This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json) Hash identifier: wPsfm0eqPfYmkT3Iu3FFd9EOsIOqWaUMnLfJUb4BY/o= Subject key identifier: 41:46:4D:B3:38:7D:A4:A3:44:3B:7E:83:BC:D5:0B:66:DA:44:D6:8E Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Certificate serial: 019B29D30C24D3B55B463B7109D09A5961C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft Manifest number: 02A2 Signing time: Wed 17 Dec 2025 01:00:55 +0000 Manifest this update: Wed 17 Dec 2025 01:00:55 +0000 Manifest next update: Thu 18 Dec 2025 01:00:55 +0000 Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: uNz/LMqhid+yM+8JiCYz/I4NcMKQw1ppnhL4L1KsfVg=) 2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=) 3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:d3:0c:24:d3:b5:5b:46:3b:71:09:d0:9a:59:61:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Validity Not Before: Dec 17 01:00:55 2025 GMT Not After : Dec 18 01:00:55 2025 GMT Subject: CN=41464db3387da4a3443b7e83bcd50b66da44d68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:13:fc:6b:cb:ce:22:e4:1d:10:db:02:96: 80:9c:ae:3f:f5:52:82:f1:1d:c3:25:30:95:8b:c3: 90:49:77:4a:9d:57:57:1c:8d:1a:f7:31:68:a8:24: b5:8f:ff:f5:98:ee:55:9a:13:0a:97:e9:fc:61:a4: b6:7d:2e:3f:bb:e1:0f:98:bc:6f:c7:6b:02:0c:0b: bd:a2:34:0b:37:1c:61:c4:14:53:10:4a:06:23:7b: 88:65:ea:a0:ef:b7:a6:7d:06:69:cb:80:88:89:7b: 73:82:81:9e:88:44:28:12:db:bc:d4:2c:fd:10:89: 98:12:b4:e3:e0:af:d2:0b:a6:d7:32:14:e6:39:0a: 83:be:ad:89:de:40:13:b3:9f:0c:a4:f4:eb:43:52: d9:61:fe:c7:87:78:c7:c1:40:4d:44:73:f9:49:ea: 41:41:d1:58:46:07:77:9f:9d:32:54:0b:ae:0e:98: df:c4:77:d0:75:0d:c9:ff:04:75:80:ee:83:e0:7c: 38:21:c2:24:54:8e:86:c0:86:0b:5f:ca:02:eb:8b: ac:37:6b:6a:f4:eb:53:98:66:11:cd:2d:95:0b:a7: 3d:bd:8f:6b:01:aa:8b:35:b9:ac:f5:0b:58:b7:74: 39:9b:29:96:f2:ad:af:4a:35:62:5e:10:e2:16:b7: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:46:4D:B3:38:7D:A4:A3:44:3B:7E:83:BC:D5:0B:66:DA:44:D6:8E X509v3 Authority Key Identifier: keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c1:2a:f7:6f:2d:ad:3a:a6:33:a7:6b:89:42:1b:86:a5:ee: b4:98:40:f4:3c:f4:0b:d3:36:1c:cd:0b:93:1c:59:d8:e5:f4: 28:fd:8b:63:84:71:ba:39:32:38:ea:e6:4c:cc:d9:fe:9b:24: ef:d6:c5:67:b8:70:05:85:3a:ab:f2:8d:2f:1e:e5:4b:4c:35: f6:92:a2:00:b8:c8:2b:a9:ef:17:be:1d:e5:32:47:8e:a3:47: a3:04:24:65:75:41:bb:a8:80:d8:69:01:ec:2a:f6:cb:09:5e: 61:a6:34:1d:12:1e:05:8a:c0:6c:75:e7:2f:4b:ca:96:ba:be: 20:12:7b:67:ba:43:9e:3a:42:bb:81:f5:ea:e1:c9:dc:b8:fe: fb:f5:3d:a8:15:a5:4a:c3:54:65:31:4a:3b:35:0b:09:34:70: 3b:92:8b:e6:b9:dc:6e:c0:59:fc:e6:5b:ae:1e:96:ea:e3:c0: 8a:b0:bf:06:78:2f:c1:7a:90:25:ac:d3:f9:34:7b:8c:86:70: 02:f4:77:26:c7:69:e4:90:3f:4b:a7:4c:0a:17:1b:43:ec:ee: 53:3a:77:6f:09:6e:61:63:fa:68:ad:b0:f3:29:08:da:61:59: f9:12:dd:dd:0f:52:50:b1:cf:ce:0a:3a:11:90:ec:72:fe:56: ad:09:e7:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsp0wwk07VbRjtxCdCaWWHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj ZWYzMWYwHhcNMjUxMjE3MDEwMDU1WhcNMjUxMjE4MDEwMDU1WjAzMTEwLwYDVQQD Eyg0MTQ2NGRiMzM4N2RhNGEzNDQzYjdlODNiY2Q1MGI2NmRhNDRkNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9cT/GvLziLkHRDbApaAnK4/9VKC 8R3DJTCVi8OQSXdKnVdXHI0a9zFoqCS1j//1mO5VmhMKl+n8YaS2fS4/u+EPmLxv x2sCDAu9ojQLNxxhxBRTEEoGI3uIZeqg77emfQZpy4CIiXtzgoGeiEQoEtu81Cz9 EImYErTj4K/SC6bXMhTmOQqDvq2J3kATs58MpPTrQ1LZYf7Hh3jHwUBNRHP5SepB QdFYRgd3n50yVAuuDpjfxHfQdQ3J/wR1gO6D4Hw4IcIkVI6GwIYLX8oC64usN2tq 9OtTmGYRzS2VC6c9vY9rAaqLNbms9QtYt3Q5mymW8q2vSjViXhDiFreMjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFGTbM4faSjRDt+g7zVC2baRNaOMB8GA1UdIwQY MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3 LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcEq928t rTqmM6driUIbhqXutJhA9Dz0C9M2HM0LkxxZ2OX0KP2LY4RxujkyOOrmTMzZ/psk 79bFZ7hwBYU6q/KNLx7lS0w19pKiALjIK6nvF74d5TJHjqNHowQkZXVBu6iA2GkB 7Cr2ywleYaY0HRIeBYrAbHXnL0vKlrq+IBJ7Z7pDnjpCu4H16uHJ3Lj++/U9qBWl SsNUZTFKOzULCTRwO5KL5rncbsBZ/OZbrh6W6uPAirC/BngvwXqQJazT+TR7jIZw AvR3Jsdp5JA/S6dMChcbQ+zuUzp3bwluYWP6aK2w8ykI2mFZ+RLd3Q9SULHPzgo6 EZDscv5WrQnndg== -----END CERTIFICATE-----Generated at Wed Dec 17 06:15:07 2025 by rpki-client