This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json) Hash identifier: sGCavnKpJAlCi6TWBH7oGvMAgW1VC/p8vDXb9LaBbds= Subject key identifier: 5E:99:E3:04:E3:06:27:65:54:B7:71:FF:DC:C5:59:84:4C:DE:1E:3F Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22 Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822 Certificate serial: 019B59E471C9F1B14363F39554C7881FC3B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 09:01:42 +0000 Manifest this update: Fri 26 Dec 2025 09:01:42 +0000 Manifest next update: Sat 27 Dec 2025 09:01:42 +0000 Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: XEvuzKSpl7jV122tS6CO+LTXqB8OeJ2kcWIu2Yt9RpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:71:c9:f1:b1:43:63:f3:95:54:c7:88:1f:c3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822 Validity Not Before: Dec 26 09:01:42 2025 GMT Not After : Dec 27 09:01:42 2025 GMT Subject: CN=5e99e304e306276554b771ffdcc559844cde1e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:a6:53:4a:20:72:0b:c3:3c:19:4c:3d:ad: 38:3b:11:25:3d:e0:93:9b:79:29:e5:53:b4:b6:cf: 3b:34:62:81:2f:b7:ed:2c:f7:f4:2e:fc:a5:39:d4: 85:cc:be:bc:2c:31:2a:77:7f:e6:eb:ea:91:66:61: 44:b6:5f:c1:b0:98:e2:b8:57:3f:3f:01:17:26:59: 7c:13:c6:7d:1e:30:d4:c6:b8:65:d3:b0:1a:8f:29: 62:c8:b7:09:40:9e:a5:4d:aa:b0:01:01:70:eb:b7: 80:2e:f6:b4:5b:5d:e6:83:c9:37:53:3a:0e:8b:ea: db:cd:e3:19:5d:f8:f7:d8:21:72:1d:a2:f8:a3:75: b0:88:4c:6e:ca:38:d6:f8:39:98:7e:87:01:98:b9: 8b:89:12:5f:8c:7a:39:ee:54:7d:e1:5f:6e:fd:53: 12:6a:a5:7d:dc:81:86:3d:6b:02:91:3f:43:21:a0: ae:cb:1a:8f:18:50:27:6b:5a:57:a4:33:53:59:a0: 2c:12:f3:d6:8f:0e:23:44:9a:77:e7:f3:63:53:04: e2:92:c8:79:a5:41:b2:ac:9f:11:cf:3e:b1:e5:4e: 11:79:e0:1e:d6:79:98:da:ae:bd:7e:06:97:bf:b0: 23:7a:18:bc:b0:30:ba:7a:16:00:f0:5c:ab:66:0a: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:99:E3:04:E3:06:27:65:54:B7:71:FF:DC:C5:59:84:4C:DE:1E:3F X509v3 Authority Key Identifier: keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:c2:76:ef:2c:07:e3:6d:ff:f9:db:53:95:ac:c4:42:a3:51: 9e:7c:c8:28:e0:e5:e0:69:f9:17:c9:0b:6c:9e:91:e5:ab:96: 74:62:28:3a:4d:05:58:c9:00:7a:ab:a7:5c:2d:08:74:f2:f6: 3f:bc:3f:30:35:32:29:1e:bc:e7:0a:fd:42:59:d4:e9:cb:d6: 3d:73:de:f1:a6:b0:ec:20:12:d2:f9:ee:a9:51:30:c5:52:eb: 6b:34:85:a4:12:e2:7d:6b:07:08:84:92:6e:a8:3d:98:34:0c: 17:9e:83:a6:06:e3:3a:f6:a8:8e:a6:22:51:b4:80:dd:17:be: ac:0c:fc:a7:96:55:8b:15:83:c8:ef:43:ed:52:4a:0a:dc:34: b5:a4:67:4c:6f:28:11:81:ae:d3:e6:6d:04:44:68:17:e4:79: f1:48:bc:1f:1a:b3:6a:d9:cc:b2:2c:da:28:1c:41:4e:ed:8e: e1:11:b1:e8:68:6d:24:3b:0e:fb:8c:f2:7f:5c:72:cb:7d:fb: 68:a7:c5:7b:47:e3:ed:a1:38:96:17:96:44:3a:05:03:68:ac: ff:00:49:43:5d:e7:ce:3f:97:bb:b3:7c:f5:b7:10:33:97:c6: b8:94:f1:77:04:a5:74:d7:2d:c8:80:2c:af:7e:e3:66:b0:85: d6:46:5d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5HHJ8bFDY/OVVMeIH8O0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNGY3YjdkNTFlNTA4MTgwZWU3M2NlZGRiZGQ5NTVjMzk3 NzQ4MjIwHhcNMjUxMjI2MDkwMTQyWhcNMjUxMjI3MDkwMTQyWjAzMTEwLwYDVQQD Eyg1ZTk5ZTMwNGUzMDYyNzY1NTRiNzcxZmZkY2M1NTk4NDRjZGUxZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXimU0ogcgvDPBlMPa04OxElPeCT m3kp5VO0ts87NGKBL7ftLPf0LvylOdSFzL68LDEqd3/m6+qRZmFEtl/BsJjiuFc/ PwEXJll8E8Z9HjDUxrhl07AajyliyLcJQJ6lTaqwAQFw67eALva0W13mg8k3UzoO i+rbzeMZXfj32CFyHaL4o3WwiExuyjjW+DmYfocBmLmLiRJfjHo57lR94V9u/VMS aqV93IGGPWsCkT9DIaCuyxqPGFAna1pXpDNTWaAsEvPWjw4jRJp35/NjUwTiksh5 pUGyrJ8Rzz6x5U4ReeAe1nmY2q69fgaXv7Ajehi8sDC6ehYA8FyrZgod5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6Z4wTjBidlVLdx/9zFWYRM3h4/MB8GA1UdIwQY MBaAFAFPe31R5QgYDuc87dvdlVw5d0giMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQt YzRjNTFmY2ZmNDk3LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQtYzRjNTFmY2ZmNDk3 LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8J27ywH 423/+dtTlazEQqNRnnzIKODl4Gn5F8kLbJ6R5auWdGIoOk0FWMkAequnXC0IdPL2 P7w/MDUyKR685wr9QlnU6cvWPXPe8aaw7CAS0vnuqVEwxVLrazSFpBLifWsHCISS bqg9mDQMF56DpgbjOvaojqYiUbSA3Re+rAz8p5ZVixWDyO9D7VJKCtw0taRnTG8o EYGu0+ZtBERoF+R58Ui8HxqzatnMsizaKBxBTu2O4RGx6GhtJDsO+4zyf1xyy337 aKfFe0fj7aE4lheWRDoFA2is/wBJQ13nzj+Xu7N89bcQM5fGuJTxdwSldNctyIAs r37jZrCF1kZd0A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client