This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json) Hash identifier: JG5tX0tCyr6n6YK3lRGbwFORGnRE6oqyXkmCLPeyCWU= Subject key identifier: DB:DD:C9:DE:69:25:17:CB:E1:61:2B:7F:21:5C:8E:EA:97:3F:D0:4C Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Certificate serial: 019B59AD0A1454247E728547EDBAE6C88923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft Manifest number: 06BB Signing time: Fri 26 Dec 2025 08:01:11 +0000 Manifest this update: Fri 26 Dec 2025 08:01:11 +0000 Manifest next update: Sat 27 Dec 2025 08:01:11 +0000 Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: +Uuof27Qbu406unxTtNN7OHqNS0nqQbp2LrC5ZpquFA=) 2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=) 3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:0a:14:54:24:7e:72:85:47:ed:ba:e6:c8:89:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Validity Not Before: Dec 26 08:01:11 2025 GMT Not After : Dec 27 08:01:11 2025 GMT Subject: CN=dbddc9de692517cbe1612b7f215c8eea973fd04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:30:29:b2:57:6e:30:18:57:b9:3c:60:b0: 52:8b:04:18:ee:82:3a:26:a2:a8:df:b7:a6:cb:94: 55:3a:5c:10:d8:91:08:db:f5:63:3c:bf:ea:1b:a1: ad:e9:5e:d0:a7:f9:5f:44:b2:8e:80:c1:32:56:ee: 4e:8d:94:97:15:48:49:ac:55:40:96:8c:d1:4c:11: 4e:df:e3:bc:d2:ba:ab:d9:b0:ae:43:7f:e7:a7:7b: 28:b9:de:5b:30:5b:5d:ec:72:c6:9a:89:06:da:4c: 0f:89:6d:fb:cf:0e:94:5a:ac:ae:6a:72:7f:fb:10: a1:e1:c0:87:11:14:0a:3e:42:57:0c:2d:8c:d2:da: 71:67:d0:61:93:cd:b4:41:d4:62:03:af:0c:7f:c9: 57:55:11:ba:5c:8e:90:d3:01:7c:86:1a:1e:e4:56: f4:89:ff:39:6e:3d:64:ba:08:3a:96:97:1e:6b:c2: 57:97:bd:0f:98:aa:72:65:c1:6e:34:ad:20:4c:1a: ae:d9:04:ec:89:d5:af:ee:0a:c4:0b:4e:67:7d:d5: 0b:d4:f9:2c:2d:a8:8a:b8:f7:bd:54:d4:0b:99:51: 5b:1f:3d:9b:20:36:38:7e:db:71:14:06:90:57:af: 11:83:50:55:b8:9e:bc:d0:95:f5:78:1c:fb:66:a0: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DD:C9:DE:69:25:17:CB:E1:61:2B:7F:21:5C:8E:EA:97:3F:D0:4C X509v3 Authority Key Identifier: keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:45:93:a9:d8:7f:98:70:2c:38:ce:57:bd:ad:95:dc:9a:f9: 04:c5:71:90:24:3c:0c:07:65:46:de:fb:84:73:e2:61:51:1e: 6b:20:5a:7b:86:8f:99:10:3c:8a:ac:e0:88:4e:be:ca:7a:ca: 37:46:2f:65:57:b4:91:64:1e:af:85:17:d2:c0:30:f7:43:1e: c1:68:62:0f:b7:68:27:12:d0:d3:63:7b:a7:86:cb:74:05:a7: c1:b9:02:d3:23:e1:d5:f4:00:4a:b3:0c:ae:79:ec:d0:02:5a: 5b:f6:97:29:b2:95:8a:80:ba:2c:c1:e2:ad:34:43:5a:8d:bf: 75:d6:a9:69:4f:64:e3:81:7e:70:b2:e6:38:0a:6d:ef:db:ed: e7:3b:e9:f8:d9:37:9a:0e:e7:0b:f0:2f:ab:a0:61:08:00:5b: 09:2c:74:a3:8a:ba:96:d8:fb:65:9f:b7:e4:c5:be:5b:c2:5a: 37:1d:16:af:67:69:2a:ac:94:78:2a:d8:eb:7e:9e:23:41:d5: c7:5a:4d:8d:f2:fe:bb:cb:68:af:59:79:82:87:04:22:04:e0: 28:89:31:e0:e2:5b:9b:66:e5:80:50:a3:40:29:ea:1d:15:00: 8c:f1:8b:c1:1f:75:46:b4:cb:e4:6c:8c:0e:4d:13:0d:b7:54: 19:79:dd:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrQoUVCR+coVH7brmyIkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjNhYTAxNDBiNzk4MzUwMGVhODI5ZjNjMzZiYmZiNjVh Zjk5NzIwHhcNMjUxMjI2MDgwMTExWhcNMjUxMjI3MDgwMTExWjAzMTEwLwYDVQQD EyhkYmRkYzlkZTY5MjUxN2NiZTE2MTJiN2YyMTVjOGVlYTk3M2ZkMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTcwKbJXbjAYV7k8YLBSiwQY7oI6 JqKo37emy5RVOlwQ2JEI2/VjPL/qG6Gt6V7Qp/lfRLKOgMEyVu5OjZSXFUhJrFVA lozRTBFO3+O80rqr2bCuQ3/np3soud5bMFtd7HLGmokG2kwPiW37zw6UWqyuanJ/ +xCh4cCHERQKPkJXDC2M0tpxZ9Bhk820QdRiA68Mf8lXVRG6XI6Q0wF8hhoe5Fb0 if85bj1kugg6lpcea8JXl70PmKpyZcFuNK0gTBqu2QTsidWv7grEC05nfdUL1Pks LaiKuPe9VNQLmVFbHz2bIDY4fttxFAaQV68Rg1BVuJ680JX1eBz7ZqAoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvdyd5pJRfL4WErfyFcjuqXP9BMMB8GA1UdIwQY MBaAFGrzqgFAt5g1AOqCnzw2u/tlr5lyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTkt YjhmM2I3NzllNTRiLzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTktYjhmM2I3NzllNTRi LzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEWTqdh/ mHAsOM5Xva2V3Jr5BMVxkCQ8DAdlRt77hHPiYVEeayBae4aPmRA8iqzgiE6+ynrK N0YvZVe0kWQer4UX0sAw90MewWhiD7doJxLQ02N7p4bLdAWnwbkC0yPh1fQASrMM rnns0AJaW/aXKbKVioC6LMHirTRDWo2/ddapaU9k44F+cLLmOApt79vt5zvp+Nk3 mg7nC/Avq6BhCABbCSx0o4q6ltj7ZZ+35MW+W8JaNx0Wr2dpKqyUeCrY636eI0HV x1pNjfL+u8tor1l5gocEIgTgKIkx4OJbm2blgFCjQCnqHRUAjPGLwR91RrTL5GyM Dk0TDbdUGXndAw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:00 2025 by rpki-client