This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json) Hash identifier: jO3IA93bunbH1PZFzjbS4xGH0Kyf2AFyDTJqTOKJJeA= Subject key identifier: C8:7E:72:CB:AE:44:51:D5:FA:17:54:9A:3E:30:37:34:B3:71:4A:77 Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32 Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432 Certificate serial: 019B2551C745B4ABF7CA61749C718BEEC3C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft Manifest number: 1777 Signing time: Tue 16 Dec 2025 04:01:14 +0000 Manifest this update: Tue 16 Dec 2025 04:01:14 +0000 Manifest next update: Wed 17 Dec 2025 04:01:14 +0000 Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: RIDuYDfSitviKcAgs9KA1YqG/AwU/ReO0qBm+qanqnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:c7:45:b4:ab:f7:ca:61:74:9c:71:8b:ee:c3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432 Validity Not Before: Dec 16 04:01:14 2025 GMT Not After : Dec 17 04:01:14 2025 GMT Subject: CN=c87e72cbae4451d5fa17549a3e303734b3714a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:bb:9d:f0:db:6e:55:c8:40:f9:dc:b6:93: f5:93:18:61:28:53:3d:66:4c:42:ee:6e:81:4c:0f: de:8b:63:84:9c:d8:72:eb:f0:85:c1:0f:2a:3a:ee: 09:69:86:49:76:f3:32:2f:78:dc:22:76:33:75:30: c3:6d:5f:a2:66:83:38:31:a8:6d:bb:57:12:e8:19: 43:68:28:75:eb:e3:4f:09:ae:1d:6f:8b:16:ee:7e: 63:93:75:26:20:d5:04:5f:54:e9:17:ee:ff:15:ec: cd:8c:90:ab:ce:88:5b:00:ac:0a:55:ef:d3:c9:05: 49:d4:bd:67:21:9a:e5:ae:10:7b:35:f1:88:e4:91: eb:9c:e7:45:33:34:eb:00:64:d8:fb:c1:50:89:8d: 11:e2:56:df:c0:d4:7f:34:e2:6c:21:e9:84:d8:94: 8e:be:f3:31:43:08:39:06:bc:73:46:6c:33:1f:35: d8:bf:20:73:2b:96:1a:65:88:12:91:a0:d8:f1:53: 09:66:9a:92:1f:ad:1c:96:15:99:a1:78:ba:92:01: 5c:d5:dd:ff:57:76:7b:fc:d2:2c:c6:40:1e:e4:b9: 10:ad:2c:da:88:e1:2c:13:14:da:7f:74:40:fb:95: 88:c3:44:40:cc:6d:7b:63:61:c3:e4:9e:d3:b2:ce: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:72:CB:AE:44:51:D5:FA:17:54:9A:3E:30:37:34:B3:71:4A:77 X509v3 Authority Key Identifier: keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:50:e0:fd:6a:06:2a:dc:7f:8c:55:ad:05:28:c6:cf:30:fe: 39:06:c4:c7:2c:b2:d9:e3:13:f8:1f:20:70:32:4f:c1:10:c0: 5f:31:05:71:cc:ad:54:46:88:d8:f0:c4:08:8b:07:ce:52:e5: 7a:33:b2:fe:e2:9e:86:aa:ce:9d:38:63:a3:0d:89:f1:de:aa: 6c:c3:c6:34:9f:74:dc:df:ce:13:8a:c2:e0:1c:00:5c:6f:8e: 40:80:2a:18:4a:56:a1:7f:a5:05:8a:78:7a:4f:c9:79:d7:df: 11:e5:72:38:a0:ff:c0:c0:f8:17:ac:c9:91:99:bd:7a:72:d1: 05:98:5b:ec:a7:d7:a6:80:c9:d6:49:20:fa:c4:f3:82:ee:69: 58:14:f1:2a:e4:63:3e:c5:cc:25:8f:9e:d0:2d:8c:6a:54:2e: 8a:1f:e8:5d:6e:c4:b8:83:7f:a6:d2:f7:cc:e0:b7:18:53:11: b7:40:e2:71:09:4a:2a:80:f1:45:ea:9e:fd:23:de:fe:e3:2d: d6:bb:44:88:90:ae:82:56:7d:94:57:97:ec:a5:44:b9:fa:b9: b4:8e:ce:92:23:78:45:ab:d6:71:f4:9f:e7:27:8e:08:3d:e4: 15:d6:8a:30:f7:2d:0a:6e:b9:80:0c:3f:31:8d:a2:14:aa:2d: 00:1f:ab:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUcdFtKv3ymF0nHGL7sPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWI4Zjg4OTJkMDFkZDRjODQwNzI0Y2JiYWI5MGMwY2E2 MDk0MzIwHhcNMjUxMjE2MDQwMTE0WhcNMjUxMjE3MDQwMTE0WjAzMTEwLwYDVQQD EyhjODdlNzJjYmFlNDQ1MWQ1ZmExNzU0OWEzZTMwMzczNGIzNzE0YTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAq7nfDbblXIQPnctpP1kxhhKFM9 ZkxC7m6BTA/ei2OEnNhy6/CFwQ8qOu4JaYZJdvMyL3jcInYzdTDDbV+iZoM4Maht u1cS6BlDaCh16+NPCa4db4sW7n5jk3UmINUEX1TpF+7/FezNjJCrzohbAKwKVe/T yQVJ1L1nIZrlrhB7NfGI5JHrnOdFMzTrAGTY+8FQiY0R4lbfwNR/NOJsIemE2JSO vvMxQwg5BrxzRmwzHzXYvyBzK5YaZYgSkaDY8VMJZpqSH60clhWZoXi6kgFc1d3/ V3Z7/NIsxkAe5LkQrSzaiOEsExTaf3RA+5WIw0RAzG17Y2HD5J7Tss4sFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh+csuuRFHV+hdUmj4wNzSzcUp3MB8GA1UdIwQY MBaAFAKrj4iS0B3UyEByTLurkMDKYJQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEt ZTNiNzcwMTNmZGI3LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEtZTNiNzcwMTNmZGI3 LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlDg/WoG Ktx/jFWtBSjGzzD+OQbExyyy2eMT+B8gcDJPwRDAXzEFccytVEaI2PDECIsHzlLl ejOy/uKehqrOnThjow2J8d6qbMPGNJ903N/OE4rC4BwAXG+OQIAqGEpWoX+lBYp4 ek/JedffEeVyOKD/wMD4F6zJkZm9enLRBZhb7KfXpoDJ1kkg+sTzgu5pWBTxKuRj PsXMJY+e0C2MalQuih/oXW7EuIN/ptL3zOC3GFMRt0DicQlKKoDxReqe/SPe/uMt 1rtEiJCuglZ9lFeX7KVEufq5tI7OkiN4RavWcfSf5yeOCD3kFdaKMPctCm65gAw/ MY2iFKotAB+rUQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:22:06 2025 by rpki-client