This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json) Hash identifier: 91JtXrTI3zXzf45KR3ZyUY5Ur8o5pz00ZYxsEV5qFno= Subject key identifier: 8C:36:5C:07:E3:79:44:F5:60:33:96:79:3A:80:E2:10:C4:36:80:18 Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Certificate serial: 019B0D80422A1F0225B91BC02BC64DB144FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft Manifest number: 0A Signing time: Thu 11 Dec 2025 13:01:07 +0000 Manifest this update: Thu 11 Dec 2025 13:01:07 +0000 Manifest next update: Fri 12 Dec 2025 13:01:07 +0000 Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: fSwFgMACEmQSmv/jHhcH84q9n+mVmYuPkeSIKO27wIg=) 2: KBQnr_D6NsBFhkpQ2vS2j8sPWCg.roa (hash: LreY9fRvGsjfDr7PDIUiqXvVU4nrT6HsCO3N3osuNEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:42:2a:1f:02:25:b9:1b:c0:2b:c6:4d:b1:44:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Validity Not Before: Dec 11 13:01:07 2025 GMT Not After : Dec 12 13:01:07 2025 GMT Subject: CN=8c365c07e37944f5603396793a80e210c4368018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b6:60:c7:8d:80:db:d5:99:8f:32:45:92:f3: ae:ae:00:2e:d2:ab:73:f2:bc:c8:7a:18:ed:c2:0a: 5c:45:a9:e3:c0:3f:f0:e4:a3:50:09:9f:c1:91:4a: 15:9b:b2:11:55:f2:68:e6:61:a3:59:7c:ff:9d:bf: 53:78:80:78:33:7c:00:24:80:1f:e3:a1:a5:f9:1e: 31:64:cd:73:df:b9:60:95:11:3e:35:24:5a:b6:df: 74:f2:f0:64:ef:cc:17:1d:ec:c4:09:0e:e5:a2:6a: ee:a9:30:68:4b:81:4c:58:8e:2a:8f:55:1e:d9:36: c1:7f:a3:30:c3:2c:a3:f6:d9:96:e9:24:b1:b5:c4: 26:03:08:4c:1f:6c:ac:ab:e2:6a:9b:33:8c:24:32: b1:d3:8c:ef:5f:f2:40:27:bd:97:ac:45:c4:67:80: e7:47:fd:e9:dc:3f:de:06:4f:c4:c2:1f:37:6f:00: c4:84:4e:e4:ca:a9:87:bc:22:83:8e:74:7d:e3:80: 2a:d2:cb:ad:44:06:d2:c2:cd:e1:55:7f:88:80:57: 74:b3:d5:33:3a:45:6b:ca:9b:d6:a1:95:4f:96:c0: 3f:f6:5a:e4:21:7c:b7:a3:dd:13:90:47:1e:e8:ec: 64:5d:a4:6f:d6:14:39:86:69:78:69:11:f5:92:3a: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:5C:07:E3:79:44:F5:60:33:96:79:3A:80:E2:10:C4:36:80:18 X509v3 Authority Key Identifier: keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a0:73:e3:f8:c5:48:e4:1f:9a:e9:75:27:73:47:c9:87:4b: 42:ef:06:cc:f8:6b:26:c0:9a:6a:b4:5d:4f:a0:25:71:00:1d: 03:72:bb:53:4c:ec:3a:34:0e:9a:3b:a6:4d:7b:37:f9:35:41: 23:f8:56:e7:c1:b3:fb:04:84:6e:13:91:b3:15:53:c7:8e:aa: 27:b0:0b:07:d8:3c:77:ac:53:48:af:8b:a3:98:ed:37:e8:68: a5:8a:0e:50:c2:17:75:81:cd:9e:96:25:d0:3d:fa:9b:94:91: f7:cd:50:2f:91:77:32:13:ed:99:5d:c8:40:8f:dc:b9:3f:46: 80:57:bc:bf:c0:a5:14:16:1b:ed:81:b5:9a:eb:c7:ab:32:38: ac:54:26:15:63:7a:92:f3:99:1d:43:75:82:58:e9:47:dc:a4: cc:bc:45:0e:ca:44:48:ef:1c:97:2d:9e:3f:88:28:83:5d:9c: 04:31:d7:31:90:e8:21:ac:d4:35:93:49:1b:d5:2e:15:aa:81: bc:50:c1:aa:8b:1c:86:54:8d:e3:a0:21:bc:a8:13:9b:85:66: 9e:19:49:25:01:5e:56:ad:97:e3:9b:e5:32:e6:19:36:19:e2: 21:67:3a:bb:f3:50:fc:2e:2e:af:47:02:05:24:86:76:ea:f3: 3b:6d:0b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgEIqHwIluRvAK8ZNsUT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0 MmFhYjAwHhcNMjUxMjExMTMwMTA3WhcNMjUxMjEyMTMwMTA3WjAzMTEwLwYDVQQD Eyg4YzM2NWMwN2UzNzk0NGY1NjAzMzk2NzkzYTgwZTIxMGM0MzY4MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bZgx42A29WZjzJFkvOurgAu0qtz 8rzIehjtwgpcRanjwD/w5KNQCZ/BkUoVm7IRVfJo5mGjWXz/nb9TeIB4M3wAJIAf 46Gl+R4xZM1z37lglRE+NSRatt908vBk78wXHezECQ7lomruqTBoS4FMWI4qj1Ue 2TbBf6Mwwyyj9tmW6SSxtcQmAwhMH2ysq+JqmzOMJDKx04zvX/JAJ72XrEXEZ4Dn R/3p3D/eBk/Ewh83bwDEhE7kyqmHvCKDjnR944Aq0sutRAbSws3hVX+IgFd0s9Uz OkVrypvWoZVPlsA/9lrkIXy3o90TkEce6OxkXaRv1hQ5hml4aRH1kjoQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw2XAfjeUT1YDOWeTqA4hDENoAYMB8GA1UdIwQY MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt ODZmODhjZTQ0NzkzLzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKBz4/jF SOQfmul1J3NHyYdLQu8GzPhrJsCaarRdT6AlcQAdA3K7U0zsOjQOmjumTXs3+TVB I/hW58Gz+wSEbhORsxVTx46qJ7ALB9g8d6xTSK+Lo5jtN+hopYoOUMIXdYHNnpYl 0D36m5SR981QL5F3MhPtmV3IQI/cuT9GgFe8v8ClFBYb7YG1muvHqzI4rFQmFWN6 kvOZHUN1gljpR9ykzLxFDspESO8cly2eP4gog12cBDHXMZDoIazUNZNJG9UuFaqB vFDBqoschlSN46AhvKgTm4VmnhlJJQFeVq2X45vlMuYZNhniIWc6u/NQ/C4ur0cC BSSGdurzO20L2A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:04 2025 by rpki-client