This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json) Hash identifier: cJOxa993pvlCbVpbPNI2xG704O+hEumWyEbHr/3f/Zw= Subject key identifier: 5C:7E:96:CC:09:01:D1:47:4C:30:AB:68:3B:44:AA:6A:16:99:8A:1F Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1 Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1 Certificate serial: 019AF12E7A445C9812C460332CD38587FBA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft Manifest number: 02F4 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: FZlDRwQNmXCg3_Qh5afXAwCGih4.roa (hash: SoWjx9Et7z/xhRKKbjGE/59bJXf4bvrCWGT22R3gJr8=) 2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: AM2UVRiDQFYCFgYl6aW0/TXJPotthxJnTn0jMzqc8Ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7a:44:5c:98:12:c4:60:33:2c:d3:85:87:fb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=5c7e96cc0901d1474c30ab683b44aa6a16998a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:f6:35:d1:56:0c:6e:f4:5d:46:53:33:cc: 39:58:6f:a2:65:e6:e8:92:ed:fa:ff:e7:72:1b:19: e3:18:03:48:c6:a8:07:07:ce:fa:45:a5:82:d8:b9: 1d:9f:60:9d:0b:7f:3e:3e:07:73:7f:af:4f:f6:4a: 3d:da:97:71:42:85:57:20:3d:29:26:e5:38:1b:88: 7a:8d:d1:95:37:f2:58:a6:08:6c:22:e8:35:79:4e: 15:b7:d3:0f:3d:fd:a7:96:fe:74:31:f4:50:d4:76: 8f:6c:09:69:03:9e:f9:e0:40:74:31:b1:4b:ef:13: a6:c2:c4:ed:03:ce:bd:be:92:ca:4c:17:86:b7:65: 18:04:10:59:33:d5:3b:fa:c8:fd:01:17:2e:ba:e3: b6:42:5b:39:73:6d:c8:2d:22:21:b1:25:85:c4:69: 66:07:aa:7a:d8:f0:5a:3b:06:41:2f:b9:d6:9b:4b: 2a:73:38:dc:14:4a:48:fd:bd:69:15:f2:d4:ca:aa: 2e:a7:80:6d:b8:76:b6:ab:4f:c7:8b:3d:0a:be:a2: c3:bb:fe:fa:07:ef:36:61:c4:79:12:36:64:a0:bb: d4:67:1e:96:60:d5:ae:e8:c7:50:c2:a1:0a:56:dc: ad:a2:b0:8e:a3:99:29:55:bd:39:a7:cc:88:15:5b: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:96:CC:09:01:D1:47:4C:30:AB:68:3B:44:AA:6A:16:99:8A:1F X509v3 Authority Key Identifier: keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:de:09:f2:4e:94:1f:a5:f1:27:32:0e:77:97:cd:de:7b:76: 92:81:60:ab:ef:e0:14:ef:e6:43:72:3d:9b:af:78:fd:0e:61: c9:d8:8b:55:91:df:a0:7d:32:12:96:41:9c:bd:7f:b9:17:5c: 58:9f:0a:d6:48:b0:0d:84:1f:27:9f:3e:01:e9:2f:83:29:0e: c4:85:a9:2b:c6:ac:c4:a0:92:3f:ea:b3:a0:17:98:1e:bf:e3: ad:95:e3:d1:8e:0c:3b:3d:87:ad:16:6f:7f:18:5f:24:5c:6f: 0d:c1:19:9c:9c:64:68:9c:61:1c:07:94:c5:73:4a:57:ee:9f: e4:4a:81:41:2e:ff:2e:a0:8f:1f:9b:cc:df:0f:15:5f:61:4b: d7:d1:6c:73:21:b5:1e:73:d9:a8:9a:03:e0:ca:7e:fc:11:bb: 58:3e:42:0b:9f:8f:45:2a:80:f8:9f:92:40:b4:8f:3a:89:cc: be:4e:13:9a:f7:66:2b:2a:23:88:8a:9d:2c:82:4d:b5:46:08: 52:0e:ab:54:89:10:33:c6:0d:eb:da:d9:3e:f4:b7:89:1b:7c: 0a:b4:ee:9f:cc:d1:e6:35:a6:38:d8:ce:bc:44:b3:1b:7d:44: 8c:18:36:bc:27:f5:82:08:b8:dd:27:59:49:a9:d9:5a:86:1f: f1:c5:8c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnpEXJgSxGAzLNOFh/umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMjZiOWU4ZGY1ZGE1Njk4NTRjNjFhZjcxNGRiMzAzNDky YjYyZjEwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg1YzdlOTZjYzA5MDFkMTQ3NGMzMGFiNjgzYjQ0YWE2YTE2OTk4YTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwz2NdFWDG70XUZTM8w5WG+iZebo ku36/+dyGxnjGANIxqgHB876RaWC2Lkdn2CdC38+Pgdzf69P9ko92pdxQoVXID0p JuU4G4h6jdGVN/JYpghsIug1eU4Vt9MPPf2nlv50MfRQ1HaPbAlpA5754EB0MbFL 7xOmwsTtA869vpLKTBeGt2UYBBBZM9U7+sj9ARcuuuO2Qls5c23ILSIhsSWFxGlm B6p62PBaOwZBL7nWm0sqczjcFEpI/b1pFfLUyqoup4BtuHa2q0/Hiz0KvqLDu/76 B+82YcR5EjZkoLvUZx6WYNWu6MdQwqEKVtytorCOo5kpVb05p8yIFVsjCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx+lswJAdFHTDCraDtEqmoWmYofMB8GA1UdIwQY MBaAFGomuejfXaVphUxhr3FNswNJK2LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzkt MDUxYjAwZjg1OGVkLzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzktMDUxYjAwZjg1OGVk LzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd94J8k6U H6XxJzIOd5fN3nt2koFgq+/gFO/mQ3I9m694/Q5hydiLVZHfoH0yEpZBnL1/uRdc WJ8K1kiwDYQfJ58+AekvgykOxIWpK8asxKCSP+qzoBeYHr/jrZXj0Y4MOz2HrRZv fxhfJFxvDcEZnJxkaJxhHAeUxXNKV+6f5EqBQS7/LqCPH5vM3w8VX2FL19FscyG1 HnPZqJoD4Mp+/BG7WD5CC5+PRSqA+J+SQLSPOonMvk4TmvdmKyojiIqdLIJNtUYI Ug6rVIkQM8YN69rZPvS3iRt8CrTun8zR5jWmONjOvESzG31EjBg2vCf1ggi43SdZ SanZWoYf8cWM3A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:24 2025 by rpki-client