This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json) Hash identifier: ZU4tbJpe18l1CDrv+z84XCJaiNxFzzTpxAE9rFW3wzo= Subject key identifier: 70:B3:7C:B6:37:C5:A7:00:55:8A:F9:B2:AD:7F:70:DE:33:7F:6A:34 Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af Certificate serial: 019AF5AE75AD4CBC579A2E5AE277BF204C53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft Manifest number: 11D2 Signing time: Sat 06 Dec 2025 22:00:42 +0000 Manifest this update: Sat 06 Dec 2025 22:00:42 +0000 Manifest next update: Sun 07 Dec 2025 22:00:42 +0000 Files and hashes: 1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: hYuc9Jp2XupacuVUaNavdEegdSJhDb2Frej2I/0XaJo=) 2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:75:ad:4c:bc:57:9a:2e:5a:e2:77:bf:20:4c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af Validity Not Before: Dec 6 22:00:42 2025 GMT Not After : Dec 7 22:00:42 2025 GMT Subject: CN=70b37cb637c5a700558af9b2ad7f70de337f6a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:f6:6c:36:89:6f:b3:83:92:9f:55:bb:fe: 55:aa:82:dc:31:75:f7:c8:ad:79:14:1b:de:02:7e: dc:23:5e:e3:52:cc:d8:74:e9:61:50:14:7f:58:b9: 18:35:3f:78:ab:60:89:c4:f3:dc:44:65:a5:59:9f: 93:31:4f:b9:28:f1:87:f2:0d:76:3b:85:45:8d:12: 09:b4:2b:ae:13:75:ee:89:55:de:0f:a6:9d:9b:04: 61:23:be:2b:86:5c:2e:35:07:5f:c4:97:c5:c5:09: 62:81:e8:80:d3:3b:6f:b8:b4:5e:ff:44:7c:41:9a: f4:9b:30:ae:43:f0:1b:67:f3:21:29:06:69:21:08: 74:29:2a:00:22:86:76:34:e8:52:4a:0f:48:c3:d7: e0:fd:df:ce:16:53:65:aa:d9:59:a3:1a:6f:79:4f: 99:eb:d1:c1:b2:8d:4a:2f:e7:88:4b:80:67:ed:ad: a0:cb:ac:df:31:c0:de:da:6c:7b:fe:ae:56:bb:54: c9:13:bc:6e:5c:67:fd:b1:fe:37:bc:89:da:61:9d: 3f:3a:6b:cc:00:65:2e:95:09:a1:7d:54:0c:af:d6: 28:6e:6f:57:3a:89:6f:2d:a0:e2:94:64:83:2e:44: 2e:3a:8e:e2:af:60:c3:a8:6f:19:13:28:93:cc:ee: 65:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:7C:B6:37:C5:A7:00:55:8A:F9:B2:AD:7F:70:DE:33:7F:6A:34 X509v3 Authority Key Identifier: keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5d:e5:9e:73:a0:c4:e4:a6:c5:e2:58:32:19:85:4f:c7:59: 5e:63:d2:1a:6a:a0:f4:42:85:c0:ee:95:bf:ba:18:75:7b:41: ef:b1:cd:97:44:71:c6:be:2a:c7:fa:bd:15:03:75:0f:a3:ba: eb:ce:3f:9d:28:1f:18:b3:63:63:48:7c:b9:cf:db:a2:40:71: 5f:e7:46:87:f2:6c:9c:87:77:36:fd:fa:15:10:8e:dd:dd:63: e1:1d:e4:a8:f6:61:92:4d:10:c0:1e:22:b9:4f:f3:f6:2c:d6: a4:65:04:8f:0c:ab:83:93:83:1b:12:c6:54:45:fd:ca:11:f2: 72:77:fd:45:d9:d9:a8:5c:67:24:4f:2d:5e:96:a2:00:43:2f: 9d:c8:25:3c:25:84:3a:f8:8d:a4:18:64:64:14:60:85:05:ae: fb:4d:b1:2c:67:76:98:c8:8d:f5:98:2f:9a:2c:1c:0a:56:6d: c8:d2:1b:46:ab:44:a4:04:2c:69:22:c6:af:2f:6c:ef:8d:d4: e8:03:56:47:e1:c0:cf:db:57:a1:e4:b5:5a:1d:e8:73:4f:0b: 02:23:a5:44:12:70:f4:b4:71:4c:6d:ce:9d:97:15:f2:82:1c: 9d:aa:42:14:f0:6c:6c:e8:dc:8e:62:56:96:d4:a1:ac:4d:29: 17:85:05:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rnWtTLxXmi5a4ne/IExTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZWZjY2E4NDk4ZjVkMjZjMTIwYWYzNGQ4NDZjMDI4MWZm NjI5YWYwHhcNMjUxMjA2MjIwMDQyWhcNMjUxMjA3MjIwMDQyWjAzMTEwLwYDVQQD Eyg3MGIzN2NiNjM3YzVhNzAwNTU4YWY5YjJhZDdmNzBkZTMzN2Y2YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraL2bDaJb7ODkp9Vu/5VqoLcMXX3 yK15FBveAn7cI17jUszYdOlhUBR/WLkYNT94q2CJxPPcRGWlWZ+TMU+5KPGH8g12 O4VFjRIJtCuuE3XuiVXeD6admwRhI74rhlwuNQdfxJfFxQligeiA0ztvuLRe/0R8 QZr0mzCuQ/AbZ/MhKQZpIQh0KSoAIoZ2NOhSSg9Iw9fg/d/OFlNlqtlZoxpveU+Z 69HBso1KL+eIS4Bn7a2gy6zfMcDe2mx7/q5Wu1TJE7xuXGf9sf43vInaYZ0/OmvM AGUulQmhfVQMr9Yobm9XOolvLaDilGSDLkQuOo7ir2DDqG8ZEyiTzO5lYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCzfLY3xacAVYr5sq1/cN4zf2o0MB8GA1UdIwQY MBaAFGjvzKhJj10mwSCvNNhGwCgf9imvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9fTXFFbVBYU2JCSUs4MDJFYkFLQl8yS2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zOTdiNWMtOGZjOC00YjU2LWI2MDMt MzU4MTQ1ZDlhODFkLzEvYU9fTXFFbVBYU2JCSUs4MDJFYkFLQl8yS2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zOTdiNWMtOGZjOC00YjU2LWI2MDMtMzU4MTQ1ZDlhODFk LzEvYU9fTXFFbVBYU2JCSUs4MDJFYkFLQl8yS2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV13lnnOg xOSmxeJYMhmFT8dZXmPSGmqg9EKFwO6Vv7oYdXtB77HNl0Rxxr4qx/q9FQN1D6O6 684/nSgfGLNjY0h8uc/bokBxX+dGh/JsnId3Nv36FRCO3d1j4R3kqPZhkk0QwB4i uU/z9izWpGUEjwyrg5ODGxLGVEX9yhHycnf9RdnZqFxnJE8tXpaiAEMvncglPCWE OviNpBhkZBRghQWu+02xLGd2mMiN9ZgvmiwcClZtyNIbRqtEpAQsaSLGry9s743U 6ANWR+HAz9tXoeS1Wh3oc08LAiOlRBJw9LRxTG3OnZcV8oIcnapCFPBsbOjcjmJW ltShrE0pF4UFTw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:55 2025 by rpki-client