This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft File: AY9TOgxHePOMEstY3Xtq8l-MrOc.mft (raw, json) Hash identifier: LSLWc6xEBr47sHlSOY4M8h3NHNdmK1jOAb4rz1sY+tw= Subject key identifier: 2E:60:DE:90:49:92:70:F2:4E:37:CF:A7:A9:0E:A9:B5:07:99:B5:79 Authority key identifier: 01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7 Certificate issuer: /CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7 Certificate serial: 019B59ACC73B081C4250C403B432535D749E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft Manifest number: 60 Signing time: Fri 26 Dec 2025 08:00:53 +0000 Manifest this update: Fri 26 Dec 2025 08:00:53 +0000 Manifest next update: Sat 27 Dec 2025 08:00:53 +0000 Files and hashes: 1: AY9TOgxHePOMEstY3Xtq8l-MrOc.crl (hash: s7DGOq1i0M9zKnt5aCX6pi5L+zstbaSPsrhmxYtgg8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:c7:3b:08:1c:42:50:c4:03:b4:32:53:5d:74:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7 Validity Not Before: Dec 26 08:00:53 2025 GMT Not After : Dec 27 08:00:53 2025 GMT Subject: CN=2e60de90499270f24e37cfa7a90ea9b50799b579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:07:51:54:80:66:90:9c:87:31:8c:9f:2a: 49:eb:2c:2f:c6:ef:c5:26:d0:3a:13:a7:95:a4:cd: cc:33:14:3d:ba:2d:3b:56:e6:76:7c:56:e8:ff:d8: 72:b9:31:16:4e:ed:36:b9:48:71:0b:88:94:7c:83: 3c:99:22:7b:c6:b1:1b:9d:26:2c:52:05:3d:2d:d7: 99:2e:78:49:c2:6f:72:8d:04:ff:da:03:0a:3e:24: dc:60:36:ff:a2:88:d0:e3:89:d0:a9:12:01:b2:fe: 63:02:9a:63:4c:7b:0d:d6:81:a3:ff:f9:42:03:00: 05:f1:96:8d:a3:15:20:10:9b:bc:8d:75:85:c3:c8: fa:27:c1:7b:cc:5b:49:40:37:75:42:2f:5b:43:37: ed:d2:aa:56:96:87:34:ae:a3:9e:ba:a4:65:de:39: 27:b2:c6:a5:18:ef:1c:78:a5:49:34:b5:bd:3a:62: aa:85:e9:05:33:71:75:8c:96:59:cf:92:87:14:42: 03:d0:13:56:4a:d3:c7:25:47:ee:70:90:9e:60:10: d6:3b:20:43:fe:40:54:61:04:3a:97:7a:7e:48:23: 5e:c1:4c:42:bc:d8:63:eb:fe:53:9b:25:d0:dd:d5: c2:9c:d9:fd:65:ec:25:42:db:fa:bb:28:38:1f:c3: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:60:DE:90:49:92:70:F2:4E:37:CF:A7:A9:0E:A9:B5:07:99:B5:79 X509v3 Authority Key Identifier: keyid:01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5a:24:36:07:6d:74:a5:10:9b:d8:bb:c4:b7:e3:29:6a:3a: c2:cc:2a:11:24:40:90:d5:93:cd:c5:46:da:53:98:eb:eb:1d: f8:98:be:a4:18:d0:92:1d:b3:48:5e:ca:b8:5e:a2:3b:c3:cc: c4:42:1d:90:91:05:7b:9f:0b:80:20:ec:3b:ba:d5:1b:7a:68: a2:1f:93:c0:7f:17:61:ea:96:15:26:63:33:eb:9d:ce:d5:18: f9:46:90:71:a3:31:77:2b:e2:b0:8e:9a:d3:b2:7a:ba:00:30: c0:45:7b:b2:e7:95:80:2e:b6:d5:ac:5a:99:fc:fc:64:77:50: 67:04:9c:79:2e:e9:4d:cb:1c:bd:35:fc:30:81:3f:21:ff:03: da:4d:d1:00:90:5a:ad:86:37:20:3f:e6:bc:5b:2b:7e:33:8a: 86:ff:17:36:75:88:b0:b4:a8:b6:03:2c:45:40:06:07:0c:c0: 08:5a:ec:ea:f5:9b:f5:8e:e8:bd:77:0d:4c:7d:b4:73:cd:ae: a3:f4:11:9b:71:8e:d4:48:33:88:bb:e2:6d:1f:b5:b0:e6:3e: da:d5:2b:a5:69:f9:6b:18:64:9a:01:56:24:84:a6:5e:7b:37: 54:e0:00:27:15:20:a8:57:b7:f5:6d:c8:ce:b2:b7:88:eb:5f: af:f5:9f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrMc7CBxCUMQDtDJTXXSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOGY1MzNhMGM0Nzc4ZjM4YzEyY2I1OGRkN2I2YWYyNWY4 Y2FjZTcwHhcNMjUxMjI2MDgwMDUzWhcNMjUxMjI3MDgwMDUzWjAzMTEwLwYDVQQD EygyZTYwZGU5MDQ5OTI3MGYyNGUzN2NmYTdhOTBlYTliNTA3OTliNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hYHUVSAZpCchzGMnypJ6ywvxu/F JtA6E6eVpM3MMxQ9ui07VuZ2fFbo/9hyuTEWTu02uUhxC4iUfIM8mSJ7xrEbnSYs UgU9LdeZLnhJwm9yjQT/2gMKPiTcYDb/oojQ44nQqRIBsv5jAppjTHsN1oGj//lC AwAF8ZaNoxUgEJu8jXWFw8j6J8F7zFtJQDd1Qi9bQzft0qpWloc0rqOeuqRl3jkn ssalGO8ceKVJNLW9OmKqhekFM3F1jJZZz5KHFEID0BNWStPHJUfucJCeYBDWOyBD /kBUYQQ6l3p+SCNewUxCvNhj6/5TmyXQ3dXCnNn9ZewlQtv6uyg4H8PZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5g3pBJknDyTjfPp6kOqbUHmbV5MB8GA1UdIwQY MBaAFAGPUzoMR3jzjBLLWN17avJfjKznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVk5VE9neEhlUE9NRXN0WTNYdHE4bC1Nck9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lZDRiYWMtZTBlMi00ZTI5LTk4YTct ZWY4NjJlM2U3MTI4LzEvQVk5VE9neEhlUE9NRXN0WTNYdHE4bC1Nck9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lZDRiYWMtZTBlMi00ZTI5LTk4YTctZWY4NjJlM2U3MTI4 LzEvQVk5VE9neEhlUE9NRXN0WTNYdHE4bC1Nck9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVokNgdt dKUQm9i7xLfjKWo6wswqESRAkNWTzcVG2lOY6+sd+Ji+pBjQkh2zSF7KuF6iO8PM xEIdkJEFe58LgCDsO7rVG3pooh+TwH8XYeqWFSZjM+udztUY+UaQcaMxdyvisI6a 07J6ugAwwEV7sueVgC621axamfz8ZHdQZwSceS7pTcscvTX8MIE/If8D2k3RAJBa rYY3ID/mvFsrfjOKhv8XNnWIsLSotgMsRUAGBwzACFrs6vWb9Y7ovXcNTH20c82u o/QRm3GO1EgziLvibR+1sOY+2tUrpWn5axhkmgFWJISmXns3VOAAJxUgqFe39W3I zrK3iOtfr/WfiA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:33 2025 by rpki-client