This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json) Hash identifier: ORxYDCCzA9KfTMzJ6ieE+CZi/VQpLdqFZcpxbrZyiGc= Subject key identifier: 37:2E:B2:CD:B5:40:09:62:1C:40:6B:E0:52:78:C5:28:85:EE:35:A1 Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Certificate serial: 019B1EAADB19976D1EE7B266AEAB0FD05FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 21:01:12 +0000 Manifest this update: Sun 14 Dec 2025 21:01:12 +0000 Manifest next update: Mon 15 Dec 2025 21:01:12 +0000 Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: JXXleHZfKju0uPBjLbOvvlLNmmLCc3cOspU0cKnF8VA=) 2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:db:19:97:6d:1e:e7:b2:66:ae:ab:0f:d0:5f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Validity Not Before: Dec 14 21:01:12 2025 GMT Not After : Dec 15 21:01:12 2025 GMT Subject: CN=372eb2cdb54009621c406be05278c52885ee35a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:81:23:52:5f:f5:4d:d7:db:28:34:68:27:29: 8e:5a:eb:4d:53:3f:88:92:08:23:46:61:ef:da:18: a6:c8:fd:b7:c9:fa:a2:df:2f:b2:c7:b9:d2:22:7b: 2f:aa:62:87:d1:81:a1:c5:59:df:15:7e:24:03:36: 39:23:4a:fb:a5:3a:f7:97:39:c9:d6:7b:1f:52:9e: 38:55:32:f0:b7:2e:46:6a:66:2a:cd:b9:48:3a:2a: ce:40:cc:d8:eb:91:03:59:65:0a:76:e5:da:97:e5: 94:87:c2:a9:ad:6a:dd:1f:75:2f:dc:d8:b3:a8:99: c6:15:a0:a2:93:62:ad:2b:69:9c:42:1a:e2:0e:e4: 84:e3:d9:e4:6f:aa:11:73:f2:87:86:a2:dd:aa:9d: 9f:cf:c2:b5:c6:a1:1e:65:9a:d1:a0:39:fc:34:00: 4f:28:0c:89:9d:98:82:66:8f:9e:35:fa:1a:52:47: 35:98:a4:92:ed:48:75:9e:4e:07:fe:4d:20:c3:38: f1:24:c8:09:63:0a:36:42:8c:19:08:5b:fa:e5:fc: cb:34:e5:36:29:ce:f2:a5:8d:86:bc:11:37:ce:e8: 42:5f:df:23:e6:4e:97:55:ac:54:59:a9:e3:99:31: d5:35:82:63:f4:3d:af:0d:0d:06:13:a6:d2:cb:36: 4c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2E:B2:CD:B5:40:09:62:1C:40:6B:E0:52:78:C5:28:85:EE:35:A1 X509v3 Authority Key Identifier: keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c2:6c:b0:67:54:0c:60:3d:e3:e2:b1:3d:7e:51:b8:cb:3a: c8:d3:3c:e5:bb:ec:a8:63:15:d2:0f:f0:f3:3b:67:6c:09:a4: 7d:17:ea:cb:02:ee:ef:16:06:7c:5c:5a:6b:ca:4a:a7:b1:b4: 46:dc:79:b7:44:3a:1f:aa:6d:e1:cc:2d:73:5a:f3:e8:73:73: 6e:ae:80:59:35:10:82:c2:70:21:07:e0:90:fe:72:ef:51:fc: 1f:62:2f:25:63:79:42:8f:b5:c9:f6:c3:94:16:9a:08:d9:d1: 48:d5:ed:74:fc:ab:40:99:60:bf:16:c2:a9:3c:53:96:9d:ea: 95:39:c5:63:36:04:06:4e:ff:b4:36:2b:55:c9:3e:88:22:5a: 35:b8:72:81:6a:a6:90:81:6d:09:c0:58:b4:15:a8:cc:a0:e1: d1:76:4e:ad:34:e4:91:cb:f9:2e:0a:a1:e0:7f:f5:bc:91:ba: 40:14:40:33:0c:14:7e:b8:95:84:29:41:34:69:01:20:9e:6e: 2c:30:d8:3e:a9:07:c5:71:c0:50:d6:e5:a2:bf:d3:bf:e5:4a: 5d:33:53:62:fe:c5:dd:c6:bd:08:74:ef:b8:0d:69:2d:ac:ed: ed:e0:d2:8c:bb:c9:f5:50:7b:48:7e:5c:89:be:2a:59:f6:70: bd:19:1d:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqtsZl20e57JmrqsP0F/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZmJkOGQ3MmJmZmJiY2Q3NzA3NmE2YTZjYzk5NGQzNjQy ODQ5MTYwHhcNMjUxMjE0MjEwMTEyWhcNMjUxMjE1MjEwMTEyWjAzMTEwLwYDVQQD EygzNzJlYjJjZGI1NDAwOTYyMWM0MDZiZTA1Mjc4YzUyODg1ZWUzNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4EjUl/1TdfbKDRoJymOWutNUz+I kggjRmHv2himyP23yfqi3y+yx7nSInsvqmKH0YGhxVnfFX4kAzY5I0r7pTr3lznJ 1nsfUp44VTLwty5GamYqzblIOirOQMzY65EDWWUKduXal+WUh8KprWrdH3Uv3Niz qJnGFaCik2KtK2mcQhriDuSE49nkb6oRc/KHhqLdqp2fz8K1xqEeZZrRoDn8NABP KAyJnZiCZo+eNfoaUkc1mKSS7Uh1nk4H/k0gwzjxJMgJYwo2QowZCFv65fzLNOU2 Kc7ypY2GvBE3zuhCX98j5k6XVaxUWanjmTHVNYJj9D2vDQ0GE6bSyzZMgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcuss21QAliHEBr4FJ4xSiF7jWhMB8GA1UdIwQY MBaAFAL72Ncr/7vNdwdqamzJlNNkKEkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAt MjNhZjU1ZTAxOTBkLzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAtMjNhZjU1ZTAxOTBk LzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8JssGdU DGA94+KxPX5RuMs6yNM85bvsqGMV0g/w8ztnbAmkfRfqywLu7xYGfFxaa8pKp7G0 Rtx5t0Q6H6pt4cwtc1rz6HNzbq6AWTUQgsJwIQfgkP5y71H8H2IvJWN5Qo+1yfbD lBaaCNnRSNXtdPyrQJlgvxbCqTxTlp3qlTnFYzYEBk7/tDYrVck+iCJaNbhygWqm kIFtCcBYtBWozKDh0XZOrTTkkcv5Lgqh4H/1vJG6QBRAMwwUfriVhClBNGkBIJ5u LDDYPqkHxXHAUNblor/Tv+VKXTNTYv7F3ca9CHTvuA1pLazt7eDSjLvJ9VB7SH5c ib4qWfZwvRkdCQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:21 2025 by rpki-client