This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json) Hash identifier: WqmzR+r57XKtYZvYBYBQOGVJSjIzjn4aGkb62A9ist0= Subject key identifier: B1:32:59:11:69:A7:9F:F3:22:ED:7A:65:89:45:72:2C:A0:F0:3E:CB Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Certificate serial: 019B1F87E6E72A6A2BA15CF66A1CE6B31363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft Manifest number: 13C9 Signing time: Mon 15 Dec 2025 01:02:38 +0000 Manifest this update: Mon 15 Dec 2025 01:02:38 +0000 Manifest next update: Tue 16 Dec 2025 01:02:38 +0000 Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: CECY5qXkiMOaIHX8n0hojhvU+Iejg1/MJGFpDuKB9u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:e6:e7:2a:6a:2b:a1:5c:f6:6a:1c:e6:b3:13:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Validity Not Before: Dec 15 01:02:38 2025 GMT Not After : Dec 16 01:02:38 2025 GMT Subject: CN=b132591169a79ff322ed7a658945722ca0f03ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:0a:25:f6:31:6d:22:2e:ad:3c:18:1b:ef: 7d:96:e5:3b:65:fb:1e:52:a5:c9:03:6a:02:89:76: ca:a2:35:1d:25:98:a7:78:b3:ff:e2:ef:6e:42:b6: 3c:19:c1:69:1a:e0:b4:2b:e6:e2:24:21:fa:6a:42: bf:3f:8c:4d:63:e6:0a:b0:e7:b3:8d:51:4f:13:e9: 8f:2b:49:a6:5f:b2:e8:1f:9b:fd:18:89:6c:29:c8: 8c:3b:6d:c2:19:f7:44:b0:5f:e4:23:5c:e5:74:72: ce:15:68:8a:ea:00:66:65:a5:59:d8:7f:60:26:0e: d1:38:df:aa:dd:53:11:e7:12:80:b0:95:41:37:6d: 7f:23:3a:2c:34:33:85:0a:f1:7c:9e:ef:e8:8b:4e: d4:b0:08:2e:9c:1e:8b:79:fb:b0:b8:67:78:15:9c: c8:f8:fe:5d:ff:7e:ab:9d:a5:1f:43:77:ff:bd:cf: 74:f2:cf:b8:15:3a:b1:f5:f0:a8:cd:41:f3:ef:b7: 65:25:3c:84:f1:e8:4b:15:0a:48:66:48:98:bd:57: 40:94:9b:c4:d2:39:88:01:df:0d:70:df:14:c8:2b: bd:4c:f4:06:77:f2:93:6f:83:47:eb:b0:8a:16:23: e3:ae:4d:18:d3:f8:d1:23:de:15:1e:a5:3f:73:0d: 4c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:32:59:11:69:A7:9F:F3:22:ED:7A:65:89:45:72:2C:A0:F0:3E:CB X509v3 Authority Key Identifier: keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:a7:a4:b8:fb:ae:e2:8b:f6:a3:f2:cc:ea:af:c1:46:9d:e6: 99:70:b2:46:01:69:b0:b4:6c:78:eb:e1:00:92:d7:db:32:b0: 01:5e:a9:27:64:8c:ff:c6:87:fc:78:e1:1d:9a:a1:c6:c1:83: dc:e5:54:0c:b0:7e:4c:74:7a:db:9e:68:8f:61:65:cb:66:88: fd:5b:7a:81:d5:09:cf:e1:19:b2:9d:f3:a7:11:0a:4f:13:d6: 33:1e:c8:a0:88:ca:79:0e:d3:cc:09:86:e0:57:ce:12:ce:fb: 49:c6:9f:95:2c:76:7e:95:37:77:c9:ab:56:c6:5e:2a:83:54: c1:97:a1:7a:3d:c7:ea:9a:c0:28:4d:49:78:ed:df:0d:f3:f2: c0:57:dc:50:80:93:06:22:54:1c:a6:ba:db:16:a6:c4:7a:7d: bf:ef:78:b0:3d:14:4c:b7:ee:31:fe:db:11:18:d5:63:3e:58: 1e:04:53:46:72:d5:5a:be:28:65:0c:6e:c9:c3:2d:72:bf:0e: e5:1e:4e:6f:cb:a9:b4:24:f2:52:40:d0:05:ee:09:cc:61:a9: e9:15:e8:49:0f:22:2d:0d:e0:6c:41:7d:ac:91:87:64:dc:20: 6a:6b:a6:73:72:87:ef:14:54:ac:a4:da:42:54:64:72:fa:c7: e0:a8:cb:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh+bnKmoroVz2ahzmsxNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWJmYWNiNWExMzRkMTM4MDVlZWY5NWZkOGZiZDEyZGU2 YTAxZjMwHhcNMjUxMjE1MDEwMjM4WhcNMjUxMjE2MDEwMjM4WjAzMTEwLwYDVQQD EyhiMTMyNTkxMTY5YTc5ZmYzMjJlZDdhNjU4OTQ1NzIyY2EwZjAzZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KMKJfYxbSIurTwYG+99luU7Zfse UqXJA2oCiXbKojUdJZineLP/4u9uQrY8GcFpGuC0K+biJCH6akK/P4xNY+YKsOez jVFPE+mPK0mmX7LoH5v9GIlsKciMO23CGfdEsF/kI1zldHLOFWiK6gBmZaVZ2H9g Jg7RON+q3VMR5xKAsJVBN21/IzosNDOFCvF8nu/oi07UsAgunB6LefuwuGd4FZzI +P5d/36rnaUfQ3f/vc908s+4FTqx9fCozUHz77dlJTyE8ehLFQpIZkiYvVdAlJvE 0jmIAd8NcN8UyCu9TPQGd/KTb4NH67CKFiPjrk0Y0/jRI94VHqU/cw1MpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEyWRFpp5/zIu16ZYlFciyg8D7LMB8GA1UdIwQY MBaAFGlb+staE00TgF7vlf2PvRLeagHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEt OTk0Y2NkMTBmYTQ0LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEtOTk0Y2NkMTBmYTQ0 LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1aekuPuu 4ov2o/LM6q/BRp3mmXCyRgFpsLRseOvhAJLX2zKwAV6pJ2SM/8aH/HjhHZqhxsGD 3OVUDLB+THR6255oj2Fly2aI/Vt6gdUJz+EZsp3zpxEKTxPWMx7IoIjKeQ7TzAmG 4FfOEs77ScaflSx2fpU3d8mrVsZeKoNUwZehej3H6prAKE1JeO3fDfPywFfcUICT BiJUHKa62xamxHp9v+94sD0UTLfuMf7bERjVYz5YHgRTRnLVWr4oZQxuycMtcr8O 5R5Ob8uptCTyUkDQBe4JzGGp6RXoSQ8iLQ3gbEF9rJGHZNwgamumc3KH7xRUrKTa QlRkcvrH4KjLPg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:51 2025 by rpki-client