This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json) Hash identifier: Yg48GP2lORz6MiphngVKN2kMDr1XouOHeW5vUj1v59g= Subject key identifier: 1F:B0:7E:71:5F:C8:C3:88:AD:94:79:9C:55:18:DE:53:7B:83:28:DE Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Certificate serial: 019AF3F742EDBCF777DAFEE02D0B61C5E841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft Manifest number: 11EC Signing time: Sat 06 Dec 2025 14:00:59 +0000 Manifest this update: Sat 06 Dec 2025 14:00:59 +0000 Manifest next update: Sun 07 Dec 2025 14:00:59 +0000 Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=) 2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: iTqPnVSGTg4g7cfJ/VePrntlLoCSz1c4X0joi6lmBbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:42:ed:bc:f7:77:da:fe:e0:2d:0b:61:c5:e8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Validity Not Before: Dec 6 14:00:59 2025 GMT Not After : Dec 7 14:00:59 2025 GMT Subject: CN=1fb07e715fc8c388ad94799c5518de537b8328de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:1a:e8:1d:3e:53:06:e8:f6:18:46:dc:d6: be:35:44:b1:82:49:a5:7d:37:f0:80:bd:b5:3e:bf: 57:32:38:6d:bd:39:f7:6d:5a:6e:cb:de:7c:c6:86: 6b:f1:7c:86:09:c4:de:d8:2c:40:72:b8:05:f8:12: 63:fa:97:f2:3d:58:42:26:f8:18:0a:9e:63:85:a5: 29:3e:39:e0:b1:ee:03:2e:e4:83:01:42:1a:6b:83: 20:c8:72:3c:5f:72:ff:5c:7c:76:93:2f:1f:ef:a3: 99:3f:36:07:c2:aa:46:11:01:21:c1:8c:90:f1:ab: dd:fc:a7:d0:b3:fb:92:cb:80:3c:4d:31:38:23:01: 9f:02:22:80:3a:4a:d6:ec:44:9b:75:38:89:3e:32: 07:24:74:e1:cd:c6:62:05:b3:d9:f6:22:2b:b3:ac: 01:46:1d:7e:a7:df:c3:8b:e7:18:3b:15:df:29:fd: eb:17:79:d6:5a:ee:ee:f1:95:36:d3:c3:72:04:9b: 50:d0:fc:22:33:47:8c:03:3d:3e:dd:cf:fa:4c:be: e9:fe:c4:ae:bb:14:9a:78:22:1e:80:c1:99:9f:11: db:fd:ea:c0:47:eb:69:dc:79:6a:56:fa:db:e1:ac: 51:7d:be:5b:f3:7d:c0:94:7f:6f:f1:73:54:d3:2b: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B0:7E:71:5F:C8:C3:88:AD:94:79:9C:55:18:DE:53:7B:83:28:DE X509v3 Authority Key Identifier: keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:54:ec:f8:ab:a5:b8:83:1c:3d:4b:58:65:bb:28:14:35:54: b8:75:41:38:45:ab:6c:0c:7b:e0:20:40:bf:c9:2f:9f:14:63: 3d:de:ac:df:eb:76:10:75:41:8f:95:a9:2f:06:5f:8e:8b:d9: 94:c3:e6:ce:43:a6:30:56:16:13:db:81:91:74:4b:26:39:f7: 58:3c:de:53:29:84:24:e2:3a:86:0a:72:94:b0:02:98:73:99: 4a:dc:78:85:ad:1a:94:e4:e6:48:9f:83:b0:f3:f5:87:7b:de: 9f:4b:be:f4:9f:39:32:09:85:67:2f:4b:07:56:7b:d2:9b:d9: 7d:3e:a8:f8:6b:0e:fd:ca:6a:b6:20:39:e2:f9:53:ac:43:9e: af:45:80:2c:06:7d:12:6e:f5:1e:ae:f7:fc:86:8e:c7:13:0c: 2e:a9:d8:a7:8a:16:fe:b5:35:0e:81:e4:d7:fe:97:3b:fa:59: 8e:19:62:78:b1:26:53:98:54:33:30:12:fe:83:f8:1c:c7:f4: 31:de:47:bc:04:d5:fc:01:51:4c:b5:71:41:29:60:5e:cb:0f: 96:7b:1b:12:40:39:40:53:72:ab:16:be:85:a8:71:4a:14:d5: 22:d3:e7:85:ae:af:16:24:90:ff:28:5c:2f:66:98:67:70:47: a8:37:72:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90LtvPd32v7gLQthxehBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz Y2VlMWMwHhcNMjUxMjA2MTQwMDU5WhcNMjUxMjA3MTQwMDU5WjAzMTEwLwYDVQQD EygxZmIwN2U3MTVmYzhjMzg4YWQ5NDc5OWM1NTE4ZGU1MzdiODMyOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Ua6B0+Uwbo9hhG3Na+NUSxgkml fTfwgL21Pr9XMjhtvTn3bVpuy958xoZr8XyGCcTe2CxAcrgF+BJj+pfyPVhCJvgY Cp5jhaUpPjngse4DLuSDAUIaa4MgyHI8X3L/XHx2ky8f76OZPzYHwqpGEQEhwYyQ 8avd/KfQs/uSy4A8TTE4IwGfAiKAOkrW7ESbdTiJPjIHJHThzcZiBbPZ9iIrs6wB Rh1+p9/Di+cYOxXfKf3rF3nWWu7u8ZU208NyBJtQ0PwiM0eMAz0+3c/6TL7p/sSu uxSaeCIegMGZnxHb/erAR+tp3HlqVvrb4axRfb5b833AlH9v8XNU0yu+nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+wfnFfyMOIrZR5nFUY3lN7gyjeMB8GA1UdIwQY MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2 LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1Ts+Kul uIMcPUtYZbsoFDVUuHVBOEWrbAx74CBAv8kvnxRjPd6s3+t2EHVBj5WpLwZfjovZ lMPmzkOmMFYWE9uBkXRLJjn3WDzeUymEJOI6hgpylLACmHOZStx4ha0alOTmSJ+D sPP1h3ven0u+9J85MgmFZy9LB1Z70pvZfT6o+GsO/cpqtiA54vlTrEOer0WALAZ9 Em71Hq73/IaOxxMMLqnYp4oW/rU1DoHk1/6XO/pZjhlieLEmU5hUMzAS/oP4HMf0 Md5HvATV/AFRTLVxQSlgXssPlnsbEkA5QFNyqxa+hahxShTVItPnha6vFiSQ/yhc L2aYZ3BHqDdyWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:27 2025 by rpki-client