This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json) Hash identifier: 5UUOy8jWWNwn/cJZF0uqV6yFnSIdJYXSVuuaT+cGrJE= Subject key identifier: 74:6E:14:D8:02:76:2B:2F:71:BB:8B:EF:51:40:8D:2E:0E:A5:9E:EF Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Certificate serial: 019B32D654E6FDBF533AEFF526A98CF3BAF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:01:05 +0000 Manifest this update: Thu 18 Dec 2025 19:01:05 +0000 Manifest next update: Fri 19 Dec 2025 19:01:05 +0000 Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: gM5TxY4HD06sx+KCfFGO/GQ6ryEODXgDK0XIBZalUDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:54:e6:fd:bf:53:3a:ef:f5:26:a9:8c:f3:ba:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6 Validity Not Before: Dec 18 19:01:05 2025 GMT Not After : Dec 19 19:01:05 2025 GMT Subject: CN=746e14d802762b2f71bb8bef51408d2e0ea59eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:35:98:5b:d2:d2:bf:62:fd:50:87:eb:d4: bd:e9:35:25:37:3d:e1:c8:ef:16:63:72:ee:56:f0: ea:cd:52:85:73:6e:ba:eb:77:30:d2:7b:8a:48:9f: 43:c0:0c:8b:06:18:45:2a:5c:87:b6:43:c0:26:06: 63:3a:b7:41:f2:27:ee:63:79:74:c3:a8:49:43:5b: 34:c3:92:18:8c:5a:3e:7f:12:68:40:bb:49:9c:8c: fd:07:d7:56:2a:8e:11:b0:ff:ad:e8:6c:90:2d:ca: f3:bf:50:ab:1e:73:84:42:6f:20:56:6b:c2:c1:fb: 07:f6:61:05:0b:61:40:1a:2f:b7:81:5f:5e:3e:3d: 74:63:64:64:c0:a5:aa:d0:94:a7:05:9f:03:76:4f: e6:5a:3b:2d:80:69:5a:78:df:67:a9:7c:e8:5f:52: 88:6d:ef:5f:5a:72:82:7a:c1:92:2e:c7:3c:ba:36: c7:d1:58:ab:9e:45:5c:2a:4a:fb:36:39:96:40:06: 11:69:54:48:9e:ed:6d:0e:c4:6b:b8:35:84:80:40: 5a:9f:6a:64:45:74:ba:50:3a:2d:3a:33:08:7e:44: 82:f2:d9:c7:3f:f3:9d:11:89:75:f0:e6:aa:0f:9d: 19:83:f4:b9:6e:34:26:aa:26:ce:12:95:07:5a:01: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6E:14:D8:02:76:2B:2F:71:BB:8B:EF:51:40:8D:2E:0E:A5:9E:EF X509v3 Authority Key Identifier: keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:fe:3f:09:0f:fe:3a:f0:b3:61:88:ec:d7:ac:bb:de:78: b3:86:40:3e:35:de:6a:8b:39:86:84:a5:87:ea:e1:41:d4:44: 65:d8:33:a5:7c:53:ba:3f:65:66:49:ab:7c:78:dd:89:01:af: f1:76:0d:14:b1:72:41:23:ea:aa:99:ab:d8:00:81:c3:dd:85: c1:76:53:7b:37:e6:22:97:80:7c:2e:cc:ca:90:54:c3:80:5e: c0:a3:d8:6e:62:cb:42:19:71:57:fb:b3:be:53:4a:f4:93:28: a9:94:68:d8:60:fe:11:bb:b5:6d:f7:27:e5:1b:52:ac:c0:65: 83:fe:6d:ef:93:74:1f:22:bc:e8:cd:24:f1:d9:44:1e:a4:11: 3f:cd:c2:30:35:6b:69:6e:a4:7f:8c:ad:64:f8:57:44:1e:b3: 9b:9a:22:2a:6f:f2:d6:96:03:fd:34:00:69:d8:06:c7:5c:8b: e4:7a:ac:93:67:2a:17:a2:e3:7b:55:b9:45:64:54:71:7f:e3: 7d:e0:39:7c:ec:23:25:7a:9d:33:3a:f2:0f:97:13:3a:2f:38: 87:e2:65:f9:1a:dc:43:39:c6:47:e1:2c:49:88:a6:f9:b8:3a: 1d:1e:36:c4:7a:89:2b:98:0d:84:0c:65:91:6e:19:c6:ab:ef: 21:f9:5a:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1lTm/b9TOu/1JqmM87r3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmI1ZjFmMjExNDZhMDkzZjNmZGFkMGM2YmZmNzU3NzZh ZjM3YzYwHhcNMjUxMjE4MTkwMTA1WhcNMjUxMjE5MTkwMTA1WjAzMTEwLwYDVQQD Eyg3NDZlMTRkODAyNzYyYjJmNzFiYjhiZWY1MTQwOGQyZTBlYTU5ZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Q1mFvS0r9i/VCH69S96TUlNz3h yO8WY3LuVvDqzVKFc26663cw0nuKSJ9DwAyLBhhFKlyHtkPAJgZjOrdB8ifuY3l0 w6hJQ1s0w5IYjFo+fxJoQLtJnIz9B9dWKo4RsP+t6GyQLcrzv1CrHnOEQm8gVmvC wfsH9mEFC2FAGi+3gV9ePj10Y2RkwKWq0JSnBZ8Ddk/mWjstgGlaeN9nqXzoX1KI be9fWnKCesGSLsc8ujbH0VirnkVcKkr7NjmWQAYRaVRInu1tDsRruDWEgEBan2pk RXS6UDotOjMIfkSC8tnHP/OdEYl18OaqD50Zg/S5bjQmqibOEpUHWgGO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRuFNgCdisvcbuL71FAjS4OpZ7vMB8GA1UdIwQY MBaAFGr7Xx8hFGoJPz/a0Ma/91d2rzfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgt Zjk4YjlkMjI3YTk0LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lM2MwYzAtMjM4My00OGQ1LTg2MTgtZjk4YjlkMjI3YTk0 LzEvYXZ0Zkh5RVVhZ2tfUDlyUXhyXzNWM2F2TjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY/+PwkP /jrws2GI7Nesu954s4ZAPjXeaos5hoSlh+rhQdREZdgzpXxTuj9lZkmrfHjdiQGv 8XYNFLFyQSPqqpmr2ACBw92FwXZTezfmIpeAfC7MypBUw4BewKPYbmLLQhlxV/uz vlNK9JMoqZRo2GD+Ebu1bfcn5RtSrMBlg/5t75N0HyK86M0k8dlEHqQRP83CMDVr aW6kf4ytZPhXRB6zm5oiKm/y1pYD/TQAadgGx1yL5Hqsk2cqF6Lje1W5RWRUcX/j feA5fOwjJXqdMzryD5cTOi84h+Jl+RrcQznGR+EsSYim+bg6HR42xHqJK5gNhAxl kW4ZxqvvIflabw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:42 2025 by rpki-client