This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json) Hash identifier: eMZ2fe6WJ5h5sQ0awWWvmPJ7gfZ749xjKTqU5tVjHII= Subject key identifier: 1B:19:7B:DF:B6:8E:24:BD:E4:99:05:60:25:71:36:AF:BF:8D:9F:D1 Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f Certificate serial: 019B3757C8FEBCE5B56158B8DC07AAA8C3CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft Manifest number: 10C1 Signing time: Fri 19 Dec 2025 16:00:58 +0000 Manifest this update: Fri 19 Dec 2025 16:00:58 +0000 Manifest next update: Sat 20 Dec 2025 16:00:58 +0000 Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: zL3yAITp16UUpg76mGQ43ywWJhDBQuULpkIRb3RyiPM=) 2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:c8:fe:bc:e5:b5:61:58:b8:dc:07:aa:a8:c3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f Validity Not Before: Dec 19 16:00:58 2025 GMT Not After : Dec 20 16:00:58 2025 GMT Subject: CN=1b197bdfb68e24bde4990560257136afbf8d9fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:17:26:30:26:d4:8d:e2:d2:5a:cd:3c:cd: 3f:e4:59:e9:53:e9:26:1a:da:df:48:d4:df:50:37: b8:85:3b:5a:6b:19:94:3e:3b:c3:1b:c7:f2:b1:55: f5:a2:88:80:c0:e4:2c:0a:e2:10:60:9e:81:d2:61: 67:5a:69:e5:47:88:df:f0:5c:24:1c:2c:a8:00:ef: f9:29:74:b3:1a:53:7c:39:43:da:60:c2:13:b6:60: d9:85:35:2e:c5:a5:ca:0e:61:a0:74:e5:d8:74:ef: 00:0c:13:69:73:1b:6e:19:69:db:4f:35:2c:dd:6f: 0c:f4:4a:67:45:7b:60:07:e4:8d:7a:11:f2:e2:75: 36:78:fe:7f:e3:a1:41:14:d6:04:e9:cd:2c:f7:12: 96:ee:56:1f:6c:3a:a8:e5:1c:7a:c0:28:73:5c:f0: fe:55:99:13:6e:cb:e0:d3:fc:7d:5e:f1:f8:48:f1: d1:f7:9c:ec:59:dd:05:27:ad:a2:d0:4e:c9:62:ab: 56:81:7f:36:e8:49:ae:5a:e6:67:7a:6d:52:31:6d: 41:62:1b:74:4e:f2:56:96:04:f8:0e:2e:7b:2a:da: d7:92:f2:2b:c1:07:e4:ff:a1:ae:48:21:aa:66:d6: 82:1a:04:2e:40:28:51:82:9f:0d:90:3e:b7:55:c4: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:7B:DF:B6:8E:24:BD:E4:99:05:60:25:71:36:AF:BF:8D:9F:D1 X509v3 Authority Key Identifier: keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ae:23:eb:15:cb:20:5b:47:bd:bf:ae:64:6b:63:76:1a:35: 06:9a:ed:27:f5:5a:5d:a3:50:66:56:c6:3b:4a:f7:3d:90:c3: 77:08:72:d3:7d:a2:75:c4:ff:11:fc:8a:0c:70:36:a6:14:22: 41:84:86:61:66:23:bd:d7:e1:6f:15:90:ef:7b:37:b2:5c:39: 34:d6:e7:f8:01:99:41:3c:36:05:e3:b2:ac:ed:24:f5:40:56: dd:ed:af:55:0f:6f:73:0b:82:1c:f0:ae:62:7f:0b:17:51:8f: 96:35:2e:1b:e0:b7:b4:74:d2:2d:50:5f:d1:f6:35:38:a0:fd: 63:5e:f9:b0:70:19:01:d2:e7:4e:2d:45:5b:fa:27:9d:08:61: d0:b2:03:8f:6c:cb:68:43:1f:12:ab:39:89:da:51:82:68:d0: 5a:f9:98:c8:9a:c1:f4:a7:b7:74:ce:bf:99:df:16:ff:a1:f8: 8d:65:45:b1:11:81:99:8e:7a:d1:2d:da:27:92:c7:98:46:76: 3b:c5:ed:18:8a:85:13:44:d8:03:7f:3f:da:b5:8e:80:b7:a2: 03:80:43:31:8c:50:3e:0c:a2:5b:99:01:bf:6c:3c:04:f4:77: 91:0e:bc:19:d6:04:ad:48:0f:6e:f3:cc:52:34:1e:1e:3d:69: ab:c3:b8:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V8j+vOW1YVi43AeqqMPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh NTQ0NmYwHhcNMjUxMjE5MTYwMDU4WhcNMjUxMjIwMTYwMDU4WjAzMTEwLwYDVQQD EygxYjE5N2JkZmI2OGUyNGJkZTQ5OTA1NjAyNTcxMzZhZmJmOGQ5ZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00UXJjAm1I3i0lrNPM0/5FnpU+km GtrfSNTfUDe4hTtaaxmUPjvDG8fysVX1ooiAwOQsCuIQYJ6B0mFnWmnlR4jf8Fwk HCyoAO/5KXSzGlN8OUPaYMITtmDZhTUuxaXKDmGgdOXYdO8ADBNpcxtuGWnbTzUs 3W8M9EpnRXtgB+SNehHy4nU2eP5/46FBFNYE6c0s9xKW7lYfbDqo5Rx6wChzXPD+ VZkTbsvg0/x9XvH4SPHR95zsWd0FJ62i0E7JYqtWgX826EmuWuZnem1SMW1BYht0 TvJWlgT4Di57KtrXkvIrwQfk/6GuSCGqZtaCGgQuQChRgp8NkD63VcRcWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsZe9+2jiS95JkFYCVxNq+/jZ/RMB8GA1UdIwQY MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK4j6xXL IFtHvb+uZGtjdho1BprtJ/VaXaNQZlbGO0r3PZDDdwhy032idcT/EfyKDHA2phQi QYSGYWYjvdfhbxWQ73s3slw5NNbn+AGZQTw2BeOyrO0k9UBW3e2vVQ9vcwuCHPCu Yn8LF1GPljUuG+C3tHTSLVBf0fY1OKD9Y175sHAZAdLnTi1FW/onnQhh0LIDj2zL aEMfEqs5idpRgmjQWvmYyJrB9Ke3dM6/md8W/6H4jWVFsRGBmY560S3aJ5LHmEZ2 O8XtGIqFE0TYA38/2rWOgLeiA4BDMYxQPgyiW5kBv2w8BPR3kQ68GdYErUgPbvPM UjQeHj1pq8O4rQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:12:21 2025 by rpki-client