This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json) Hash identifier: wKmdZ1kNdAg/8sUHTVPcJ9wikAYQ20vaRxrfgyi3FNw= Subject key identifier: C4:A7:AF:39:08:51:94:77:2C:D2:68:66:9F:25:E6:5E:8D:D7:D6:F3 Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20 Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420 Certificate serial: 019AF19B09E244155AE106BE292A6AD9B1FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft Manifest number: 096A Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: qwEF7WEYRplQxYj8akrL94ocrDKR+7r89YjoKK0/+LI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:09:e2:44:15:5a:e1:06:be:29:2a:6a:d9:b1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=c4a7af39085194772cd268669f25e65e8dd7d6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:56:72:90:f5:89:68:57:ea:00:4c:33:b0: 5a:c9:80:85:71:52:4b:5b:5e:46:48:3d:9e:23:93: 73:a4:ff:4f:4f:dd:c0:a3:12:d5:16:ed:be:89:74: 77:84:63:4a:82:f5:32:fd:3b:6b:ba:1e:c8:97:22: c1:7e:00:59:f4:92:b8:92:42:be:93:bc:6f:56:39: 1b:e4:79:10:72:1b:e1:8e:64:25:80:0f:a9:2c:d6: 77:ee:97:5a:ed:eb:ce:a3:d8:e8:e1:85:c7:20:7c: 48:3c:f3:4e:1b:9f:e2:8c:91:a0:d3:f1:09:61:f6: 52:36:4b:48:0f:41:15:66:73:47:6e:08:e8:de:9e: bb:43:5a:77:08:95:a3:51:8d:33:8d:a2:b5:f1:5d: df:18:ab:2a:de:ac:6a:8b:67:0b:79:c6:fc:07:c5: 01:77:f8:bb:c1:e5:6c:6b:8f:3f:36:0b:e4:ef:2f: 1d:7d:c3:b6:b1:20:a4:e9:fa:d4:68:11:db:f1:dc: ca:a1:06:f2:54:47:73:75:f3:07:3f:0a:fd:3e:20: 00:ed:83:c8:ab:9d:93:63:db:7f:37:e7:0b:e1:c7: ba:b9:1d:0e:23:89:3a:44:9c:05:46:e4:33:93:60: 56:af:9b:f7:01:8b:f1:f5:47:44:20:24:d1:45:84: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A7:AF:39:08:51:94:77:2C:D2:68:66:9F:25:E6:5E:8D:D7:D6:F3 X509v3 Authority Key Identifier: keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9d:9e:09:80:69:70:57:50:63:4d:37:99:8f:bc:94:cb:ee: 28:87:69:87:96:87:5e:7f:59:d7:77:7e:ba:e0:bd:21:48:2a: 7c:4d:99:88:ba:fc:3c:d0:86:a2:a9:f8:67:f3:54:56:e1:a1: c2:37:3f:c4:f5:66:62:84:dd:d5:09:13:65:6e:e0:05:81:47: 88:30:ef:92:1c:76:7e:a5:ce:01:d7:a0:2a:6f:06:ee:54:a9: 34:e8:12:83:44:66:57:62:f9:6c:62:5f:e5:7c:78:7c:03:07: f9:9b:9b:2a:77:21:d6:d7:01:87:4e:d2:68:78:bc:15:d8:c5: cc:19:f8:75:01:81:dd:35:4f:e7:6f:76:b6:df:cc:ec:52:c0: b3:32:20:f9:df:63:31:45:5f:19:a3:b9:74:af:13:10:4a:28: fc:2d:62:cf:27:85:b2:d8:c6:fa:ad:db:7d:1a:fe:3b:bd:dc: fb:f7:a7:81:91:2e:97:93:0c:72:ad:01:90:79:76:dc:4d:a4: 2f:db:a3:85:16:8f:43:b1:ef:19:38:c1:84:62:54:04:fa:e1: 8e:61:f8:d9:f5:0e:9d:ce:94:52:1b:a0:82:98:50:8d:1b:53: cd:fb:7d:5e:6a:c4:bc:77:ee:3d:8a:cf:3d:71:a2:1d:18:61: 5e:43:34:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwniRBVa4Qa+KSpq2bH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWExNTkzZDZhMTI4MmI2ZTg0YzJkMzMyNTExZWEyYTk5 YTg0MjAwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EyhjNGE3YWYzOTA4NTE5NDc3MmNkMjY4NjY5ZjI1ZTY1ZThkZDdkNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+FWcpD1iWhX6gBMM7BayYCFcVJL W15GSD2eI5NzpP9PT93AoxLVFu2+iXR3hGNKgvUy/Ttruh7IlyLBfgBZ9JK4kkK+ k7xvVjkb5HkQchvhjmQlgA+pLNZ37pda7evOo9jo4YXHIHxIPPNOG5/ijJGg0/EJ YfZSNktID0EVZnNHbgjo3p67Q1p3CJWjUY0zjaK18V3fGKsq3qxqi2cLecb8B8UB d/i7weVsa48/Ngvk7y8dfcO2sSCk6frUaBHb8dzKoQbyVEdzdfMHPwr9PiAA7YPI q52TY9t/N+cL4ce6uR0OI4k6RJwFRuQzk2BWr5v3AYvx9UdEICTRRYTW+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSnrzkIUZR3LNJoZp8l5l6N19bzMB8GA1UdIwQY MBaAFGnqFZPWoSgrboTC0zJRHqKpmoQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQt Nzk2ZmJiNmFlOWJlLzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQtNzk2ZmJiNmFlOWJl LzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj52eCYBp cFdQY003mY+8lMvuKIdph5aHXn9Z13d+uuC9IUgqfE2ZiLr8PNCGoqn4Z/NUVuGh wjc/xPVmYoTd1QkTZW7gBYFHiDDvkhx2fqXOAdegKm8G7lSpNOgSg0RmV2L5bGJf 5Xx4fAMH+ZubKnch1tcBh07SaHi8FdjFzBn4dQGB3TVP5292tt/M7FLAszIg+d9j MUVfGaO5dK8TEEoo/C1izyeFstjG+q3bfRr+O73c+/engZEul5MMcq0BkHl23E2k L9ujhRaPQ7HvGTjBhGJUBPrhjmH42fUOnc6UUhuggphQjRtTzft9XmrEvHfuPYrP PXGiHRhhXkM0zw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:24 2025 by rpki-client