This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json) Hash identifier: jFndLkeE0Odswta43JXECQ4FZjkDDgmDhedJNdtcy9s= Subject key identifier: DF:69:58:2E:8C:42:BB:13:1D:00:CF:8B:BF:66:60:72:05:E8:43:EB Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc Certificate serial: 019B0F6E9F2A14E5C1FBC4CD1722AEEC9157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft Manifest number: 0A2A Signing time: Thu 11 Dec 2025 22:01:06 +0000 Manifest this update: Thu 11 Dec 2025 22:01:06 +0000 Manifest next update: Fri 12 Dec 2025 22:01:06 +0000 Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: FzMSPNNUoA94ypitASBIrnnesc6Og1irLorRIXQ55Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:9f:2a:14:e5:c1:fb:c4:cd:17:22:ae:ec:91:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc Validity Not Before: Dec 11 22:01:06 2025 GMT Not After : Dec 12 22:01:06 2025 GMT Subject: CN=df69582e8c42bb131d00cf8bbf66607205e843eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:29:ce:01:d3:ed:a7:37:30:d9:03:57:2d: 68:b0:e3:65:c0:41:7e:a2:0d:9f:1f:1e:6c:76:e9: a9:c1:28:d1:63:ab:8e:67:85:c3:be:77:b1:b4:b4: 85:a4:16:66:53:77:ce:63:c2:25:a4:32:ed:65:b0: 54:11:3a:03:f7:42:e8:8f:99:eb:3b:64:a5:d2:8a: de:65:99:20:b8:96:a6:53:f2:d5:01:4b:82:7b:27: 73:01:c3:1d:6b:d7:64:da:84:1c:91:83:2f:43:9a: 96:88:d3:dc:e1:bb:fb:90:43:1b:3c:f4:59:ad:75: 13:ad:a5:00:0d:38:6b:b4:62:a5:d8:5b:26:82:d0: ba:04:0d:aa:4c:5b:e9:7e:1d:5a:94:2d:bb:ca:51: 61:e9:bf:66:05:b6:44:b9:b1:a6:d9:74:fe:28:3b: 58:35:db:f5:8f:ae:b3:60:66:5c:24:cb:39:ff:77: 9c:4d:bb:65:f2:f9:d4:0b:2e:e6:f6:3e:8a:c8:d8: 61:65:f0:98:f0:ad:47:f1:52:f4:59:73:d0:2c:cd: bf:c8:b6:13:1d:18:2b:67:6d:52:10:e4:d7:83:f5: af:3d:a0:17:55:4b:32:a9:51:be:d0:48:2f:3a:f3: 7e:c2:61:e3:69:08:a1:9b:7a:dc:76:f8:98:a0:46: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:69:58:2E:8C:42:BB:13:1D:00:CF:8B:BF:66:60:72:05:E8:43:EB X509v3 Authority Key Identifier: keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1f:94:88:77:b6:0e:b9:69:00:44:38:f9:7e:20:c0:30:b7: 8e:17:ba:70:b2:eb:4d:50:e4:94:db:ca:e3:78:17:e4:1e:09: 0a:e6:d7:11:5d:85:0d:5c:ce:75:db:f6:5f:5c:cf:de:cc:32: a7:96:c8:3b:96:cb:03:ff:b3:5f:69:df:b0:86:f6:9a:77:4e: ac:68:b0:da:a9:57:c9:16:a3:d9:60:f0:d3:9c:c2:c6:b1:1d: 9a:18:88:1e:3a:8a:70:76:42:24:89:18:f5:bd:54:7e:0c:d1: ae:d6:5d:b3:79:07:91:6d:37:24:2f:46:2c:38:0f:bd:da:e0: 9d:8f:f1:4e:59:9b:c6:8f:30:18:d2:14:5b:41:ba:4d:42:c8: ff:c1:73:e0:9b:76:6b:f8:fb:d1:1d:7f:c2:4a:98:47:5a:8f: b8:24:d0:d3:59:44:a7:33:cb:ee:60:26:e3:54:15:dc:7e:2a: a1:c7:5e:d8:8c:bf:17:f3:3e:2e:5c:10:79:73:dc:8e:2c:5d: 68:c1:2c:0c:f6:b4:a9:7f:73:50:d7:13:dc:b0:75:f8:7a:e4: ee:bd:9e:07:fb:c4:2a:9a:96:91:4d:a1:71:dd:45:2c:c0:3c: e3:8b:3a:d2:7b:fe:ef:23:cd:78:48:02:a0:81:c5:4f:f2:34: 55:bd:75:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbp8qFOXB+8TNFyKu7JFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODBkNWFhYjhlZTcyZGFhMzUyODcxZmJhNzJlY2E0NTFh NzBlZGMwHhcNMjUxMjExMjIwMTA2WhcNMjUxMjEyMjIwMTA2WjAzMTEwLwYDVQQD EyhkZjY5NTgyZThjNDJiYjEzMWQwMGNmOGJiZjY2NjA3MjA1ZTg0M2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ApzgHT7ac3MNkDVy1osONlwEF+ og2fHx5sdumpwSjRY6uOZ4XDvnextLSFpBZmU3fOY8IlpDLtZbBUEToD90Loj5nr O2Sl0oreZZkguJamU/LVAUuCeydzAcMda9dk2oQckYMvQ5qWiNPc4bv7kEMbPPRZ rXUTraUADThrtGKl2FsmgtC6BA2qTFvpfh1alC27ylFh6b9mBbZEubGm2XT+KDtY Ndv1j66zYGZcJMs5/3ecTbtl8vnUCy7m9j6KyNhhZfCY8K1H8VL0WXPQLM2/yLYT HRgrZ21SEOTXg/WvPaAXVUsyqVG+0EgvOvN+wmHjaQihm3rcdviYoEZ/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9pWC6MQrsTHQDPi79mYHIF6EPrMB8GA1UdIwQY MBaAFAKA1aq47nLao1KHH7py7KRRpw7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEt ZjQwNmUwODc4ZDU0LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEtZjQwNmUwODc4ZDU0 LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADB+UiHe2 DrlpAEQ4+X4gwDC3jhe6cLLrTVDklNvK43gX5B4JCubXEV2FDVzOddv2X1zP3swy p5bIO5bLA/+zX2nfsIb2mndOrGiw2qlXyRaj2WDw05zCxrEdmhiIHjqKcHZCJIkY 9b1UfgzRrtZds3kHkW03JC9GLDgPvdrgnY/xTlmbxo8wGNIUW0G6TULI/8Fz4Jt2 a/j70R1/wkqYR1qPuCTQ01lEpzPL7mAm41QV3H4qocde2Iy/F/M+LlwQeXPcjixd aMEsDPa0qX9zUNcT3LB1+Hrk7r2eB/vEKpqWkU2hcd1FLMA844s60nv+7yPNeEgC oIHFT/I0Vb11DA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:09 2025 by rpki-client