This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json) Hash identifier: 7+LrzuM069WBgxut9CjRd+79zECSvoY2csA6egEr2kA= Subject key identifier: EE:EC:51:74:5C:FA:08:78:4C:48:1E:BF:93:90:FE:05:74:68:34:09 Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86 Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86 Certificate serial: 019B4A0391DEA7BCF77C50E07EFE370E1FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft Manifest number: 0C59 Signing time: Tue 23 Dec 2025 07:01:46 +0000 Manifest this update: Tue 23 Dec 2025 07:01:46 +0000 Manifest next update: Wed 24 Dec 2025 07:01:46 +0000 Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: vYMOUleHzeWHSs7UU4avWoFpZg97gCUCtX7RcPnuLaM=) 2: GESlc56i4-gdhOlM9uZOfgy8aCc.roa (hash: 9R3PoH4Q7y5D2LVnthi2TWzvIx4vLCuEUl/il2GVgqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:91:de:a7:bc:f7:7c:50:e0:7e:fe:37:0e:1f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86 Validity Not Before: Dec 23 07:01:46 2025 GMT Not After : Dec 24 07:01:46 2025 GMT Subject: CN=eeec51745cfa08784c481ebf9390fe0574683409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:7c:b4:c7:d9:e2:63:a8:ff:b1:e6:57:d4: 26:51:c2:ac:b0:9d:45:44:b6:9a:73:8c:2b:e3:63: ed:83:a9:5c:fb:0b:c0:f0:dd:c5:36:50:b9:10:4c: 56:10:1b:d4:99:c1:4b:8a:11:50:c7:2b:b4:b9:a0: 2d:95:6e:db:c1:f1:ae:ad:6b:c2:8a:0a:13:ea:1d: 6b:a2:5c:82:ec:48:49:00:24:9a:3a:da:86:4b:91: d4:c8:c4:94:fd:f5:1b:ca:4f:5d:4e:a9:51:a2:d1: aa:fa:11:d2:dd:83:77:35:88:8c:1c:a3:ed:83:dd: 2c:88:07:87:1c:98:70:72:a8:59:1e:18:48:03:09: df:b2:3f:7b:da:9b:4a:2d:0b:b1:84:4c:b3:9f:21: f1:e0:9d:01:03:09:7b:0c:e4:2a:23:ec:e9:ee:b9: f5:4d:a5:0c:53:4e:03:6a:2f:63:92:79:f3:d6:f6: 1a:c8:7b:c3:c4:1b:e9:05:81:70:50:9d:b4:5b:b5: 25:6a:82:a7:c4:8e:84:1b:e8:19:55:6e:e3:89:d0: 6a:06:d8:ca:8e:fc:9b:6b:08:f5:8e:00:b6:e0:8a: eb:99:c3:e3:2a:83:1f:26:bc:ac:b6:2e:db:5a:d2: 1f:e3:41:17:12:34:8d:bd:8f:76:ee:f7:d1:ec:58: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EC:51:74:5C:FA:08:78:4C:48:1E:BF:93:90:FE:05:74:68:34:09 X509v3 Authority Key Identifier: keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3d:0c:d8:fa:84:48:d1:5d:c6:1c:0a:48:d9:83:73:ea:37: 8c:c9:03:a6:9b:a1:b6:6f:18:a7:d4:bb:65:3b:a4:43:42:70: cb:f2:9f:6c:8c:2d:b6:12:bf:cb:1a:3e:e5:2a:d6:76:96:db: 41:e9:8e:8b:a0:70:61:16:f0:7d:8b:ad:7b:ed:6f:19:4e:97: fd:de:de:b6:17:1a:15:cf:13:5c:ce:dc:f0:67:08:82:8a:49: 6d:4f:32:a2:ea:35:e9:bf:0c:2c:b5:4f:44:6a:67:f6:87:1f: 19:45:66:0a:cd:dd:d2:28:91:ee:c7:d4:9f:b3:bd:e0:d6:44: c9:7b:cd:6a:28:b0:36:d6:ec:00:7a:39:8d:47:10:b1:db:e6: fa:b1:83:c5:6e:ad:b4:4b:b2:4b:14:42:62:93:f1:61:31:52: 7b:50:7b:41:42:1f:06:b0:b3:46:4e:e4:88:3c:dd:62:d8:96: 39:ca:0a:0e:3a:69:1b:f6:6a:c4:7c:b1:00:10:1a:0b:6a:7d: 77:a7:59:21:64:9b:4c:5b:c9:4f:01:a7:36:01:ee:f4:64:04: fd:4c:36:ec:1f:80:0a:32:06:41:27:6d:0b:c7:aa:b1:17:3f: 60:61:10:34:70:e4:c0:7e:67:06:02:9c:0d:8d:99:2b:64:2f: 68:7f:f8:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA5Hep7z3fFDgfv43Dh/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh YTVlODYwHhcNMjUxMjIzMDcwMTQ2WhcNMjUxMjI0MDcwMTQ2WjAzMTEwLwYDVQQD EyhlZWVjNTE3NDVjZmEwODc4NGM0ODFlYmY5MzkwZmUwNTc0NjgzNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwox8tMfZ4mOo/7HmV9QmUcKssJ1F RLaac4wr42Ptg6lc+wvA8N3FNlC5EExWEBvUmcFLihFQxyu0uaAtlW7bwfGurWvC igoT6h1rolyC7EhJACSaOtqGS5HUyMSU/fUbyk9dTqlRotGq+hHS3YN3NYiMHKPt g90siAeHHJhwcqhZHhhIAwnfsj972ptKLQuxhEyznyHx4J0BAwl7DOQqI+zp7rn1 TaUMU04Dai9jknnz1vYayHvDxBvpBYFwUJ20W7UlaoKnxI6EG+gZVW7jidBqBtjK jvybawj1jgC24IrrmcPjKoMfJrysti7bWtIf40EXEjSNvY927vfR7FiemwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7sUXRc+gh4TEgev5OQ/gV0aDQJMB8GA1UdIwQY MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt NDgxMTUxYWNmMzI5LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5 LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz0M2PqE SNFdxhwKSNmDc+o3jMkDppuhtm8Yp9S7ZTukQ0Jwy/KfbIwtthK/yxo+5SrWdpbb QemOi6BwYRbwfYute+1vGU6X/d7ethcaFc8TXM7c8GcIgopJbU8youo16b8MLLVP RGpn9ocfGUVmCs3d0iiR7sfUn7O94NZEyXvNaiiwNtbsAHo5jUcQsdvm+rGDxW6t tEuySxRCYpPxYTFSe1B7QUIfBrCzRk7kiDzdYtiWOcoKDjppG/ZqxHyxABAaC2p9 d6dZIWSbTFvJTwGnNgHu9GQE/Uw27B+ACjIGQSdtC8eqsRc/YGEQNHDkwH5nBgKc DY2ZK2QvaH/43Q== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:47 2025 by rpki-client