIADfRUapIjYNwolw0S8XCacdoUHF+ VnkePG3DyIuyhl9gtzWc5KV134gp0Q4FsBh2sw1HJ0Z18KW62x4MTSUjmP/aWxpm SJ4lgQjdAUB2grdZcAGXLIEqnq+qQYVjPU4HvebY4Fja0lVsk21N0RM6BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdy5kJHbI0sYNncSVIx/0JYsIexMB8GA1UdIwQY MBaAFKwLCuZUwp1/Hw1OLTUWq33vDLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODct NjVmNDJlZmU1OWRlLzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODctNjVmNDJlZmU1OWRl LzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizYRcXlt UqRJEjbN5IRiDIGLSxXzzAk0bR1OiSqBZI9ZixDvpyDc5EGSoUE/l4zgjvINmeZy LJK/WGuUp41OrPpLyAV1xmlOSg4v9qeL+3i1WEk3CAnSvHsqBxTMxto4q31x8d9H p8YSLJfKxta0NSxt7qZmNTsZI4YzbzwE0UL6dv+A81R0O2O/omELKRUvVn3nYIuF ih/H7D/JCTdYNnmvYMYTnPRl617Y82TcrJfS3TBU1yRloCkNIjWb5NFWnTtlI/Kq ziQoKw8ITzdKyKIgLGaG5bHYZfaRfM1KoR354JvP93O7PFuf8skWF9n/3w/OlYhV CuF/bVAaPkuJuw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:06 2025 by rpki-client