This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json) Hash identifier: EZW1QKRN7tyZuoFRpaqlNvZJzu6Mr37Ia1/7Gp8Lr8M= Subject key identifier: 1A:13:A9:9E:D4:9C:24:53:EC:51:A9:F8:33:67:EA:EE:11:21:1B:13 Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0 Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0 Certificate serial: 019B1727ECA84874A54BD794BD9F1790F994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft Manifest number: 163B Signing time: Sat 13 Dec 2025 10:00:51 +0000 Manifest this update: Sat 13 Dec 2025 10:00:51 +0000 Manifest next update: Sun 14 Dec 2025 10:00:51 +0000 Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: rGFT9QwtvApICi03sjc45PFdPOsBBWp+wJWVuk/kPpg=) 2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:27:ec:a8:48:74:a5:4b:d7:94:bd:9f:17:90:f9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0 Validity Not Before: Dec 13 10:00:51 2025 GMT Not After : Dec 14 10:00:51 2025 GMT Subject: CN=1a13a99ed49c2453ec51a9f83367eaee11211b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:f3:76:56:2e:9b:4f:b6:38:ae:89:96:4e: 1e:bf:a9:7d:17:ec:c7:3c:49:7f:b2:5c:ff:55:54: 57:ee:b2:72:e1:35:57:8c:01:2c:59:5c:93:a9:03: bc:9a:55:ca:56:1a:a2:ff:44:63:2a:e4:15:f0:97: b2:75:a9:b7:f7:c9:94:c2:8a:17:af:7b:94:04:23: 26:38:26:a8:02:d7:e7:4d:70:d1:67:e5:a9:84:32: 42:b1:b6:93:a0:38:3d:ee:ca:0b:1d:92:3e:f9:a4: f0:8f:66:33:26:da:41:78:5b:77:aa:a7:71:25:32: 85:3e:4d:d5:f7:9c:98:e1:93:ba:79:13:87:03:53: aa:a6:a6:8c:c8:68:48:e7:e2:d6:79:a8:8f:5c:4f: f1:97:7a:59:7f:a4:4c:f2:c7:48:e3:e5:f0:94:e7: 6a:dc:69:63:67:c8:2f:47:2a:0b:fe:39:96:cd:7e: 82:d6:93:1d:24:ce:33:c0:7b:13:5b:81:aa:e9:ff: 5a:e8:61:60:5c:c8:e9:4a:43:1b:0e:02:1b:42:20: d9:32:db:a7:27:32:ce:7a:8a:3c:d8:14:7e:b4:fc: c1:fe:5d:b1:16:ea:9f:c4:3c:2f:2b:ef:dd:73:8b: b4:1d:28:71:60:02:e7:72:16:67:08:60:54:02:f2: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:A9:9E:D4:9C:24:53:EC:51:A9:F8:33:67:EA:EE:11:21:1B:13 X509v3 Authority Key Identifier: keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a3:49:9d:7b:f8:42:7a:26:19:cd:69:12:0c:d8:23:e9:11: 60:0a:0d:2c:61:2c:f5:3f:79:bf:ab:4b:88:fb:b2:57:f5:97: d4:a2:5c:38:38:0a:2a:1c:e2:22:05:ba:a8:3f:83:f3:20:cc: 48:aa:03:70:4e:fc:07:b2:21:8b:48:9f:f4:6c:42:b9:e7:66: 8c:16:f8:82:8f:b0:0a:f3:71:b3:90:d4:47:1f:d8:d6:f9:1d: 7d:27:2c:27:56:e3:1f:b5:b2:c9:61:68:6b:f2:ca:bf:4f:42: fa:87:e3:5f:bf:7b:69:64:26:eb:1a:bc:cc:d2:6a:a7:82:79: 60:38:c3:8d:82:2d:7b:74:00:a4:42:c3:49:37:16:ed:af:32: 4b:2f:14:be:57:b4:59:80:68:f6:54:18:66:de:d5:cf:0f:5e: 97:23:44:b2:0d:7b:8f:e1:06:28:3c:6f:82:7c:d0:b3:f6:c4: f5:b7:48:d9:ca:ac:b8:98:ff:2c:b8:65:13:b2:bc:8d:c7:e8: bb:33:43:4c:96:57:dc:7e:e4:3c:fb:9f:f1:f0:20:19:d5:75: e2:a4:32:f1:7e:15:32:58:e5:30:44:c2:63:c2:9a:86:7d:3f: 7e:aa:82:cc:20:7a:6d:34:88:82:8e:49:6d:c8:0c:55:09:aa: 9f:cc:31:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXJ+yoSHSlS9eUvZ8XkPmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDhkMmNhOGEyYjQzYjZjYWQyNWIyMjI2NTM1NGZlMzAz OTExYTAwHhcNMjUxMjEzMTAwMDUxWhcNMjUxMjE0MTAwMDUxWjAzMTEwLwYDVQQD EygxYTEzYTk5ZWQ0OWMyNDUzZWM1MWE5ZjgzMzY3ZWFlZTExMjExYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7DzdlYum0+2OK6Jlk4ev6l9F+zH PEl/slz/VVRX7rJy4TVXjAEsWVyTqQO8mlXKVhqi/0RjKuQV8Jeydam398mUwooX r3uUBCMmOCaoAtfnTXDRZ+WphDJCsbaToDg97soLHZI++aTwj2YzJtpBeFt3qqdx JTKFPk3V95yY4ZO6eROHA1OqpqaMyGhI5+LWeaiPXE/xl3pZf6RM8sdI4+XwlOdq 3GljZ8gvRyoL/jmWzX6C1pMdJM4zwHsTW4Gq6f9a6GFgXMjpSkMbDgIbQiDZMtun JzLOeoo82BR+tPzB/l2xFuqfxDwvK+/dc4u0HShxYALnchZnCGBUAvI6WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoTqZ7UnCRT7FGp+DNn6u4RIRsTMB8GA1UdIwQY MBaAFAFI0sqKK0O2ytJbIiZTVP4wORGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjct MWJmODY4YTAzNTM4LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjctMWJmODY4YTAzNTM4 LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqNJnXv4 QnomGc1pEgzYI+kRYAoNLGEs9T95v6tLiPuyV/WX1KJcODgKKhziIgW6qD+D8yDM SKoDcE78B7Ihi0if9GxCuedmjBb4go+wCvNxs5DURx/Y1vkdfScsJ1bjH7WyyWFo a/LKv09C+ofjX797aWQm6xq8zNJqp4J5YDjDjYIte3QApELDSTcW7a8ySy8Uvle0 WYBo9lQYZt7Vzw9elyNEsg17j+EGKDxvgnzQs/bE9bdI2cqsuJj/LLhlE7K8jcfo uzNDTJZX3H7kPPuf8fAgGdV14qQy8X4VMljlMETCY8Kahn0/fqqCzCB6bTSIgo5J bcgMVQmqn8wxhw== -----END CERTIFICATE-----Generated at Sat Dec 13 13:32:55 2025 by rpki-client