This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json) Hash identifier: ASBKp1HATK2Hy1NLm/Jq7ZjwNMvUDxKRr+LFB7RLydU= Subject key identifier: 82:F1:0C:1C:34:EB:6A:AB:DF:2C:6B:65:9D:30:3A:EB:9D:31:96:97 Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Certificate serial: 019B0E5C0653C30BC36CF8F565D651D38BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft Manifest number: 01B9 Signing time: Thu 11 Dec 2025 17:01:10 +0000 Manifest this update: Thu 11 Dec 2025 17:01:10 +0000 Manifest next update: Fri 12 Dec 2025 17:01:10 +0000 Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: +5NDRcadrTswl55iQV13TuCS7ZBral7eAupi+idDpWY=) 2: hNq3yGnPCHaydptWbrbgby3w7SM.roa (hash: TF/bJmN5adtoEqSxW4KjZfMJbH3NebJd9z02MI+Ip68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:06:53:c3:0b:c3:6c:f8:f5:65:d6:51:d3:8b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Validity Not Before: Dec 11 17:01:10 2025 GMT Not After : Dec 12 17:01:10 2025 GMT Subject: CN=82f10c1c34eb6aabdf2c6b659d303aeb9d319697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:23:81:81:91:94:e6:12:44:41:77:98:b3: ce:da:28:7a:b2:c1:64:29:39:ad:bc:1c:b9:e9:5c: f6:69:97:7a:0e:a7:ac:7f:a8:29:92:6e:e5:0c:f2: 0e:f1:af:55:33:04:86:76:1a:cc:98:44:7d:b9:a9: 3f:51:0c:cb:fd:ff:8e:b1:de:e3:d9:2d:5e:8d:4a: b3:27:82:79:c6:ed:74:21:6d:54:27:ad:86:81:7b: 78:53:21:25:66:4c:bc:8e:9d:68:5f:af:de:54:9e: 0b:fd:88:3d:cb:46:aa:3e:50:2f:3d:7b:8e:96:b6: bb:b7:f6:04:df:79:85:c2:28:d6:10:21:05:d8:70: 7b:20:27:32:5b:dc:cf:c5:28:a7:5e:b5:33:c2:82: e8:3f:54:bd:16:1b:11:65:52:e9:02:a8:9b:58:fd: 5f:d3:c3:01:7c:5a:62:82:3c:8e:10:0b:f2:af:29: 82:48:e9:d4:95:43:9e:e3:26:50:02:5b:8a:b4:7c: ba:37:22:e6:18:19:00:07:58:11:cd:a1:ee:c9:55: 85:8b:d8:ea:c8:ed:da:31:d7:f6:e4:96:39:e0:45: 2c:77:80:4b:d5:ed:ca:95:de:4a:a7:00:0a:0c:13: 84:b0:68:ce:0b:1e:8a:a9:62:f1:60:cb:3a:4c:98: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:0C:1C:34:EB:6A:AB:DF:2C:6B:65:9D:30:3A:EB:9D:31:96:97 X509v3 Authority Key Identifier: keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5e:44:b5:09:fc:db:60:73:ac:af:7d:af:f2:fc:24:8d:bd: e8:6b:e1:ec:22:4a:b3:ef:dd:6d:f3:ec:75:60:c0:f9:e1:88: 38:e8:e8:7a:a4:c5:0a:92:bd:95:ea:cb:e4:2b:8f:0a:58:5d: b7:d7:e5:f5:bc:76:e6:fd:1b:5a:8a:10:30:fd:41:8a:3a:1e: 4d:9e:10:8b:cd:f6:1f:6f:b3:64:e6:5a:48:cd:63:3f:14:57: d9:27:37:c8:50:d7:3c:30:6b:71:37:04:36:8a:f9:c9:57:07: 6b:42:d1:a9:f8:f4:53:51:9f:44:6a:c0:c6:0e:6d:02:93:9e: 51:42:ca:8a:3f:32:6a:3e:1d:1e:52:48:6b:56:2d:32:41:55: e5:f3:6e:62:63:ed:20:8d:27:77:c5:b2:3a:bb:ef:e0:4e:9b: 2f:ce:1e:71:90:92:66:d7:a0:bb:5c:2f:a0:15:a7:0b:42:4b: a9:33:d5:20:b2:52:63:f1:9b:d5:fa:fe:94:08:55:c1:dc:b0: 13:a9:a6:61:59:e2:8e:6c:9e:71:5c:0e:e5:cc:3e:ed:1b:6a: ed:af:d2:95:15:fc:98:9f:b2:9d:75:71:35:52:95:e6:1d:a3: 02:3a:f2:ff:f1:7b:fb:7d:db:65:d4:05:07:8e:dc:53:ae:e9: fe:8c:40:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXAZTwwvDbPj1ZdZR04v/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOGNjYzhkODE3OGM5ZTlkMmZmYzUzMmZjYjVjZDY4YmVh YTc3NmQwHhcNMjUxMjExMTcwMTEwWhcNMjUxMjEyMTcwMTEwWjAzMTEwLwYDVQQD Eyg4MmYxMGMxYzM0ZWI2YWFiZGYyYzZiNjU5ZDMwM2FlYjlkMzE5Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvojgYGRlOYSREF3mLPO2ih6ssFk KTmtvBy56Vz2aZd6Dqesf6gpkm7lDPIO8a9VMwSGdhrMmER9uak/UQzL/f+Osd7j 2S1ejUqzJ4J5xu10IW1UJ62GgXt4UyElZky8jp1oX6/eVJ4L/Yg9y0aqPlAvPXuO lra7t/YE33mFwijWECEF2HB7ICcyW9zPxSinXrUzwoLoP1S9FhsRZVLpAqibWP1f 08MBfFpigjyOEAvyrymCSOnUlUOe4yZQAluKtHy6NyLmGBkAB1gRzaHuyVWFi9jq yO3aMdf25JY54EUsd4BL1e3Kld5KpwAKDBOEsGjOCx6KqWLxYMs6TJjSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILxDBw062qr3yxrZZ0wOuudMZaXMB8GA1UdIwQY MBaAFAKMzI2BeMnp0v/FMvy1zWi+qndtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYt NWE0YjdiNWU0MDA3LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYtNWE0YjdiNWU0MDA3 LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkV5EtQn8 22BzrK99r/L8JI296Gvh7CJKs+/dbfPsdWDA+eGIOOjoeqTFCpK9lerL5CuPClhd t9fl9bx25v0bWooQMP1BijoeTZ4Qi832H2+zZOZaSM1jPxRX2Sc3yFDXPDBrcTcE Nor5yVcHa0LRqfj0U1GfRGrAxg5tApOeUULKij8yaj4dHlJIa1YtMkFV5fNuYmPt II0nd8WyOrvv4E6bL84ecZCSZtegu1wvoBWnC0JLqTPVILJSY/Gb1fr+lAhVwdyw E6mmYVnijmyecVwO5cw+7Rtq7a/SlRX8mJ+ynXVxNVKV5h2jAjry//F7+33bZdQF B47cU67p/oxAtQ== -----END CERTIFICATE-----Generated at Thu Dec 11 19:28:33 2025 by rpki-client