This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json) Hash identifier: PfFaW0w1B10Lzzkq7Ye8y4/BZVNAV3onGtQzJBMKlEM= Subject key identifier: 54:9F:AE:FE:BC:DC:EF:AD:69:5F:FE:DF:65:45:8E:46:FE:5F:E1:68 Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4 Certificate serial: 019B59764AAF3E1449C51FA8D01D4AD268E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft Manifest number: 12D6 Signing time: Fri 26 Dec 2025 07:01:23 +0000 Manifest this update: Fri 26 Dec 2025 07:01:23 +0000 Manifest next update: Sat 27 Dec 2025 07:01:23 +0000 Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=) 2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: 61b7Ofy3t7YMPtI4rjHiG7GrjqRxwmBPF5RF+x6TUeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:4a:af:3e:14:49:c5:1f:a8:d0:1d:4a:d2:68:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4 Validity Not Before: Dec 26 07:01:23 2025 GMT Not After : Dec 27 07:01:23 2025 GMT Subject: CN=549faefebcdcefad695ffedf65458e46fe5fe168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:65:33:d0:c8:b9:09:ad:ee:73:f5:0e:5a: c1:b4:6a:77:92:19:03:d6:e2:ed:d7:bb:90:e2:06: fa:c3:5a:90:59:3d:34:b1:93:23:4b:b1:75:8b:c3: 17:a9:d9:bc:3e:5f:3c:c5:8a:6f:7e:7c:4d:d4:bc: 81:e3:df:4d:39:c6:3a:70:89:11:cf:3c:ad:2f:92: 1e:5f:86:92:6d:8f:48:3d:68:34:f0:e1:f6:7e:c3: 86:c1:48:db:b9:b8:91:40:37:b5:8e:e1:21:0d:ca: 5e:ca:20:24:ff:7f:26:3f:2c:e6:fc:01:83:12:f4: ef:41:b0:29:08:6e:f7:b7:06:bd:7f:ec:88:fd:8d: 04:90:75:22:df:df:45:31:c0:02:e8:11:e6:01:22: 78:35:6c:df:c7:5b:e8:24:49:a8:75:e7:7d:cf:22: 9b:ae:46:10:ad:f5:68:b2:65:5e:d2:ed:b3:ec:76: 91:f6:ba:02:ef:c3:fe:1b:22:a4:5d:87:29:49:70: c8:3d:c5:ef:43:a1:68:07:91:37:06:d6:23:bc:d1: fe:4e:f4:fd:10:10:97:c9:99:26:b9:21:08:55:25: 75:bf:02:a6:ee:50:53:ce:d4:31:39:f0:af:36:58: a5:15:db:ba:20:3d:6c:f1:43:56:0f:b3:93:a7:eb: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9F:AE:FE:BC:DC:EF:AD:69:5F:FE:DF:65:45:8E:46:FE:5F:E1:68 X509v3 Authority Key Identifier: keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e3:1c:fe:d6:64:34:4d:dc:b1:7a:b2:25:43:4d:a7:a2:6a: 69:d7:b0:59:05:9d:aa:1f:81:11:db:3b:0c:45:77:c0:06:d4: f3:aa:d1:db:10:44:5a:fd:b4:7e:91:35:eb:28:39:53:93:e0: 6a:db:01:ee:d8:43:bc:19:14:36:5e:28:39:d6:e3:f8:86:2f: 0f:cc:fa:65:af:04:82:ec:b5:0f:f5:25:a8:e0:f6:eb:cf:a2: d0:6f:50:54:4f:eb:59:4b:6c:e2:54:f7:00:f2:b0:ab:59:7b: 14:8e:11:f2:35:b0:98:a3:ba:28:ae:71:4c:cb:3f:11:04:58: b4:f0:d9:ea:e4:95:4e:a3:d8:45:0e:8c:5b:03:54:e4:f6:f6: a9:c9:8a:07:3b:63:d7:3f:e0:45:34:db:e1:eb:50:08:da:4c: 84:7c:89:c4:d0:e8:ac:30:be:a9:32:3b:0c:6a:0a:d4:59:72: 05:88:07:44:40:77:41:9c:6a:3b:fc:0d:0f:18:9f:9f:2e:cc: 21:61:da:be:6e:7f:83:cf:57:48:16:e9:10:fd:97:e7:dd:54: 6e:9e:bc:a2:ab:83:b3:60:8b:22:9f:0c:a7:b4:84:76:b0:99: bc:68:03:b7:e2:17:67:22:f0:90:fc:72:1d:a9:0b:0c:17:b2: 42:88:56:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkqvPhRJxR+o0B1K0mjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYzcyYTczNDM5MmY2Y2Y3OTJiM2QwYzNlZDExODIwMjg2 ZjE5ZjQwHhcNMjUxMjI2MDcwMTIzWhcNMjUxMjI3MDcwMTIzWjAzMTEwLwYDVQQD Eyg1NDlmYWVmZWJjZGNlZmFkNjk1ZmZlZGY2NTQ1OGU0NmZlNWZlMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44RlM9DIuQmt7nP1DlrBtGp3khkD 1uLt17uQ4gb6w1qQWT00sZMjS7F1i8MXqdm8Pl88xYpvfnxN1LyB499NOcY6cIkR zzytL5IeX4aSbY9IPWg08OH2fsOGwUjbubiRQDe1juEhDcpeyiAk/38mPyzm/AGD EvTvQbApCG73twa9f+yI/Y0EkHUi399FMcAC6BHmASJ4NWzfx1voJEmoded9zyKb rkYQrfVosmVe0u2z7HaR9roC78P+GyKkXYcpSXDIPcXvQ6FoB5E3BtYjvNH+TvT9 EBCXyZkmuSEIVSV1vwKm7lBTztQxOfCvNlilFdu6ID1s8UNWD7OTp+vf1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSfrv683O+taV/+32VFjkb+X+FoMB8GA1UdIwQY MBaAFGrHKnNDkvbPeSs9DD7RGCAobxn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQt OTNkZjQ1MDAzZTdlLzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQtOTNkZjQ1MDAzZTdl LzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+Mc/tZk NE3csXqyJUNNp6JqadewWQWdqh+BEds7DEV3wAbU86rR2xBEWv20fpE16yg5U5Pg atsB7thDvBkUNl4oOdbj+IYvD8z6Za8Eguy1D/UlqOD268+i0G9QVE/rWUts4lT3 APKwq1l7FI4R8jWwmKO6KK5xTMs/EQRYtPDZ6uSVTqPYRQ6MWwNU5Pb2qcmKBztj 1z/gRTTb4etQCNpMhHyJxNDorDC+qTI7DGoK1FlyBYgHREB3QZxqO/wNDxifny7M IWHavm5/g89XSBbpEP2X591Ubp68oquDs2CLIp8Mp7SEdrCZvGgDt+IXZyLwkPxy HakLDBeyQohWeg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:26 2025 by rpki-client