This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json) Hash identifier: CWFGpFzmP5Q5uJ1PvVaZNXLBCkDxLeiFwfh7mOyf3PM= Subject key identifier: 29:49:F5:E7:44:3D:21:9A:5B:17:13:2C:ED:49:FC:64:1A:76:6A:18 Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e Certificate serial: 019B3DFEC03FB4A34B1DAF8CAE5EF651F64B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft Manifest number: 0CFD Signing time: Sat 20 Dec 2025 23:01:04 +0000 Manifest this update: Sat 20 Dec 2025 23:01:04 +0000 Manifest next update: Sun 21 Dec 2025 23:01:04 +0000 Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=) 2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: b5iW8N0yFsM7+NvnLDFZmgvXYXCMZSBn+WKGA0/0/Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c0:3f:b4:a3:4b:1d:af:8c:ae:5e:f6:51:f6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e Validity Not Before: Dec 20 23:01:04 2025 GMT Not After : Dec 21 23:01:04 2025 GMT Subject: CN=2949f5e7443d219a5b17132ced49fc641a766a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:e4:29:90:b8:54:80:fb:e6:ed:ba:b1:c7: 34:1e:13:61:97:55:84:8f:7f:43:0b:76:89:28:41: 91:36:e3:df:bc:4a:e8:ba:40:dd:10:80:ea:85:b4: 97:f8:8e:fc:81:04:ff:f3:1f:fb:77:cb:d0:d8:f4: 00:5d:20:d7:b9:bc:ae:56:34:1e:2b:28:8d:00:23: f4:98:0f:01:29:1c:de:fd:a6:58:47:f6:09:f0:87: 76:7c:de:fd:3a:02:fb:47:7c:42:44:62:d0:57:03: 83:91:e4:5c:87:59:69:75:d9:81:80:0c:83:29:92: d6:ba:d2:51:e7:34:38:ab:02:64:5e:bc:5c:c9:92: 65:da:c8:2d:07:5d:66:aa:46:86:02:f3:f0:00:15: 5d:88:f5:05:1b:ed:63:5b:3a:1a:2e:68:d7:14:99: 3b:71:c2:a5:f6:3f:9b:74:dd:c1:a7:df:79:63:02: 1e:e4:5a:42:8d:a3:45:96:c6:27:dc:47:f0:ae:fa: d6:3d:1c:00:4f:0c:91:e2:b0:96:6d:99:50:cb:03: 06:33:66:06:02:0d:ae:d9:d7:5c:27:b0:f4:9f:3a: 64:96:e0:43:bd:6b:e0:4c:ad:ff:f6:7d:5b:ef:7b: f9:08:2a:54:ed:d6:56:2e:0a:05:cc:85:7e:26:6c: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:F5:E7:44:3D:21:9A:5B:17:13:2C:ED:49:FC:64:1A:76:6A:18 X509v3 Authority Key Identifier: keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b9:36:99:fe:a9:70:7f:40:74:95:85:f3:b8:a2:79:4e:f7: e6:81:8e:bb:29:99:2f:ca:0e:d3:04:1f:f7:51:8a:c8:76:b9: 4b:92:4c:4b:63:77:db:d3:78:4a:63:0e:86:5d:18:8b:56:27: 3a:2c:8a:0c:75:93:f8:93:84:cd:af:45:74:ca:8d:63:93:a4: 51:e8:fa:c1:e2:b3:09:cc:67:e0:c3:fe:c3:0d:1e:f6:9f:e6: 65:4f:97:a2:9d:7b:e4:75:1d:10:d0:ab:ee:d3:da:65:82:20: 1a:a3:ea:d3:6c:8a:bb:fb:26:37:e4:fa:c3:c3:98:3c:cb:c0: 90:e4:97:d9:68:33:d6:ae:3e:cd:40:72:d9:a5:ef:f4:0d:6e: 50:b1:03:13:69:ee:bd:a5:c9:ab:ea:24:64:06:dc:a7:d6:12: 0a:f3:fa:5d:57:e5:ab:9e:7c:36:ea:e1:58:f3:79:5e:b7:69: 1e:35:8d:48:c9:7c:ed:6b:4e:9d:ca:46:d5:0a:f8:07:a1:75: 50:6e:eb:19:bc:80:83:51:88:e3:27:06:07:64:9c:17:73:ef: 8e:15:74:0f:99:50:56:70:69:20:0f:cb:b1:10:41:21:08:05: dc:a5:df:e2:eb:43:8b:c1:41:38:d1:34:38:a1:de:0f:50:06: da:39:23:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/sA/tKNLHa+Mrl72UfZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmM4ZmZjNTA2MDllYzBkOGI0YTcyODA1Yzg5OTBhNjRh YWU3MWUwHhcNMjUxMjIwMjMwMTA0WhcNMjUxMjIxMjMwMTA0WjAzMTEwLwYDVQQD EygyOTQ5ZjVlNzQ0M2QyMTlhNWIxNzEzMmNlZDQ5ZmM2NDFhNzY2YTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgDkKZC4VID75u26scc0HhNhl1WE j39DC3aJKEGRNuPfvEroukDdEIDqhbSX+I78gQT/8x/7d8vQ2PQAXSDXubyuVjQe KyiNACP0mA8BKRze/aZYR/YJ8Id2fN79OgL7R3xCRGLQVwODkeRch1lpddmBgAyD KZLWutJR5zQ4qwJkXrxcyZJl2sgtB11mqkaGAvPwABVdiPUFG+1jWzoaLmjXFJk7 ccKl9j+bdN3Bp995YwIe5FpCjaNFlsYn3EfwrvrWPRwATwyR4rCWbZlQywMGM2YG Ag2u2ddcJ7D0nzpkluBDvWvgTK3/9n1b73v5CCpU7dZWLgoFzIV+Jmz2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClJ9edEPSGaWxcTLO1J/GQadmoYMB8GA1UdIwQY MBaAFAIsj/xQYJ7A2LSnKAXImQpkquceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQt MTViMGMzNDQ5OTA3LzEvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My82ZjhhNzctYjI2Yy00ZDI0LWJiNDQtMTViMGMzNDQ5OTA3 LzEvQWl5UF9GQmduc0RZdEtjb0JjaVpDbVNxNXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbk2mf6p cH9AdJWF87iieU735oGOuymZL8oO0wQf91GKyHa5S5JMS2N329N4SmMOhl0Yi1Yn OiyKDHWT+JOEza9FdMqNY5OkUej6weKzCcxn4MP+ww0e9p/mZU+Xop175HUdENCr 7tPaZYIgGqPq02yKu/smN+T6w8OYPMvAkOSX2Wgz1q4+zUBy2aXv9A1uULEDE2nu vaXJq+okZAbcp9YSCvP6XVflq558NurhWPN5XrdpHjWNSMl87WtOncpG1Qr4B6F1 UG7rGbyAg1GI4ycGB2ScF3PvjhV0D5lQVnBpIA/LsRBBIQgF3KXf4utDi8FBONE0 OKHeD1AG2jkj3w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:12:52 2025 by rpki-client