This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json) Hash identifier: eS2NRSYGviMkBxpOFT76y2HjzowHgljfzreilXngzh8= Subject key identifier: AA:4D:E4:63:E0:1A:B6:6B:04:92:AF:56:A3:8C:FB:64:3D:4C:90:F9 Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36 Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736 Certificate serial: 019B3C7E5AE58EFC1FD118519B8A3A38BDE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 16:01:12 +0000 Manifest this update: Sat 20 Dec 2025 16:01:12 +0000 Manifest next update: Sun 21 Dec 2025 16:01:12 +0000 Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=) 2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=) 3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: LYPgrj0N+py++pejYCrvxwFnucZw0+vToyA44CYArIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:5a:e5:8e:fc:1f:d1:18:51:9b:8a:3a:38:bd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736 Validity Not Before: Dec 20 16:01:12 2025 GMT Not After : Dec 21 16:01:12 2025 GMT Subject: CN=aa4de463e01ab66b0492af56a38cfb643d4c90f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:bb:46:5c:3a:c0:c2:0e:c6:ad:93:c9:46: 30:84:cb:6c:b4:a6:6f:da:ce:fe:be:04:5e:ee:5a: d4:9a:6f:bb:3e:b6:84:3e:5b:71:0e:10:e4:f6:52: 2d:49:f2:6b:37:ba:81:b7:17:72:93:62:40:ec:c1: 95:56:fb:e6:bb:92:be:66:2e:e4:94:12:65:72:93: f6:09:f7:0e:17:dc:60:72:8b:6a:0b:a2:29:57:5b: 35:52:d5:a8:1c:85:cb:48:05:39:7f:57:ca:f3:c9: eb:20:e1:2e:e5:45:4c:13:f9:a1:7a:d9:81:57:07: b4:86:28:5c:c3:b3:af:ac:a6:d0:ab:fd:1f:d8:98: 82:a6:c5:2c:db:ec:7c:d5:19:99:53:98:2e:17:36: d4:0a:28:04:d9:42:ef:db:7b:15:21:ce:03:3a:60: 2f:8b:7a:35:5f:8d:ad:63:3f:93:60:77:01:80:f4: 11:d3:68:48:ce:c1:40:02:bb:d7:67:06:27:1f:1b: e0:26:7f:91:05:2d:1c:6f:93:33:da:03:79:f7:54: 53:73:d7:4c:3a:73:b3:3e:a6:70:06:0b:d4:f5:cf: 4a:9c:aa:be:4a:e0:f2:2a:ff:b4:61:59:5a:a0:9f: 64:19:76:82:76:bf:67:a0:76:0f:b4:db:37:62:17: a2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4D:E4:63:E0:1A:B6:6B:04:92:AF:56:A3:8C:FB:64:3D:4C:90:F9 X509v3 Authority Key Identifier: keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:78:a4:4e:2e:ea:bb:0c:1f:78:d7:32:f6:53:f2:b0:06:ae: 16:70:92:4b:52:a1:69:de:1c:aa:65:19:61:dc:c4:d6:95:a5: c5:60:57:95:c1:d5:cd:e8:e6:1d:41:01:cf:bd:11:d1:79:30: ec:28:f9:83:96:d7:07:02:5b:ff:47:c5:50:a8:6a:a5:96:b5: b5:2e:d0:81:63:54:0c:86:13:75:59:d3:be:f7:e0:74:98:07: 74:59:e2:d9:54:34:db:be:49:b8:d8:57:ca:b2:f9:a2:27:c4: c5:2f:d6:fc:1b:ce:99:71:0d:9b:9a:23:a2:74:81:4b:74:a3: 14:4c:d3:52:03:e8:85:2d:16:57:7f:86:81:7f:f7:f7:c2:b8: 2b:95:b1:7b:bd:19:36:58:14:fb:c1:42:1f:5f:33:01:b0:82: 18:5f:70:13:12:e7:e2:69:c3:a6:d4:ec:95:c5:5d:d0:34:19: c6:4f:35:05:10:60:b3:37:d8:55:79:95:f4:74:c7:a1:4c:93: 24:b1:8e:da:5b:87:f8:a3:d7:f6:30:66:4a:da:bf:06:e5:a0: 47:c2:6f:42:81:f8:90:27:1e:a1:26:5e:47:af:3b:c0:63:98: bb:7d:c2:fc:57:73:c5:74:fa:ca:47:40:19:9d:9b:51:dc:06: 95:22:57:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flrljvwf0RhRm4o6OL3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNmNjNzkwNjk1YjcxOWI5MjNjNzRkMjBmYWI3ZTYzYzE4 YmM3MzYwHhcNMjUxMjIwMTYwMTEyWhcNMjUxMjIxMTYwMTEyWjAzMTEwLwYDVQQD EyhhYTRkZTQ2M2UwMWFiNjZiMDQ5MmFmNTZhMzhjZmI2NDNkNGM5MGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT27Rlw6wMIOxq2TyUYwhMtstKZv 2s7+vgRe7lrUmm+7PraEPltxDhDk9lItSfJrN7qBtxdyk2JA7MGVVvvmu5K+Zi7k lBJlcpP2CfcOF9xgcotqC6IpV1s1UtWoHIXLSAU5f1fK88nrIOEu5UVME/mhetmB Vwe0hihcw7OvrKbQq/0f2JiCpsUs2+x81RmZU5guFzbUCigE2ULv23sVIc4DOmAv i3o1X42tYz+TYHcBgPQR02hIzsFAArvXZwYnHxvgJn+RBS0cb5Mz2gN591RTc9dM OnOzPqZwBgvU9c9KnKq+SuDyKv+0YVlaoJ9kGXaCdr9noHYPtNs3YheihQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpN5GPgGrZrBJKvVqOM+2Q9TJD5MB8GA1UdIwQY MBaAFGtsx5BpW3Gbkjx00g+rfmPBi8c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTkt NTdkNWY0MDFiNTY0LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTktNTdkNWY0MDFiNTY0 LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnikTi7q uwwfeNcy9lPysAauFnCSS1Khad4cqmUZYdzE1pWlxWBXlcHVzejmHUEBz70R0Xkw 7Cj5g5bXBwJb/0fFUKhqpZa1tS7QgWNUDIYTdVnTvvfgdJgHdFni2VQ0275JuNhX yrL5oifExS/W/BvOmXENm5ojonSBS3SjFEzTUgPohS0WV3+GgX/398K4K5Wxe70Z NlgU+8FCH18zAbCCGF9wExLn4mnDptTslcVd0DQZxk81BRBgszfYVXmV9HTHoUyT JLGO2luH+KPX9jBmStq/BuWgR8JvQoH4kCceoSZeR687wGOYu33C/FdzxXT6ykdA GZ2bUdwGlSJXqw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:22:44 2025 by rpki-client