This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json) Hash identifier: 15c6S8USX6B6eegwxTAlpHnFB3iWeMQjcXFwVQfE7E4= Subject key identifier: 5B:03:18:01:83:24:C7:BC:62:9E:A9:AB:CB:DA:B6:04:80:4C:E2:05 Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30 Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830 Certificate serial: 019AF2097020087958C0E2FB45FDAC9A964A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft Manifest number: 068D Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: B2DytqoZWDFYJlzBBitNCZstbKXLP9CwtSLPAoxnMtQ=) 2: H60TtWd0YinCrHFItkOy4Q09gMg.roa (hash: DyKdKi+xe67HQcM0pe0CES2i6G0OdRxtjONYY5E8R+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:70:20:08:79:58:c0:e2:fb:45:fd:ac:9a:96:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=5b0318018324c7bc629ea9abcbdab604804ce205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:0f:f4:5d:4e:ca:77:98:26:db:44:78:c8: 6a:4f:21:01:c3:e4:6c:80:4f:bc:dd:b5:62:78:e8: 63:49:7e:f4:10:b2:1e:1d:6d:d7:0d:0e:48:35:d7: 95:ae:c0:b8:90:a7:a8:44:b0:c9:8c:d6:3f:17:38: 0c:4a:f5:37:44:75:9e:f2:39:0e:f8:66:d8:5c:ff: a0:b8:2a:e9:05:54:2d:4e:b6:e7:d7:14:6f:76:74: f4:11:ec:b1:3c:f1:21:fe:1a:00:7f:06:09:e5:d6: 8e:49:f8:db:ce:fc:bd:43:76:cd:2f:f6:fc:27:9d: 76:2b:76:07:cc:ae:5b:76:16:d4:f1:ff:23:19:b1: 71:1f:a1:13:82:68:b9:07:54:55:16:19:8f:95:1c: d9:54:42:53:a5:9f:14:82:e0:36:f2:ea:6a:8f:2a: 82:63:f7:90:c6:ca:53:f6:d6:95:63:16:20:29:9e: 08:93:ad:fe:49:f6:f9:9a:be:96:5c:01:56:60:26: c3:0c:24:43:90:52:c1:42:13:ed:11:44:f3:9c:e9: 71:78:51:5e:9e:23:44:97:f9:0a:96:a9:2a:74:f1: 8b:13:36:e6:6f:df:2d:8b:fb:26:89:da:4e:84:9b: 8e:ed:84:0f:15:6e:ef:36:b9:ee:3c:28:34:eb:1c: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:03:18:01:83:24:C7:BC:62:9E:A9:AB:CB:DA:B6:04:80:4C:E2:05 X509v3 Authority Key Identifier: keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:34:c8:37:5a:9f:d2:46:f0:93:d4:7f:73:85:74:84:d6:7c: cf:ca:89:3a:2b:0b:4f:06:c4:01:0a:6d:15:f0:32:94:a2:66: 89:e5:0c:34:32:9d:3b:8d:68:3d:32:d9:65:ce:95:80:69:f9: 9f:04:48:94:00:1c:c4:1e:10:35:d3:cb:2c:a1:6c:02:7c:2d: f5:f0:cd:7c:50:b5:ee:68:f5:74:b3:8c:5e:1d:5e:45:c2:fd: d8:4a:30:ab:fb:0c:c8:0b:a7:21:fe:a9:80:81:5e:1a:e1:90: 6d:59:0b:30:ed:6b:6d:3b:eb:3a:99:22:00:f8:ae:83:46:90: b0:22:36:5a:05:77:bd:8f:b3:76:f2:fc:64:df:a6:36:87:f0: 67:7f:fa:80:63:51:2a:a7:2a:89:92:9e:fe:00:59:1f:2b:2d: 39:eb:6f:d0:8b:e3:b4:5b:60:5a:73:ca:a6:5b:9f:34:a9:21: db:19:b8:0c:83:9f:e9:18:b8:7a:4c:2d:e9:dc:43:56:fc:95: 0a:20:1d:be:7e:75:0c:e9:8f:76:fb:85:44:c8:ea:1b:e6:60: 6b:6e:0b:da:a2:a6:28:ca:74:ee:5b:6a:f5:5b:b2:f6:46:4c: 8f:9d:37:1c:24:e6:81:f7:26:a5:78:1e:d2:e4:4a:25:69:96: b5:41:db:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXAgCHlYwOL7Rf2smpZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2 MTg4MzAwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD Eyg1YjAzMTgwMTgzMjRjN2JjNjI5ZWE5YWJjYmRhYjYwNDgwNGNlMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0sP9F1OyneYJttEeMhqTyEBw+Rs gE+83bVieOhjSX70ELIeHW3XDQ5INdeVrsC4kKeoRLDJjNY/FzgMSvU3RHWe8jkO +GbYXP+guCrpBVQtTrbn1xRvdnT0EeyxPPEh/hoAfwYJ5daOSfjbzvy9Q3bNL/b8 J512K3YHzK5bdhbU8f8jGbFxH6ETgmi5B1RVFhmPlRzZVEJTpZ8UguA28upqjyqC Y/eQxspT9taVYxYgKZ4Ik63+Sfb5mr6WXAFWYCbDDCRDkFLBQhPtEUTznOlxeFFe niNEl/kKlqkqdPGLEzbmb98ti/smidpOhJuO7YQPFW7vNrnuPCg06xwV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsDGAGDJMe8Yp6pq8vatgSATOIFMB8GA1UdIwQY MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5 LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDTIN1qf 0kbwk9R/c4V0hNZ8z8qJOisLTwbEAQptFfAylKJmieUMNDKdO41oPTLZZc6VgGn5 nwRIlAAcxB4QNdPLLKFsAnwt9fDNfFC17mj1dLOMXh1eRcL92Eowq/sMyAunIf6p gIFeGuGQbVkLMO1rbTvrOpkiAPiug0aQsCI2WgV3vY+zdvL8ZN+mNofwZ3/6gGNR KqcqiZKe/gBZHystOetv0IvjtFtgWnPKplufNKkh2xm4DIOf6Ri4ekwt6dxDVvyV CiAdvn51DOmPdvuFRMjqG+Zga24L2qKmKMp07ltq9Vuy9kZMj503HCTmgfcmpXge 0uRKJWmWtUHbhw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:54 2025 by rpki-client