This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json) Hash identifier: ScvNp/QqUIu2orCsFloWoghcY2qLsLOq5RYGAMVAgHs= Subject key identifier: 7A:DA:7F:75:C2:49:B6:94:5C:05:8D:F5:55:F1:32:93:B6:68:0A:07 Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac Certificate serial: 019AF31C653E96010B0AF427C1C2F186968E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft Manifest number: 089F Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: 1-rRPCopFYmDMNDGALSnqCobspg8.roa (hash: 6hVXHifql97bRcIsJvQpXwPkBPemWPvtCyhSEbh0CDo=) 2: 8IS2SGLZvuejfiILX_HZy4EbxZ8.roa (hash: rsd4qoWJU7YOxhWnkiEgm/sIgrMf/LleiBk2mG4ubQg=) 3: CSQOd1Ivsq7SauN1-IwPUSzYm48.roa (hash: dGIueTuGLpuTY7iHF/OWsqSj5IRgJq+ixisf6vrNlv0=) 4: MUEabXTH7J0BwsIog7I6OfzuzkI.roa (hash: 9N5LvBOATRgD8zsq92oJDhXIXtyB1ta37GI9iUSZndY=) 5: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: ik0bSTGZ7DbevuqbkeVNMrKt1wuGqVE/LDwkYJXYRxg=) 6: bG3vNkLD1dncPLRJXBDHmzwN_FU.roa (hash: VPIXy61pzu1bOvlxodUgzAm3JOVOrTVgSVJvZhBRPLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:65:3e:96:01:0b:0a:f4:27:c1:c2:f1:86:96:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=7ada7f75c249b6945c058df555f13293b6680a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:d3:35:e4:8b:67:63:38:cb:a3:90:5c:89: 3d:ee:11:b8:9a:59:d3:1c:3d:59:9f:92:06:b9:af: 3b:90:91:c7:5b:ee:89:73:4e:46:5f:14:76:67:02: bf:8d:5a:c4:87:cc:88:86:d1:95:9c:09:d8:a5:8b: ec:19:0d:dd:50:df:0b:bb:6c:8a:af:9a:45:81:3f: a5:3f:d4:97:a2:cf:ee:01:cd:b6:97:06:73:51:21: 3a:78:07:0c:83:20:5c:d3:a6:c2:75:50:2b:d3:be: ee:72:fd:05:56:42:f2:07:15:3b:78:80:e8:9c:c4: 8b:4e:3a:c9:dc:4a:35:d4:f1:dc:94:1b:0b:d6:68: 0d:c1:b4:90:f2:21:5f:12:18:ff:59:7f:ec:70:e8: 48:dc:3c:9f:f2:72:32:66:f3:cc:90:22:a1:5c:3b: ee:4a:c6:22:c5:57:06:79:f6:4c:5c:d5:d3:c4:c3: 20:a0:5e:2e:9e:d6:a6:e3:e6:f6:0a:bc:5c:94:e1: 1c:c1:8c:1a:29:60:30:66:ef:fd:48:38:19:51:83: 31:8e:a6:12:8d:91:99:71:04:a8:db:3f:6a:15:e1: 5e:8b:4e:9d:22:fc:df:79:c8:90:08:5d:53:a3:6d: cf:86:5e:a4:66:e9:4c:63:dc:0b:41:62:3b:92:ab: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DA:7F:75:C2:49:B6:94:5C:05:8D:F5:55:F1:32:93:B6:68:0A:07 X509v3 Authority Key Identifier: keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ab:9d:71:81:43:99:91:5a:08:e2:f2:2c:94:ab:72:35:1e: 64:cc:0f:33:94:70:27:2a:0f:2f:1a:2c:95:0a:08:17:50:8a: 4a:48:ba:f2:ee:3b:41:4a:af:9c:0f:53:bf:3e:39:74:b0:2c: 8a:f8:d6:24:2a:40:09:0b:a8:ae:5c:e4:78:12:6d:7f:c5:9c: 4d:52:dc:f1:d3:a2:3f:73:ef:41:e6:4e:76:dd:d8:90:e5:9b: 9d:ef:f2:b0:7f:91:31:b0:c1:8c:36:7f:f6:a7:d5:76:ba:f6: 6f:8d:b7:fa:9e:bd:06:d7:ea:ea:c9:f8:cc:48:29:9e:a5:a6: 33:ca:ee:4e:be:50:58:31:46:5f:71:14:d4:2b:28:9f:30:0e: a3:80:f9:04:e5:3e:74:57:8d:92:89:09:09:d8:e4:2a:60:00: 0e:6c:ea:8f:2d:81:cb:ee:9a:02:ce:06:5d:79:42:9d:8e:48: 95:13:9d:1b:c8:66:96:6c:c8:df:ce:c7:0d:3b:62:97:71:04: 1a:7c:3d:cf:44:de:a4:af:77:1f:e5:38:31:fb:ac:44:e6:a1: 9d:f6:39:15:83:ea:01:10:3e:f5:8d:c0:22:2b:ae:67:34:86: 0d:5a:ec:6e:ef:e6:f4:e8:71:2f:7b:08:bd:30:74:bd:ef:4a: 7f:c2:23:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGU+lgELCvQnwcLxhpaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy MDRiYWMwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD Eyg3YWRhN2Y3NWMyNDliNjk0NWMwNThkZjU1NWYxMzI5M2I2NjgwYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXTNeSLZ2M4y6OQXIk97hG4mlnT HD1Zn5IGua87kJHHW+6Jc05GXxR2ZwK/jVrEh8yIhtGVnAnYpYvsGQ3dUN8Lu2yK r5pFgT+lP9SXos/uAc22lwZzUSE6eAcMgyBc06bCdVAr077ucv0FVkLyBxU7eIDo nMSLTjrJ3Eo11PHclBsL1mgNwbSQ8iFfEhj/WX/scOhI3Dyf8nIyZvPMkCKhXDvu SsYixVcGefZMXNXTxMMgoF4untam4+b2CrxclOEcwYwaKWAwZu/9SDgZUYMxjqYS jZGZcQSo2z9qFeFei06dIvzfeciQCF1To23Phl6kZulMY9wLQWI7kqvlnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHraf3XCSbaUXAWN9VXxMpO2aAoHMB8GA1UdIwQY MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt MzVjNjNmYTc2NWEyLzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKudcYFD mZFaCOLyLJSrcjUeZMwPM5RwJyoPLxoslQoIF1CKSki68u47QUqvnA9Tvz45dLAs ivjWJCpACQuorlzkeBJtf8WcTVLc8dOiP3PvQeZOdt3YkOWbne/ysH+RMbDBjDZ/ 9qfVdrr2b423+p69Btfq6sn4zEgpnqWmM8ruTr5QWDFGX3EU1CsonzAOo4D5BOU+ dFeNkokJCdjkKmAADmzqjy2By+6aAs4GXXlCnY5IlROdG8hmlmzI387HDTtil3EE Gnw9z0TepK93H+U4MfusROahnfY5FYPqARA+9Y3AIiuuZzSGDVrsbu/m9OhxL3sI vTB0ve9Kf8Ij4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:13:46 2025 by rpki-client