This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json) Hash identifier: a2cehyTukG/GG9LGLxSxVwweqL+7Sad7WuSA72tyRPM= Subject key identifier: 5A:0D:98:EF:40:A1:76:7B:1E:A0:4D:FF:FA:D4:F1:ED:13:5D:41:85 Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d Certificate serial: 019B2D0CA0D2EDE4D8E9124255F491BFD3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 16:02:40 +0000 Manifest this update: Wed 17 Dec 2025 16:02:40 +0000 Manifest next update: Thu 18 Dec 2025 16:02:40 +0000 Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=) 2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: IEKoQWOlzoeEWzJDlvOtVdiiXuTVBbccwGopHHLqugU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:a0:d2:ed:e4:d8:e9:12:42:55:f4:91:bf:d3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d Validity Not Before: Dec 17 16:02:40 2025 GMT Not After : Dec 18 16:02:40 2025 GMT Subject: CN=5a0d98ef40a1767b1ea04dfffad4f1ed135d4185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:9f:73:67:a9:23:ba:98:77:6f:5f:d2:88: 3d:1f:ca:18:73:aa:c3:4a:67:88:0d:6d:1b:50:13: ea:25:f5:3c:02:cb:68:23:35:51:65:0b:f5:35:b3: 00:5d:a4:e9:0a:92:1b:49:c4:56:99:1d:0b:0c:57: cc:61:fb:16:92:f5:40:99:5e:60:de:e9:71:e4:a7: 6c:4c:81:fd:8a:3a:b7:00:e9:bf:83:cb:28:92:90: 51:ed:0a:8d:71:bd:39:ca:83:c2:73:1b:e9:ad:48: 1f:2f:4b:4c:ca:c6:fc:25:bc:92:8b:9e:bb:53:dc: 87:17:32:45:b4:4d:9a:ea:5c:31:69:88:44:72:d6: ba:a5:fd:59:a8:09:09:07:e2:e0:3b:10:f3:4a:61: aa:19:4b:8f:8c:94:09:f5:a4:af:3c:db:a6:17:82: 15:8b:fa:c9:e7:9b:2c:93:21:96:7f:5c:37:c8:d0: 8a:cb:11:f2:9e:14:6f:cd:bd:98:ab:30:6d:38:56: 55:7e:d7:1f:7d:a7:32:4c:ee:9c:dc:53:54:18:4d: bb:aa:86:8b:b5:2b:6a:72:ba:99:3a:ef:5f:c5:c2: 34:29:a8:bb:a9:18:33:a9:7f:60:64:72:da:4c:7c: 5d:0b:72:9b:be:c6:a4:91:48:7c:e1:00:d9:16:a4: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0D:98:EF:40:A1:76:7B:1E:A0:4D:FF:FA:D4:F1:ED:13:5D:41:85 X509v3 Authority Key Identifier: keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:ba:a8:64:42:cd:71:ed:bf:92:b2:39:08:27:e0:57:95:72: 6f:9e:36:4a:b6:33:77:df:f0:0c:9a:23:d0:b2:92:2d:d2:d2: d3:67:e6:1b:94:e7:f3:c5:08:98:71:98:7d:59:d6:e5:d7:2c: 53:0f:8f:9e:a9:cb:9a:06:42:a8:29:2f:b6:6e:1c:8f:33:86: f7:88:fb:79:b1:43:40:e3:1d:04:51:c7:18:dd:c3:c9:79:a8: 33:c7:e4:84:92:a2:8b:54:3f:bf:7d:13:28:6b:ec:02:47:14: 30:58:37:2a:b7:7c:3e:22:b1:18:57:b8:f6:08:a1:a6:c9:6d: 4b:c3:7c:96:30:73:cd:bd:42:49:37:6d:39:aa:66:47:cd:8f: e9:c0:fc:b9:97:92:2e:35:93:ee:8a:50:02:43:40:07:6c:4f: cf:30:d9:a8:f3:5e:65:1e:fd:ca:8b:3f:6f:b6:b2:50:1d:01: 79:6f:98:d7:01:e6:b8:82:f3:80:7e:b0:ca:bf:d5:94:2f:56: 43:b3:07:f9:39:de:30:33:24:b8:33:a5:43:07:d1:e6:e4:57: 67:65:ae:43:c3:95:9e:4c:d1:dc:a3:db:07:8f:95:04:ad:30: 57:35:dd:28:03:e0:44:bf:a8:c0:2e:a4:a8:d3:18:13:be:1c: 1f:59:d0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDKDS7eTY6RJCVfSRv9P4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5N2VhNjBhY2EwZGRhZTVlZGRmYmMyNjBjYjdkYTI2MTYy NGU5MWQwHhcNMjUxMjE3MTYwMjQwWhcNMjUxMjE4MTYwMjQwWjAzMTEwLwYDVQQD Eyg1YTBkOThlZjQwYTE3NjdiMWVhMDRkZmZmYWQ0ZjFlZDEzNWQ0MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF+fc2epI7qYd29f0og9H8oYc6rD SmeIDW0bUBPqJfU8AstoIzVRZQv1NbMAXaTpCpIbScRWmR0LDFfMYfsWkvVAmV5g 3ulx5KdsTIH9ijq3AOm/g8sokpBR7QqNcb05yoPCcxvprUgfL0tMysb8JbySi567 U9yHFzJFtE2a6lwxaYhEcta6pf1ZqAkJB+LgOxDzSmGqGUuPjJQJ9aSvPNumF4IV i/rJ55sskyGWf1w3yNCKyxHynhRvzb2YqzBtOFZVftcffacyTO6c3FNUGE27qoaL tStqcrqZOu9fxcI0Kai7qRgzqX9gZHLaTHxdC3KbvsakkUh84QDZFqQAGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoNmO9AoXZ7HqBN//rU8e0TXUGFMB8GA1UdIwQY MBaAFGl+pgrKDdrl7d+8Jgy32iYWJOkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTct ZWVhZDNiOGJjY2I5LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTctZWVhZDNiOGJjY2I5 LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5rqoZELN ce2/krI5CCfgV5Vyb542SrYzd9/wDJoj0LKSLdLS02fmG5Tn88UImHGYfVnW5dcs Uw+PnqnLmgZCqCkvtm4cjzOG94j7ebFDQOMdBFHHGN3DyXmoM8fkhJKii1Q/v30T KGvsAkcUMFg3Krd8PiKxGFe49gihpsltS8N8ljBzzb1CSTdtOapmR82P6cD8uZeS LjWT7opQAkNAB2xPzzDZqPNeZR79yos/b7ayUB0BeW+Y1wHmuILzgH6wyr/VlC9W Q7MH+TneMDMkuDOlQwfR5uRXZ2WuQ8OVnkzR3KPbB4+VBK0wVzXdKAPgRL+owC6k qNMYE74cH1nQfw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:40:14 2025 by rpki-client