This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json) Hash identifier: pOb7h/nCJbSdm8oIIXhAmLENHiwZjusc4pQVUsREnq0= Subject key identifier: C2:81:19:A3:4C:62:EB:90:AA:5E:2A:49:71:7C:D7:90:BB:67:E1:E4 Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Certificate serial: 019AF12DBC8C194E3793B2F2CC266A491C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=) 2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: adpbgXLWWD4nQntuARA6tmputGuzLf77p7+E8NA9M7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bc:8c:19:4e:37:93:b2:f2:cc:26:6a:49:1c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=c28119a34c62eb90aa5e2a49717cd790bb67e1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:f0:af:18:25:a5:0f:77:66:88:5b:32:3d: 77:75:62:d8:6f:30:01:b0:e8:28:8d:0d:9e:68:bb: 34:c8:c8:22:9f:29:3d:76:65:66:4c:d8:d1:72:b8: d2:b7:1e:08:b2:17:58:67:7d:d8:ac:73:1e:51:f2: cd:c9:8b:b2:f2:7b:e5:34:62:2b:54:40:ca:3b:62: f3:b5:0f:69:0b:9a:76:e5:7c:6d:b0:53:04:66:94: 8f:f5:1f:e7:67:68:3f:72:42:7a:27:a2:95:eb:06: 83:52:37:eb:27:ce:11:8c:04:47:13:d0:c5:29:b5: 4e:6f:fe:82:b8:70:6a:9a:b0:88:6e:4d:55:21:98: 20:3f:da:52:f3:7d:8f:34:64:ad:52:44:90:5a:8a: 77:e2:6f:4c:4a:9a:9f:27:c0:4c:aa:bb:17:cd:4d: bd:32:dd:46:57:d2:68:c2:d3:bb:98:0c:e7:82:4d: e7:03:2e:9a:8c:7a:20:eb:58:b1:d7:9a:d4:40:71: 1b:7d:d9:ba:04:bd:fa:bb:cf:db:bd:28:a3:5d:2e: b5:e8:72:91:2e:05:b4:6a:c8:5e:cc:8c:ee:e4:1a: b5:0f:b3:20:79:e0:d0:cd:76:35:32:f8:9f:3f:fa: b4:17:c9:19:4f:72:17:c4:37:de:20:2d:34:de:62: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:81:19:A3:4C:62:EB:90:AA:5E:2A:49:71:7C:D7:90:BB:67:E1:E4 X509v3 Authority Key Identifier: keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:aa:b8:3a:70:af:cd:2e:3a:f7:e4:86:3a:57:d1:1d:7b:39: 51:30:52:92:1e:14:8d:8e:44:f6:5a:b7:56:95:8f:71:bd:1c: d3:e4:82:b2:f2:23:3c:4e:e1:92:44:a2:3b:a1:b5:d2:65:6e: dc:13:90:b6:46:2f:83:58:02:00:1c:e9:f6:67:db:56:a7:1c: 92:a6:c8:9d:f8:bf:1d:32:12:2f:08:64:52:d9:ab:ba:08:d1: 78:3b:69:9e:d8:21:00:2e:c6:2a:f9:5e:10:a4:ea:2d:4d:ca: 6d:04:21:be:b6:e0:58:d8:fb:c2:e7:02:2b:b0:af:9b:39:c9: 32:07:b6:02:c4:a6:e1:5c:ea:dd:d2:0f:20:5c:b8:5b:ce:2a: 5b:81:4d:6c:9b:88:dd:0f:d2:13:0b:9d:bf:52:8f:20:24:b2: cc:ee:62:86:00:ed:e1:1c:a1:30:1d:0a:b4:a6:b2:7d:cb:b9: 3a:41:10:db:05:03:67:76:5d:c9:2e:9f:d9:cb:f7:24:cd:01: bf:c9:b7:84:c4:12:8d:4e:40:97:0d:39:16:7c:35:d0:f9:fa: c6:af:1d:e6:d6:6e:16:60:86:53:94:e9:f2:19:c2:6a:6e:06: 94:01:f6:e0:71:eb:e6:e4:e3:dc:d6:87:8d:66:9c:c8:ba:a4: 72:8a:03:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbyMGU43k7LyzCZqSRwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy OTI3NGIwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EyhjMjgxMTlhMzRjNjJlYjkwYWE1ZTJhNDk3MTdjZDc5MGJiNjdlMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1DwrxglpQ93ZohbMj13dWLYbzAB sOgojQ2eaLs0yMginyk9dmVmTNjRcrjStx4IshdYZ33YrHMeUfLNyYuy8nvlNGIr VEDKO2LztQ9pC5p25XxtsFMEZpSP9R/nZ2g/ckJ6J6KV6waDUjfrJ84RjARHE9DF KbVOb/6CuHBqmrCIbk1VIZggP9pS832PNGStUkSQWop34m9MSpqfJ8BMqrsXzU29 Mt1GV9JowtO7mAzngk3nAy6ajHog61ix15rUQHEbfdm6BL36u8/bvSijXS616HKR LgW0ashezIzu5Bq1D7MgeeDQzXY1MvifP/q0F8kZT3IXxDfeIC003mKqsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKBGaNMYuuQql4qSXF815C7Z+HkMB8GA1UdIwQY MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt NTFjNzdjYzQ5MTQ2LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2 LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKq4OnCv zS469+SGOlfRHXs5UTBSkh4UjY5E9lq3VpWPcb0c0+SCsvIjPE7hkkSiO6G10mVu 3BOQtkYvg1gCABzp9mfbVqcckqbInfi/HTISLwhkUtmrugjReDtpntghAC7GKvle EKTqLU3KbQQhvrbgWNj7wucCK7CvmznJMge2AsSm4Vzq3dIPIFy4W84qW4FNbJuI 3Q/SEwudv1KPICSyzO5ihgDt4RyhMB0KtKayfcu5OkEQ2wUDZ3ZdyS6f2cv3JM0B v8m3hMQSjU5Alw05Fnw10Pn6xq8d5tZuFmCGU5Tp8hnCam4GlAH24HHr5uTj3NaH jWacyLqkcooDHw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:06 2025 by rpki-client