This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json) Hash identifier: 0LUc+GU+Q+ixyaQ3cTaWGjWwPNMIOpMu6t/S9RGB/Wk= Subject key identifier: C2:2E:CC:DE:EE:C0:11:41:E0:33:A8:FB:73:CF:F1:17:AA:53:4B:4E Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Certificate serial: 019AF12E363D7BF268C3301EC323569547B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft Manifest number: 064A Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=) 2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: ZfxjmyDrbO50w2+8kpmKjUBHyOLYPjUVbeveBG2rKmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:36:3d:7b:f2:68:c3:30:1e:c3:23:56:95:47:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=c22eccdeeec01141e033a8fb73cff117aa534b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:04:7d:3a:2e:08:a6:a8:df:d8:0e:71:c4: 60:bc:ad:63:fb:6b:04:0f:37:b8:86:9a:de:d0:4b: 6c:df:00:2d:c1:16:1c:1f:b6:84:24:a4:b7:d9:b0: 1b:cf:cb:19:b1:36:62:25:bc:0d:06:7d:69:3b:0a: 9e:05:14:33:f6:31:3c:e4:76:68:ae:1c:ad:80:a4: fa:87:e5:67:97:5a:c1:59:bb:28:8c:0a:7e:99:94: d3:e3:19:0b:67:50:d3:83:7a:d9:01:d6:c8:df:f5: e4:13:4b:63:72:55:38:8f:e3:d1:d4:ab:f7:2f:c8: b6:7b:26:3f:b5:f2:84:35:77:57:36:00:7e:c9:bb: 42:2b:3f:ff:71:cb:24:21:78:b2:00:fd:d7:be:24: e0:e3:21:76:c8:81:ab:22:d9:b6:d8:6c:52:4a:3c: 29:5b:a7:c8:7e:be:1c:35:56:f2:3d:ed:da:f3:33: 32:1a:59:e9:3b:0f:d3:31:22:d9:ae:7f:37:c5:9f: 46:ac:77:3e:b8:c6:50:ae:a6:86:00:cc:5e:a9:cb: 7a:ae:08:60:82:b2:5f:11:5c:af:65:76:38:85:12: cf:37:5f:05:2d:d9:4c:44:27:74:d5:02:cc:bb:b3: 2c:bf:89:43:96:ce:44:35:1c:2c:6c:9d:80:57:72: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2E:CC:DE:EE:C0:11:41:E0:33:A8:FB:73:CF:F1:17:AA:53:4B:4E X509v3 Authority Key Identifier: keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f4:ea:06:97:ce:8b:d5:c5:bc:73:82:e7:ea:1e:f7:99:51: 17:d3:36:29:9d:46:59:53:77:39:b2:ff:a7:45:1b:88:fc:45: f6:e1:28:d4:87:ad:d4:c4:48:f6:ed:02:15:8e:31:76:81:7f: 32:2d:c6:bf:30:9e:46:19:ba:e5:db:56:3b:6f:df:9e:33:eb: c2:e1:4a:73:64:ed:f7:5d:da:92:b9:0b:db:71:87:b3:95:d7: 3c:3b:22:75:8c:da:f3:b1:81:d8:1e:eb:a5:7e:e0:9c:c6:31: 31:cb:08:c4:94:b4:3f:ed:f6:d3:f2:32:ce:8d:59:bc:b4:d8: 12:2b:1d:c9:b4:c8:52:c6:d9:d3:eb:6e:03:3f:7c:5c:a4:bb: 9b:75:17:5e:17:89:d5:cb:33:9e:27:0d:87:db:05:2e:3d:b8: 95:3a:91:9d:df:4f:35:46:75:88:4b:d2:c4:77:d9:88:16:1a: e9:a2:5f:75:d1:9d:0d:0f:65:08:86:56:ce:61:84:87:a0:12: 9c:d7:f6:60:9d:f0:fe:9f:7f:aa:92:e4:1d:2e:47:ce:a2:6d: ab:27:6e:90:cc:1f:b8:33:da:d1:90:13:a2:0c:d7:03:8e:3c: 68:bd:8d:3d:29:d0:7d:35:f5:13:ea:cd:6d:e9:3f:2b:04:ee: 61:c0:f2:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjY9e/JowzAewyNWlUe3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjBiYTc1ZmNlNTU3MjFjMzA2Mzc1ODliZTNkMzRmYTI1 OWMyYjUwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD EyhjMjJlY2NkZWVlYzAxMTQxZTAzM2E4ZmI3M2NmZjExN2FhNTM0YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX4EfTouCKao39gOccRgvK1j+2sE Dze4hpre0Ets3wAtwRYcH7aEJKS32bAbz8sZsTZiJbwNBn1pOwqeBRQz9jE85HZo rhytgKT6h+Vnl1rBWbsojAp+mZTT4xkLZ1DTg3rZAdbI3/XkE0tjclU4j+PR1Kv3 L8i2eyY/tfKENXdXNgB+ybtCKz//ccskIXiyAP3XviTg4yF2yIGrItm22GxSSjwp W6fIfr4cNVbyPe3a8zMyGlnpOw/TMSLZrn83xZ9GrHc+uMZQrqaGAMxeqct6rghg grJfEVyvZXY4hRLPN18FLdlMRCd01QLMu7Msv4lDls5ENRwsbJ2AV3LjVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIuzN7uwBFB4DOo+3PP8ReqU0tOMB8GA1UdIwQY MBaAFGiwunX85VchwwY3WJvj00+iWcK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQt NDk5ZWYxNmUyMDgyLzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQtNDk5ZWYxNmUyMDgy LzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfTqBpfO i9XFvHOC5+oe95lRF9M2KZ1GWVN3ObL/p0UbiPxF9uEo1Iet1MRI9u0CFY4xdoF/ Mi3GvzCeRhm65dtWO2/fnjPrwuFKc2Tt913akrkL23GHs5XXPDsidYza87GB2B7r pX7gnMYxMcsIxJS0P+320/Iyzo1ZvLTYEisdybTIUsbZ0+tuAz98XKS7m3UXXheJ 1csznicNh9sFLj24lTqRnd9PNUZ1iEvSxHfZiBYa6aJfddGdDQ9lCIZWzmGEh6AS nNf2YJ3w/p9/qpLkHS5HzqJtqydukMwfuDPa0ZATogzXA448aL2NPSnQfTX1E+rN bek/KwTuYcDy8A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:44 2025 by rpki-client