This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json) Hash identifier: 4JwAucl/sSvsLkgae/Mg36WvBx7G40/FeZZ+Xkg9PFg= Subject key identifier: A7:6E:EF:12:36:BB:0A:B1:F2:91:B6:7E:7F:18:3D:22:F8:FA:94:D3 Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77 Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477 Certificate serial: 019AF19AC60BA85154F5F7E277E5C21ABBD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: STh88SSsktde/i/U4SjlI7ILjOeY0GJwJzWzothaS14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c6:0b:a8:51:54:f5:f7:e2:77:e5:c2:1a:bb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=a76eef1236bb0ab1f291b67e7f183d22f8fa94d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:b6:f2:18:6c:75:e6:6c:f0:8d:e0:22:aa: 81:6d:d0:4d:d8:2e:d0:06:ca:8d:53:bc:40:8a:3b: 8c:96:9d:aa:64:b9:90:60:31:d2:c1:3b:c7:bf:d3: d2:c0:82:4b:78:1b:b8:b7:1f:f8:b4:34:d6:78:fb: 92:74:5c:08:8a:3b:4c:15:ac:85:da:60:71:0d:0e: 62:fd:00:66:48:1c:9b:6e:ae:b5:6f:20:ff:94:a2: a2:ca:3b:ca:94:40:1a:dc:75:c3:f2:87:97:58:42: 57:1a:f2:91:14:89:67:8a:81:90:36:e4:0c:e2:f7: 88:15:bf:76:53:4f:9d:cf:0e:c6:5e:a9:da:93:2d: 31:d8:4a:6a:c7:dd:b8:a8:c2:6f:53:3b:b0:47:23: 3f:8f:dc:c9:48:a7:7d:0a:6b:37:1c:cf:77:01:96: 18:a6:0e:c1:22:54:41:14:1d:32:ad:99:47:16:4d: 77:7c:b1:70:03:7e:0e:5b:14:57:18:5e:b7:6d:e1: 6f:51:a2:17:46:e8:c8:3b:5a:04:41:02:89:21:d3: a2:a9:11:74:0d:4d:01:0d:67:49:c0:87:40:a7:b7: 39:ce:5f:57:a8:af:79:42:0c:a6:18:fe:90:a7:75: d4:29:0a:c6:ed:01:9e:0d:44:5a:85:95:b7:95:5e: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6E:EF:12:36:BB:0A:B1:F2:91:B6:7E:7F:18:3D:22:F8:FA:94:D3 X509v3 Authority Key Identifier: keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fb:23:c5:0f:7c:68:50:94:85:6b:a4:48:f5:5f:e5:8f:c4: 2e:d8:c3:3c:1d:3f:ca:41:a6:7e:c3:e3:e3:7b:ee:f5:45:f7: 71:a3:32:ec:54:ec:4f:39:a4:9d:b2:50:5d:45:e8:1e:e6:5a: 1c:fb:ba:bf:98:dc:bb:76:f8:1d:7e:29:61:97:ef:48:9e:a1: 65:55:71:88:8b:c6:41:2a:a3:7d:89:20:6f:3f:d9:38:96:e2: 64:02:c1:25:89:3d:5e:2d:d5:a1:53:b2:3e:12:e9:23:7a:0c: b6:a8:d2:ac:bc:47:ff:88:2b:d4:01:7f:b3:d4:13:d2:40:06: ae:f1:33:54:f7:9b:ea:2c:fe:26:ed:de:9a:83:9c:05:10:fe: 81:f7:4e:0f:ce:0c:ed:93:01:a8:7d:7b:c3:d7:9d:e6:cc:e3: e3:1c:70:d7:e0:20:b1:da:c0:d4:66:b0:5b:83:d6:b6:1a:c7: 5e:26:94:a3:59:b6:0c:d6:3f:21:e5:6f:23:3b:27:d0:64:19: 9d:62:9d:db:1e:bb:36:08:ad:1d:94:c1:7c:72:12:ca:51:60: 86:15:01:6a:04:71:1a:95:25:ea:85:76:16:9c:01:4f:35:66: e5:df:d9:56:5e:e9:11:e3:74:fb:57:92:3c:64:36:e4:a8:83: 85:b3:e8:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsYLqFFU9ffid+XCGrvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzIzMTkzNzEwNGIyNjkwMDdhNmNhODNjN2ZkOTI5ZWIz OWY0NzcwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EyhhNzZlZWYxMjM2YmIwYWIxZjI5MWI2N2U3ZjE4M2QyMmY4ZmE5NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1+28hhsdeZs8I3gIqqBbdBN2C7Q BsqNU7xAijuMlp2qZLmQYDHSwTvHv9PSwIJLeBu4tx/4tDTWePuSdFwIijtMFayF 2mBxDQ5i/QBmSBybbq61byD/lKKiyjvKlEAa3HXD8oeXWEJXGvKRFIlnioGQNuQM 4veIFb92U0+dzw7GXqnaky0x2Epqx924qMJvUzuwRyM/j9zJSKd9Cms3HM93AZYY pg7BIlRBFB0yrZlHFk13fLFwA34OWxRXGF63beFvUaIXRujIO1oEQQKJIdOiqRF0 DU0BDWdJwIdAp7c5zl9XqK95QgymGP6Qp3XUKQrG7QGeDURahZW3lV4yCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdu7xI2uwqx8pG2fn8YPSL4+pTTMB8GA1UdIwQY MBaAFK5yMZNxBLJpAHpsqDx/2SnrOfR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMt ZjM1ZjBjNmM0NmE5LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMtZjM1ZjBjNmM0NmE5 LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvsjxQ98 aFCUhWukSPVf5Y/ELtjDPB0/ykGmfsPj43vu9UX3caMy7FTsTzmknbJQXUXoHuZa HPu6v5jcu3b4HX4pYZfvSJ6hZVVxiIvGQSqjfYkgbz/ZOJbiZALBJYk9Xi3VoVOy PhLpI3oMtqjSrLxH/4gr1AF/s9QT0kAGrvEzVPeb6iz+Ju3emoOcBRD+gfdOD84M 7ZMBqH17w9ed5szj4xxw1+AgsdrA1GawW4PWthrHXiaUo1m2DNY/IeVvIzsn0GQZ nWKd2x67NgitHZTBfHISylFghhUBagRxGpUl6oV2FpwBTzVm5d/ZVl7pEeN0+1eS PGQ25KiDhbPoAw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:56 2025 by rpki-client