This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json) Hash identifier: ufSd1qePY0+rUSyomE9i8oawsctBEQrNC0QisAErrAM= Subject key identifier: 02:78:B6:8F:0E:B1:DE:7D:8F:BE:35:AE:76:BD:5E:85:67:C6:E8:00 Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c Certificate serial: 019AF3529170293301D4F5386EB421E57FB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft Manifest number: 0B73 Signing time: Sat 06 Dec 2025 11:01:05 +0000 Manifest this update: Sat 06 Dec 2025 11:01:05 +0000 Manifest next update: Sun 07 Dec 2025 11:01:05 +0000 Files and hashes: 1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: KB8eKb6Lk66M/vj00WAYAjirEAUy6NrLKXMXcmmFYwk=) 2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:91:70:29:33:01:d4:f5:38:6e:b4:21:e5:7f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c Validity Not Before: Dec 6 11:01:05 2025 GMT Not After : Dec 7 11:01:05 2025 GMT Subject: CN=0278b68f0eb1de7d8fbe35ae76bd5e8567c6e800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:6a:2d:3a:94:a4:f2:c9:c7:e5:c1:17:97: e9:58:39:3f:cd:0f:c1:ad:b3:e9:31:d0:b1:9b:f8: d2:41:91:cc:c9:27:f1:2f:28:f8:40:3c:a2:3f:6b: 0b:f5:07:85:15:ac:71:30:48:f2:99:14:03:12:51: a2:67:4f:41:3f:77:16:e8:d7:f3:b1:37:91:0d:90: 84:5a:89:09:12:77:8e:25:87:b2:97:a3:81:b8:6d: 26:26:f8:2f:fb:3c:a9:0e:52:0d:40:c0:03:1d:5b: 5b:b9:cc:3a:48:ba:62:fe:75:0b:9e:01:08:a3:02: dc:83:0b:b1:3b:f4:5e:ad:34:5f:fd:f0:98:4e:a5: ba:f1:f9:db:d0:77:3f:11:8f:aa:e2:3a:11:17:14: 34:93:a7:36:ac:86:0e:78:45:c0:8a:b2:46:3f:ac: 46:8e:4c:1b:68:66:7d:f7:c4:b8:b7:81:fb:64:bd: 87:d3:8e:da:22:70:ed:16:49:6f:8e:e9:17:e8:48: a5:da:52:f5:83:f6:10:10:5e:56:86:1e:07:f0:f9: 53:55:0d:d4:bc:20:ae:ce:9c:5a:c7:c9:0a:93:21: 55:a8:ba:dc:18:36:e2:74:21:0a:9f:e6:a3:86:68: ab:39:11:d2:88:0b:e3:8a:fc:9e:fb:4c:ff:f3:17: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:78:B6:8F:0E:B1:DE:7D:8F:BE:35:AE:76:BD:5E:85:67:C6:E8:00 X509v3 Authority Key Identifier: keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:27:25:19:39:d3:c0:28:7f:c4:f5:a4:f5:9e:da:e6:cc:05: 0e:ee:dd:ad:56:1d:15:14:cb:07:05:02:25:f7:f2:85:95:45: 8b:b4:54:b9:a0:50:1c:f0:12:b1:e7:7a:56:e0:e5:3e:c7:a5: bf:45:68:5e:54:f7:90:8c:fe:de:a7:5c:5c:bb:ac:a8:cd:06: f9:2f:e8:4c:ec:21:01:4f:f1:68:76:d4:c6:26:c6:0f:aa:8b: 17:d2:9e:5b:ab:6d:e4:13:68:66:91:e3:fc:6a:ab:9c:d4:20: 83:07:38:6c:d8:2c:f3:39:40:f0:55:aa:02:cd:d2:d2:43:90: 16:98:0b:bc:9c:5c:00:09:aa:26:b9:5f:ec:65:2e:6f:20:38: cd:7e:fc:bc:63:6e:1b:38:77:93:2f:dd:68:76:64:1a:73:75: 90:b1:e9:57:4f:6d:be:96:38:30:50:3e:6f:c0:ca:07:40:19: 78:d7:2e:dc:f0:2a:4a:00:ac:21:ba:53:73:ee:58:d8:93:6d: 25:7a:ab:ad:e3:3a:5e:4f:f6:dd:00:8c:46:80:3e:fc:1d:9d: 4d:a0:dd:0b:f3:89:5c:e6:2c:6b:4f:6e:bb:44:11:98:2e:9c: 5e:f2:96:df:90:02:92:ca:96:bc:48:08:d5:51:42:8a:03:86: 27:e6:b8:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpFwKTMB1PU4brQh5X+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ODEwZmZlNGY5MjAzYTEwMDY3N2Q2NTE5M2I0NDI2Nzg5 YWNmNWMwHhcNMjUxMjA2MTEwMTA1WhcNMjUxMjA3MTEwMTA1WjAzMTEwLwYDVQQD EygwMjc4YjY4ZjBlYjFkZTdkOGZiZTM1YWU3NmJkNWU4NTY3YzZlODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo11qLTqUpPLJx+XBF5fpWDk/zQ/B rbPpMdCxm/jSQZHMySfxLyj4QDyiP2sL9QeFFaxxMEjymRQDElGiZ09BP3cW6Nfz sTeRDZCEWokJEneOJYeyl6OBuG0mJvgv+zypDlINQMADHVtbucw6SLpi/nULngEI owLcgwuxO/RerTRf/fCYTqW68fnb0Hc/EY+q4joRFxQ0k6c2rIYOeEXAirJGP6xG jkwbaGZ998S4t4H7ZL2H047aInDtFklvjukX6Eil2lL1g/YQEF5Whh4H8PlTVQ3U vCCuzpxax8kKkyFVqLrcGDbidCEKn+ajhmirORHSiAvjivye+0z/8xfAIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ4to8Osd59j741rna9XoVnxugAMB8GA1UdIwQY MBaAFGiBD/5PkgOhAGd9ZRk7RCZ4ms9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDct YmRmNDMxZWI5NGYwLzEvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDctYmRmNDMxZWI5NGYw LzEvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiclGTnT wCh/xPWk9Z7a5swFDu7drVYdFRTLBwUCJffyhZVFi7RUuaBQHPASsed6VuDlPsel v0VoXlT3kIz+3qdcXLusqM0G+S/oTOwhAU/xaHbUxibGD6qLF9KeW6tt5BNoZpHj /GqrnNQggwc4bNgs8zlA8FWqAs3S0kOQFpgLvJxcAAmqJrlf7GUubyA4zX78vGNu Gzh3ky/daHZkGnN1kLHpV09tvpY4MFA+b8DKB0AZeNcu3PAqSgCsIbpTc+5Y2JNt JXqrreM6Xk/23QCMRoA+/B2dTaDdC/OJXOYsa09uu0QRmC6cXvKW35ACksqWvEgI 1VFCigOGJ+a4VA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:29:06 2025 by rpki-client