This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft File: aIt13GcpXVhht31RoCEYtg3FWGg.mft (raw, json) Hash identifier: ZTp+Sxw0B97dXOlnZLcUdxrMlConOXEIHFVIXGCew6g= Subject key identifier: 9A:D7:3D:C0:20:2C:38:D5:3B:63:3B:F3:91:E4:F2:E3:49:9E:75:6D Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68 Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868 Certificate serial: 019B337AFBA7C93E6FFEB7109807B8EBBE1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft Manifest number: 0E8D Signing time: Thu 18 Dec 2025 22:00:56 +0000 Manifest this update: Thu 18 Dec 2025 22:00:56 +0000 Manifest next update: Fri 19 Dec 2025 22:00:56 +0000 Files and hashes: 1: ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa (hash: 7YOwLzYn+04mEiM6zjtu45GNMFpON/tmtRVeglwvQWQ=) 2: aIt13GcpXVhht31RoCEYtg3FWGg.crl (hash: ChfFa6tO/0WTPy4fpPj2FNiLFS1sg9uMub+S0H+gnQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:fb:a7:c9:3e:6f:fe:b7:10:98:07:b8:eb:be:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868 Validity Not Before: Dec 18 22:00:56 2025 GMT Not After : Dec 19 22:00:56 2025 GMT Subject: CN=9ad73dc0202c38d53b633bf391e4f2e3499e756d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:94:28:56:9c:d0:e8:b4:e8:4c:ba:4d:f2: 0f:b3:7e:bb:45:b6:b2:56:51:98:1b:d7:dd:12:cb: 33:6d:c8:16:68:7e:45:5a:36:a4:0d:45:53:f7:82: 45:45:57:d3:cf:0e:51:bf:11:36:fe:49:b2:2a:13: bc:f5:78:7c:04:90:cd:b6:54:eb:7e:a2:87:7b:61: 07:0c:da:a2:3d:d6:99:2b:f5:80:b2:cf:9a:55:f4: 6b:ef:71:8b:29:61:32:5d:a6:cf:2e:96:a3:a2:a7: 03:6c:b0:3b:da:c1:64:b1:f1:62:3d:cd:22:39:bb: 0d:27:b6:45:fc:d9:de:75:ec:b5:ba:c3:c6:9b:55: 94:33:d8:4e:3a:ab:8c:14:87:13:b7:d7:05:22:6d: 88:8f:67:22:e5:75:91:2f:f4:9d:ea:c3:df:76:8f: 56:fc:b7:57:65:6b:f4:15:3b:17:31:56:3f:b7:58: 10:8c:8c:54:b3:79:65:38:ea:8f:8e:cb:ac:33:8b: 7a:33:a5:65:d9:2c:f6:27:7d:de:97:ff:97:33:1d: 58:7e:ab:d7:b4:47:94:16:3e:f8:79:3e:c8:0e:ea: e0:c8:35:97:8f:7e:ff:95:69:b6:43:5d:ff:8b:21: 56:cf:ca:98:d7:88:ca:8e:ae:a1:e7:4f:62:2a:b4: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D7:3D:C0:20:2C:38:D5:3B:63:3B:F3:91:E4:F2:E3:49:9E:75:6D X509v3 Authority Key Identifier: keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:76:8d:5a:f9:a6:19:85:8e:6f:85:80:6d:f1:12:4c:89:aa: 80:bb:22:8c:fb:c1:3b:e6:1e:dc:eb:ed:06:81:89:fb:48:fb: 19:90:93:01:23:d9:a7:4f:e7:85:95:e2:da:17:00:a5:08:c3: ed:70:fd:5f:b2:99:aa:28:15:5d:c9:dc:1b:16:56:33:20:dc: 6b:f9:12:d9:1c:5a:71:f9:97:c6:86:f2:fe:a0:b8:02:13:88: 00:a2:4e:cd:0a:a6:d0:fb:11:10:75:eb:ab:19:e5:5f:b5:47: fb:7d:af:fa:5c:e8:36:10:da:cb:6d:16:8b:ce:4b:bf:92:6d: 6d:5f:28:67:96:f6:b3:ac:41:b6:c2:af:5d:e8:2e:7d:db:2b: 03:04:7e:d7:f1:7f:45:3c:90:c1:f3:5e:f1:e7:bc:c7:ab:ae: 8c:10:70:bd:7b:10:67:67:14:ef:fe:09:f6:b2:77:c3:11:54: 44:bc:49:84:72:9e:8a:39:98:6d:40:1f:99:8c:a1:11:67:d2: 80:25:4f:d7:4e:b9:21:a8:c4:56:a9:28:87:88:da:f5:2a:aa: d6:e7:3f:d6:4d:16:28:3c:43:ca:dd:16:e6:a1:0d:9f:ba:9b: 1c:4a:74:09:37:a5:2a:a0:ac:ee:97:ee:81:0a:45:eb:df:80: fb:be:4a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszevunyT5v/rcQmAe4674bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OGI3NWRjNjcyOTVkNTg2MWI3N2Q1MWEwMjExOGI2MGRj NTU4NjgwHhcNMjUxMjE4MjIwMDU2WhcNMjUxMjE5MjIwMDU2WjAzMTEwLwYDVQQD Eyg5YWQ3M2RjMDIwMmMzOGQ1M2I2MzNiZjM5MWU0ZjJlMzQ5OWU3NTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNGUKFac0Oi06Ey6TfIPs367Rbay VlGYG9fdEsszbcgWaH5FWjakDUVT94JFRVfTzw5RvxE2/kmyKhO89Xh8BJDNtlTr fqKHe2EHDNqiPdaZK/WAss+aVfRr73GLKWEyXabPLpajoqcDbLA72sFksfFiPc0i ObsNJ7ZF/Nnedey1usPGm1WUM9hOOquMFIcTt9cFIm2Ij2ci5XWRL/Sd6sPfdo9W /LdXZWv0FTsXMVY/t1gQjIxUs3llOOqPjsusM4t6M6Vl2Sz2J33el/+XMx1YfqvX tEeUFj74eT7IDurgyDWXj37/lWm2Q13/iyFWz8qY14jKjq6h509iKrQeZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrXPcAgLDjVO2M785Hk8uNJnnVtMB8GA1UdIwQY MBaAFGiLddxnKV1YYbd9UaAhGLYNxVhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YTQ1NjEtNTA5Mi00YzI4LTlkNWYt NTE4ZWU3YmRlMWY4LzEvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81YTQ1NjEtNTA5Mi00YzI4LTlkNWYtNTE4ZWU3YmRlMWY4 LzEvYUl0MTNHY3BYVmhodDMxUm9DRVl0ZzNGV0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnaNWvmm GYWOb4WAbfESTImqgLsijPvBO+Ye3OvtBoGJ+0j7GZCTASPZp0/nhZXi2hcApQjD 7XD9X7KZqigVXcncGxZWMyDca/kS2RxacfmXxoby/qC4AhOIAKJOzQqm0PsREHXr qxnlX7VH+32v+lzoNhDay20Wi85Lv5JtbV8oZ5b2s6xBtsKvXegufdsrAwR+1/F/ RTyQwfNe8ee8x6uujBBwvXsQZ2cU7/4J9rJ3wxFURLxJhHKeijmYbUAfmYyhEWfS gCVP1065IajEVqkoh4ja9Sqq1uc/1k0WKDxDyt0W5qENn7qbHEp0CTelKqCs7pfu gQpF69+A+75KzA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:33:28 2025 by rpki-client