This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json) Hash identifier: J9t09fOBhQ499sQb7ZreEYqrkpQ0alEf2GmmU9SNGHM= Subject key identifier: 79:2C:FD:9F:9E:D5:F4:35:FC:0A:A0:65:FA:67:E2:B5:74:0C:CF:49 Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89 Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289 Certificate serial: 019B334409DDD6930216E21E5D4D92DA13E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:00:55 +0000 Manifest this update: Thu 18 Dec 2025 21:00:55 +0000 Manifest next update: Fri 19 Dec 2025 21:00:55 +0000 Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: RexZv15uZaQXV+W6ebnCJQCh1+ebcjkD2Wj0pjjOsXU=) 2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:09:dd:d6:93:02:16:e2:1e:5d:4d:92:da:13:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289 Validity Not Before: Dec 18 21:00:55 2025 GMT Not After : Dec 19 21:00:55 2025 GMT Subject: CN=792cfd9f9ed5f435fc0aa065fa67e2b5740ccf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:ca:d5:1d:d2:55:f2:1e:0e:85:82:7c:00: 69:0d:53:9b:ee:f2:d0:53:c6:ba:dd:ba:6d:7b:4c: ee:73:f6:ac:c5:8c:6d:5c:f6:1b:dc:22:8d:88:48: 04:11:cd:c3:7b:73:ed:bc:5c:1d:f5:88:39:ec:5f: 1b:78:bd:fa:7d:b3:7a:1f:e5:5f:7d:fd:25:dd:da: 51:f5:2c:43:d9:7c:e9:2d:3f:b8:b4:c3:e8:0b:91: 79:97:7a:62:dc:87:79:28:aa:c3:5a:ae:09:c5:46: 80:e3:72:26:89:3b:a5:ac:1d:b8:f0:9e:fd:8e:b7: 66:39:81:9c:5e:c9:f1:69:ba:16:b5:6b:32:83:41: 46:d6:74:33:62:d1:08:ec:ce:67:04:6d:d0:44:70: 47:a9:6b:28:23:e9:c7:c9:bf:51:c9:ab:ae:5f:f5: b5:8a:77:ab:86:43:c2:2b:3c:9c:be:14:65:7b:1b: bf:94:00:31:44:c0:a7:f9:a5:ea:7c:18:b1:2a:27: a3:5f:40:38:8d:87:9c:67:b6:11:cf:15:17:ce:99: 71:db:e5:f2:cb:fa:93:a5:8e:e5:fb:7a:c2:c4:2f: a1:16:19:ca:d4:1e:bf:49:ae:47:e1:bc:94:e1:7d: c6:d4:da:0e:cb:68:8e:aa:bb:bc:5f:f9:45:09:c6: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2C:FD:9F:9E:D5:F4:35:FC:0A:A0:65:FA:67:E2:B5:74:0C:CF:49 X509v3 Authority Key Identifier: keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2f:77:b0:f7:a5:73:42:b5:a7:21:72:3f:b3:b8:04:9d:ee: ee:be:64:f3:ab:fb:7c:ab:c4:34:ce:4f:de:88:86:62:99:1e: b4:bf:d8:ed:67:8b:ca:fe:18:c3:07:d1:95:1f:52:3f:dd:f6: 89:d9:03:87:a9:fa:c5:fe:16:26:6d:61:62:7a:a2:a2:99:ee: 9c:d9:61:2a:0a:75:4e:05:2b:2e:5f:16:9c:7c:69:e9:dd:e7: 05:e4:33:9d:9a:bf:bb:c0:03:ba:65:eb:ff:2b:c3:3b:7c:4f: 01:fd:98:15:18:60:1c:ae:95:09:bd:10:49:ca:cb:c2:05:6c: a2:7b:aa:93:a5:1a:30:d5:d8:59:ac:30:d2:a4:df:e9:d5:79: 59:44:56:a5:1b:b1:1c:c8:8f:09:46:9d:6a:43:b1:04:5a:c4: f3:90:ca:94:17:88:96:20:14:c6:9d:b9:55:93:74:d1:0a:9e: 5b:b7:5d:78:55:88:d0:9c:9d:dc:2e:29:2c:1f:bc:57:48:c7: 2a:d9:7f:30:f2:fc:a8:0c:29:96:83:10:33:e4:eb:46:94:1d: 1e:4a:fe:ef:80:fc:32:33:fa:31:f6:a4:46:da:02:7f:43:f0: 00:51:52:67:5e:37:d5:5a:5d:e0:c3:a5:8a:e9:57:a1:35:45: 52:ce:6d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRAnd1pMCFuIeXU2S2hPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk ODgyODkwHhcNMjUxMjE4MjEwMDU1WhcNMjUxMjE5MjEwMDU1WjAzMTEwLwYDVQQD Eyg3OTJjZmQ5ZjllZDVmNDM1ZmMwYWEwNjVmYTY3ZTJiNTc0MGNjZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCTK1R3SVfIeDoWCfABpDVOb7vLQ U8a63bpte0zuc/asxYxtXPYb3CKNiEgEEc3De3PtvFwd9Yg57F8beL36fbN6H+Vf ff0l3dpR9SxD2XzpLT+4tMPoC5F5l3pi3Id5KKrDWq4JxUaA43ImiTulrB248J79 jrdmOYGcXsnxaboWtWsyg0FG1nQzYtEI7M5nBG3QRHBHqWsoI+nHyb9RyauuX/W1 inerhkPCKzycvhRlexu/lAAxRMCn+aXqfBixKiejX0A4jYecZ7YRzxUXzplx2+Xy y/qTpY7l+3rCxC+hFhnK1B6/Sa5H4byU4X3G1NoOy2iOqru8X/lFCca0pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHks/Z+e1fQ1/AqgZfpn4rV0DM9JMB8GA1UdIwQY MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5 LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC93sPel c0K1pyFyP7O4BJ3u7r5k86v7fKvENM5P3oiGYpketL/Y7WeLyv4YwwfRlR9SP932 idkDh6n6xf4WJm1hYnqiopnunNlhKgp1TgUrLl8WnHxp6d3nBeQznZq/u8ADumXr /yvDO3xPAf2YFRhgHK6VCb0QScrLwgVsonuqk6UaMNXYWaww0qTf6dV5WURWpRux HMiPCUadakOxBFrE85DKlBeIliAUxp25VZN00QqeW7ddeFWI0Jyd3C4pLB+8V0jH Ktl/MPL8qAwploMQM+TrRpQdHkr+74D8MjP6MfakRtoCf0PwAFFSZ1431Vpd4MOl iulXoTVFUs5tMg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:24 2025 by rpki-client