This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft File: A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json) Hash identifier: gzySHNCOo6Wyux1lGgE9NGHN2Cqu1yk/QwZgbpB+bfI= Subject key identifier: D7:FF:B8:9B:B1:03:F5:3A:0C:1E:32:F3:DA:3E:33:29:9A:17:EE:B1 Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72 Certificate issuer: /CN=03f83f5955669cb0a818fbac027c682aeaed5d72 Certificate serial: 019B20CFF19DA4EB388AD7CBF6B97D0F9E67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft Manifest number: 1299 Signing time: Mon 15 Dec 2025 07:00:57 +0000 Manifest this update: Mon 15 Dec 2025 07:00:57 +0000 Manifest next update: Tue 16 Dec 2025 07:00:57 +0000 Files and hashes: 1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: 59JKPzufbVBnG5yqbvIf3bpD9ENAIJS9t4iCU+b1ZeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:f1:9d:a4:eb:38:8a:d7:cb:f6:b9:7d:0f:9e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72 Validity Not Before: Dec 15 07:00:57 2025 GMT Not After : Dec 16 07:00:57 2025 GMT Subject: CN=d7ffb89bb103f53a0c1e32f3da3e33299a17eeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c3:3e:83:53:e2:1a:49:fa:b9:3f:46:6d:e0: be:7f:87:25:5e:3f:0e:e5:41:cc:51:3d:47:1e:82: 7f:cf:27:53:f6:56:85:c3:c2:6e:47:1e:27:a3:93: 91:4e:9d:ed:a1:09:af:98:75:64:81:2b:c1:1c:30: f8:c7:4e:9a:2d:01:e0:8c:7f:d1:8d:4f:35:01:9a: a1:06:8f:85:7f:80:f4:71:ad:45:77:7e:76:21:04: df:c4:47:50:fc:65:75:0d:0c:41:dd:95:28:ae:52: c1:f8:45:a7:d5:b7:ea:27:bd:a5:e6:c4:47:40:19: 7f:38:f1:8a:9f:81:e1:b3:a7:8b:6b:a8:9a:87:a7: f4:3c:20:ba:bd:45:58:22:7c:29:d4:80:75:d6:ef: bd:dc:fc:f5:b4:d9:8c:52:8a:5b:20:94:bf:b6:ae: 3a:c9:8a:5c:06:6a:3b:13:3b:a6:9f:a4:50:0b:26: 6c:de:17:ee:fd:1b:4d:47:9c:2b:9d:7d:63:16:bb: 27:a8:0e:10:33:bc:2c:31:42:ce:7f:f1:d8:e4:e0: 00:53:30:40:56:18:82:9d:e3:c5:4f:75:41:48:56: e1:a1:cf:a0:59:46:c7:38:6c:ee:f7:c9:61:40:e2: 08:d1:8e:ed:fd:e9:84:19:2c:a7:3d:f4:21:20:21: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FF:B8:9B:B1:03:F5:3A:0C:1E:32:F3:DA:3E:33:29:9A:17:EE:B1 X509v3 Authority Key Identifier: keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f8:5d:db:78:e1:de:46:62:a2:f7:99:08:2b:7b:f7:d5:82:f0: 67:7f:f4:be:eb:da:b2:22:09:f9:3d:72:72:96:2d:ab:77:ca: f7:31:c5:98:f5:97:64:df:bf:b7:56:2e:d3:39:e5:b9:4c:cb: 34:12:ec:73:00:06:f8:0e:77:bb:a8:a4:c0:24:74:79:58:0e: 0e:45:9f:db:14:19:68:97:d1:33:ec:bf:e5:b5:d2:f4:04:75: 6e:5e:79:6d:f1:ab:69:37:45:26:b3:6f:d6:8c:bc:15:45:13: 6d:d6:59:1d:b6:06:4d:f1:f3:0b:3d:50:79:2b:96:5a:f1:24: 6b:c7:bf:a2:04:9d:6c:ba:0f:86:25:55:37:72:f0:9f:e6:c1: 5f:e3:33:41:81:4d:3f:79:b6:e6:33:2d:1f:0e:d8:ab:e4:22: be:96:9b:ce:a0:27:31:9b:e1:64:85:a0:da:49:5a:45:b0:23: 39:96:42:ae:a1:88:97:88:3a:72:2d:25:49:3d:8a:a4:1b:3f: 3f:1a:30:47:29:14:eb:9b:6e:e1:21:ee:41:87:ec:ff:00:7e: 24:79:10:61:5e:74:7e:b8:91:62:6a:a9:dd:9e:49:0f:fd:69: 07:4a:3e:1b:d1:03:6f:52:43:64:4f:c5:4d:ea:04:6a:0c:09: 7c:b8:db:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz/GdpOs4itfL9rl9D55nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjgzZjU5NTU2NjljYjBhODE4ZmJhYzAyN2M2ODJhZWFl ZDVkNzIwHhcNMjUxMjE1MDcwMDU3WhcNMjUxMjE2MDcwMDU3WjAzMTEwLwYDVQQD EyhkN2ZmYjg5YmIxMDNmNTNhMGMxZTMyZjNkYTNlMzMyOTlhMTdlZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMM+g1PiGkn6uT9GbeC+f4clXj8O 5UHMUT1HHoJ/zydT9laFw8JuRx4no5ORTp3toQmvmHVkgSvBHDD4x06aLQHgjH/R jU81AZqhBo+Ff4D0ca1Fd352IQTfxEdQ/GV1DQxB3ZUorlLB+EWn1bfqJ72l5sRH QBl/OPGKn4Hhs6eLa6iah6f0PCC6vUVYInwp1IB11u+93Pz1tNmMUopbIJS/tq46 yYpcBmo7Ezumn6RQCyZs3hfu/RtNR5wrnX1jFrsnqA4QM7wsMULOf/HY5OAAUzBA VhiCnePFT3VBSFbhoc+gWUbHOGzu98lhQOII0Y7t/emEGSynPfQhICH23wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNf/uJuxA/U6DB4y89o+MymaF+6xMB8GA1UdIwQY MBaAFAP4P1lVZpywqBj7rAJ8aCrq7V1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjIt ZjE2ZjFhNzBhYjJkLzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjItZjE2ZjFhNzBhYjJk LzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+F3beOHe RmKi95kIK3v31YLwZ3/0vuvasiIJ+T1ycpYtq3fK9zHFmPWXZN+/t1Yu0znluUzL NBLscwAG+A53u6ikwCR0eVgODkWf2xQZaJfRM+y/5bXS9AR1bl55bfGraTdFJrNv 1oy8FUUTbdZZHbYGTfHzCz1QeSuWWvEka8e/ogSdbLoPhiVVN3Lwn+bBX+MzQYFN P3m25jMtHw7Yq+QivpabzqAnMZvhZIWg2klaRbAjOZZCrqGIl4g6ci0lST2KpBs/ PxowRykU65tu4SHuQYfs/wB+JHkQYV50friRYmqp3Z5JD/1pB0o+G9EDb1JDZE/F TeoEagwJfLjbVw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:34 2025 by rpki-client