This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json) Hash identifier: /hN0aXStUj9rbVE7ZOI57bu6Eo4hEAWWjRq5Elrv4n0= Subject key identifier: C8:47:34:ED:67:28:00:34:F3:BF:58:CB:C9:28:E6:F8:0C:DC:9E:DF Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Certificate serial: 019B397D1929D3B0EA6C7A254378A771D7B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft Manifest number: 0294 Signing time: Sat 20 Dec 2025 02:00:58 +0000 Manifest this update: Sat 20 Dec 2025 02:00:58 +0000 Manifest next update: Sun 21 Dec 2025 02:00:58 +0000 Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=) 2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: 8IqLHtQMQcg2b7Ca0kimTvjzM/3s846bOKeZJDEclbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:19:29:d3:b0:ea:6c:7a:25:43:78:a7:71:d7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Validity Not Before: Dec 20 02:00:58 2025 GMT Not After : Dec 21 02:00:58 2025 GMT Subject: CN=c84734ed67280034f3bf58cbc928e6f80cdc9edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:d8:f6:a3:14:dc:a2:34:60:86:f7:46:0c: 38:8f:4b:0e:37:a5:bf:84:ea:1b:24:a8:b7:28:70: cb:b7:02:bf:f3:e5:5b:4f:b2:dc:f5:00:98:4b:5c: bb:97:60:b2:b1:73:ec:57:81:cc:66:dc:b1:ae:83: 6b:01:00:0b:52:c8:7e:01:28:16:2c:01:01:2a:05: 59:b4:50:24:79:54:91:06:c7:0c:5e:bb:4c:49:09: b4:00:0b:25:15:66:0a:5d:01:5b:c9:39:c6:6e:87: 53:56:e6:a2:43:e0:52:af:07:67:24:96:0b:4a:dc: aa:de:20:ec:e4:db:3d:1d:cb:f0:b6:63:96:11:a3: 37:94:28:aa:c3:76:94:b4:9f:28:fd:d5:e5:65:c8: 44:ea:7e:9d:0e:b3:9a:01:29:44:20:dd:31:8d:07: c2:30:4a:34:6e:87:af:6c:eb:28:51:f8:9c:69:0c: a1:3e:57:24:3e:2b:29:16:34:53:40:45:3e:c8:ac: 0e:d5:f7:b8:70:15:3b:7c:87:95:9f:91:c1:c0:e5: 36:24:ce:a1:93:cd:88:40:04:b1:57:33:9c:b6:bc: 0e:7f:de:03:98:4d:64:74:74:fd:5f:8f:1e:9a:bf: c5:6c:22:18:d5:9f:96:63:c7:96:45:63:1f:02:97: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:47:34:ED:67:28:00:34:F3:BF:58:CB:C9:28:E6:F8:0C:DC:9E:DF X509v3 Authority Key Identifier: keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b0:ef:95:fe:70:ef:f2:62:d0:ad:e9:77:44:14:1b:eb:66: 93:12:23:bd:72:25:b1:47:b9:e7:23:a8:50:9c:83:4c:15:a5: 13:ab:39:98:3c:e3:b4:c5:28:26:ea:5d:9a:8d:a4:d7:56:dc: c1:8d:b9:fd:e9:f4:df:2b:42:fa:8d:b6:1e:90:dd:35:d3:47: d5:b0:6f:2a:79:7e:a8:03:94:c2:9a:ab:3e:62:1a:15:31:b5: 71:c3:a6:08:14:c1:3f:8a:ec:04:fd:e0:7d:ab:08:65:f5:90: 4c:99:cb:47:89:4c:a1:53:ef:c6:61:a7:ad:b5:41:a1:d8:9c: e4:4f:43:29:1c:9d:40:f4:0c:ff:a0:54:aa:33:02:75:18:06: d9:da:91:f7:39:53:64:34:ad:dd:bf:bd:82:24:4f:1e:5c:b4: 83:3d:70:89:85:d3:5c:8e:95:d2:78:86:9d:de:c9:69:e8:86: 00:e2:29:0a:7b:9b:65:bb:f5:47:d1:ac:68:f6:94:cf:d2:cc: 5a:10:79:e5:aa:4e:ec:ea:e8:7c:a3:40:5c:87:5c:f4:51:1b: 9e:38:86:64:d5:ca:a7:5c:5f:fa:78:19:18:78:f5:59:0f:7a: 89:98:ea:79:df:8f:4b:85:8d:9a:25:53:44:9b:3f:56:9f:d2: d1:cf:f4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fRkp07DqbHolQ3incdezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl YTA0YjUwHhcNMjUxMjIwMDIwMDU4WhcNMjUxMjIxMDIwMDU4WjAzMTEwLwYDVQQD EyhjODQ3MzRlZDY3MjgwMDM0ZjNiZjU4Y2JjOTI4ZTZmODBjZGM5ZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13PY9qMU3KI0YIb3Rgw4j0sON6W/ hOobJKi3KHDLtwK/8+VbT7Lc9QCYS1y7l2CysXPsV4HMZtyxroNrAQALUsh+ASgW LAEBKgVZtFAkeVSRBscMXrtMSQm0AAslFWYKXQFbyTnGbodTVuaiQ+BSrwdnJJYL Styq3iDs5Ns9HcvwtmOWEaM3lCiqw3aUtJ8o/dXlZchE6n6dDrOaASlEIN0xjQfC MEo0boevbOsoUficaQyhPlckPispFjRTQEU+yKwO1fe4cBU7fIeVn5HBwOU2JM6h k82IQASxVzOctrwOf94DmE1kdHT9X48emr/FbCIY1Z+WY8eWRWMfApd3mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhHNO1nKAA0879Yy8ko5vgM3J7fMB8GA1UdIwQY MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt OWI1NTk1MjlhZDE2LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2 LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrDvlf5w 7/Ji0K3pd0QUG+tmkxIjvXIlsUe55yOoUJyDTBWlE6s5mDzjtMUoJupdmo2k11bc wY25/en03ytC+o22HpDdNdNH1bBvKnl+qAOUwpqrPmIaFTG1ccOmCBTBP4rsBP3g fasIZfWQTJnLR4lMoVPvxmGnrbVBodic5E9DKRydQPQM/6BUqjMCdRgG2dqR9zlT ZDSt3b+9giRPHly0gz1wiYXTXI6V0niGnd7JaeiGAOIpCnubZbv1R9GsaPaUz9LM WhB55apO7OrofKNAXIdc9FEbnjiGZNXKp1xf+ngZGHj1WQ96iZjqed+PS4WNmiVT RJs/Vp/S0c/0vA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:45:27 2025 by rpki-client