This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json) Hash identifier: YdXrr6C1ayDw0x/vMjPXYyXjJPzVVAAriZ0v4T/BOGQ= Subject key identifier: 4B:C4:A5:4E:8E:0C:3C:94:97:CB:B1:B4:D0:BF:C4:57:40:96:A0:E2 Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32 Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432 Certificate serial: 019AF12CE456BA4774F35B0489C383E5B236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: rUfyw8ZDv0vFQvU8Apy/HTSmR2LhSMySdaeNp/wdSGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e4:56:ba:47:74:f3:5b:04:89:c3:83:e5:b2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=4bc4a54e8e0c3c9497cbb1b4d0bfc4574096a0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:1c:9d:0d:d4:7e:d0:15:cb:45:67:0d:d7: be:99:07:d6:82:d2:1a:81:f6:cb:91:68:2b:3d:ec: 07:87:f8:7a:e5:d1:6f:7d:45:3a:66:ce:dc:ec:49: b3:fa:1b:ec:2d:c5:0a:c9:61:d8:11:9d:17:8c:2e: bd:a8:12:08:d5:ae:97:4a:85:2e:fc:26:73:dc:44: 92:ff:6d:94:4b:41:91:4d:c3:fd:5c:18:08:96:e4: 61:4b:3a:6c:8d:35:7d:bc:1a:c0:a2:ff:a0:b8:ea: 1e:58:1c:3f:75:0f:df:f0:4e:36:a8:f2:af:d3:d4: 66:54:ce:7b:67:f8:eb:4a:4f:30:44:bf:31:bd:94: 2e:a4:66:29:bd:6a:f8:a1:98:82:aa:ab:c0:fe:e1: 81:8c:ba:c7:bc:54:d2:17:e8:a2:1d:d4:47:21:97: 56:e4:fd:54:1f:0a:7e:a5:ca:8b:98:a7:3f:3f:a3: 1a:ed:1e:3c:13:33:d1:a4:19:89:45:c8:56:d6:6e: 6e:31:ff:8c:d4:85:29:6c:23:d0:e3:d6:7b:5c:46: 60:2b:56:20:a3:14:6d:1c:37:fe:bc:dd:47:b1:c9: c8:3e:c8:2e:00:c2:b3:ff:c0:1e:cb:2d:4a:2a:aa: 6d:c8:03:f7:da:08:aa:f9:f7:14:30:eb:c3:1d:a2: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C4:A5:4E:8E:0C:3C:94:97:CB:B1:B4:D0:BF:C4:57:40:96:A0:E2 X509v3 Authority Key Identifier: keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d5:a1:10:c3:47:f1:75:b0:a9:40:ae:e4:c0:8d:dd:eb:29: 09:d8:2e:ce:8c:d4:a3:52:92:95:02:28:b9:a4:a5:c6:75:c8: c4:3c:38:30:7e:59:41:3b:6c:26:eb:9b:eb:1a:34:a0:e8:f4: bb:ac:e8:80:ba:f0:05:0c:98:30:87:21:a6:ff:8b:a5:6b:26: ac:9e:d6:40:cf:80:29:39:0d:b8:bf:a3:34:06:07:0c:49:9a: a9:d1:a4:1f:15:ac:6d:cf:c9:c0:69:33:a9:18:17:c8:93:6e: 61:6c:9f:57:05:df:28:27:81:0d:2d:c8:91:94:78:36:c5:7e: 52:9e:b5:15:b2:94:ad:df:6f:b2:f2:7b:c4:c0:a7:d8:22:2d: ac:3c:85:7b:2a:02:60:2d:c7:fd:e3:b9:8d:c7:f5:bf:37:50: 12:02:49:bf:36:cd:ec:c4:44:60:01:6e:6a:82:da:4e:58:28: 15:73:03:76:cd:e3:8f:46:f4:0b:26:d8:fd:2b:47:96:84:e8: fa:65:0b:f3:77:37:dc:1e:29:57:3b:74:67:e5:96:93:f8:c6: 0a:c1:2d:52:88:4c:90:17:31:e2:0e:3d:da:a0:6f:a2:fb:18: 71:9a:7e:fb:c8:05:a0:7e:ff:1f:df:96:7c:94:a4:ed:ab:5f: ff:61:04:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLORWukd081sEicOD5bI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWI4Zjg4OTJkMDFkZDRjODQwNzI0Y2JiYWI5MGMwY2E2 MDk0MzIwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD Eyg0YmM0YTU0ZThlMGMzYzk0OTdjYmIxYjRkMGJmYzQ1NzQwOTZhMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59wcnQ3UftAVy0VnDde+mQfWgtIa gfbLkWgrPewHh/h65dFvfUU6Zs7c7Emz+hvsLcUKyWHYEZ0XjC69qBII1a6XSoUu /CZz3ESS/22US0GRTcP9XBgIluRhSzpsjTV9vBrAov+guOoeWBw/dQ/f8E42qPKv 09RmVM57Z/jrSk8wRL8xvZQupGYpvWr4oZiCqqvA/uGBjLrHvFTSF+iiHdRHIZdW 5P1UHwp+pcqLmKc/P6Ma7R48EzPRpBmJRchW1m5uMf+M1IUpbCPQ49Z7XEZgK1Yg oxRtHDf+vN1HscnIPsguAMKz/8Aeyy1KKqptyAP32giq+fcUMOvDHaJ3hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvEpU6ODDyUl8uxtNC/xFdAlqDiMB8GA1UdIwQY MBaAFAKrj4iS0B3UyEByTLurkMDKYJQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEt ZTNiNzcwMTNmZGI3LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEtZTNiNzcwMTNmZGI3 LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9WhEMNH 8XWwqUCu5MCN3espCdguzozUo1KSlQIouaSlxnXIxDw4MH5ZQTtsJuub6xo0oOj0 u6zogLrwBQyYMIchpv+LpWsmrJ7WQM+AKTkNuL+jNAYHDEmaqdGkHxWsbc/JwGkz qRgXyJNuYWyfVwXfKCeBDS3IkZR4NsV+Up61FbKUrd9vsvJ7xMCn2CItrDyFeyoC YC3H/eO5jcf1vzdQEgJJvzbN7MREYAFuaoLaTlgoFXMDds3jj0b0CybY/StHloTo +mUL83c33B4pVzt0Z+WWk/jGCsEtUohMkBcx4g492qBvovsYcZp++8gFoH7/H9+W fJSk7atf/2EEyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:28 2025 by rpki-client