This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json) Hash identifier: +mC4h//Ys0/PUIv8xOXY3Hq3o2KFhRYqbyPJRCDg9T4= Subject key identifier: BF:3B:C2:89:14:0C:6B:46:61:0E:AC:EC:8D:4F:B1:38:A7:49:59:21 Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44 Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44 Certificate serial: 019B38A211A405725797B568E3B1D7C54979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 22:01:44 +0000 Manifest this update: Fri 19 Dec 2025 22:01:44 +0000 Manifest next update: Sat 20 Dec 2025 22:01:44 +0000 Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=) 2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: tzxmQr3yiZ5CgJiZO6ixuvzWDI8YrlaBWYMV2KKnflI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:11:a4:05:72:57:97:b5:68:e3:b1:d7:c5:49:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44 Validity Not Before: Dec 19 22:01:44 2025 GMT Not After : Dec 20 22:01:44 2025 GMT Subject: CN=bf3bc289140c6b46610eacec8d4fb138a7495921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:43:5d:9b:98:15:29:d9:e3:49:de:1f:00: 8c:b9:01:46:d6:6f:d9:1e:fb:0e:4a:44:ad:04:77: c7:9f:be:8d:4f:89:2b:a2:2b:c9:c7:c7:c1:60:29: 03:a9:c3:7e:d2:af:dd:2f:09:db:fb:b1:59:34:92: 24:5c:de:8e:66:06:79:bc:dc:c4:ac:c4:3c:fd:2d: 2f:50:5a:0e:4c:8e:7a:ed:52:70:11:21:05:2b:69: 82:4b:35:3c:31:14:a0:45:87:0e:b5:e6:08:03:6c: 2a:a4:d4:0f:c4:dc:e4:6f:41:e0:a7:47:3d:c5:e4: bf:53:90:b0:37:f2:7a:2c:37:dc:68:05:e0:11:d9: 4b:2e:b3:46:5b:63:6e:bc:9f:1b:88:47:fc:5e:d6: a4:25:56:dd:fc:a2:0a:6a:86:55:ed:4b:03:39:ae: 33:41:93:a7:61:b6:72:50:51:e8:be:8e:4f:b7:e8: 74:a1:67:f3:46:fd:15:67:4b:73:ab:72:d1:6b:18: d8:72:88:e7:f6:53:72:d9:fc:17:1f:63:df:ee:2b: bb:ca:d6:63:0e:66:8c:17:92:7d:b4:5a:86:6f:fe: 9e:48:34:13:3a:40:72:05:3e:24:7e:44:e0:a6:5d: ff:28:03:45:d9:94:13:ef:43:89:95:03:28:9f:3f: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:C2:89:14:0C:6B:46:61:0E:AC:EC:8D:4F:B1:38:A7:49:59:21 X509v3 Authority Key Identifier: keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:12:2e:84:6d:4c:c9:b0:04:dd:0e:39:6f:f8:0f:6d:14:f8: b4:45:30:5a:e2:19:4a:26:41:6c:56:0e:66:c9:eb:09:39:e8: 15:d9:87:b7:f7:21:e8:07:42:69:46:3c:d8:67:b7:c3:b3:07: b5:cf:ad:58:a2:9c:1e:3b:da:72:b5:d1:3f:8d:6f:74:60:1b: 1d:d1:86:14:48:b3:b5:4f:6e:df:bc:4e:3b:26:e9:4d:96:b2: 24:2a:bf:e1:76:58:61:04:a3:51:77:a0:a3:e5:e7:14:0e:89: 8a:c1:15:bb:10:cc:d0:76:35:e7:a0:2d:8e:c9:3c:ce:3b:35: 5a:fd:e0:ca:27:06:c9:77:58:63:18:e0:56:58:ac:f1:a7:dd: 6d:bc:31:8f:2b:72:32:d6:e5:50:9b:c4:1b:f9:74:a0:ac:17: c8:a8:91:7f:c5:99:50:80:f4:42:0e:d6:09:c7:d6:45:fa:75: f4:7d:67:ca:73:d8:25:c0:1c:53:d6:54:fd:0d:e0:df:76:d5: 74:84:55:e8:76:ce:ed:70:43:8b:fa:55:de:ab:e1:e7:35:17: 9e:72:b4:cb:1e:19:af:8e:ef:b4:49:3f:8d:db:90:02:07:4f: 9f:a4:54:f4:97:f3:76:73:9f:f8:f7:f0:e3:ca:d0:5b:0b:f4: 4a:55:1c:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ohGkBXJXl7Vo47HXxUl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx ODZhNDQwHhcNMjUxMjE5MjIwMTQ0WhcNMjUxMjIwMjIwMTQ0WjAzMTEwLwYDVQQD EyhiZjNiYzI4OTE0MGM2YjQ2NjEwZWFjZWM4ZDRmYjEzOGE3NDk1OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wNDXZuYFSnZ40neHwCMuQFG1m/Z HvsOSkStBHfHn76NT4kroivJx8fBYCkDqcN+0q/dLwnb+7FZNJIkXN6OZgZ5vNzE rMQ8/S0vUFoOTI567VJwESEFK2mCSzU8MRSgRYcOteYIA2wqpNQPxNzkb0Hgp0c9 xeS/U5CwN/J6LDfcaAXgEdlLLrNGW2NuvJ8biEf8XtakJVbd/KIKaoZV7UsDOa4z QZOnYbZyUFHovo5Pt+h0oWfzRv0VZ0tzq3LRaxjYcojn9lNy2fwXH2Pf7iu7ytZj DmaMF5J9tFqGb/6eSDQTOkByBT4kfkTgpl3/KANF2ZQT70OJlQMonz/XSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL87wokUDGtGYQ6s7I1PsTinSVkhMB8GA1UdIwQY MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRIuhG1M ybAE3Q45b/gPbRT4tEUwWuIZSiZBbFYOZsnrCTnoFdmHt/ch6AdCaUY82Ge3w7MH tc+tWKKcHjvacrXRP41vdGAbHdGGFEiztU9u37xOOybpTZayJCq/4XZYYQSjUXeg o+XnFA6JisEVuxDM0HY156Atjsk8zjs1Wv3gyicGyXdYYxjgVlis8afdbbwxjyty MtblUJvEG/l0oKwXyKiRf8WZUID0Qg7WCcfWRfp19H1nynPYJcAcU9ZU/Q3g33bV dIRV6HbO7XBDi/pV3qvh5zUXnnK0yx4Zr47vtEk/jduQAgdPn6RU9JfzdnOf+Pfw 48rQWwv0SlUcSg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:37:24 2025 by rpki-client