This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json) Hash identifier: y5O8IPJKGvD/eWsNm3ZjEpDVQ/agISAQM6a+6TdVg6E= Subject key identifier: 89:E8:70:CE:99:04:74:86:03:D1:07:AF:3B:70:52:2F:5B:F3:4E:D0 Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72 Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572 Certificate serial: 019B5AF64AE6E3C3ED75858D1760166AD9BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft Manifest number: 1465 Signing time: Fri 26 Dec 2025 14:00:49 +0000 Manifest this update: Fri 26 Dec 2025 14:00:49 +0000 Manifest next update: Sat 27 Dec 2025 14:00:49 +0000 Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: 7JSQ4gsxQjbLPmn5ByXzd5dwsDgphgK1980JSLXT27U=) 2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:4a:e6:e3:c3:ed:75:85:8d:17:60:16:6a:d9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572 Validity Not Before: Dec 26 14:00:49 2025 GMT Not After : Dec 27 14:00:49 2025 GMT Subject: CN=89e870ce9904748603d107af3b70522f5bf34ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:fa:97:a4:f6:bc:b2:d8:64:32:d5:68:2b: 8a:96:33:ac:9b:2f:7d:9f:7b:5d:bd:a0:7b:f2:42: a1:3b:1f:e0:37:c4:9e:25:0b:ba:19:e6:76:e6:2f: ac:82:93:1d:e1:b3:7a:e1:35:4e:c3:0f:89:1f:33: 49:5a:7b:1b:f2:ea:d4:79:e8:ba:d0:5c:ea:64:bd: 68:54:c0:80:11:ef:d3:ad:4b:6d:c6:b9:37:fa:00: 87:8a:2a:31:25:61:21:8e:a4:25:a2:30:30:25:4c: 5b:04:51:42:75:01:24:9d:e1:1c:21:22:ac:0c:59: d7:e2:98:46:36:22:04:14:17:0b:53:a4:2b:83:f5: e2:d7:b8:b8:d1:a0:a0:0c:0d:39:13:9d:e4:30:29: 76:09:91:3c:63:f1:1c:da:03:45:1b:9c:50:cd:66: 31:ec:70:4b:a3:50:1e:e8:e3:0e:7a:40:18:dd:1e: 4b:01:67:c9:3c:0e:19:b4:ec:a9:2e:c7:a5:ec:2a: 09:e2:42:80:22:13:72:f4:01:3e:47:5b:93:ba:dd: 77:33:7c:e3:b8:7e:0d:31:ab:5e:ba:48:0d:41:80: a1:ff:80:86:9b:44:f8:61:ee:e9:d1:fa:87:5a:e2: 50:53:67:89:88:db:2a:c3:c4:5f:3a:ca:ea:c9:4b: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E8:70:CE:99:04:74:86:03:D1:07:AF:3B:70:52:2F:5B:F3:4E:D0 X509v3 Authority Key Identifier: keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b8:fc:46:24:86:83:a0:48:59:89:e8:cc:50:0c:23:50:18: 16:dd:a1:89:24:0b:41:28:95:f2:73:d4:5c:e6:b0:3f:93:00: f1:78:58:f9:ef:e7:04:41:b1:85:b2:c1:64:f3:46:55:f0:65: c1:33:f0:a5:f1:c9:f8:d1:91:cc:d4:b2:87:38:88:a6:e6:d1: cf:cf:0c:e0:c9:ba:dd:b6:d7:7b:3a:51:c0:36:11:67:8c:73: b7:96:19:0f:ff:79:35:bd:5e:21:a9:71:a3:10:c6:9d:4a:2a: 8d:03:5f:72:00:61:60:e1:1f:8e:71:50:27:b0:db:5b:6d:38: 61:38:71:3e:6f:00:a5:ca:b2:d1:50:95:51:2e:2d:72:34:58: 17:c4:0a:0c:cb:dc:6c:2d:c0:21:90:0b:6e:63:50:8e:ea:03: 1f:8e:ee:74:e4:27:24:0e:4e:31:33:ee:d0:86:5b:87:c0:24: 63:3c:30:85:4a:98:1f:db:1f:aa:48:6b:f1:36:0c:88:85:21: 99:67:24:7f:27:3a:fa:8a:6c:d9:14:59:e0:4e:7b:d4:1a:ce: 4f:f0:64:1c:4a:2b:49:4d:48:f2:c7:08:94:b6:58:43:9b:6b: af:31:47:bf:12:33:f0:75:2c:10:99:77:99:16:fc:5c:14:40: 28:19:97:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9krm48PtdYWNF2AWatm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWYyZWY2ZGI1MDI5OTRkN2IwYzhlNDljZDRhNzc3YmRi OTM1NzIwHhcNMjUxMjI2MTQwMDQ5WhcNMjUxMjI3MTQwMDQ5WjAzMTEwLwYDVQQD Eyg4OWU4NzBjZTk5MDQ3NDg2MDNkMTA3YWYzYjcwNTIyZjViZjM0ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLX6l6T2vLLYZDLVaCuKljOsmy99 n3tdvaB78kKhOx/gN8SeJQu6GeZ25i+sgpMd4bN64TVOww+JHzNJWnsb8urUeei6 0FzqZL1oVMCAEe/TrUttxrk3+gCHiioxJWEhjqQlojAwJUxbBFFCdQEkneEcISKs DFnX4phGNiIEFBcLU6Qrg/Xi17i40aCgDA05E53kMCl2CZE8Y/Ec2gNFG5xQzWYx 7HBLo1Ae6OMOekAY3R5LAWfJPA4ZtOypLsel7CoJ4kKAIhNy9AE+R1uTut13M3zj uH4NMateukgNQYCh/4CGm0T4Ye7p0fqHWuJQU2eJiNsqw8RfOsrqyUsFTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInocM6ZBHSGA9EHrztwUi9b807QMB8GA1UdIwQY MBaAFAFfLvbbUCmU17DI5JzUp3e9uTVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzIt ZmFmZjIxMWVhNGM2LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zNjcyMGUtZWJmMi00YjQxLThjYzItZmFmZjIxMWVhNGM2 LzEvQVY4dTl0dFFLWlRYc01qa25OU25kNzI1TlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLj8RiSG g6BIWYnozFAMI1AYFt2hiSQLQSiV8nPUXOawP5MA8XhY+e/nBEGxhbLBZPNGVfBl wTPwpfHJ+NGRzNSyhziIpubRz88M4Mm63bbXezpRwDYRZ4xzt5YZD/95Nb1eIalx oxDGnUoqjQNfcgBhYOEfjnFQJ7DbW204YThxPm8Apcqy0VCVUS4tcjRYF8QKDMvc bC3AIZALbmNQjuoDH47udOQnJA5OMTPu0IZbh8AkYzwwhUqYH9sfqkhr8TYMiIUh mWckfyc6+ops2RRZ4E571BrOT/BkHEorSU1I8scIlLZYQ5trrzFHvxIz8HUsEJl3 mRb8XBRAKBmXUA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:38 2025 by rpki-client