This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json) Hash identifier: nPKuywfK2p0dz0RMJkznifoJONjOnaUQBqy3Z8PZ95Y= Subject key identifier: F0:27:CE:DE:40:2C:1F:4D:3B:72:F3:43:58:FB:3B:8C:28:4E:07:C6 Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b Certificate serial: 019B24ACCFA4F79A00F84027F23B5F765DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft Manifest number: 0FE3 Signing time: Tue 16 Dec 2025 01:01:03 +0000 Manifest this update: Tue 16 Dec 2025 01:01:03 +0000 Manifest next update: Wed 17 Dec 2025 01:01:03 +0000 Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: QRPewzVFi7qMq+cLP9e0Kl9r1BPRQ+FZI+GGLKttuNM=) 2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:cf:a4:f7:9a:00:f8:40:27:f2:3b:5f:76:5d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b Validity Not Before: Dec 16 01:01:03 2025 GMT Not After : Dec 17 01:01:03 2025 GMT Subject: CN=f027cede402c1f4d3b72f34358fb3b8c284e07c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:06:16:b3:ca:f2:24:87:e4:13:be:eb:62: 78:7b:e1:af:c0:bb:54:bf:3e:41:e5:99:49:62:d9: 3f:ec:d8:bc:fe:1d:5b:7e:4d:22:d9:69:25:57:42: 23:1c:a9:f2:40:63:89:2a:c4:64:8c:b0:34:8f:71: 2a:ad:09:50:ee:61:a4:b0:2b:dd:63:1c:2d:ae:34: 19:e0:64:3b:8f:9d:31:d3:a8:cd:48:cd:ea:2b:cd: e9:bb:08:61:2f:fc:1f:06:ab:91:54:ac:5f:5a:de: d0:6b:d4:59:ea:f2:8b:70:b3:f4:a2:42:b6:38:6b: ae:05:98:bc:c0:c5:4e:f9:6f:08:b7:3d:8a:83:8a: b8:47:ae:d2:35:2b:32:d7:45:47:10:fb:aa:2c:67: 9e:87:2a:90:c8:61:f1:92:3b:92:b0:24:50:c1:43: f6:b4:6a:4a:cf:2b:19:41:cc:cc:ea:29:48:43:41: 18:7b:1a:81:1b:31:af:67:47:9e:a0:0e:4f:72:18: cf:3d:da:a6:02:49:28:97:02:fd:c1:06:bf:6c:5e: 13:2f:a3:2c:b7:2a:b6:b3:50:28:75:aa:dd:0d:be: 3d:b0:5a:bc:de:1e:a2:d2:2c:5f:13:31:90:23:9a: 85:cc:f3:c9:90:be:31:eb:53:be:0a:4a:32:83:fa: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:27:CE:DE:40:2C:1F:4D:3B:72:F3:43:58:FB:3B:8C:28:4E:07:C6 X509v3 Authority Key Identifier: keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2c:6d:29:ff:99:20:33:a1:b3:12:58:0b:b9:24:83:dd:de: f8:c5:5e:6e:99:9a:6e:de:57:5a:e5:c9:82:88:2b:ba:1c:3c: 72:af:5b:f9:b6:a4:55:22:eb:fb:f1:32:21:c3:7c:3b:62:ba: 67:12:32:6f:4b:77:b9:c9:e1:3a:57:26:66:64:28:d2:d6:9c: b2:14:b8:bb:62:69:b4:00:d5:9e:44:b8:71:b0:c8:c5:ff:f7: 52:e4:cd:b4:3e:d6:d5:8a:94:43:27:02:7a:89:17:11:0b:90: 6e:d3:3a:d3:5c:6f:bc:c4:a5:8c:83:f7:60:a3:69:67:7c:fb: 0d:4b:41:fb:0e:81:15:24:24:04:f3:e6:76:dd:aa:9d:63:9b: 85:1f:10:19:fd:f3:cb:83:12:cb:a6:2f:be:43:f1:15:95:a4: 43:4a:51:27:e0:5f:5f:44:e0:b9:cc:f2:e1:39:e1:f2:de:57: f5:a3:e1:7f:eb:e3:37:ae:3c:d7:fb:f2:9b:28:ce:12:e7:79: c4:3a:84:35:4d:43:30:96:c0:8a:c2:7e:11:52:dd:1e:da:d0: 4f:e0:dc:69:e0:f0:c5:49:ed:d7:de:aa:2d:5d:de:70:20:f3: 2e:d8:f0:d1:5b:1f:b2:6a:f9:90:fe:3b:fa:08:3f:10:91:13: 93:50:46:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrM+k95oA+EAn8jtfdl3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOGIyMGZmMDk4ZTZiN2NiYzhiNmFmMGQ2ODAwNjVlNmI5 MDYwMGIwHhcNMjUxMjE2MDEwMTAzWhcNMjUxMjE3MDEwMTAzWjAzMTEwLwYDVQQD EyhmMDI3Y2VkZTQwMmMxZjRkM2I3MmYzNDM1OGZiM2I4YzI4NGUwN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhYGFrPK8iSH5BO+62J4e+GvwLtU vz5B5ZlJYtk/7Ni8/h1bfk0i2WklV0IjHKnyQGOJKsRkjLA0j3EqrQlQ7mGksCvd YxwtrjQZ4GQ7j50x06jNSM3qK83puwhhL/wfBquRVKxfWt7Qa9RZ6vKLcLP0okK2 OGuuBZi8wMVO+W8Itz2Kg4q4R67SNSsy10VHEPuqLGeehyqQyGHxkjuSsCRQwUP2 tGpKzysZQczM6ilIQ0EYexqBGzGvZ0eeoA5PchjPPdqmAkkolwL9wQa/bF4TL6Ms tyq2s1AodardDb49sFq83h6i0ixfEzGQI5qFzPPJkL4x61O+Ckoyg/o6+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAnzt5ALB9NO3LzQ1j7O4woTgfGMB8GA1UdIwQY MBaAFAGLIP8Jjmt8vItq8NaABl5rkGALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEt OTEyN2Y0MjlhNDhkLzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEtOTEyN2Y0MjlhNDhk LzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCxtKf+Z IDOhsxJYC7kkg93e+MVebpmabt5XWuXJgogruhw8cq9b+bakVSLr+/EyIcN8O2K6 ZxIyb0t3ucnhOlcmZmQo0tacshS4u2JptADVnkS4cbDIxf/3UuTNtD7W1YqUQycC eokXEQuQbtM601xvvMSljIP3YKNpZ3z7DUtB+w6BFSQkBPPmdt2qnWObhR8QGf3z y4MSy6YvvkPxFZWkQ0pRJ+BfX0Tguczy4Tnh8t5X9aPhf+vjN6481/vymyjOEud5 xDqENU1DMJbAisJ+EVLdHtrQT+DcaeDwxUnt196qLV3ecCDzLtjw0Vsfsmr5kP47 +gg/EJETk1BGbA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:38:24 2025 by rpki-client