This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json) Hash identifier: /QyYPA47R0l+GGQwGR7UPmKg+IWiebDPD7vRz67IE54= Subject key identifier: F5:64:FF:49:2F:BD:0F:15:EB:1E:29:C2:20:4B:E3:25:6E:F3:FC:3E Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d Certificate serial: 019B37C5944CBA645F5043EDE5EA245278CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 18:00:53 +0000 Manifest this update: Fri 19 Dec 2025 18:00:53 +0000 Manifest next update: Sat 20 Dec 2025 18:00:53 +0000 Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: i5/yfUsSqsYtdQumPmBzr8Pn+k9Cz8rfoM2fsUXkOwQ=) 2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:94:4c:ba:64:5f:50:43:ed:e5:ea:24:52:78:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ea25e356932875c096a0317559804155f6c99d Validity Not Before: Dec 19 18:00:53 2025 GMT Not After : Dec 20 18:00:53 2025 GMT Subject: CN=f564ff492fbd0f15eb1e29c2204be3256ef3fc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:b1:4e:8a:55:d8:d0:a0:01:ff:6e:2f:f4: 91:59:7f:64:40:bc:55:8d:97:70:91:c0:08:1d:a1: bf:55:29:7d:fe:65:ed:dc:15:6e:4f:26:7a:0c:fa: 6f:33:cf:e5:cd:85:63:e4:db:0c:10:3f:84:37:e6: a7:78:d4:9f:be:c4:9a:bb:4c:5d:e7:a8:7b:29:af: 71:84:11:7b:e6:fa:ee:eb:03:ae:6b:ae:6b:40:86: e9:ee:0a:97:d7:24:97:68:27:eb:fb:36:d2:25:87: 04:85:88:d8:40:b5:f9:1b:b7:1f:9a:c0:86:49:aa: e9:9e:de:4b:0a:5c:ce:5d:da:54:b8:b8:ae:41:a9: 78:38:f6:b9:a8:a7:85:33:24:b7:ec:90:9f:86:6a: 22:b6:99:0f:03:93:0b:a0:28:3d:22:8d:25:48:ca: ac:9d:26:3e:00:5d:fe:ed:c4:25:af:33:be:f6:af: b2:5e:27:d5:93:4f:3d:41:5a:3d:a1:ff:6a:f9:77: 0d:b6:ee:d8:c2:7f:53:16:4c:ec:d5:38:b2:1b:95: 80:96:6f:65:2c:ee:38:09:de:b0:b3:01:28:91:e8: de:b5:80:22:1f:f5:d8:a6:d3:0e:62:62:5d:7d:3e: cd:c2:0c:a8:12:b3:27:9a:dc:ca:58:5b:f6:9f:91: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:64:FF:49:2F:BD:0F:15:EB:1E:29:C2:20:4B:E3:25:6E:F3:FC:3E X509v3 Authority Key Identifier: keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f3:5f:c1:75:0a:96:8a:c6:45:41:8b:76:e9:51:c9:a6:1c: 93:34:a3:84:6b:27:e2:41:e0:c1:2b:fe:ee:f1:ea:e8:7b:7c: 45:69:e4:c5:3d:6e:50:c2:5b:78:96:40:cb:c1:dd:ac:58:b4: d4:24:18:1f:dc:94:b5:c0:e8:d3:0d:2b:56:0d:30:18:1d:4e: f3:ce:5a:eb:96:4a:1b:7e:b4:97:4a:91:50:47:46:db:4a:1b: 81:ce:e5:63:db:fa:88:cd:d9:8c:3b:5a:5f:1e:0f:00:35:17: d3:81:4b:31:42:d9:a0:45:38:be:bb:ac:9c:96:eb:e7:79:46: d7:ee:39:ce:8c:b2:c7:92:3b:f2:0e:8b:19:5e:81:85:5b:72: 86:86:f7:f7:a5:e2:ab:6c:49:40:fa:f7:3e:0d:14:9a:37:77: f1:b8:6a:dd:2d:3f:d7:e0:bb:91:22:04:77:00:bd:38:2e:af: 87:3b:f6:a9:ac:14:1a:29:de:8d:17:94:64:b1:4d:1e:db:1e: 2d:f9:95:56:1f:e9:fe:36:72:e6:9d:fd:72:c7:f1:c7:fe:50: 8e:23:24:2a:76:e6:5c:19:99:6d:ba:7e:4e:18:b4:ab:52:4d: e9:84:a0:d6:e9:87:cd:81:3f:8b:b7:0f:f8:ee:73:ea:8e:40: cd:4d:a5:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xZRMumRfUEPt5eokUnjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZWEyNWUzNTY5MzI4NzVjMDk2YTAzMTc1NTk4MDQxNTVm NmM5OWQwHhcNMjUxMjE5MTgwMDUzWhcNMjUxMjIwMTgwMDUzWjAzMTEwLwYDVQQD EyhmNTY0ZmY0OTJmYmQwZjE1ZWIxZTI5YzIyMDRiZTMyNTZlZjNmYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJyxTopV2NCgAf9uL/SRWX9kQLxV jZdwkcAIHaG/VSl9/mXt3BVuTyZ6DPpvM8/lzYVj5NsMED+EN+aneNSfvsSau0xd 56h7Ka9xhBF75vru6wOua65rQIbp7gqX1ySXaCfr+zbSJYcEhYjYQLX5G7cfmsCG Sarpnt5LClzOXdpUuLiuQal4OPa5qKeFMyS37JCfhmoitpkPA5MLoCg9Io0lSMqs nSY+AF3+7cQlrzO+9q+yXifVk089QVo9of9q+XcNtu7Ywn9TFkzs1TiyG5WAlm9l LO44Cd6wswEokejetYAiH/XYptMOYmJdfT7NwgyoErMnmtzKWFv2n5GsZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVk/0kvvQ8V6x4pwiBL4yVu8/w+MB8GA1UdIwQY MBaAFALqJeNWkyh1wJagMXVZgEFV9smdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEt ZDgxNGZkY2E1YmVkLzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEtZDgxNGZkY2E1YmVk LzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvNfwXUK lorGRUGLdulRyaYckzSjhGsn4kHgwSv+7vHq6Ht8RWnkxT1uUMJbeJZAy8HdrFi0 1CQYH9yUtcDo0w0rVg0wGB1O885a65ZKG360l0qRUEdG20obgc7lY9v6iM3ZjDta Xx4PADUX04FLMULZoEU4vrusnJbr53lG1+45zoyyx5I78g6LGV6BhVtyhob396Xi q2xJQPr3Pg0Umjd38bhq3S0/1+C7kSIEdwC9OC6vhzv2qawUGinejReUZLFNHtse LfmVVh/p/jZy5p39csfxx/5QjiMkKnbmXBmZbbp+Thi0q1JN6YSg1umHzYE/i7cP +O5z6o5AzU2log== -----END CERTIFICATE-----Generated at Sat Dec 20 02:02:30 2025 by rpki-client