This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json) Hash identifier: +eI3M4WOqT8sLyo2tyBZGY2ISF6qjTaGkU/Z1CxBeH4= Subject key identifier: 11:B3:06:A5:1E:30:12:D4:23:BD:25:03:A5:7A:CA:56:42:51:63:FE Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b Certificate serial: 019B20CFB96FDD155EC38777127EE0CE8FFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft Manifest number: 0582 Signing time: Mon 15 Dec 2025 07:00:42 +0000 Manifest this update: Mon 15 Dec 2025 07:00:42 +0000 Manifest next update: Tue 16 Dec 2025 07:00:42 +0000 Files and hashes: 1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=) 2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: v6/uiic+qUPcuC8pgFaezv79bljKvF8sNx9koRiHItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:b9:6f:dd:15:5e:c3:87:77:12:7e:e0:ce:8f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b Validity Not Before: Dec 15 07:00:42 2025 GMT Not After : Dec 16 07:00:42 2025 GMT Subject: CN=11b306a51e3012d423bd2503a57aca56425163fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:3b:f7:e7:b7:41:f9:f6:f1:99:b3:53:39: ba:27:78:67:5e:22:e3:11:4c:03:15:db:7f:65:f5: 6c:a3:f2:ad:38:89:7f:d6:5b:60:b6:a5:8e:5e:a7: 88:55:fd:7b:af:28:1e:6f:c5:07:e2:ce:6f:93:46: b6:c3:88:d3:cf:ca:e1:0a:0f:af:25:a7:7c:2f:c6: dd:48:6e:26:87:c3:98:16:41:b0:ba:91:fc:82:4e: 13:9a:a7:2e:39:62:e4:b2:8b:fc:ac:b4:1f:93:02: 8e:c9:99:36:29:a5:79:87:5e:e3:1d:20:01:f6:08: 11:7c:c0:30:2c:51:c0:8e:34:91:ec:e8:83:97:b3: f4:66:68:b2:82:95:04:56:e7:3d:55:7b:ac:96:27: 02:ce:54:9f:37:28:1f:a5:52:07:be:79:a4:0f:83: cb:32:c3:d7:9e:ac:db:bf:3d:cf:d5:62:6e:60:b8: 97:c7:a2:9a:4b:c5:38:8e:41:78:85:40:8a:61:56: 77:81:b5:65:30:f7:15:09:02:b9:4c:13:e7:34:f2: c8:c8:19:75:9a:fd:28:6b:31:10:20:f7:60:28:d3: 92:58:c8:8e:db:16:93:cf:18:fd:49:73:a1:73:47: d9:44:d4:83:9a:3d:c1:76:fc:1a:78:42:a9:ff:23: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B3:06:A5:1E:30:12:D4:23:BD:25:03:A5:7A:CA:56:42:51:63:FE X509v3 Authority Key Identifier: keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7b:5d:73:26:c7:57:44:68:e3:00:ff:80:2a:10:37:3e:ed: da:08:0e:6d:e9:20:80:3e:4a:9e:cc:cd:43:b5:4a:b1:39:eb: 29:65:fc:1b:36:c7:c1:0e:c3:87:3a:4f:7e:14:5f:00:05:96: b3:f6:ec:70:40:0d:d4:37:23:9c:72:10:a5:75:88:7b:ce:fa: 65:05:77:bd:18:34:b4:cf:08:17:05:bb:52:10:1a:1a:ef:00: 73:2e:00:94:07:0b:8b:af:25:92:5f:95:ab:93:9f:32:7c:cd: b1:cd:f9:c9:dc:b7:19:3e:9f:03:71:58:b4:4b:cc:b6:9a:15: 4e:60:f7:10:1e:68:e4:87:3f:1e:fb:55:94:f0:fe:c8:5f:89: 11:c8:7d:b6:89:83:09:3a:01:58:9c:5c:8e:28:3d:b5:22:3f: 51:11:bb:f1:c0:95:c8:a4:0c:ca:dd:3b:88:a2:71:fa:6c:d0: 03:be:5f:59:90:f9:3d:fd:e3:a3:a9:1a:c6:5d:59:5d:d7:b6: 9e:28:1e:d4:77:9d:08:c2:62:3c:e1:c7:f3:fa:f2:4c:8a:19: 62:e9:0f:da:91:a7:c6:51:a8:62:88:a9:0d:44:ed:e0:87:3b: b8:30:c0:5b:6e:d2:48:c5:5b:cf:44:05:60:9b:72:5e:9b:3b: 39:2f:e9:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz7lv3RVew4d3En7gzo/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMmI5ZDJkZTUzNzEwYjMxNThlNDJmMjI4ODkxMDllMmM0 MGY0M2IwHhcNMjUxMjE1MDcwMDQyWhcNMjUxMjE2MDcwMDQyWjAzMTEwLwYDVQQD EygxMWIzMDZhNTFlMzAxMmQ0MjNiZDI1MDNhNTdhY2E1NjQyNTE2M2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1U79+e3Qfn28ZmzUzm6J3hnXiLj EUwDFdt/ZfVso/KtOIl/1ltgtqWOXqeIVf17rygeb8UH4s5vk0a2w4jTz8rhCg+v Jad8L8bdSG4mh8OYFkGwupH8gk4TmqcuOWLksov8rLQfkwKOyZk2KaV5h17jHSAB 9ggRfMAwLFHAjjSR7OiDl7P0ZmiygpUEVuc9VXuslicCzlSfNygfpVIHvnmkD4PL MsPXnqzbvz3P1WJuYLiXx6KaS8U4jkF4hUCKYVZ3gbVlMPcVCQK5TBPnNPLIyBl1 mv0oazEQIPdgKNOSWMiO2xaTzxj9SXOhc0fZRNSDmj3BdvwaeEKp/yMGHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGzBqUeMBLUI70lA6V6ylZCUWP+MB8GA1UdIwQY MBaAFAMrnS3lNxCzFY5C8iiJEJ4sQPQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODIt NGQxOWE4ZGUwYWJhLzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODItNGQxOWE4ZGUwYWJh LzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHtdcybH V0Ro4wD/gCoQNz7t2ggObekggD5KnszNQ7VKsTnrKWX8GzbHwQ7DhzpPfhRfAAWW s/bscEAN1DcjnHIQpXWIe876ZQV3vRg0tM8IFwW7UhAaGu8Acy4AlAcLi68lkl+V q5OfMnzNsc35ydy3GT6fA3FYtEvMtpoVTmD3EB5o5Ic/HvtVlPD+yF+JEch9tomD CToBWJxcjig9tSI/URG78cCVyKQMyt07iKJx+mzQA75fWZD5Pf3jo6kaxl1ZXde2 nige1HedCMJiPOHH8/ryTIoZYukP2pGnxlGoYoipDUTt4Ic7uDDAW27SSMVbz0QF YJtyXps7OS/p2g== -----END CERTIFICATE-----Generated at Mon Dec 15 12:57:23 2025 by rpki-client