This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json) Hash identifier: cGdcVRdbTboEhBYEvE4TTp2qlR6ZaZ9pWFRFytlqnes= Subject key identifier: EC:84:D1:B0:F6:9A:D7:37:BC:A7:0F:9A:58:8F:0F:C1:E6:92:59:71 Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3 Certificate serial: 019B397D1B5C22F1EE3CE78CCF70D112D026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft Manifest number: 03DA Signing time: Sat 20 Dec 2025 02:00:58 +0000 Manifest this update: Sat 20 Dec 2025 02:00:58 +0000 Manifest next update: Sun 21 Dec 2025 02:00:58 +0000 Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=) 2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=) 3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: MhM7HPQjI3qyp5ohidZFdItzzRwFmiH2ijOiOFeJadI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:1b:5c:22:f1:ee:3c:e7:8c:cf:70:d1:12:d0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3 Validity Not Before: Dec 20 02:00:58 2025 GMT Not After : Dec 21 02:00:58 2025 GMT Subject: CN=ec84d1b0f69ad737bca70f9a588f0fc1e6925971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:7b:43:30:3f:21:a7:e9:10:0a:cb:56:93: c2:e6:b8:e3:0a:31:96:d5:9f:47:62:a2:75:96:0d: 88:c9:9e:89:c0:4b:0f:4b:be:a4:6e:f8:d3:8a:33: cf:cd:00:24:21:2b:14:49:5f:71:37:5c:7b:b0:4a: 01:91:ef:ac:49:47:fc:ef:00:f8:02:1a:c8:c9:3e: f6:e5:2e:5c:f4:51:71:0c:86:35:22:b6:f5:02:e5: 49:63:80:84:26:3b:ee:53:19:6b:de:a4:54:4c:ca: cb:00:9b:69:e2:e2:f6:a1:27:d1:d2:14:4c:fb:c8: 67:38:ff:37:31:d9:28:df:74:46:66:a3:58:d4:af: 0e:53:3c:ff:e6:ff:32:a0:9a:8d:06:f2:b6:be:df: 8e:c2:f1:0e:db:93:49:a7:cf:20:92:c3:44:45:89: 7a:e4:43:5a:38:c0:0c:c7:9e:e7:b4:e7:6b:aa:72: 4e:af:a7:bf:fb:b8:35:6d:5b:21:4f:09:18:88:dc: 42:6a:08:01:ec:57:83:10:2d:93:64:30:e4:9e:4c: c4:4b:75:b6:18:44:f7:13:d4:43:ea:c1:a2:e4:8b: cd:ed:2c:ef:62:31:81:88:36:2e:b0:98:65:cf:02: 25:1f:f9:d2:d9:38:5e:26:73:49:80:ed:30:a9:b2: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:84:D1:B0:F6:9A:D7:37:BC:A7:0F:9A:58:8F:0F:C1:E6:92:59:71 X509v3 Authority Key Identifier: keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c1:3d:01:07:95:77:5a:7a:08:b4:c1:3b:6a:80:b8:5f:dd: 3d:95:2e:08:3c:c9:13:43:12:99:da:f9:66:93:6b:38:58:60: 78:bf:e2:9a:f0:c8:4c:52:8f:19:02:b8:ab:34:08:67:1c:a7: b6:5f:cb:28:40:21:8c:a7:cf:e4:c4:34:f6:c2:e2:74:6d:26: a9:b2:8d:e7:7d:da:00:99:cd:b4:a2:32:d8:d4:d4:94:b6:7a: b2:48:49:7e:59:e1:9b:0c:bc:b3:52:ec:1c:2b:96:08:76:a5: c7:41:30:a9:0d:89:8e:71:78:f4:42:73:1c:d0:3b:86:33:af: e3:07:26:b3:ee:39:0d:ae:63:5c:7f:ef:7c:c3:92:b1:88:8e: 88:e8:3d:99:da:34:7d:4b:8a:48:b6:3c:75:fa:db:88:d3:d5: 7b:e6:7b:65:88:77:e4:f4:ef:2d:8b:a7:0e:5f:dd:d1:cf:43: 5d:25:2f:a9:75:af:44:8c:50:93:2c:a3:ca:ff:1a:09:9a:86: 40:d5:fc:9c:31:dc:73:b6:a9:94:8f:58:b5:2b:94:5f:3a:cf: 7a:ce:ab:8b:9c:aa:26:50:54:ab:f6:d0:f1:c3:7d:c6:5c:f6: de:70:91:a0:cf:cc:cd:e3:f3:92:90:74:a7:f0:0e:83:e6:22: 63:39:27:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fRtcIvHuPOeMz3DREtAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl NjQ4YzMwHhcNMjUxMjIwMDIwMDU4WhcNMjUxMjIxMDIwMDU4WjAzMTEwLwYDVQQD EyhlYzg0ZDFiMGY2OWFkNzM3YmNhNzBmOWE1ODhmMGZjMWU2OTI1OTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+97QzA/IafpEArLVpPC5rjjCjGW 1Z9HYqJ1lg2IyZ6JwEsPS76kbvjTijPPzQAkISsUSV9xN1x7sEoBke+sSUf87wD4 AhrIyT725S5c9FFxDIY1Irb1AuVJY4CEJjvuUxlr3qRUTMrLAJtp4uL2oSfR0hRM +8hnOP83Mdko33RGZqNY1K8OUzz/5v8yoJqNBvK2vt+OwvEO25NJp88gksNERYl6 5ENaOMAMx57ntOdrqnJOr6e/+7g1bVshTwkYiNxCaggB7FeDEC2TZDDknkzES3W2 GET3E9RD6sGi5IvN7SzvYjGBiDYusJhlzwIlH/nS2TheJnNJgO0wqbKd6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyE0bD2mtc3vKcPmliPD8HmkllxMB8GA1UdIwQY MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt N2NjMjk0NWYyY2E2LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2 LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgME9AQeV d1p6CLTBO2qAuF/dPZUuCDzJE0MSmdr5ZpNrOFhgeL/imvDITFKPGQK4qzQIZxyn tl/LKEAhjKfP5MQ09sLidG0mqbKN533aAJnNtKIy2NTUlLZ6skhJflnhmwy8s1Ls HCuWCHalx0EwqQ2JjnF49EJzHNA7hjOv4wcms+45Da5jXH/vfMOSsYiOiOg9mdo0 fUuKSLY8dfrbiNPVe+Z7ZYh35PTvLYunDl/d0c9DXSUvqXWvRIxQkyyjyv8aCZqG QNX8nDHcc7aplI9YtSuUXzrPes6ri5yqJlBUq/bQ8cN9xlz23nCRoM/MzePzkpB0 p/AOg+YiYzknvA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:46:07 2025 by rpki-client