This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json) Hash identifier: cLPheOu1ppyoxRx6ipcXGK0fd7W7k+A2QUm+P/FXcRw= Subject key identifier: 9E:20:5F:0B:5D:41:2D:28:EF:71:F5:51:40:C7:AD:D8:57:10:99:94 Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d Certificate serial: 019B06D9041984B18F3AA8C2AB3E28A11995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft Manifest number: 1044 Signing time: Wed 10 Dec 2025 06:00:44 +0000 Manifest this update: Wed 10 Dec 2025 06:00:44 +0000 Manifest next update: Thu 11 Dec 2025 06:00:44 +0000 Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: QuHpnqeLbbyOUJCpyZ0gSx/72muwurVOJyLlL6sbOJQ=) 2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=) 3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=) 4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:04:19:84:b1:8f:3a:a8:c2:ab:3e:28:a1:19:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d Validity Not Before: Dec 10 06:00:44 2025 GMT Not After : Dec 11 06:00:44 2025 GMT Subject: CN=9e205f0b5d412d28ef71f55140c7add857109994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:f9:9b:68:35:13:ac:17:65:b6:19:83:ea: 9b:86:69:16:d0:23:57:d1:8b:01:82:ef:b5:65:0b: 20:6f:ca:d8:a2:dc:c0:0a:1b:80:cb:f3:0f:b9:ce: fc:2c:52:75:4d:e4:2c:04:35:1b:f0:83:0f:ff:6a: 87:06:95:a9:80:ab:05:f3:c7:cd:2e:f7:27:ea:f7: 66:52:da:ee:73:a7:19:37:9e:55:49:3f:f4:83:cd: fd:da:14:6c:59:49:32:21:1a:62:7f:7e:a3:5c:56: 45:00:1f:14:54:95:67:79:98:ec:10:21:d7:27:da: 8f:16:81:fb:d2:00:d7:4e:22:b7:49:a0:fa:03:cf: 95:87:d5:f5:93:b3:33:c0:a7:f9:d0:3c:6e:25:9d: a2:ff:57:4c:98:20:0e:5c:56:bf:d8:2b:00:18:b5: 4d:a5:3a:3f:aa:44:8e:8b:bb:d0:d9:43:66:5a:24: dc:db:2d:00:53:c1:3e:bc:e0:1a:22:15:94:ef:30: 5f:7e:8e:d2:e0:e1:82:01:6f:72:67:12:3a:19:45: b9:66:df:da:6c:42:bb:16:61:92:8b:e2:89:b4:34: 5e:c9:80:72:d7:d1:18:fb:74:96:fd:8e:b8:62:6b: 29:84:40:5b:28:b5:69:02:3f:1b:7d:a5:d4:d3:01: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:20:5F:0B:5D:41:2D:28:EF:71:F5:51:40:C7:AD:D8:57:10:99:94 X509v3 Authority Key Identifier: keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e6:e8:58:3d:5e:99:cb:c8:d9:de:41:ef:50:8d:ae:4b:44: ae:00:57:21:cc:a2:d2:95:81:d0:75:28:27:37:13:4d:b2:23: b7:cc:db:a8:20:19:b4:ec:c7:e3:ba:6c:77:3b:9a:98:ea:46: 0b:d5:1a:d7:11:99:6a:ed:e5:8c:45:cb:4d:e3:18:7d:e8:3a: a7:8c:89:b5:fc:30:79:69:4e:c0:db:30:f1:ba:47:89:19:d9: e6:0b:9e:4f:11:ad:c8:aa:77:e5:2a:75:9d:3c:5a:1c:d7:e1: 92:bd:6e:ad:2c:2c:d4:9a:92:63:e0:eb:11:a2:64:10:98:b4: 57:19:0b:54:d1:6b:b5:0b:3f:51:5d:db:50:be:8e:ca:45:36: 79:02:66:8e:8b:9d:ff:3e:2c:ea:81:5a:8b:c8:77:e7:a8:31: 95:27:12:10:3f:61:2f:31:82:ed:2a:c1:7a:01:50:53:e6:ee: ae:cf:af:52:4d:53:8a:aa:8e:9d:76:04:88:2a:10:a1:f7:28: 03:ec:5c:d0:23:26:35:de:0a:5c:1b:0f:09:7b:f4:8b:d7:06: 2d:56:47:0e:c7:d8:af:09:66:e6:28:07:96:85:a9:60:0d:f3: e3:77:10:eb:c3:de:4c:63:53:cb:6f:8d:8d:25:ae:de:3c:83: ba:1a:35:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2QQZhLGPOqjCqz4ooRmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz NTJmNWQwHhcNMjUxMjEwMDYwMDQ0WhcNMjUxMjExMDYwMDQ0WjAzMTEwLwYDVQQD Eyg5ZTIwNWYwYjVkNDEyZDI4ZWY3MWY1NTE0MGM3YWRkODU3MTA5OTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycP5m2g1E6wXZbYZg+qbhmkW0CNX 0YsBgu+1ZQsgb8rYotzAChuAy/MPuc78LFJ1TeQsBDUb8IMP/2qHBpWpgKsF88fN Lvcn6vdmUtruc6cZN55VST/0g8392hRsWUkyIRpif36jXFZFAB8UVJVneZjsECHX J9qPFoH70gDXTiK3SaD6A8+Vh9X1k7MzwKf50DxuJZ2i/1dMmCAOXFa/2CsAGLVN pTo/qkSOi7vQ2UNmWiTc2y0AU8E+vOAaIhWU7zBffo7S4OGCAW9yZxI6GUW5Zt/a bEK7FmGSi+KJtDReyYBy19EY+3SW/Y64YmsphEBbKLVpAj8bfaXU0wFInQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4gXwtdQS0o73H1UUDHrdhXEJmUMB8GA1UdIwQY MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt MGRmN2RmNGQ1YjAxLzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauboWD1e mcvI2d5B71CNrktErgBXIcyi0pWB0HUoJzcTTbIjt8zbqCAZtOzH47psdzuamOpG C9Ua1xGZau3ljEXLTeMYfeg6p4yJtfwweWlOwNsw8bpHiRnZ5gueTxGtyKp35Sp1 nTxaHNfhkr1urSws1JqSY+DrEaJkEJi0VxkLVNFrtQs/UV3bUL6OykU2eQJmjoud /z4s6oFai8h356gxlScSED9hLzGC7SrBegFQU+burs+vUk1TiqqOnXYEiCoQofco A+xc0CMmNd4KXBsPCXv0i9cGLVZHDsfYrwlm5igHloWpYA3z43cQ68PeTGNTy2+N jSWu3jyDuho1jA== -----END CERTIFICATE-----Generated at Wed Dec 10 12:55:04 2025 by rpki-client