This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json) Hash identifier: 2B6i2rF0q5XfNI6ckmr7Drf2C8+OWli9HT2D1WvF+UE= Subject key identifier: 06:5B:59:BC:B3:C8:3F:53:16:EA:37:E1:11:CE:F1:28:3E:CF:E7:A8 Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Certificate serial: 019AF088541FF5F580096CC126131D7B601E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 22:00:57 +0000 Manifest this update: Fri 05 Dec 2025 22:00:57 +0000 Manifest next update: Sat 06 Dec 2025 22:00:57 +0000 Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=) 2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: Cfuz9Nv7fFUyemt9i1/MYjKIRLItAIccRBRRk7qMNy0=) 3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:54:1f:f5:f5:80:09:6c:c1:26:13:1d:7b:60:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Validity Not Before: Dec 5 22:00:57 2025 GMT Not After : Dec 6 22:00:57 2025 GMT Subject: CN=065b59bcb3c83f5316ea37e111cef1283ecfe7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:84:8a:08:d5:bc:bb:2d:01:21:ce:48:1e: 87:44:d8:23:11:84:f9:37:97:ec:d3:74:16:23:67: 32:e6:3e:a7:e6:4e:9d:94:1b:ee:48:f2:c5:63:e4: 8e:2d:59:f8:d9:cc:dc:0f:12:11:be:1e:af:d2:f8: 31:6e:82:05:2f:5f:3e:69:94:d7:73:37:13:55:de: 02:28:22:c3:4a:34:21:95:f0:69:d7:bb:7d:52:b1: ab:9e:ce:cf:cd:06:7f:e5:75:33:0a:7b:20:49:27: 0c:6a:f2:77:76:9a:7e:06:1d:62:e5:81:84:35:48: 44:88:3d:76:61:37:dd:0d:48:1b:81:f8:a8:53:19: 81:fd:14:d2:74:3b:40:78:c2:d9:8c:92:92:9c:f7: bc:55:ef:44:4c:f9:d9:11:3c:0f:03:60:79:c7:b3: d3:b4:51:d6:2e:ab:2a:d0:1d:53:c9:94:6e:d6:2e: aa:7c:70:04:58:63:55:9c:56:c3:d2:d3:c8:a4:bc: ca:c9:0a:ec:a6:bc:d3:9e:32:ab:03:47:88:b3:e7: 50:65:95:3c:72:01:e4:94:fc:28:2c:71:09:07:64: 15:17:2e:39:1a:db:01:b9:ca:45:f0:b0:f9:37:c8: 38:11:6d:04:61:19:5d:10:2b:05:42:2a:49:e5:6d: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:59:BC:B3:C8:3F:53:16:EA:37:E1:11:CE:F1:28:3E:CF:E7:A8 X509v3 Authority Key Identifier: keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6c:8c:73:e2:d7:0e:6e:e1:54:88:9a:31:4d:55:1a:b4:30: b8:2e:92:5a:3d:3d:c0:f0:0e:11:44:b0:16:9c:36:e9:22:ea: c6:a7:c6:53:b1:dc:ce:d9:75:d2:c0:18:9f:9c:d0:89:8c:56: b2:f2:ab:63:c9:7e:a9:a3:ab:10:6a:cd:ef:47:8c:4b:e8:cd: 2f:56:2c:60:b8:98:8a:ed:a3:89:1d:60:a7:0f:c0:a0:c0:56: 66:b2:1a:c2:8a:b8:a8:fb:0f:d9:3d:4b:ed:44:60:bd:e7:a0: 60:e6:70:2b:17:d3:25:c5:09:d5:dc:b7:12:42:18:83:a2:f1: 13:b4:0d:76:35:a3:e0:71:69:6e:17:bb:89:37:9f:28:67:fe: bf:c4:be:7b:b5:1d:71:b3:19:35:3a:6f:68:a1:1e:51:06:28: 78:0b:b5:65:9d:5e:01:30:f1:3b:85:de:22:07:40:8c:2f:b2: 0d:97:d6:49:fe:8a:71:14:7d:7e:b0:79:a0:8a:93:7d:e4:04: 3d:77:a0:d9:19:3b:4c:27:f6:13:e8:5d:de:34:70:6e:c3:e8: 61:34:d9:7c:01:0f:5a:31:2a:6f:37:b7:ef:13:f3:6d:8a:b3: c1:35:cd:2c:2e:e4:a4:9d:10:0e:65:3f:83:0e:67:0a:ab:dd: fe:71:28:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFQf9fWACWzBJhMde2AeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm YjEyMDkwHhcNMjUxMjA1MjIwMDU3WhcNMjUxMjA2MjIwMDU3WjAzMTEwLwYDVQQD EygwNjViNTliY2IzYzgzZjUzMTZlYTM3ZTExMWNlZjEyODNlY2ZlN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIGEigjVvLstASHOSB6HRNgjEYT5 N5fs03QWI2cy5j6n5k6dlBvuSPLFY+SOLVn42czcDxIRvh6v0vgxboIFL18+aZTX czcTVd4CKCLDSjQhlfBp17t9UrGrns7PzQZ/5XUzCnsgSScMavJ3dpp+Bh1i5YGE NUhEiD12YTfdDUgbgfioUxmB/RTSdDtAeMLZjJKSnPe8Ve9ETPnZETwPA2B5x7PT tFHWLqsq0B1TyZRu1i6qfHAEWGNVnFbD0tPIpLzKyQrsprzTnjKrA0eIs+dQZZU8 cgHklPwoLHEJB2QVFy45GtsBucpF8LD5N8g4EW0EYRldECsFQipJ5W3ISQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZbWbyzyD9TFuo34RHO8Sg+z+eoMB8GA1UdIwQY MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2yMc+LX Dm7hVIiaMU1VGrQwuC6SWj09wPAOEUSwFpw26SLqxqfGU7Hcztl10sAYn5zQiYxW svKrY8l+qaOrEGrN70eMS+jNL1YsYLiYiu2jiR1gpw/AoMBWZrIawoq4qPsP2T1L 7URgveegYOZwKxfTJcUJ1dy3EkIYg6LxE7QNdjWj4HFpbhe7iTefKGf+v8S+e7Ud cbMZNTpvaKEeUQYoeAu1ZZ1eATDxO4XeIgdAjC+yDZfWSf6KcRR9frB5oIqTfeQE PXeg2Rk7TCf2E+hd3jRwbsPoYTTZfAEPWjEqbze37xPzbYqzwTXNLC7kpJ0QDmU/ gw5nCqvd/nEouA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:50:20 2025 by rpki-client