This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: O3GlVZog/e30C8hnGFhGOBenwCJtl7Lh3xubiLAa5KA= Subject key identifier: 7E:95:44:68:BD:23:AB:5C:E8:6E:9A:12:A7:C2:41:1F:6B:28:34:D4 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B1A96B592ABC2DD5F9686364CAA150556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 120E Signing time: Sun 14 Dec 2025 02:00:43 +0000 Manifest this update: Sun 14 Dec 2025 02:00:43 +0000 Manifest next update: Mon 15 Dec 2025 02:00:43 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: qZ6hGTgCGXjWqYzqMCAhTtgSlXS+YW/reyiep2K/Id8=) 5: GNzsCq9UcoPEjNUJsHvqEaDTmhI.roa (hash: UUPKwITy6fppL/i4iIfPQtQ+oEwY++MmCUS8CWuHxoc=) 6: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 7: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 8: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 9: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:96:b5:92:ab:c2:dd:5f:96:86:36:4c:aa:15:05:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Dec 14 02:00:43 2025 GMT Not After : Dec 15 02:00:43 2025 GMT Subject: CN=7e954468bd23ab5ce86e9a12a7c2411f6b2834d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:84:1e:82:6b:1f:f5:72:58:2b:94:99:e9: 2b:82:93:68:4f:33:dc:32:9e:12:45:2e:b6:fc:51: 51:d0:1a:e3:d4:0f:07:73:66:74:1d:bf:3a:02:01: a1:ac:f1:fb:b8:f0:07:b9:03:ed:6f:f8:c6:28:e2: 74:6d:c9:c0:21:92:d1:f7:97:66:6e:6b:4b:f6:92: fd:4e:a5:6d:2e:5e:a7:d5:70:74:b7:28:9f:b8:43: 66:48:06:bf:3b:cd:36:c4:3d:63:ae:40:22:43:9b: 10:6b:86:19:72:17:3e:79:ea:39:4b:6f:51:d7:3b: 21:c0:b0:05:a6:00:2f:75:e3:37:0e:ad:d7:b5:d4: c2:0d:c3:9d:9c:0a:3e:f5:b0:91:0c:c0:37:ae:70: 8e:ee:03:bd:12:c7:d7:27:1d:b7:5b:1e:44:09:ab: b2:1f:d6:6a:e3:01:ce:75:ae:06:2c:27:6e:e6:3a: 95:71:ad:81:b2:5b:21:ce:96:dd:ee:3f:d3:0d:13: 31:26:8b:80:98:74:56:36:d2:51:a4:c4:d9:b5:18: 5c:02:cb:22:c1:4c:1a:56:1a:c6:e0:13:a4:a8:fb: 32:ad:7a:97:89:f3:d2:17:7b:31:bd:4e:4a:a9:93: 5e:fa:00:0a:ab:a8:43:b7:3e:73:05:70:18:63:41: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:95:44:68:BD:23:AB:5C:E8:6E:9A:12:A7:C2:41:1F:6B:28:34:D4 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:34:88:a7:97:c8:08:12:e6:c8:dc:9b:f8:59:ca:7f:9c:ff: 36:0c:a8:c4:87:b7:7d:bc:73:63:c4:48:3e:89:14:7c:1a:b9: a2:bd:a3:a5:d5:08:63:78:41:57:01:cb:21:b9:1e:f7:75:f4: 26:64:95:3f:59:00:2f:aa:a9:e0:dd:72:8d:c1:62:01:cb:c2: 53:cf:c8:e9:b4:6c:40:92:05:c2:0c:3e:9b:83:36:9a:a3:c5: 26:b9:4a:41:b2:a9:0b:49:6c:dc:3c:43:ee:6f:bd:16:21:b4: 27:26:cf:be:8a:87:1a:89:ef:c7:b5:37:d1:a9:c1:bd:ca:fd: 5d:dc:05:f6:71:1d:4d:e0:b3:00:24:bf:a4:b7:ba:11:c0:b2: 84:c9:6e:7e:7b:e8:38:60:f7:db:f2:11:2e:73:e6:a2:16:1f: ec:27:e5:b2:94:73:3d:fa:f8:1d:d1:b2:20:0e:62:78:f9:ba: ce:35:cd:2e:91:02:4f:ee:30:65:5a:48:eb:9b:a5:c9:c8:29: 57:ea:ed:d5:68:0d:41:6c:f5:66:18:73:11:c7:9d:a0:c3:49: 86:68:50:da:f6:19:9c:67:47:59:f3:fa:86:fc:43:ba:53:c4: d2:7b:68:61:25:cf:d5:03:86:2a:2b:85:38:64:e0:65:74:15: c3:c8:8e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsalrWSq8LdX5aGNkyqFQVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUxMjE0MDIwMDQzWhcNMjUxMjE1MDIwMDQzWjAzMTEwLwYDVQQD Eyg3ZTk1NDQ2OGJkMjNhYjVjZTg2ZTlhMTJhN2MyNDExZjZiMjgzNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmeEHoJrH/VyWCuUmekrgpNoTzPc Mp4SRS62/FFR0Brj1A8Hc2Z0Hb86AgGhrPH7uPAHuQPtb/jGKOJ0bcnAIZLR95dm bmtL9pL9TqVtLl6n1XB0tyifuENmSAa/O802xD1jrkAiQ5sQa4YZchc+eeo5S29R 1zshwLAFpgAvdeM3Dq3XtdTCDcOdnAo+9bCRDMA3rnCO7gO9EsfXJx23Wx5ECauy H9Zq4wHOda4GLCdu5jqVca2Bslshzpbd7j/TDRMxJouAmHRWNtJRpMTZtRhcAssi wUwaVhrG4BOkqPsyrXqXifPSF3sxvU5KqZNe+gAKq6hDtz5zBXAYY0GkQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6VRGi9I6tc6G6aEqfCQR9rKDTUMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzSIp5fI CBLmyNyb+FnKf5z/NgyoxIe3fbxzY8RIPokUfBq5or2jpdUIY3hBVwHLIbke93X0 JmSVP1kAL6qp4N1yjcFiAcvCU8/I6bRsQJIFwgw+m4M2mqPFJrlKQbKpC0ls3DxD 7m+9FiG0JybPvoqHGonvx7U30anBvcr9XdwF9nEdTeCzACS/pLe6EcCyhMlufnvo OGD32/IRLnPmohYf7CflspRzPfr4HdGyIA5iePm6zjXNLpECT+4wZVpI65ulycgp V+rt1WgNQWz1ZhhzEcedoMNJhmhQ2vYZnGdHWfP6hvxDulPE0ntoYSXP1QOGKiuF OGTgZXQVw8iOmA== -----END CERTIFICATE-----Generated at Sun Dec 14 05:34:51 2025 by rpki-client