This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json) Hash identifier: fz6UIa3WKrR6nCkDg5eqDnM68kv2+lZeCEhxNsF9SEI= Subject key identifier: A8:AC:62:22:07:C9:00:48:93:4A:7D:97:30:C3:9C:D4:4B:AC:E6:78 Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17 Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17 Certificate serial: 019AF12DF18F99062252952C0CB73CB9DA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=) 2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: u4+6G5IlcIXr90MgmmcZOlYs5g0x102IsgwJWausPVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f1:8f:99:06:22:52:95:2c:0c:b7:3c:b9:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=a8ac622207c90048934a7d9730c39cd44bace678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:1d:dc:1d:cc:dc:d2:79:b5:a0:58:23:d9: 90:dc:16:19:6f:0f:1c:35:34:a5:96:ca:56:f4:a9: 24:dd:3f:43:4f:19:e2:12:b0:33:6e:07:30:c2:98: 7a:ca:79:72:8f:3d:11:d0:27:b3:b2:eb:89:60:8c: 83:a2:8e:74:f6:39:bd:02:f6:96:c4:fe:32:1c:98: 70:10:80:07:bc:ba:58:9a:6d:a8:d0:65:0b:ff:df: d2:68:8b:9a:46:eb:d0:9e:3c:19:dd:cc:30:f0:f4: 76:9d:a8:8d:0d:b9:fa:0d:4a:d7:a7:64:21:7b:80: ae:98:f8:e7:2d:4e:dd:b3:89:d0:d8:00:32:89:8e: 8d:64:15:86:16:b5:30:29:2f:38:91:c9:02:2e:9c: d2:33:5c:88:3b:37:48:58:39:57:9e:dd:95:10:c5: 78:99:f1:7b:cf:6f:8e:cb:b1:77:0a:56:2f:08:ef: 71:0c:2d:e4:7d:93:d1:b1:f4:ba:4e:54:af:c9:d5: ed:50:2d:5c:e6:27:d9:c8:c8:1f:6e:1a:35:3f:52: 30:4a:61:b4:f2:6c:c6:2f:9d:84:37:ed:61:c3:fd: 68:fe:de:63:fc:14:d5:1e:28:c5:29:84:d6:38:f3: 0e:60:95:69:f6:93:a7:67:55:33:99:b4:75:19:9c: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:62:22:07:C9:00:48:93:4A:7D:97:30:C3:9C:D4:4B:AC:E6:78 X509v3 Authority Key Identifier: keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:19:fb:32:99:a5:01:6c:fe:aa:97:70:ff:03:b2:3f:c4:14: 7e:27:2b:f0:fc:65:39:94:2c:26:86:8b:b4:ee:68:a5:97:a4: de:0b:84:59:26:69:69:9c:ac:5f:8c:6a:85:e8:02:82:ac:76: f3:a6:5b:84:be:43:39:a7:f3:40:d7:e4:2e:54:08:54:b7:8b: fc:5f:a2:9b:d9:ac:3d:20:92:6d:00:29:46:10:ca:c4:11:3a: 0f:e5:6b:4a:29:03:b9:b0:79:98:00:13:60:dc:69:99:2d:23: 78:92:76:48:5d:35:ca:89:5e:3e:84:be:e3:da:15:21:20:38: 63:a4:99:a7:9d:e9:c4:2b:cf:9c:eb:1f:e8:dc:74:2a:1c:58: 84:c2:c7:4d:8d:00:92:a5:80:2a:cc:df:3e:b7:0c:3d:13:e8: fa:9e:11:75:84:b0:e2:ca:41:ab:70:11:c6:9e:9d:6d:da:08: a7:7a:62:5d:80:ec:8c:d0:e0:f8:8e:d4:1d:2b:74:25:e5:44: e0:28:b6:ea:e6:55:4a:f6:b3:8f:2e:00:5d:0d:cc:a7:7f:e7: ba:46:4e:4b:dc:53:ed:12:3f:1d:98:ae:81:b2:fc:5e:d3:f5: 7d:e0:28:94:1f:1e:18:ac:28:88:dd:1e:51:7f:42:e1:95:f7: 40:26:7e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfGPmQYiUpUsDLc8udpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTMxODhlYmZjZTIwZTViYzUzZjNhY2Y1N2Y0MDdkOWU1 N2FjMTcwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EyhhOGFjNjIyMjA3YzkwMDQ4OTM0YTdkOTczMGMzOWNkNDRiYWNlNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdMd3B3M3NJ5taBYI9mQ3BYZbw8c NTSllspW9Kkk3T9DTxniErAzbgcwwph6ynlyjz0R0CezsuuJYIyDoo509jm9AvaW xP4yHJhwEIAHvLpYmm2o0GUL/9/SaIuaRuvQnjwZ3cww8PR2naiNDbn6DUrXp2Qh e4CumPjnLU7ds4nQ2AAyiY6NZBWGFrUwKS84kckCLpzSM1yIOzdIWDlXnt2VEMV4 mfF7z2+Oy7F3ClYvCO9xDC3kfZPRsfS6TlSvydXtUC1c5ifZyMgfbho1P1IwSmG0 8mzGL52EN+1hw/1o/t5j/BTVHijFKYTWOPMOYJVp9pOnZ1UzmbR1GZw1AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKisYiIHyQBIk0p9lzDDnNRLrOZ4MB8GA1UdIwQY MBaAFGiTGI6/ziDlvFPzrPV/QH2eV6wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2Yt MmQyYjRmNzBjM2EzLzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2YtMmQyYjRmNzBjM2Ez LzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhn7Mpml AWz+qpdw/wOyP8QUficr8PxlOZQsJoaLtO5opZek3guEWSZpaZysX4xqhegCgqx2 86ZbhL5DOafzQNfkLlQIVLeL/F+im9msPSCSbQApRhDKxBE6D+VrSikDubB5mAAT YNxpmS0jeJJ2SF01yolePoS+49oVISA4Y6SZp53pxCvPnOsf6Nx0KhxYhMLHTY0A kqWAKszfPrcMPRPo+p4RdYSw4spBq3ARxp6dbdoIp3piXYDsjNDg+I7UHSt0JeVE 4Ci26uZVSvazjy4AXQ3Mp3/nukZOS9xT7RI/HZiugbL8XtP1feAolB8eGKwoiN0e UX9C4ZX3QCZ+pg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:29 2025 by rpki-client