This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json) Hash identifier: UG8f9KAE4Ih8oRK8qJWt1bqraOiULhpqDFSoR4JSjso= Subject key identifier: 2B:CF:3D:BC:B0:2B:4A:0C:15:7C:70:D8:9C:D6:47:6E:30:1A:14:4F Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93 Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93 Certificate serial: 019AF31C7DBD20A9C2BF42B5E028961BEFE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft Manifest number: 0B03 Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: lGj9pO2HY7FZDCHsOxNMHbLlu9JILoYDTRpJLkojbpg=) 2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7d:bd:20:a9:c2:bf:42:b5:e0:28:96:1b:ef:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93 Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=2bcf3dbcb02b4a0c157c70d89cd6476e301a144f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:c3:ac:e0:be:d6:f3:30:22:e0:96:da:bd: 5f:ed:02:bf:56:55:07:a9:8f:23:17:f1:e4:be:bd: a3:5c:56:7a:15:36:fd:b8:f7:f8:52:8f:2e:c1:1e: 90:7a:c8:af:de:6a:4c:ec:57:de:1c:7d:c9:71:4d: 82:2b:19:c9:30:05:26:b2:91:ff:c0:04:75:31:8e: 23:a8:22:93:95:84:41:4d:0d:e2:4f:87:a9:44:f2: 17:bb:b0:d3:29:88:2c:37:4e:7b:68:45:ea:d3:6e: 5a:64:b9:2a:63:99:34:41:86:85:85:da:26:df:6c: 16:f6:69:0e:e8:34:f4:7f:a8:42:04:27:8a:ca:af: a6:88:69:4e:42:12:69:01:ef:2a:57:ee:75:ad:2b: 23:45:f7:4f:c5:ac:d8:25:a7:4c:e7:e8:f9:e9:28: f3:79:ec:b4:f5:d2:56:19:54:bb:04:aa:27:7c:a4: bb:ff:df:13:dd:46:e6:5e:36:af:a6:fe:d5:9f:bf: 08:86:0d:2b:a0:60:d0:53:d5:69:01:cd:17:17:f3: c4:9a:3c:b8:06:d3:fc:85:57:ee:9f:87:98:81:40: dd:87:e2:5b:f5:3a:63:ca:26:48:10:2b:dd:7e:45: f9:76:7a:fd:89:13:e9:4c:48:ad:5e:89:06:6b:b7: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CF:3D:BC:B0:2B:4A:0C:15:7C:70:D8:9C:D6:47:6E:30:1A:14:4F X509v3 Authority Key Identifier: keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b9:0b:1c:30:19:f6:4d:53:b2:ab:22:7c:68:cd:30:5c:f8: c2:3b:ab:81:9c:62:87:d8:4e:b0:e4:b0:77:ab:51:ee:a2:57: a4:1c:16:5e:ce:42:5e:63:a1:43:00:a9:ce:a9:9a:81:85:aa: ba:f7:a8:d3:c6:3d:22:bd:4b:8e:78:70:a9:0c:bc:5c:7a:fc: c4:42:07:75:6e:0e:d6:17:25:52:70:4b:2a:08:8c:e3:3b:d7: 86:3b:b8:d3:35:76:3b:5b:44:ed:d4:d8:95:74:aa:54:6c:ef: 05:cb:83:ab:6d:69:26:64:b2:da:0d:87:31:1d:e1:ab:4d:3c: 8e:2f:f6:44:da:a2:91:6c:ac:39:e3:c5:10:73:5c:22:6a:a5: 3c:ae:93:d4:a5:71:d0:3b:fd:56:2e:78:0f:e0:50:8e:89:7f: fc:90:a9:93:27:46:26:fe:dc:38:f3:79:aa:22:7d:c4:bf:e4: 7a:ea:40:4b:f1:f8:f5:1d:e0:7a:9a:f7:80:6d:c1:e4:f6:59: 27:73:74:87:2b:bc:f7:b4:4d:88:43:e7:eb:9a:26:2e:f8:ef: 45:0b:7b:2a:62:6b:fa:50:a1:3d:b2:a5:9d:e0:2c:8a:ec:b8: 58:01:6a:a8:7d:53:39:ec:d9:a0:67:93:48:21:ae:ce:08:c8: f6:5a:52:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH29IKnCv0K14CiWG+/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NmQ2ZjU2OTUwMGMyNTA3MGI2MTI0ZjFiODZmNjA5NTI2 NzdhOTMwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD EygyYmNmM2RiY2IwMmI0YTBjMTU3YzcwZDg5Y2Q2NDc2ZTMwMWExNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1rDrOC+1vMwIuCW2r1f7QK/VlUH qY8jF/Hkvr2jXFZ6FTb9uPf4Uo8uwR6Qesiv3mpM7FfeHH3JcU2CKxnJMAUmspH/ wAR1MY4jqCKTlYRBTQ3iT4epRPIXu7DTKYgsN057aEXq025aZLkqY5k0QYaFhdom 32wW9mkO6DT0f6hCBCeKyq+miGlOQhJpAe8qV+51rSsjRfdPxazYJadM5+j56Sjz eey09dJWGVS7BKonfKS7/98T3UbmXjavpv7Vn78Ihg0roGDQU9VpAc0XF/PEmjy4 BtP8hVfun4eYgUDdh+Jb9TpjyiZIECvdfkX5dnr9iRPpTEitXokGa7dqYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvPPbywK0oMFXxw2JzWR24wGhRPMB8GA1UdIwQY MBaAFGhtb1aVAMJQcLYSTxuG9glSZ3qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWIt YWI2ZmM0ZTBmMWUwLzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWItYWI2ZmM0ZTBmMWUw LzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLkLHDAZ 9k1TsqsifGjNMFz4wjurgZxih9hOsOSwd6tR7qJXpBwWXs5CXmOhQwCpzqmagYWq uveo08Y9Ir1LjnhwqQy8XHr8xEIHdW4O1hclUnBLKgiM4zvXhju40zV2O1tE7dTY lXSqVGzvBcuDq21pJmSy2g2HMR3hq008ji/2RNqikWysOePFEHNcImqlPK6T1KVx 0Dv9Vi54D+BQjol//JCpkydGJv7cOPN5qiJ9xL/keupAS/H49R3gepr3gG3B5PZZ J3N0hyu897RNiEPn65omLvjvRQt7KmJr+lChPbKlneAsiuy4WAFqqH1TOezZoGeT SCGuzgjI9lpS5A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:44 2025 by rpki-client