This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json) Hash identifier: FSDc5JeKDUXhlTynCZppDsGLYAkS18kBSoq1v8Q5yGM= Subject key identifier: 19:7A:25:84:C6:F2:E3:35:04:B2:C0:FD:53:E8:B0:95:3E:72:0F:8F Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f Certificate serial: 019B3569DB24640A8602EEB5CDFBD0794FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft Manifest number: 10C0 Signing time: Fri 19 Dec 2025 07:01:28 +0000 Manifest this update: Fri 19 Dec 2025 07:01:28 +0000 Manifest next update: Sat 20 Dec 2025 07:01:28 +0000 Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: nkpWC7fbJks/6PGcTIttN/46t6et1uqs3WJW3hLcdd8=) 2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:db:24:64:0a:86:02:ee:b5:cd:fb:d0:79:4f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f Validity Not Before: Dec 19 07:01:28 2025 GMT Not After : Dec 20 07:01:28 2025 GMT Subject: CN=197a2584c6f2e33504b2c0fd53e8b0953e720f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:44:a8:93:c3:aa:0d:8f:aa:94:af:5b:2c:50: 5d:8d:ce:b1:21:6a:e1:93:ac:e6:c5:10:4f:8d:d4: dd:83:d2:b9:d0:82:ac:a3:b1:8a:c7:fa:d9:f1:cb: b0:25:34:56:e9:44:ed:f1:05:8d:64:76:64:71:af: 3f:00:5a:7a:65:df:0e:00:56:5b:cb:4c:3c:10:44: 14:a4:92:f7:36:02:c8:c1:31:07:6d:2f:b3:0b:2e: ea:d3:5b:86:51:a9:88:d1:4e:8c:71:33:e2:5e:7f: 28:8b:65:07:4a:56:10:2d:e8:e4:ac:18:b4:96:8b: 3a:67:31:90:77:a2:92:df:72:36:61:91:21:5d:ac: 4c:c9:8f:aa:aa:05:d6:ac:79:0e:4e:57:87:40:a0: e5:76:ec:02:13:5c:40:17:66:52:53:71:d9:ba:72: 9d:ff:7b:ad:5a:43:f0:2b:23:50:c8:76:15:a9:72: 62:fd:88:af:0d:da:16:73:7d:3b:40:5c:9e:57:21: ed:7d:d5:25:e7:3f:5f:e5:9f:f8:c0:be:65:76:0e: 2f:5d:08:1c:9e:30:46:8e:0b:4c:7c:c3:dd:b9:f3: 96:18:fb:be:47:e3:45:9a:bc:d7:f4:be:4f:4e:5d: 70:8f:86:cc:fb:7b:8f:05:6f:1a:40:d0:60:5a:e2: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7A:25:84:C6:F2:E3:35:04:B2:C0:FD:53:E8:B0:95:3E:72:0F:8F X509v3 Authority Key Identifier: keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ad:da:8e:15:aa:99:a9:84:c4:70:62:3c:98:e5:e7:c8:b9: 8f:47:e9:21:2f:be:c7:93:0b:d8:2c:c1:f8:b6:5d:0c:77:17: 84:93:dc:39:24:3b:8c:66:68:17:0f:df:5e:8a:5d:68:f7:4e: 09:da:46:e4:a2:bd:99:7c:dc:d5:9b:e9:0b:dc:b0:71:65:28: c3:2d:f3:2b:38:62:4a:83:98:b9:39:4c:e0:91:16:59:da:0a: aa:0f:06:47:b4:30:98:cc:9c:f6:10:f3:3a:cd:97:39:a0:b1: 71:35:bc:8c:e7:50:f2:88:54:c7:ec:91:98:9b:cc:65:8f:23: e6:f0:5c:9b:be:89:76:53:fc:83:24:77:1a:0f:c2:60:e7:10: 0e:c6:05:93:aa:05:18:4d:36:6b:43:4f:06:6b:8f:d9:2d:95: e9:76:45:5a:49:50:14:31:60:00:29:e7:49:ce:a9:52:8a:89: e5:cc:21:44:a2:ef:fc:60:5a:27:ab:39:0a:a7:c1:5f:ab:00: f7:66:75:63:ec:08:c7:dc:64:8d:96:7f:a5:e0:f5:58:43:e5: 67:fb:33:61:1e:21:d7:ab:c9:2a:1d:22:45:20:b1:89:6e:86: d5:e4:ba:5f:e0:c2:5d:77:6c:17:5d:ba:88:ca:39:fd:c4:bc: f3:fe:c1:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1adskZAqGAu61zfvQeU/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh NTQ0NmYwHhcNMjUxMjE5MDcwMTI4WhcNMjUxMjIwMDcwMTI4WjAzMTEwLwYDVQQD EygxOTdhMjU4NGM2ZjJlMzM1MDRiMmMwZmQ1M2U4YjA5NTNlNzIwZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4USok8OqDY+qlK9bLFBdjc6xIWrh k6zmxRBPjdTdg9K50IKso7GKx/rZ8cuwJTRW6UTt8QWNZHZkca8/AFp6Zd8OAFZb y0w8EEQUpJL3NgLIwTEHbS+zCy7q01uGUamI0U6McTPiXn8oi2UHSlYQLejkrBi0 los6ZzGQd6KS33I2YZEhXaxMyY+qqgXWrHkOTleHQKDlduwCE1xAF2ZSU3HZunKd /3utWkPwKyNQyHYVqXJi/YivDdoWc307QFyeVyHtfdUl5z9f5Z/4wL5ldg4vXQgc njBGjgtMfMPdufOWGPu+R+NFmrzX9L5PTl1wj4bM+3uPBW8aQNBgWuLWCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl6JYTG8uM1BLLA/VPosJU+cg+PMB8GA1UdIwQY MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw63ajhWq mamExHBiPJjl58i5j0fpIS++x5ML2CzB+LZdDHcXhJPcOSQ7jGZoFw/fXopdaPdO CdpG5KK9mXzc1ZvpC9ywcWUowy3zKzhiSoOYuTlM4JEWWdoKqg8GR7QwmMyc9hDz Os2XOaCxcTW8jOdQ8ohUx+yRmJvMZY8j5vBcm76JdlP8gyR3Gg/CYOcQDsYFk6oF GE02a0NPBmuP2S2V6XZFWklQFDFgACnnSc6pUoqJ5cwhRKLv/GBaJ6s5CqfBX6sA 92Z1Y+wIx9xkjZZ/peD1WEPlZ/szYR4h16vJKh0iRSCxiW6G1eS6X+DCXXdsF126 iMo5/cS88/7BVw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:28:20 2025 by rpki-client