This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json) Hash identifier: wqIw2vhvDpQ6hLPYQabsR8Uxgo3oDZ8USHxev6wyHNo= Subject key identifier: E0:28:A1:6C:B9:16:F8:03:39:A7:D4:C2:69:7B:B9:C3:94:B6:AD:88 Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019AF42E67CD08B9FD4C17991C2A8AA028DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft Manifest number: 1782 Signing time: Sat 06 Dec 2025 15:01:13 +0000 Manifest this update: Sat 06 Dec 2025 15:01:13 +0000 Manifest next update: Sun 07 Dec 2025 15:01:13 +0000 Files and hashes: 1: 1OWaJkh3xMG85_hCH7EG9MsKPnE.roa (hash: 7Qj+nAZULs6II5SyfVpkBsSwcikp23VZRDpTVixA+q4=) 2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: FNhMUQAavdYsqZnEm/lqqjaEGdQra7vEhzKe9NCkiEc=) 3: K1GYgGr3hVsUpWVJLHmGy32L5QA.roa (hash: V+/gfd5Z1YHEZovVaNN6AlDJJhDgcbG2IadrxrDNEPo=) 4: a2fnNZYaC7tSvST6yxN7zVnr8rk.roa (hash: B9FNmdbIQmgv4vbLGVGZQBmqWpabl1hGlyBuKo/Sams=) 5: qhnp9CUojBvxHZsyHr9qS7mJwVY.roa (hash: +es7sp6A0ISc395zb693NSLJXGVU44id/39tgl37MH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:67:cd:08:b9:fd:4c:17:99:1c:2a:8a:a0:28:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Dec 6 15:01:13 2025 GMT Not After : Dec 7 15:01:13 2025 GMT Subject: CN=e028a16cb916f80339a7d4c2697bb9c394b6ad88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:20:c3:9f:f1:47:c6:05:ab:0c:1d:03:09: 0d:4d:6c:f0:50:cc:67:86:1d:a8:a8:42:02:88:c7: a8:e1:da:dd:5d:fd:57:57:d0:9d:e4:36:6a:3b:12: 73:07:b5:45:b6:1b:31:bd:ff:06:60:14:21:8d:2d: c6:8e:d3:a1:bf:9e:d8:9d:6e:57:43:b2:95:19:54: b7:49:33:c7:e8:84:4a:e2:f9:89:a4:15:15:ae:7a: 9d:d0:53:3f:df:93:b1:75:e6:75:ce:69:37:3e:60: 01:98:1d:07:c5:20:c6:bc:e4:67:41:b4:c5:d3:52: 4b:c3:e7:f4:0d:86:2e:61:0c:5a:a9:97:91:ef:0f: d6:bc:7c:bf:3c:4f:35:46:cc:2b:44:b3:06:a3:bb: 10:19:8a:f7:d3:1a:b3:81:7f:fa:70:9d:bb:97:10: ed:4a:10:bd:76:67:1f:38:3d:52:fa:eb:47:ba:6c: 02:cb:7b:ce:1e:b4:4e:80:83:e1:21:54:1a:5d:89: af:b3:f6:63:79:e2:9c:2d:3f:72:76:c4:dd:24:f2: ae:d3:2c:2a:f3:5a:ae:7c:0c:b7:59:14:fe:2a:ef: 2d:73:66:b8:60:41:6e:3e:8d:33:9f:51:4e:64:ea: c0:bf:72:e3:1b:9b:db:42:bf:d0:9f:d1:e3:5a:c7: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:28:A1:6C:B9:16:F8:03:39:A7:D4:C2:69:7B:B9:C3:94:B6:AD:88 X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ba:d5:3c:0c:8e:1d:93:15:dd:bb:8c:81:66:0c:81:fe:87: bc:2b:6a:0c:b4:64:2f:9c:b5:08:01:8e:5e:15:16:3d:c8:98: f9:f5:ce:0b:24:e3:46:4b:7d:f5:40:60:10:82:92:e8:ff:2c: f2:c5:3d:7b:7e:3e:b7:f2:e1:a5:c0:e5:9c:b9:9f:44:88:bf: a3:52:b7:39:b1:9d:aa:99:f8:dd:63:4a:f5:95:f8:fc:a9:30: e1:65:86:fc:c4:67:58:a3:c6:dc:0f:5c:1d:dd:47:0c:d9:80: ac:f4:c4:2b:43:7b:86:e2:6e:9c:62:b7:63:f2:bf:9b:13:da: 88:51:ca:c6:99:1a:dc:f7:ac:17:0a:57:9c:82:52:2b:32:61: 22:b4:8d:46:05:f4:ac:85:07:42:ab:13:64:13:bc:96:ed:f4: 6d:68:8d:1d:88:a0:5f:bd:f0:75:8c:da:6c:f8:ff:d4:6d:26: ce:1a:30:02:26:03:6e:fd:f6:1c:80:57:95:9f:a0:08:b9:3a: 05:f1:66:38:52:bd:bb:3e:81:c1:42:df:b1:d6:b8:27:ea:3d: db:ae:bf:0d:c7:b8:7c:08:84:b8:ed:20:b8:57:32:2c:0a:e0: a6:c7:1d:b6:16:1c:6c:7b:a8:29:b3:12:90:b4:73:b4:40:3c: bd:7a:ea:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmfNCLn9TBeZHCqKoCjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjUxMjA2MTUwMTEzWhcNMjUxMjA3MTUwMTEzWjAzMTEwLwYDVQQD EyhlMDI4YTE2Y2I5MTZmODAzMzlhN2Q0YzI2OTdiYjljMzk0YjZhZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbYgw5/xR8YFqwwdAwkNTWzwUMxn hh2oqEICiMeo4drdXf1XV9Cd5DZqOxJzB7VFthsxvf8GYBQhjS3GjtOhv57YnW5X Q7KVGVS3STPH6IRK4vmJpBUVrnqd0FM/35OxdeZ1zmk3PmABmB0HxSDGvORnQbTF 01JLw+f0DYYuYQxaqZeR7w/WvHy/PE81RswrRLMGo7sQGYr30xqzgX/6cJ27lxDt ShC9dmcfOD1S+utHumwCy3vOHrROgIPhIVQaXYmvs/ZjeeKcLT9ydsTdJPKu0ywq 81qufAy3WRT+Ku8tc2a4YEFuPo0zn1FOZOrAv3LjG5vbQr/Qn9HjWsf3IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAooWy5FvgDOafUwml7ucOUtq2IMB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrrVPAyO HZMV3buMgWYMgf6HvCtqDLRkL5y1CAGOXhUWPciY+fXOCyTjRkt99UBgEIKS6P8s 8sU9e34+t/LhpcDlnLmfRIi/o1K3ObGdqpn43WNK9ZX4/Kkw4WWG/MRnWKPG3A9c Hd1HDNmArPTEK0N7huJunGK3Y/K/mxPaiFHKxpka3PesFwpXnIJSKzJhIrSNRgX0 rIUHQqsTZBO8lu30bWiNHYigX73wdYzabPj/1G0mzhowAiYDbv32HIBXlZ+gCLk6 BfFmOFK9uz6BwULfsda4J+o9266/Dce4fAiEuO0guFcyLArgpscdthYcbHuoKbMS kLRztEA8vXrqpw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:18 2025 by rpki-client