This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json) Hash identifier: Of3moVEz8hzm5Nen9VUrC7YqCGJBQW4ZIpW1i8qISqk= Subject key identifier: 01:75:E5:42:4D:20:CF:73:F9:30:4A:FE:D9:0B:49:8C:C5:AB:C2:92 Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85 Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85 Certificate serial: 019B2E54A99180E0396E45AC2C467D4F73EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 22:00:58 +0000 Manifest this update: Wed 17 Dec 2025 22:00:58 +0000 Manifest next update: Thu 18 Dec 2025 22:00:58 +0000 Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 5E78ZloL+g1ynPJ67bvQbTgDU73eFJK8qOP7IVm8K0A=) 2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:a9:91:80:e0:39:6e:45:ac:2c:46:7d:4f:73:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85 Validity Not Before: Dec 17 22:00:58 2025 GMT Not After : Dec 18 22:00:58 2025 GMT Subject: CN=0175e5424d20cf73f9304afed90b498cc5abc292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:af:3e:6a:36:28:71:ca:2e:de:f1:ae:d0: c8:b5:7d:34:26:c7:6d:1a:cc:e6:42:e3:cd:a3:1a: e8:d5:99:65:85:2a:e7:f9:3a:43:32:22:97:9a:d4: ee:10:4f:02:b9:7a:fe:d4:49:b1:15:4f:15:6b:30: b1:37:78:b7:22:24:d1:f0:f9:ac:c1:97:c6:38:67: 97:48:28:a4:01:5c:33:ba:d6:6a:3b:3f:24:94:2d: 48:54:1e:8a:ce:b2:17:25:a1:45:57:b6:c6:a8:2d: 27:38:44:7d:4b:51:47:13:67:4d:44:2a:fa:2b:b1: b5:c9:e7:84:d2:c1:a5:6e:3b:3a:86:4c:80:20:d7: 4e:fc:d0:28:90:61:34:23:ce:a9:f0:24:48:f5:8c: aa:38:f7:1d:e2:01:18:4e:ab:98:80:97:76:fd:e5: 39:cf:b9:de:3f:03:e8:20:b1:54:58:49:e0:da:1f: b4:39:3f:72:a5:f1:92:aa:b8:99:e3:0a:42:5a:b1: 08:24:63:b9:bd:f3:d1:e2:9d:67:13:31:37:9a:0d: 17:d9:d6:48:59:01:b8:35:00:08:bf:64:e5:58:ac: da:8d:18:25:fd:27:fc:c0:93:12:4c:61:f0:db:71: 57:59:8e:9d:c7:3a:fc:1e:1a:b1:59:02:e8:f0:ba: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:E5:42:4D:20:CF:73:F9:30:4A:FE:D9:0B:49:8C:C5:AB:C2:92 X509v3 Authority Key Identifier: keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a4:a6:cc:66:65:5f:79:c3:d8:2e:59:5b:82:e3:fd:e3:49: 94:b5:16:05:3c:ad:97:13:07:b9:5f:15:01:36:1e:24:5f:56: 72:2f:a7:21:ae:32:9b:01:25:f9:67:ff:ca:cc:fa:65:9b:23: 8a:0c:02:b1:34:33:14:95:5d:2e:e8:fe:03:f7:98:e7:6b:db: 0a:08:be:9e:67:16:2a:87:a7:a6:af:27:8d:41:cf:8b:b6:ed: d0:10:84:3f:82:56:a3:09:e9:ca:41:b2:a4:c7:99:62:1d:ef: d6:ce:e5:fd:77:c8:63:a6:05:95:27:3b:95:a0:37:ac:fa:96: 52:fb:64:a8:df:1d:fa:9b:ee:e4:a5:25:ce:03:2d:60:82:e7: 27:99:29:ec:16:11:23:2c:8a:1c:18:9a:20:97:77:48:ab:2e: 1e:64:50:86:4c:31:05:64:45:27:98:2d:c9:79:51:5b:e1:8b: c2:d0:1f:1d:2c:45:4b:41:51:66:20:d2:a3:8c:08:2a:09:20: 7a:31:1a:0b:a8:61:96:ad:11:72:4c:5a:75:29:51:4d:c7:e5: 1c:29:1b:b0:03:59:a6:6e:e5:80:a5:2a:31:6c:89:3b:42:0c: cb:85:12:eb:f6:77:6a:2c:ce:83:17:81:95:2c:f2:a5:3a:80: a3:47:d7:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVKmRgOA5bkWsLEZ9T3PsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOGNjNmY0NjZhMjQxNjU3YmY1ZWM1MmE2MzBkYWViMDEy MjJmODUwHhcNMjUxMjE3MjIwMDU4WhcNMjUxMjE4MjIwMDU4WjAzMTEwLwYDVQQD EygwMTc1ZTU0MjRkMjBjZjczZjkzMDRhZmVkOTBiNDk4Y2M1YWJjMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrevPmo2KHHKLt7xrtDItX00Jsdt GszmQuPNoxro1ZllhSrn+TpDMiKXmtTuEE8CuXr+1EmxFU8VazCxN3i3IiTR8Pms wZfGOGeXSCikAVwzutZqOz8klC1IVB6KzrIXJaFFV7bGqC0nOER9S1FHE2dNRCr6 K7G1yeeE0sGlbjs6hkyAINdO/NAokGE0I86p8CRI9YyqOPcd4gEYTquYgJd2/eU5 z7nePwPoILFUWEng2h+0OT9ypfGSqriZ4wpCWrEIJGO5vfPR4p1nEzE3mg0X2dZI WQG4NQAIv2TlWKzajRgl/Sf8wJMSTGHw23FXWY6dxzr8HhqxWQLo8LoMxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF15UJNIM9z+TBK/tkLSYzFq8KSMB8GA1UdIwQY MBaAFAGMxvRmokFle/XsUqYw2usBIi+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEt YmU4ZDhjNjdkZjk1LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEtYmU4ZDhjNjdkZjk1 LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqSmzGZl X3nD2C5ZW4Lj/eNJlLUWBTytlxMHuV8VATYeJF9Wci+nIa4ymwEl+Wf/ysz6ZZsj igwCsTQzFJVdLuj+A/eY52vbCgi+nmcWKoenpq8njUHPi7bt0BCEP4JWownpykGy pMeZYh3v1s7l/XfIY6YFlSc7laA3rPqWUvtkqN8d+pvu5KUlzgMtYILnJ5kp7BYR IyyKHBiaIJd3SKsuHmRQhkwxBWRFJ5gtyXlRW+GLwtAfHSxFS0FRZiDSo4wIKgkg ejEaC6hhlq0RckxadSlRTcflHCkbsANZpm7lgKUqMWyJO0IMy4US6/Z3aizOgxeB lSzypTqAo0fXIA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:35:20 2025 by rpki-client