This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json) Hash identifier: /sai8YAUU7G6WSgrMc05B/+P40e2zWpKkv3CaHF1z9c= Subject key identifier: 2B:E0:AE:A8:F8:62:A1:CA:E9:64:16:E1:74:D6:61:62:B7:6E:8B:84 Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4 Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4 Certificate serial: 019AFCC4511969F149C38675464DCD9D7642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft Manifest number: 01D8 Signing time: Mon 08 Dec 2025 07:01:55 +0000 Manifest this update: Mon 08 Dec 2025 07:01:55 +0000 Manifest next update: Tue 09 Dec 2025 07:01:55 +0000 Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: 1h93tCCnqyWqIRUDrQ6dOejTMW+53nvoSfHc/cgP1IY=) 2: I_Z5070VnqjEINScGnrsjIIGhyI.roa (hash: aKnIa9mebw8FwAQj874+YedV1EUpg+SaV2Y+JlM4u6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:51:19:69:f1:49:c3:86:75:46:4d:cd:9d:76:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4 Validity Not Before: Dec 8 07:01:55 2025 GMT Not After : Dec 9 07:01:55 2025 GMT Subject: CN=2be0aea8f862a1cae96416e174d66162b76e8b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:4c:ce:14:09:a1:fd:76:9b:37:b2:26:05: 62:bb:a2:f0:9e:86:0a:57:b1:29:cd:d1:26:61:36: c5:e0:54:09:0c:11:ec:a8:ae:57:e3:ce:c3:55:e6: 14:0d:c4:c3:f5:60:34:f8:8e:3a:4e:4f:f3:18:3f: a2:50:f8:d0:b7:58:77:19:bb:41:ab:25:d3:43:ad: 3d:33:75:54:2e:39:fd:27:9a:62:b5:fc:8f:f7:68: 5f:3a:3b:5b:c7:e1:62:3b:01:5c:e3:ca:0c:52:ef: 2e:cd:e5:8e:1b:a9:89:36:77:00:6e:3e:2b:7f:5d: 0d:79:aa:92:cf:44:b5:33:d3:e6:3a:b2:07:1e:00: 07:00:3e:f3:f3:6d:27:4d:b9:ba:2e:d9:23:54:39: bc:a5:3f:5d:f7:69:ca:90:14:09:d5:65:18:da:78: 7c:c9:c5:18:3d:54:db:65:fa:74:a3:5e:20:66:f4: 40:62:ac:d8:b5:50:2f:10:80:43:cf:14:d6:49:4a: c8:f2:80:50:c3:08:34:f4:e3:38:f4:21:6d:fd:7a: ff:9d:28:34:12:1f:ef:d7:cf:17:03:b4:a1:13:4d: d1:2d:dd:62:38:c9:f0:09:ea:58:aa:65:71:5c:08: 25:8c:1c:36:4a:63:c8:65:d8:92:6a:90:80:f7:1d: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:AE:A8:F8:62:A1:CA:E9:64:16:E1:74:D6:61:62:B7:6E:8B:84 X509v3 Authority Key Identifier: keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ad:8e:dc:cd:5d:f4:86:12:aa:2f:00:7d:d4:bb:ee:fb:da: 32:48:ff:8a:1c:6c:70:d0:4c:f6:8e:50:c9:12:aa:bd:45:38: cd:aa:f3:56:fa:a2:25:32:d3:7f:c9:eb:e5:b7:d7:d1:54:01: 0f:1b:12:02:35:d9:e9:08:f0:f3:f0:35:b6:b9:98:3f:2a:17: a6:22:ab:85:b4:cb:f7:6d:c3:86:e4:ea:35:e6:a4:97:38:c9: 13:77:d2:0e:72:b4:59:ef:40:87:ed:e1:29:49:7e:b5:91:fa: 5c:ad:e8:c7:fc:ac:d7:85:de:b8:aa:fc:07:f6:27:6c:79:60: 67:57:00:38:dc:79:c3:88:e6:a4:d9:42:ba:13:e3:b7:24:ea: c5:07:bb:97:62:d1:eb:e5:48:8b:5a:19:64:46:14:12:f7:f8: 48:4d:f6:01:98:9f:3e:80:42:fe:b8:39:fd:0d:4b:75:bb:e8: 69:fd:46:1c:55:c9:d3:7f:65:65:0e:05:5a:44:b1:89:a6:20: 30:02:ed:95:ba:73:03:93:38:39:aa:30:05:9c:fd:d1:90:ce: 59:a0:bc:88:7c:50:e8:c0:fc:60:46:ce:42:01:e2:16:ff:c5: 4d:e7:6f:2c:dc:4a:2b:20:59:85:c1:06:30:ff:44:b7:ca:b0: 81:a9:d6:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xFEZafFJw4Z1Rk3NnXZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZTYyMjU2NDQ4NDY0OWE1YTY1N2I0NWM5ZDNiYjMwYzc4 OWEzZTQwHhcNMjUxMjA4MDcwMTU1WhcNMjUxMjA5MDcwMTU1WjAzMTEwLwYDVQQD EygyYmUwYWVhOGY4NjJhMWNhZTk2NDE2ZTE3NGQ2NjE2MmI3NmU4Yjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo71MzhQJof12mzeyJgViu6LwnoYK V7EpzdEmYTbF4FQJDBHsqK5X487DVeYUDcTD9WA0+I46Tk/zGD+iUPjQt1h3GbtB qyXTQ609M3VULjn9J5pitfyP92hfOjtbx+FiOwFc48oMUu8uzeWOG6mJNncAbj4r f10NeaqSz0S1M9PmOrIHHgAHAD7z820nTbm6LtkjVDm8pT9d92nKkBQJ1WUY2nh8 ycUYPVTbZfp0o14gZvRAYqzYtVAvEIBDzxTWSUrI8oBQwwg09OM49CFt/Xr/nSg0 Eh/v188XA7ShE03RLd1iOMnwCepYqmVxXAgljBw2SmPIZdiSapCA9x0jCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvgrqj4YqHK6WQW4XTWYWK3bouEMB8GA1UdIwQY MBaAFAHmIlZEhGSaWmV7RcnTuzDHiaPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjIt NzIyNjE0Y2VjYjA5LzEvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjItNzIyNjE0Y2VjYjA5 LzEvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK2O3M1d 9IYSqi8AfdS77vvaMkj/ihxscNBM9o5QyRKqvUU4zarzVvqiJTLTf8nr5bfX0VQB DxsSAjXZ6Qjw8/A1trmYPyoXpiKrhbTL923DhuTqNeaklzjJE3fSDnK0We9Ah+3h KUl+tZH6XK3ox/ys14XeuKr8B/YnbHlgZ1cAONx5w4jmpNlCuhPjtyTqxQe7l2LR 6+VIi1oZZEYUEvf4SE32AZifPoBC/rg5/Q1Ldbvoaf1GHFXJ039lZQ4FWkSxiaYg MALtlbpzA5M4OaowBZz90ZDOWaC8iHxQ6MD8YEbOQgHiFv/FTedvLNxKKyBZhcEG MP9Et8qwganWPA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:52 2025 by rpki-client