This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json) Hash identifier: TSzqBii+daVBCbzAOkesnVHdxBv9lIwW+y/GDQbr8N8= Subject key identifier: A7:AB:62:43:E8:68:B4:E4:74:86:2D:1F:83:D4:4E:72:B4:A6:0F:96 Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Certificate serial: 019B131493EB228AF8C96E9CABE351907EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 15:01:14 +0000 Manifest this update: Fri 12 Dec 2025 15:01:14 +0000 Manifest next update: Sat 13 Dec 2025 15:01:14 +0000 Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: /QiMLfHETE7yrOPwVulIBeNObVNBBztG/rToN8d8isM=) 2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:14:93:eb:22:8a:f8:c9:6e:9c:ab:e3:51:90:7e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916 Validity Not Before: Dec 12 15:01:14 2025 GMT Not After : Dec 13 15:01:14 2025 GMT Subject: CN=a7ab6243e868b4e474862d1f83d44e72b4a60f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:f7:17:ef:77:bc:b1:24:df:16:f8:72:82: c1:67:26:80:13:47:52:77:61:0e:b6:78:70:84:b1: 81:d8:cf:7f:62:3e:ff:cb:e5:c1:15:46:58:54:55: 57:eb:97:28:11:b6:fa:be:5e:15:59:6f:3e:59:e6: c7:c3:38:89:e9:f5:b3:8c:b1:39:39:88:eb:9a:79: 5c:94:9e:00:e9:7a:72:b0:fd:88:38:f4:53:ee:46: 17:9d:64:61:7e:a8:c2:b1:26:af:73:61:98:0f:3d: 24:72:ed:f2:5a:24:35:d0:f1:36:9c:db:96:06:79: e6:ed:88:50:e9:f2:6d:30:fd:ba:24:0d:7d:77:7c: 04:a8:f6:cf:6d:61:85:b7:35:89:3e:75:71:c0:69: 72:75:81:34:e0:d6:7c:f4:fb:96:b4:1a:de:df:28: 95:5c:70:12:f1:fc:4f:7c:4c:1f:d0:ed:88:bb:a6: 2c:13:49:e4:29:cc:50:c7:e1:23:f6:fb:ca:4c:54: c7:90:a6:27:4d:54:82:9a:c9:68:9f:86:b2:88:78: 58:fa:1e:64:c7:12:c4:82:6a:2c:46:50:76:d1:c7: 03:15:2b:e4:d5:d2:e6:67:37:0a:f5:38:2d:71:be: 73:3b:b9:75:28:77:5d:9f:1f:3a:79:67:4b:c7:d8: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AB:62:43:E8:68:B4:E4:74:86:2D:1F:83:D4:4E:72:B4:A6:0F:96 X509v3 Authority Key Identifier: keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:79:06:43:13:18:78:17:73:b4:e9:d5:00:66:10:51:a9:97: 71:e1:34:c7:eb:85:e7:13:39:f4:95:a2:c2:6e:9b:5b:98:d8: 36:18:13:95:17:88:81:c3:8f:72:72:32:93:35:59:68:15:37: 33:d3:66:30:59:6e:60:00:80:c9:4f:b0:61:47:d9:58:12:2f: c0:1e:39:51:59:16:b6:40:bf:5a:17:dc:63:28:12:ae:9c:80: 98:79:c8:f6:5c:b8:3d:e0:b2:f0:08:5c:49:cc:aa:4b:59:49: 3d:d2:e2:25:10:ff:25:80:c1:7d:32:62:7f:11:04:62:2a:01: 66:e1:6b:a8:5a:54:b1:d2:58:ff:c5:cb:fa:15:18:df:b7:3b: 15:15:d4:f1:35:93:bb:8e:19:ef:e9:37:0f:49:d0:b3:af:4e: 92:29:0d:00:68:fb:e3:96:51:37:66:3f:53:d8:16:db:e8:3e: e3:e3:e3:b5:b0:3b:9b:37:09:3f:9a:f4:de:0f:a0:a0:16:e5: f6:a1:1a:5a:7c:93:4a:69:b2:79:69:74:da:53:e8:42:7c:74: c9:15:f6:bc:a8:55:2e:c0:40:95:82:41:ea:83:c2:cd:00:c2: 62:86:cf:05:24:3e:f2:89:b1:1d:7d:4c:0f:1c:24:2f:d6:7e: f7:62:f7:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTFJPrIor4yW6cq+NRkH7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZmJkOGQ3MmJmZmJiY2Q3NzA3NmE2YTZjYzk5NGQzNjQy ODQ5MTYwHhcNMjUxMjEyMTUwMTE0WhcNMjUxMjEzMTUwMTE0WjAzMTEwLwYDVQQD EyhhN2FiNjI0M2U4NjhiNGU0NzQ4NjJkMWY4M2Q0NGU3MmI0YTYwZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg73F+93vLEk3xb4coLBZyaAE0dS d2EOtnhwhLGB2M9/Yj7/y+XBFUZYVFVX65coEbb6vl4VWW8+WebHwziJ6fWzjLE5 OYjrmnlclJ4A6XpysP2IOPRT7kYXnWRhfqjCsSavc2GYDz0kcu3yWiQ10PE2nNuW Bnnm7YhQ6fJtMP26JA19d3wEqPbPbWGFtzWJPnVxwGlydYE04NZ89PuWtBre3yiV XHAS8fxPfEwf0O2Iu6YsE0nkKcxQx+Ej9vvKTFTHkKYnTVSCmslon4ayiHhY+h5k xxLEgmosRlB20ccDFSvk1dLmZzcK9Tgtcb5zO7l1KHddnx86eWdLx9ic6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKerYkPoaLTkdIYtH4PUTnK0pg+WMB8GA1UdIwQY MBaAFAL72Ncr/7vNdwdqamzJlNNkKEkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAt MjNhZjU1ZTAxOTBkLzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAtMjNhZjU1ZTAxOTBk LzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3kGQxMY eBdztOnVAGYQUamXceE0x+uF5xM59JWiwm6bW5jYNhgTlReIgcOPcnIykzVZaBU3 M9NmMFluYACAyU+wYUfZWBIvwB45UVkWtkC/WhfcYygSrpyAmHnI9ly4PeCy8Ahc ScyqS1lJPdLiJRD/JYDBfTJifxEEYioBZuFrqFpUsdJY/8XL+hUY37c7FRXU8TWT u44Z7+k3D0nQs69OkikNAGj745ZRN2Y/U9gW2+g+4+PjtbA7mzcJP5r03g+goBbl 9qEaWnyTSmmyeWl02lPoQnx0yRX2vKhVLsBAlYJB6oPCzQDCYobPBSQ+8omxHX1M DxwkL9Z+92L31Q== -----END CERTIFICATE-----Generated at Fri Dec 12 18:33:06 2025 by rpki-client