This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json) Hash identifier: +IqI3lT2kQvTWFaQN4g/gBFX/duWzQJq1zfqvCdjBy8= Subject key identifier: 44:37:B6:02:DF:50:83:9C:B0:AA:B3:9B:91:A0:74:EF:E8:7F:3D:CE Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad Certificate serial: 019B5A887C52010207FF5FC250235697830E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft Manifest number: 08AF Signing time: Fri 26 Dec 2025 12:00:52 +0000 Manifest this update: Fri 26 Dec 2025 12:00:52 +0000 Manifest next update: Sat 27 Dec 2025 12:00:52 +0000 Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: 5roYdZsIYB4p5G+4M04rbIxfB+3Th+XNRCav43NjSGw=) 2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:7c:52:01:02:07:ff:5f:c2:50:23:56:97:83:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad Validity Not Before: Dec 26 12:00:52 2025 GMT Not After : Dec 27 12:00:52 2025 GMT Subject: CN=4437b602df50839cb0aab39b91a074efe87f3dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:92:0c:43:4e:4d:d2:cc:89:0e:df:56:8b: a4:b0:68:40:a7:f9:b3:b9:15:0a:e2:f6:2c:81:f9: db:c5:a8:83:ad:ea:0b:36:ea:6b:14:20:5f:08:f6: f3:df:06:de:9d:fc:8f:f4:de:00:0c:73:f8:8f:23: f8:c2:7d:f8:57:fc:34:3c:85:ce:ea:5d:ec:89:46: 37:ab:0a:00:f8:02:50:a6:b7:08:c0:8e:0f:95:24: 92:50:82:1e:35:3e:1f:0b:98:03:ae:f0:32:df:51: bc:75:e1:c2:90:2e:d2:3a:40:26:af:59:79:1e:a7: 51:a7:9a:62:72:e1:5f:ec:d6:f3:bc:48:ca:a5:9a: 53:c7:56:34:97:31:9a:fa:bf:89:fe:d3:48:21:dc: 4a:0a:8d:2f:c4:90:f3:e6:8e:ff:0e:40:8a:57:cd: 15:98:e5:f1:ca:ec:4d:ba:ca:af:07:1c:05:54:19: 96:42:c6:65:bc:9a:c6:c4:a1:be:2b:5b:1b:3e:d3: 8a:27:f5:30:93:ff:82:eb:cd:30:0b:0a:3f:22:9b: 15:97:4a:de:57:ab:3e:1c:d2:3e:2e:d1:d0:bc:b3: 58:c6:44:c1:bd:0d:8c:c8:a8:93:e2:34:72:76:b1: 25:19:2f:f3:f4:de:ba:5b:55:ec:b4:0c:f2:ad:58: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:37:B6:02:DF:50:83:9C:B0:AA:B3:9B:91:A0:74:EF:E8:7F:3D:CE X509v3 Authority Key Identifier: keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:59:a1:ab:80:a8:f2:ea:f1:e2:fa:c9:df:d7:e1:b4:df:72: 76:f2:9e:e3:9b:5f:5c:52:82:39:56:f8:28:7d:d6:f7:33:b4: 45:b3:f9:80:7a:a7:ca:b9:69:78:43:67:aa:cf:a3:92:32:3f: 46:b5:c0:9d:c2:6b:d7:86:17:ad:31:6d:26:e5:21:df:0e:73: 05:31:3a:9d:5d:a1:98:29:5c:e6:81:b2:26:75:a1:58:97:a7: 66:0b:f4:56:2b:a6:5e:46:8f:0c:81:dc:8a:ee:9e:ce:ab:c3: cc:ff:ae:c3:75:76:3e:bf:ec:30:c7:8d:43:e4:5c:c3:2d:2a: 33:3e:bf:63:26:62:9e:43:dc:7f:95:2b:0f:3e:a1:c9:cb:ec: 92:fa:2c:2d:6d:d6:13:db:e9:c0:f1:60:5c:bf:ee:fd:e2:c3: 0f:56:da:03:17:7d:e0:19:15:79:ee:73:19:cd:7e:72:e9:3c: b8:4a:53:e0:79:08:4f:3a:e7:98:90:4c:d9:d4:3d:2d:6e:16: 28:85:a8:95:a7:40:5c:72:b1:dd:5c:d8:6b:5e:01:05:c0:a5: 94:95:ee:a0:22:6e:d4:c9:64:f0:b5:bc:57:39:28:39:54:cf: 80:b8:e6:3e:99:32:77:37:50:50:f6:af:ab:47:7f:b5:95:e3: 4d:e2:bd:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHxSAQIH/1/CUCNWl4MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0 ZjJiYWQwHhcNMjUxMjI2MTIwMDUyWhcNMjUxMjI3MTIwMDUyWjAzMTEwLwYDVQQD Eyg0NDM3YjYwMmRmNTA4MzljYjBhYWIzOWI5MWEwNzRlZmU4N2YzZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzGSDENOTdLMiQ7fVouksGhAp/mz uRUK4vYsgfnbxaiDreoLNuprFCBfCPbz3wbenfyP9N4ADHP4jyP4wn34V/w0PIXO 6l3siUY3qwoA+AJQprcIwI4PlSSSUIIeNT4fC5gDrvAy31G8deHCkC7SOkAmr1l5 HqdRp5picuFf7NbzvEjKpZpTx1Y0lzGa+r+J/tNIIdxKCo0vxJDz5o7/DkCKV80V mOXxyuxNusqvBxwFVBmWQsZlvJrGxKG+K1sbPtOKJ/Uwk/+C680wCwo/IpsVl0re V6s+HNI+LtHQvLNYxkTBvQ2MyKiT4jRydrElGS/z9N66W1XstAzyrViXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ3tgLfUIOcsKqzm5GgdO/ofz3OMB8GA1UdIwQY MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1mhq4Co 8urx4vrJ39fhtN9ydvKe45tfXFKCOVb4KH3W9zO0RbP5gHqnyrlpeENnqs+jkjI/ RrXAncJr14YXrTFtJuUh3w5zBTE6nV2hmClc5oGyJnWhWJenZgv0ViumXkaPDIHc iu6ezqvDzP+uw3V2Pr/sMMeNQ+Rcwy0qMz6/YyZinkPcf5UrDz6hycvskvosLW3W E9vpwPFgXL/u/eLDD1baAxd94BkVee5zGc1+cuk8uEpT4HkITzrnmJBM2dQ9LW4W KIWoladAXHKx3VzYa14BBcCllJXuoCJu1Mlk8LW8VzkoOVTPgLjmPpkydzdQUPav q0d/tZXjTeK9nQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:06 2025 by rpki-client