This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json) Hash identifier: fCt5wwWnbyE9uQzqATvK4P/ug39oj5CIISYw/ClaOQs= Subject key identifier: 83:99:FD:02:A9:A9:9C:D9:12:C2:4B:69:B7:AF:05:DE:3C:82:BE:D0 Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7 Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7 Certificate serial: 019AF164627AFA090176148A003CB9308E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=) 2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: 6AxrTSUxo589LRb7t8v17pizW9grd9QB3IUZKW0NBsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:62:7a:fa:09:01:76:14:8a:00:3c:b9:30:8e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7 Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=8399fd02a9a99cd912c24b69b7af05de3c82bed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:c2:fa:a2:55:04:a9:8d:4b:6c:68:0d:0e: 09:bd:46:05:22:ca:a4:d7:f6:2d:ee:50:06:77:d1: c6:71:86:56:af:d0:2e:8a:6d:4d:cf:8e:8d:2d:4e: 94:3f:7d:1a:9f:a9:d1:3f:c3:9a:51:5f:3a:28:82: 30:81:1d:5f:6a:47:d0:c1:13:a0:a4:cc:3f:17:3d: 88:1e:d4:8f:88:10:c7:23:5e:82:1e:a3:cb:bc:75: 43:70:74:ba:6a:9c:f5:35:8a:2b:25:3c:a7:3e:83: c4:0e:a8:3e:65:60:9e:d3:ea:58:52:75:3c:ea:99: 05:37:83:cb:b2:fd:df:b5:30:d1:4b:42:96:21:43: 95:85:9d:32:94:7c:45:be:52:91:20:f7:9b:24:a8: eb:cd:9c:18:72:e6:0f:0b:af:50:f6:be:ed:2b:d9: 17:6f:64:1e:f8:d1:8a:1f:bc:d3:e3:0d:ad:80:c8: dc:75:fc:e7:13:c5:f8:f2:11:d1:f4:ee:f7:16:5e: bf:e1:bb:f0:1e:0c:29:c6:dc:63:e3:92:cd:88:22: 41:18:4f:6c:84:e9:27:2f:45:74:e5:09:df:75:f5: 51:fb:06:1f:e4:cc:a0:08:54:5c:95:49:e9:58:5c: 6c:a4:ca:29:76:64:b9:20:ed:93:98:b1:63:6e:eb: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:FD:02:A9:A9:9C:D9:12:C2:4B:69:B7:AF:05:DE:3C:82:BE:D0 X509v3 Authority Key Identifier: keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:e4:25:d4:54:cf:f6:fa:e5:ef:8d:02:ed:ad:41:b5:fa:6a: dd:07:b3:a0:6c:7f:c0:ae:4c:0c:6a:2e:c4:83:36:06:f3:15: e6:bf:61:42:c1:14:4f:61:c7:46:23:b0:09:db:8a:c9:10:e4: ab:a8:d1:48:4d:63:ee:28:e0:2e:3e:da:44:76:76:55:9c:ea: e6:d4:aa:1f:11:fc:7a:55:27:2c:12:14:70:32:a0:2c:13:00: ae:ac:3d:bf:1a:2a:17:33:6d:4e:60:65:84:41:b2:cf:e8:04: fd:f8:0d:a0:fd:17:5c:4d:2d:00:6d:cd:9d:79:cf:9c:7d:1c: 9e:9d:0b:c8:c5:5a:62:d4:83:f1:1e:65:da:85:0a:41:e9:42: 15:a5:d9:6c:8c:79:91:fc:9c:85:bf:30:1a:75:33:26:11:2f: c6:ee:9e:bd:2d:d1:b2:fa:27:90:d3:99:cd:43:eb:44:52:5e: c8:18:38:d9:04:25:e6:54:f4:b7:f5:e2:41:76:b6:99:cc:38: 21:9b:3e:2b:ff:ea:05:21:5f:31:08:84:63:89:30:a1:7a:e6: dd:ae:67:56:19:b7:90:16:6c:8d:4b:09:58:52:fb:ef:ff:d4: 34:3d:57:ca:24:dc:c0:82:77:9e:e3:15:98:3e:bc:af:82:b4: 9b:2d:2e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGJ6+gkBdhSKADy5MI5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NDAyNThhMWE2OGFlNjA1YzA3M2ZiNTgzYjEzZTEzNzZi Nzc4YTcwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD Eyg4Mzk5ZmQwMmE5YTk5Y2Q5MTJjMjRiNjliN2FmMDVkZTNjODJiZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X3C+qJVBKmNS2xoDQ4JvUYFIsqk 1/Yt7lAGd9HGcYZWr9Auim1Nz46NLU6UP30an6nRP8OaUV86KIIwgR1fakfQwROg pMw/Fz2IHtSPiBDHI16CHqPLvHVDcHS6apz1NYorJTynPoPEDqg+ZWCe0+pYUnU8 6pkFN4PLsv3ftTDRS0KWIUOVhZ0ylHxFvlKRIPebJKjrzZwYcuYPC69Q9r7tK9kX b2Qe+NGKH7zT4w2tgMjcdfznE8X48hHR9O73Fl6/4bvwHgwpxtxj45LNiCJBGE9s hOknL0V05QnfdfVR+wYf5MygCFRclUnpWFxspMopdmS5IO2TmLFjbutt5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOZ/QKpqZzZEsJLabevBd48gr7QMB8GA1UdIwQY MBaAFGlAJYoaaK5gXAc/tYOxPhN2t3inMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgt NzQ5ZTk4MGVjMGI3LzEvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xNDM0Y2QtYTNkNi00NDg4LTg4ODgtNzQ5ZTk4MGVjMGI3 LzEvYVVBbGlocG9ybUJjQnotMWc3RS1FM2EzZUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3+Ql1FTP 9vrl740C7a1Btfpq3QezoGx/wK5MDGouxIM2BvMV5r9hQsEUT2HHRiOwCduKyRDk q6jRSE1j7ijgLj7aRHZ2VZzq5tSqHxH8elUnLBIUcDKgLBMArqw9vxoqFzNtTmBl hEGyz+gE/fgNoP0XXE0tAG3NnXnPnH0cnp0LyMVaYtSD8R5l2oUKQelCFaXZbIx5 kfychb8wGnUzJhEvxu6evS3RsvonkNOZzUPrRFJeyBg42QQl5lT0t/XiQXa2mcw4 IZs+K//qBSFfMQiEY4kwoXrm3a5nVhm3kBZsjUsJWFL77//UND1XyiTcwIJ3nuMV mD68r4K0my0uiA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:45 2025 by rpki-client