This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json) Hash identifier: EpErT5jc/4wln91MFEUx7tTAE9AOa/YVt/yZgLxQWUk= Subject key identifier: CC:9C:63:B8:B1:B7:3D:4E:E0:16:11:5A:B3:78:FD:D0:FC:A1:27:78 Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751 Certificate serial: 019B495E22AFEF67CE76E9918832CC04470F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft Manifest number: 050A Signing time: Tue 23 Dec 2025 04:01:04 +0000 Manifest this update: Tue 23 Dec 2025 04:01:04 +0000 Manifest next update: Wed 24 Dec 2025 04:01:04 +0000 Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: Q3tWajjOcO5Y0bnY2suWDUKC9GASlNMGoA6GQJ/UGF0=) 2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:22:af:ef:67:ce:76:e9:91:88:32:cc:04:47:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751 Validity Not Before: Dec 23 04:01:04 2025 GMT Not After : Dec 24 04:01:04 2025 GMT Subject: CN=cc9c63b8b1b73d4ee016115ab378fdd0fca12778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:17:0c:66:ae:e5:c5:b9:cf:97:10:3b:a7: 5c:50:a1:f8:8e:7a:84:6c:58:16:86:22:c5:54:cf: 8c:3d:5d:47:fc:5e:31:6d:15:07:f0:a8:0e:e5:2e: 14:dc:6a:fe:17:19:88:b8:b0:f7:f4:a9:c3:8d:50: 5d:25:c6:d3:70:40:95:2e:b8:d4:19:50:97:4c:9d: 03:e8:ad:db:54:cb:8a:a5:10:30:83:b3:72:ae:f0: 24:ed:96:c5:19:3f:c7:10:0e:83:f4:b6:93:3f:c7: 3d:87:81:60:b0:e2:12:d1:cd:80:d3:ba:2d:d6:f8: 36:e9:ee:4f:c0:78:12:97:c5:82:e6:90:a6:be:0e: b4:c1:0c:71:58:e9:02:5a:21:7c:e8:4d:9c:bd:37: e3:71:69:a0:01:8c:84:aa:90:e1:f2:cb:df:4e:87: fb:0e:dc:b4:4d:10:3e:be:a5:e8:c9:13:5c:fd:c7: 30:5e:d2:3c:f4:d7:5b:33:6a:2d:0b:9a:0d:47:a2: d7:5b:48:23:be:45:9e:ab:68:17:cc:7a:65:e9:55: 6a:4b:9f:07:78:0c:16:5f:d6:bf:17:04:30:ea:07: 4a:07:ab:b6:d2:cc:4a:bb:2b:cf:8f:ef:ea:5e:0e: f1:a3:ca:aa:c5:c6:c2:5d:19:5b:8e:19:4b:61:83: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9C:63:B8:B1:B7:3D:4E:E0:16:11:5A:B3:78:FD:D0:FC:A1:27:78 X509v3 Authority Key Identifier: keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ba:8d:9f:4c:70:8d:73:60:b3:2a:22:ea:09:fd:30:73:fb: 50:ca:0a:da:6b:cb:90:4d:6f:08:dc:c1:86:e0:52:79:90:f7: 8e:ce:e6:9b:32:f4:ce:cd:6b:99:db:1d:be:67:0f:37:d6:a4: 5d:47:e2:38:32:58:83:f9:27:59:c6:d3:1c:68:8e:ba:41:01: e4:27:08:e3:34:ae:12:76:be:3f:23:67:07:5c:95:7f:bb:70: 3b:1f:9d:22:49:5a:68:31:73:25:8e:2e:4d:20:d1:ca:89:7b: 19:c6:e7:04:6f:ca:bf:c5:22:9d:72:ba:6a:ab:4a:df:bf:86: 24:28:29:2b:4a:64:7c:84:07:5f:07:1d:9d:dc:c3:12:40:e2: 04:4f:09:2a:ce:8a:b8:c1:d5:54:51:20:d0:c1:12:97:ac:eb: 39:04:42:41:43:ac:fc:f5:da:84:c1:be:9a:ef:0e:dd:d2:f2: d1:be:f5:da:d1:e4:ed:a7:21:ad:a2:8a:70:89:95:47:3b:e1: 86:ad:5e:c1:64:73:47:2d:0f:70:99:65:0b:ab:2b:13:08:13: ef:57:0c:7f:25:62:5d:b9:a1:d3:fd:67:7b:b2:77:c9:d9:08: 3e:31:68:1e:80:b7:a5:5e:77:3b:f7:5d:29:74:a8:34:f8:48: 2a:77:3d:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXiKv72fOdumRiDLMBEcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi NTY3NTEwHhcNMjUxMjIzMDQwMTA0WhcNMjUxMjI0MDQwMTA0WjAzMTEwLwYDVQQD EyhjYzljNjNiOGIxYjczZDRlZTAxNjExNWFiMzc4ZmRkMGZjYTEyNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXQXDGau5cW5z5cQO6dcUKH4jnqE bFgWhiLFVM+MPV1H/F4xbRUH8KgO5S4U3Gr+FxmIuLD39KnDjVBdJcbTcECVLrjU GVCXTJ0D6K3bVMuKpRAwg7NyrvAk7ZbFGT/HEA6D9LaTP8c9h4FgsOIS0c2A07ot 1vg26e5PwHgSl8WC5pCmvg60wQxxWOkCWiF86E2cvTfjcWmgAYyEqpDh8svfTof7 Dty0TRA+vqXoyRNc/ccwXtI89NdbM2otC5oNR6LXW0gjvkWeq2gXzHpl6VVqS58H eAwWX9a/FwQw6gdKB6u20sxKuyvPj+/qXg7xo8qqxcbCXRlbjhlLYYO68QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMycY7ixtz1O4BYRWrN4/dD8oSd4MB8GA1UdIwQY MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt MjFkZTAzYTg1MjM1LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1 LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrqNn0xw jXNgsyoi6gn9MHP7UMoK2mvLkE1vCNzBhuBSeZD3js7mmzL0zs1rmdsdvmcPN9ak XUfiODJYg/knWcbTHGiOukEB5CcI4zSuEna+PyNnB1yVf7twOx+dIklaaDFzJY4u TSDRyol7GcbnBG/Kv8UinXK6aqtK37+GJCgpK0pkfIQHXwcdndzDEkDiBE8JKs6K uMHVVFEg0MESl6zrOQRCQUOs/PXahMG+mu8O3dLy0b712tHk7achraKKcImVRzvh hq1ewWRzRy0PcJllC6srEwgT71cMfyViXbmh0/1ne7J3ydkIPjFoHoC3pV53O/dd KXSoNPhIKnc9Kg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:39:11 2025 by rpki-client