This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft File: ASqMalgY9dVNG3VsFz0T8BygYsQ.mft (raw, json) Hash identifier: V1pmxArbDuJGVYykPLQfJtUBaOG6Mi2+5OwhRmDZx3w= Subject key identifier: 83:46:FA:8A:5D:78:C5:39:11:B8:A6:82:D4:40:5B:D8:AA:60:DD:47 Authority key identifier: 01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4 Certificate issuer: /CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4 Certificate serial: 019B5A1ADB2DB5DB221697C25BAB952D17D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft Manifest number: 1B Signing time: Fri 26 Dec 2025 10:01:07 +0000 Manifest this update: Fri 26 Dec 2025 10:01:07 +0000 Manifest next update: Sat 27 Dec 2025 10:01:07 +0000 Files and hashes: 1: ASqMalgY9dVNG3VsFz0T8BygYsQ.crl (hash: 2lWBXtwSQdSUIkPRVzkhVZ6Njq3QNoMIa2C6Appgics=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:db:2d:b5:db:22:16:97:c2:5b:ab:95:2d:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4 Validity Not Before: Dec 26 10:01:07 2025 GMT Not After : Dec 27 10:01:07 2025 GMT Subject: CN=8346fa8a5d78c53911b8a682d4405bd8aa60dd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:cf:97:a4:5a:31:1c:e5:c8:67:8c:cf:29: 0a:c6:11:25:f3:a8:c1:8c:9b:73:82:62:f7:f4:5f: f8:ef:74:6d:c1:d3:f5:11:5f:13:9d:7e:46:ac:84: 5d:bb:70:ec:d2:1f:33:c8:6b:24:e5:5e:0a:02:c9: b5:9c:8b:fa:a3:68:60:1e:57:f6:6b:2b:7a:79:36: 6f:88:ef:88:b0:dd:82:17:64:5c:f3:40:1e:f4:fe: 1a:8d:f4:26:36:90:c2:92:f8:85:30:38:e8:fd:2c: e3:9d:97:b5:6d:a6:5f:db:c3:fa:48:f1:4e:17:33: 63:32:de:c7:0b:60:4a:72:ef:c2:bb:a4:4c:49:9a: 28:34:8d:9c:98:4b:40:1c:f9:d8:96:36:b7:d6:43: 8f:36:99:6e:8f:56:54:3a:cc:b5:43:cd:45:c9:69: 3c:f2:d8:7e:be:dc:46:ad:d3:8e:40:9d:ae:83:59: 4f:c1:cd:57:a8:c2:da:fa:f2:c7:0e:cc:d2:77:f4: ee:1c:59:d0:0d:39:71:15:e8:86:f2:96:1d:39:43: 2b:37:8b:b2:a6:cb:94:86:c2:2a:0e:e4:ec:eb:12: 67:c0:0a:3c:c1:fa:0a:84:45:65:d3:c1:88:17:a3: af:20:de:b3:32:d5:2e:5f:11:ec:34:02:d8:23:08: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:FA:8A:5D:78:C5:39:11:B8:A6:82:D4:40:5B:D8:AA:60:DD:47 X509v3 Authority Key Identifier: keyid:01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e6:75:fd:46:c8:d1:29:11:95:50:1b:e8:b2:04:fd:9c:75: 72:c8:45:c5:d0:f9:e6:66:78:89:c6:a9:d9:9a:c3:8c:24:ad: 7e:c5:fd:94:a9:0a:f6:4e:1e:c5:cf:d9:01:c5:48:ce:de:10: bc:c3:8a:d4:6a:4c:11:43:29:61:95:83:85:68:a1:8f:bf:e0: d1:63:a6:9e:70:70:07:85:2c:76:9c:ee:0e:8e:04:95:79:a4: 0a:5f:28:e6:bb:76:01:22:46:52:f9:7c:84:db:15:6b:7c:8c: 64:b4:58:29:95:6c:d1:83:0b:73:ae:dd:14:67:b1:bd:4b:86: 87:ff:72:3d:77:40:95:bc:25:69:5e:0c:f9:93:5c:a1:2d:ca: ff:39:f8:7f:3e:c9:3a:5c:05:10:02:8f:11:f5:f5:7d:54:f2: 1c:a8:bb:32:ff:ac:16:80:6a:24:8a:ac:0f:c5:ab:e7:ac:c6: d3:87:96:53:6c:e4:19:54:a4:70:f0:23:35:b6:27:34:44:87: 11:be:01:2e:4f:d5:73:8c:55:e8:09:96:23:98:f0:5e:6f:64: 71:28:72:81:d6:0f:bd:e4:bc:b3:06:b7:d9:2b:e1:37:9d:d7: e0:4e:7a:0a:fd:95:94:4f:d9:69:a2:d1:dc:8e:23:07:30:98: f6:5a:7c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtsttdsiFpfCW6uVLRfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMmE4YzZhNTgxOGY1ZDU0ZDFiNzU2YzE3M2QxM2YwMWNh MDYyYzQwHhcNMjUxMjI2MTAwMTA3WhcNMjUxMjI3MTAwMTA3WjAzMTEwLwYDVQQD Eyg4MzQ2ZmE4YTVkNzhjNTM5MTFiOGE2ODJkNDQwNWJkOGFhNjBkZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGTPl6RaMRzlyGeMzykKxhEl86jB jJtzgmL39F/473RtwdP1EV8TnX5GrIRdu3Ds0h8zyGsk5V4KAsm1nIv6o2hgHlf2 ayt6eTZviO+IsN2CF2Rc80Ae9P4ajfQmNpDCkviFMDjo/SzjnZe1baZf28P6SPFO FzNjMt7HC2BKcu/Cu6RMSZooNI2cmEtAHPnYlja31kOPNpluj1ZUOsy1Q81FyWk8 8th+vtxGrdOOQJ2ug1lPwc1XqMLa+vLHDszSd/TuHFnQDTlxFeiG8pYdOUMrN4uy psuUhsIqDuTs6xJnwAo8wfoKhEVl08GIF6OvIN6zMtUuXxHsNALYIwgmMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFING+opdeMU5EbimgtRAW9iqYN1HMB8GA1UdIwQY MBaAFAEqjGpYGPXVTRt1bBc9E/AcoGLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80Y2M4NTEtNTViZS00M2I4LWJlYWQt NTg0YTc4MjYxYTQ3LzEvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80Y2M4NTEtNTViZS00M2I4LWJlYWQtNTg0YTc4MjYxYTQ3 LzEvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguZ1/UbI 0SkRlVAb6LIE/Zx1cshFxdD55mZ4icap2ZrDjCStfsX9lKkK9k4exc/ZAcVIzt4Q vMOK1GpMEUMpYZWDhWihj7/g0WOmnnBwB4UsdpzuDo4ElXmkCl8o5rt2ASJGUvl8 hNsVa3yMZLRYKZVs0YMLc67dFGexvUuGh/9yPXdAlbwlaV4M+ZNcoS3K/zn4fz7J OlwFEAKPEfX1fVTyHKi7Mv+sFoBqJIqsD8Wr56zG04eWU2zkGVSkcPAjNbYnNESH Eb4BLk/Vc4xV6AmWI5jwXm9kcShygdYPveS8swa32SvhN53X4E56Cv2VlE/ZaaLR 3I4jBzCY9lp8/g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:19 2025 by rpki-client