This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft File: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json) Hash identifier: YTBlX2EvhOxjwr3gZ2LXeqcHGP5l/PUFQjMGmhxTWKw= Subject key identifier: 8B:0A:87:29:D6:3C:93:60:A6:24:9A:55:9A:B3:BB:02:ED:D1:83:C9 Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f Certificate serial: 019B1C85E6D999CAF4FE39CDAFAD878D1DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 11:01:36 +0000 Manifest this update: Sun 14 Dec 2025 11:01:36 +0000 Manifest next update: Mon 15 Dec 2025 11:01:36 +0000 Files and hashes: 1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: /b4bB/cV2pC0kldggn0aLAtXIaY1RrYzXVWm9fO4sS8=) 2: voTBQK08ae5dJLLPC_WLTf299J4.roa (hash: IJFytwQyok533gq1H2eNYMHcRnLoiQur1Z7mEoU5py4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:e6:d9:99:ca:f4:fe:39:cd:af:ad:87:8d:1d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f Validity Not Before: Dec 14 11:01:36 2025 GMT Not After : Dec 15 11:01:36 2025 GMT Subject: CN=8b0a8729d63c9360a6249a559ab3bb02edd183c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:56:91:77:04:f1:80:05:3e:7b:d5:28:c3:fb: 5c:62:b1:18:ed:4a:37:62:32:be:8d:2a:c6:9c:7f: 9d:e0:3e:0f:6c:16:6f:02:48:97:0b:07:1f:d3:76: 00:fd:a9:92:36:f9:f4:a8:ba:b9:87:38:a2:88:0e: 26:1e:31:5d:f1:aa:09:50:48:6d:15:aa:d7:59:65: 9d:5c:2a:a1:1a:52:b0:dd:7d:a6:bc:2e:9b:a2:32: 5c:57:64:c2:23:35:14:e2:bc:68:2f:18:20:ef:f7: 5c:9e:cf:cb:3c:e3:0d:20:ce:41:a6:f5:7d:a2:9b: b4:cf:9b:94:39:1e:49:bc:37:93:e3:d7:89:0e:2a: 8f:aa:13:b6:a1:6b:77:a4:a5:62:56:48:de:c4:eb: 5d:2e:52:53:02:d3:61:3a:1c:dd:15:61:8c:9d:d4: 0a:3f:66:3a:f7:22:43:19:31:28:3b:49:ca:17:d5: 7c:db:60:06:7c:16:99:6e:50:e8:94:50:b5:71:f0: a7:f5:d2:fc:9e:86:0b:2e:4d:15:7b:0b:64:b0:c6: 10:86:e8:7a:4d:7e:4c:32:21:da:a6:0c:20:80:5d: 0a:fd:7d:ea:ad:d7:b2:b3:ef:aa:15:87:1e:fd:f9: bd:d7:7f:b2:6b:36:66:21:3e:7b:98:79:44:1a:cf: 2f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0A:87:29:D6:3C:93:60:A6:24:9A:55:9A:B3:BB:02:ED:D1:83:C9 X509v3 Authority Key Identifier: keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c1:f7:ed:84:f1:77:ce:b6:1d:47:5b:4a:c0:58:87:49:33: 0f:c8:9a:be:b7:e8:25:fd:98:01:45:cf:1f:7d:5b:da:7b:0e: 06:b8:b0:73:e3:fa:14:60:87:13:a7:80:1a:a8:0e:73:89:8e: c5:76:4f:df:5e:57:c6:c5:45:a3:aa:02:d4:e9:e4:3c:68:18: 80:a4:ff:e7:9f:7a:ef:46:4b:c3:39:4f:de:32:34:17:57:45: 41:85:49:9a:79:8b:9c:2a:b1:b3:dd:1e:92:58:04:67:80:2e: 6a:44:1c:6d:e3:a0:c4:8e:7e:7a:8d:7c:8e:fd:83:8b:ac:c3: cc:64:a6:8f:e5:dc:50:00:39:c5:57:96:06:c0:68:74:e6:ae: 13:b4:34:a5:31:b6:d7:c9:fe:f2:1b:8e:d0:38:57:bc:c4:54: 09:15:f9:b7:21:6e:98:66:7b:c5:7c:28:60:ce:55:db:1e:0c: a8:8d:20:f8:08:34:af:24:57:78:da:25:44:91:8a:f8:a8:c2: 90:8f:06:85:51:41:ed:ca:8e:9d:7a:93:b8:06:b6:b7:5c:21: 29:2a:c5:ce:c4:34:7c:2a:e3:99:ee:4b:84:9f:f5:b1:46:14: fa:e8:fc:90:4c:87:da:37:c9:4f:51:2d:c2:09:33:9a:51:6a: 8e:97:53:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschebZmcr0/jnNr62HjR23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNTM4ODUxMTY3YjRlM2Q2ZjY0ZDUzNzk3YjA4Y2I0MTM3 MTg3MGYwHhcNMjUxMjE0MTEwMTM2WhcNMjUxMjE1MTEwMTM2WjAzMTEwLwYDVQQD Eyg4YjBhODcyOWQ2M2M5MzYwYTYyNDlhNTU5YWIzYmIwMmVkZDE4M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FaRdwTxgAU+e9Uow/tcYrEY7Uo3 YjK+jSrGnH+d4D4PbBZvAkiXCwcf03YA/amSNvn0qLq5hziiiA4mHjFd8aoJUEht FarXWWWdXCqhGlKw3X2mvC6bojJcV2TCIzUU4rxoLxgg7/dcns/LPOMNIM5BpvV9 opu0z5uUOR5JvDeT49eJDiqPqhO2oWt3pKViVkjexOtdLlJTAtNhOhzdFWGMndQK P2Y69yJDGTEoO0nKF9V822AGfBaZblDolFC1cfCn9dL8noYLLk0VewtksMYQhuh6 TX5MMiHapgwggF0K/X3qrdeys++qFYce/fm913+yazZmIT57mHlEGs8v/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsKhynWPJNgpiSaVZqzuwLt0YPJMB8GA1UdIwQY MBaAFAFTiFEWe049b2TVN5ewjLQTcYcPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYt NjI5NWI4NTRkZjg2LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYtNjI5NWI4NTRkZjg2 LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMH37YTx d862HUdbSsBYh0kzD8iavrfoJf2YAUXPH31b2nsOBriwc+P6FGCHE6eAGqgOc4mO xXZP315XxsVFo6oC1OnkPGgYgKT/559670ZLwzlP3jI0F1dFQYVJmnmLnCqxs90e klgEZ4AuakQcbeOgxI5+eo18jv2Di6zDzGSmj+XcUAA5xVeWBsBodOauE7Q0pTG2 18n+8huO0DhXvMRUCRX5tyFumGZ7xXwoYM5V2x4MqI0g+Ag0ryRXeNolRJGK+KjC kI8GhVFB7cqOnXqTuAa2t1whKSrFzsQ0fCrjme5LhJ/1sUYU+uj8kEyH2jfJT1Et wgkzmlFqjpdTkw== -----END CERTIFICATE-----Generated at Sun Dec 14 19:11:54 2025 by rpki-client