This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json) Hash identifier: +kIdB2SAvWXkdld38VMR+7LktEOJDZ6YK+zOuM9pubI= Subject key identifier: 20:EA:5C:15:32:31:99:83:2C:43:EE:6E:71:B9:2F:1F:FE:54:4B:1F Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Certificate serial: 019B0F011619019AC6593263C91CE6B3E371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft Manifest number: 172B Signing time: Thu 11 Dec 2025 20:01:27 +0000 Manifest this update: Thu 11 Dec 2025 20:01:27 +0000 Manifest next update: Fri 12 Dec 2025 20:01:27 +0000 Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: EGPG27rm2ewtwHElgcWgiILXdlU54VKWxMpTW2eWD5o=) 2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=) 3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:16:19:01:9a:c6:59:32:63:c9:1c:e6:b3:e3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Validity Not Before: Dec 11 20:01:27 2025 GMT Not After : Dec 12 20:01:27 2025 GMT Subject: CN=20ea5c15323199832c43ee6e71b92f1ffe544b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6c:b4:90:3d:36:00:77:94:73:0a:7a:5e:cd: 81:81:cb:f6:5d:f8:94:55:6b:7f:c7:6b:2c:3c:bd: a1:96:1a:2e:ab:c5:fc:fd:7a:76:8e:b8:5d:1f:9c: 8d:ec:cc:6f:05:65:ba:9a:9e:f6:37:a1:82:1e:1e: b1:ed:99:61:c1:ae:9e:fb:21:17:4b:93:9d:4c:b5: fc:a1:a3:05:a5:1b:78:a8:97:e8:53:08:e6:4c:c1: a1:58:e0:9a:b4:21:98:9c:34:ca:14:c2:72:f1:6b: 22:cb:6e:07:18:5b:b6:15:fc:d6:94:66:5a:7e:8e: 3f:84:b9:36:2a:8b:e3:6f:b6:80:de:82:07:6d:97: 1a:bf:ac:87:18:49:03:66:8b:a4:f6:ea:9b:9a:33: 5e:e8:65:98:47:21:36:53:3d:df:3f:02:6b:5c:d3: b9:e5:5a:d4:76:05:ec:05:5a:b6:df:95:5f:ea:4c: 1f:7f:f6:6f:b3:65:e0:b8:6a:33:ee:87:45:f6:78: 75:0d:f9:bd:ee:81:d5:3f:f0:cb:b0:5b:9e:9a:18: 33:ab:8a:5f:ed:98:29:75:bc:04:2e:19:69:d6:f8: 4b:f7:76:3f:d4:e4:b9:c3:c1:a5:58:40:cf:c7:a3: 33:2b:c3:9b:52:f4:9a:0c:d6:d1:d4:22:2c:db:ed: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EA:5C:15:32:31:99:83:2C:43:EE:6E:71:B9:2F:1F:FE:54:4B:1F X509v3 Authority Key Identifier: keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:83:9d:99:20:60:9b:74:8a:c9:5e:96:d6:9b:35:df:c7:7e: 57:2e:60:b6:2f:54:16:d0:bd:f8:75:15:aa:ec:2e:04:49:8c: c9:f6:ca:b5:59:69:e2:e1:1d:6b:b7:2d:cc:3a:65:81:46:16: 62:a8:5f:7f:ef:af:42:a4:b2:56:75:56:16:85:25:59:77:6b: ea:ec:6d:77:ff:49:e3:83:7f:ae:cc:59:aa:01:1c:f3:f4:a7: 6f:cc:f8:28:22:fb:43:71:34:c6:7b:fa:32:71:e2:35:28:93: 4c:a9:fe:61:bd:a1:6a:c0:c0:55:ac:ba:37:b3:4f:f7:0c:5a: 39:ce:b2:35:df:e8:1c:ba:46:ce:5b:97:61:45:66:ab:c8:d8: 62:8b:37:be:6e:08:42:e5:58:7c:d3:09:58:41:75:f6:bb:a0: c8:e2:53:8b:6e:22:be:e2:22:94:3c:1f:c3:71:bb:38:4f:ff: ed:22:19:fd:fb:cf:d6:6f:4f:89:e8:f6:11:c0:a2:f1:e3:f8: f0:36:6e:db:55:99:13:53:ca:e2:a5:8f:ad:8b:15:cc:e5:49: c3:f7:87:2f:2a:b9:41:b7:c8:92:28:19:b6:ae:25:77:4d:d4: 97:e8:a8:68:85:7e:52:b4:79:a0:98:96:2f:05:10:bd:c0:86: 7d:c3:35:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPARYZAZrGWTJjyRzms+NxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4 OGVmYzMwHhcNMjUxMjExMjAwMTI3WhcNMjUxMjEyMjAwMTI3WjAzMTEwLwYDVQQD EygyMGVhNWMxNTMyMzE5OTgzMmM0M2VlNmU3MWI5MmYxZmZlNTQ0YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2y0kD02AHeUcwp6Xs2Bgcv2XfiU VWt/x2ssPL2hlhouq8X8/Xp2jrhdH5yN7MxvBWW6mp72N6GCHh6x7Zlhwa6e+yEX S5OdTLX8oaMFpRt4qJfoUwjmTMGhWOCatCGYnDTKFMJy8Wsiy24HGFu2FfzWlGZa fo4/hLk2Kovjb7aA3oIHbZcav6yHGEkDZouk9uqbmjNe6GWYRyE2Uz3fPwJrXNO5 5VrUdgXsBVq235Vf6kwff/Zvs2XguGoz7odF9nh1Dfm97oHVP/DLsFuemhgzq4pf 7ZgpdbwELhlp1vhL93Y/1OS5w8GlWEDPx6MzK8ObUvSaDNbR1CIs2+1pewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDqXBUyMZmDLEPubnG5Lx/+VEsfMB8GA1UdIwQY MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYOdmSBg m3SKyV6W1ps138d+Vy5gti9UFtC9+HUVquwuBEmMyfbKtVlp4uEda7ctzDplgUYW Yqhff++vQqSyVnVWFoUlWXdr6uxtd/9J44N/rsxZqgEc8/Snb8z4KCL7Q3E0xnv6 MnHiNSiTTKn+Yb2hasDAVay6N7NP9wxaOc6yNd/oHLpGzluXYUVmq8jYYos3vm4I QuVYfNMJWEF19rugyOJTi24ivuIilDwfw3G7OE//7SIZ/fvP1m9Piej2EcCi8eP4 8DZu21WZE1PK4qWPrYsVzOVJw/eHLyq5QbfIkigZtq4ld03Ul+ioaIV+UrR5oJiW LwUQvcCGfcM16A== -----END CERTIFICATE-----Generated at Fri Dec 12 02:56:51 2025 by rpki-client