This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json) Hash identifier: MB8Gp8lu0VNwuoAsTCs2DmQ8U3anoL/qC69NH72IJG4= Subject key identifier: 77:A5:E5:16:16:89:DD:B2:D2:45:B2:82:86:E7:7D:DE:9E:DF:CA:23 Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a Certificate serial: 019B2099215D8D7102875477B0FDEE8689AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft Manifest number: 0C6E Signing time: Mon 15 Dec 2025 06:01:04 +0000 Manifest this update: Mon 15 Dec 2025 06:01:04 +0000 Manifest next update: Tue 16 Dec 2025 06:01:04 +0000 Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: vaIhFm9iXNiIxwPyXyyVkQ5eIKrmLXqrjnClWIiJsdE=) 2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:99:21:5d:8d:71:02:87:54:77:b0:fd:ee:86:89:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a Validity Not Before: Dec 15 06:01:04 2025 GMT Not After : Dec 16 06:01:04 2025 GMT Subject: CN=77a5e5161689ddb2d245b28286e77dde9edfca23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:34:b5:c2:6c:73:68:e7:3d:6e:54:ef:98: 58:ef:b2:c5:58:9e:c2:6a:75:5f:af:fb:b5:2c:61: 6c:a2:b4:4e:a6:42:d9:82:dd:a9:f7:98:28:b4:ab: 5f:17:b3:3b:6a:ef:4e:f6:1f:d1:71:e1:9e:c3:e4: 9e:55:b1:60:96:d6:73:1c:57:33:e5:95:8f:8b:94: 38:bb:d0:c3:c9:8b:8f:a1:38:bd:2e:93:14:06:0c: ce:92:6d:fa:74:1c:9a:6c:97:39:5c:f1:12:01:80: 20:69:07:29:a2:b4:96:96:70:e4:bc:34:02:4a:5f: 2f:40:03:9d:09:c2:78:f4:f6:bc:cf:24:cc:5b:e0: 9a:60:93:18:a1:f3:27:30:4c:9e:28:10:3c:38:e9: 5f:44:a1:2b:dc:3b:3d:74:53:f8:d9:42:b6:43:71: 74:fe:e7:7a:ba:92:64:19:7e:89:a9:04:93:f1:62: ff:4e:8a:c9:4a:45:5e:29:81:d8:ae:e3:7b:49:a2: 4a:15:51:93:f6:f9:81:7b:71:a3:f4:97:25:97:01: 4d:0f:2b:ba:05:51:be:31:ab:13:45:16:cb:76:9b: 1d:88:41:86:bd:7d:61:83:1a:66:dc:bd:a0:e0:20: 7a:91:57:9e:c2:23:e3:32:42:fb:b2:47:5f:75:56: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A5:E5:16:16:89:DD:B2:D2:45:B2:82:86:E7:7D:DE:9E:DF:CA:23 X509v3 Authority Key Identifier: keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e7:9d:4b:09:15:2c:d0:25:3b:42:98:62:cd:8a:0d:f9:0e: b3:5e:9c:b5:fa:54:ab:a3:81:f1:78:a3:5f:30:09:e5:62:4c: 4d:54:69:25:74:a9:b2:2a:e1:0e:5f:96:38:5b:e8:fd:ad:8b: 55:bb:b2:47:39:2f:90:8d:04:06:21:35:eb:ab:39:9d:33:b2: 01:43:95:41:e7:97:82:a4:d5:ac:26:af:e7:35:63:c0:7a:2f: a3:d0:69:a9:34:27:64:b8:84:00:8e:72:dc:2f:72:2e:34:18: d4:7e:e9:96:3d:a5:6b:97:79:47:b4:7a:de:a7:da:ad:49:ea: fd:9b:8a:f1:21:29:de:e3:27:35:1a:9b:d8:93:d5:f8:06:58: b6:c9:6c:ac:4f:f3:54:93:b5:35:c8:52:b5:31:6f:a2:38:e3: 15:66:bf:8b:6d:a2:ee:cd:a8:ae:3a:25:09:4d:7c:65:90:1c: aa:9c:c5:8c:31:6d:5e:89:f6:c3:89:ec:df:e4:52:b9:f8:1f: c8:93:3b:07:39:3a:f2:c9:47:9a:54:27:bb:f9:f0:56:b2:4b: 57:59:38:b6:19:3d:ea:ed:13:ff:c2:ae:2d:68:4e:65:3a:d4: 04:ca:94:da:48:e9:72:92:0d:ec:81:d8:ed:0a:34:4e:dd:34: cd:ae:7b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmSFdjXECh1R3sP3uhomuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzJjMTg3ZDk4YjQ2MDM4MDRlZDExNjVhZGI0NTA5YjYz MGE4M2EwHhcNMjUxMjE1MDYwMTA0WhcNMjUxMjE2MDYwMTA0WjAzMTEwLwYDVQQD Eyg3N2E1ZTUxNjE2ODlkZGIyZDI0NWIyODI4NmU3N2RkZTllZGZjYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD80tcJsc2jnPW5U75hY77LFWJ7C anVfr/u1LGFsorROpkLZgt2p95gotKtfF7M7au9O9h/RceGew+SeVbFgltZzHFcz 5ZWPi5Q4u9DDyYuPoTi9LpMUBgzOkm36dByabJc5XPESAYAgaQcporSWlnDkvDQC Sl8vQAOdCcJ49Pa8zyTMW+CaYJMYofMnMEyeKBA8OOlfRKEr3Ds9dFP42UK2Q3F0 /ud6upJkGX6JqQST8WL/TorJSkVeKYHYruN7SaJKFVGT9vmBe3Gj9JcllwFNDyu6 BVG+MasTRRbLdpsdiEGGvX1hgxpm3L2g4CB6kVeewiPjMkL7skdfdVZ7TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHel5RYWid2y0kWygobnfd6e38ojMB8GA1UdIwQY MBaAFALCwYfZi0YDgE7RFlrbRQm2MKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMt N2ZlYjE4YjlmNTUyLzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMtN2ZlYjE4YjlmNTUy LzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOedSwkV LNAlO0KYYs2KDfkOs16ctfpUq6OB8XijXzAJ5WJMTVRpJXSpsirhDl+WOFvo/a2L VbuyRzkvkI0EBiE166s5nTOyAUOVQeeXgqTVrCav5zVjwHovo9BpqTQnZLiEAI5y 3C9yLjQY1H7plj2la5d5R7R63qfarUnq/ZuK8SEp3uMnNRqb2JPV+AZYtslsrE/z VJO1NchStTFvojjjFWa/i22i7s2orjolCU18ZZAcqpzFjDFtXon2w4ns3+RSufgf yJM7Bzk68slHmlQnu/nwVrJLV1k4thk96u0T/8KuLWhOZTrUBMqU2kjpcpIN7IHY 7Qo0Tt00za57Wg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:22:00 2025 by rpki-client