This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft File: AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json) Hash identifier: sA8nhv3ea30wVKV76d6qzTJ9dVse8BzUGy6fLsqd9Ao= Subject key identifier: 02:34:02:88:55:7C:EF:D0:EF:CB:72:B9:54:35:20:15:39:00:5D:28 Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52 Certificate issuer: /CN=01423ad4d629b2f828b79f00ac40388e37b8e252 Certificate serial: 019B20995323D8D9A3211124F7A91A8A06BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft Manifest number: 13AE Signing time: Mon 15 Dec 2025 06:01:17 +0000 Manifest this update: Mon 15 Dec 2025 06:01:17 +0000 Manifest next update: Tue 16 Dec 2025 06:01:17 +0000 Files and hashes: 1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: q+e/oz/IgQMXIHbSNV3rn4SmtoomPtYXGpyIXZjKzRo=) 2: ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa (hash: ul6C7Hw2mOMrIR7JJ3pVvWUBrEsSVBHfGtaoivQYtXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:99:53:23:d8:d9:a3:21:11:24:f7:a9:1a:8a:06:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252 Validity Not Before: Dec 15 06:01:17 2025 GMT Not After : Dec 16 06:01:17 2025 GMT Subject: CN=02340288557cefd0efcb72b95435201539005d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:3b:b5:53:cd:e5:81:fd:bf:4c:39:61:cd: b3:ba:bd:62:f2:21:1b:db:8c:92:c7:79:aa:ad:96: 1b:01:3c:95:86:91:3e:10:3b:73:94:e6:2d:91:6f: 14:4e:b4:f0:3f:d0:3f:ec:fc:b2:99:f9:2e:72:8a: 83:30:5f:a3:ad:02:40:15:5e:99:b3:59:11:1e:b2: 5c:b8:d7:f8:69:c6:86:40:6a:f0:18:5a:68:8d:f3: 26:5c:11:36:df:6d:41:d2:3d:cc:93:06:f6:f4:ed: 06:98:d2:cb:8d:c6:53:2f:ea:37:35:35:80:80:7e: ed:1e:ce:3a:67:05:a9:8d:99:06:e8:12:49:71:10: b1:41:1b:01:69:2e:6f:b4:e7:9b:f6:94:66:02:74: d7:1d:6f:61:7a:6d:b5:f8:8c:c9:14:1f:a9:d9:92: 1a:74:e0:c4:70:c3:45:d5:7f:a8:26:01:21:39:5b: 52:43:73:9d:08:69:b5:2b:a7:86:fd:38:c6:0e:6b: d9:c4:d7:e8:e6:a3:c6:cf:05:f2:46:5e:81:9a:73: 8b:63:4d:0b:e4:72:34:5b:72:11:46:d7:66:cf:de: 19:fe:f4:ab:fe:ce:14:82:ab:f4:8e:8d:0f:21:40: 17:86:8a:13:c6:1b:12:b8:d6:b9:db:d5:8d:d5:6f: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:34:02:88:55:7C:EF:D0:EF:CB:72:B9:54:35:20:15:39:00:5D:28 X509v3 Authority Key Identifier: keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fe:85:8f:21:36:c4:65:82:55:f0:05:4a:68:30:95:8f:70: 54:67:b2:1e:ea:6d:76:7d:fb:49:97:ae:19:53:bf:9f:f8:57: c5:48:2e:d8:e4:a9:e9:b1:69:ba:aa:14:2b:d2:f9:a9:7d:77: e1:8e:48:45:c1:d1:bc:9e:2d:e4:fd:57:46:57:03:df:a9:ad: 3d:4b:a5:0c:8b:e7:24:4e:c0:ae:e6:6f:b4:40:59:a6:54:65: fa:4c:c4:57:b5:73:6f:41:86:e7:52:80:a2:7a:c4:1f:0f:a8: 20:8a:37:22:d5:78:26:4d:26:38:bf:49:32:7a:bc:58:46:5a: 1c:9b:17:f5:52:00:90:6c:b3:cc:68:3e:7d:bf:cb:12:4a:87: 2e:f6:92:de:bd:77:b2:d5:68:43:a5:39:92:1f:08:d3:fe:0b: d0:f4:e7:16:69:24:27:5e:cf:bb:89:82:9b:22:69:0d:ff:30: 5e:b2:93:32:c1:f6:28:f4:0d:d6:d5:2d:ed:0d:16:36:f6:4c: d1:ac:10:42:30:6b:f7:f3:aa:e7:87:b4:19:49:17:a4:20:dd: 0b:bc:1f:a0:fc:78:b3:c2:e3:18:9d:57:65:32:1e:c8:ea:26: ff:13:98:16:01:c2:12:a5:55:a9:12:45:77:ee:1f:66:df:7d: da:9e:34:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmVMj2NmjIREk96kaiga9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDIzYWQ0ZDYyOWIyZjgyOGI3OWYwMGFjNDAzODhlMzdi OGUyNTIwHhcNMjUxMjE1MDYwMTE3WhcNMjUxMjE2MDYwMTE3WjAzMTEwLwYDVQQD EygwMjM0MDI4ODU1N2NlZmQwZWZjYjcyYjk1NDM1MjAxNTM5MDA1ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyac7tVPN5YH9v0w5Yc2zur1i8iEb 24ySx3mqrZYbATyVhpE+EDtzlOYtkW8UTrTwP9A/7PyymfkucoqDMF+jrQJAFV6Z s1kRHrJcuNf4acaGQGrwGFpojfMmXBE2321B0j3Mkwb29O0GmNLLjcZTL+o3NTWA gH7tHs46ZwWpjZkG6BJJcRCxQRsBaS5vtOeb9pRmAnTXHW9hem21+IzJFB+p2ZIa dODEcMNF1X+oJgEhOVtSQ3OdCGm1K6eG/TjGDmvZxNfo5qPGzwXyRl6BmnOLY00L 5HI0W3IRRtdmz94Z/vSr/s4Ugqv0jo0PIUAXhooTxhsSuNa529WN1W//1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAI0AohVfO/Q78tyuVQ1IBU5AF0oMB8GA1UdIwQY MBaAFAFCOtTWKbL4KLefAKxAOI43uOJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVJNjFOWXBzdmdvdDU4QXJFQTRqamU0NGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzZkYmQtNTVlYi00ZGU0LWI2Yjkt ODM5MTk2MzQ1YjZkLzEvQVVJNjFOWXBzdmdvdDU4QXJFQTRqamU0NGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzZkYmQtNTVlYi00ZGU0LWI2YjktODM5MTk2MzQ1YjZk LzEvQVVJNjFOWXBzdmdvdDU4QXJFQTRqamU0NGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP6FjyE2 xGWCVfAFSmgwlY9wVGeyHuptdn37SZeuGVO/n/hXxUgu2OSp6bFpuqoUK9L5qX13 4Y5IRcHRvJ4t5P1XRlcD36mtPUulDIvnJE7AruZvtEBZplRl+kzEV7Vzb0GG51KA onrEHw+oIIo3ItV4Jk0mOL9JMnq8WEZaHJsX9VIAkGyzzGg+fb/LEkqHLvaS3r13 stVoQ6U5kh8I0/4L0PTnFmkkJ17Pu4mCmyJpDf8wXrKTMsH2KPQN1tUt7Q0WNvZM 0awQQjBr9/Oq54e0GUkXpCDdC7wfoPx4s8LjGJ1XZTIeyOom/xOYFgHCEqVVqRJF d+4fZt992p40eQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:13 2025 by rpki-client