This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json) Hash identifier: Ysf4f+/5Fh3XqKYjonHv25p7xzQPo9IIr/GSnny1exQ= Subject key identifier: 75:3B:AD:0B:EE:7E:B7:03:D1:DD:06:1D:C1:5A:01:AC:CD:5A:41:98 Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f Certificate serial: 019AF19AF3040874273EAD2EA1F18E51BE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft Manifest number: 08BF Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=) 2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: 40bU0yPFOiKHDXoESygjA1KNWPFcOHQbGfeP3dQnm54=) 3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f3:04:08:74:27:3e:ad:2e:a1:f1:8e:51:be:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=753bad0bee7eb703d1dd061dc15a01accd5a4198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:9b:f1:c2:9f:c3:96:c9:da:b9:20:89:2f: 43:7e:0a:bc:61:a6:ff:97:fb:d2:79:72:06:28:2f: 7e:74:00:b2:f9:31:de:50:b0:76:3b:07:75:37:9a: e8:f9:ab:b9:d9:8a:74:e7:fc:2b:ea:dd:2b:65:92: fd:8d:97:12:a1:ff:52:01:23:53:72:45:01:73:a0: 07:f1:1d:d7:9e:79:c8:a9:ba:71:41:1e:f0:45:a0: d8:aa:be:5c:43:2a:bc:fc:06:5e:39:18:a1:e7:2e: ac:d8:86:54:ad:06:04:35:cb:ee:94:d7:92:75:98: e9:19:37:c9:85:f1:33:f6:7d:1b:c5:4f:ef:ec:2c: 73:3c:f6:6e:8b:7a:b6:99:d3:24:f2:e0:f7:9a:3d: ee:e4:02:76:2a:61:02:ef:6f:68:cf:06:33:6a:3c: 6b:ef:55:19:57:cb:3a:cb:02:b8:be:8a:d0:99:06: a3:f1:21:af:44:b8:ff:94:18:8e:eb:87:2e:35:03: 2b:23:8f:c0:d6:58:71:8c:56:48:20:5c:e8:3f:1a: 93:8b:30:90:e6:d7:17:f2:10:0f:9c:3c:5a:c1:b2: 9c:6c:d6:90:94:fa:ce:47:7f:d4:52:83:c5:54:f7: 0c:be:74:4b:b3:aa:3b:f8:a6:1f:f5:0e:51:2d:82: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3B:AD:0B:EE:7E:B7:03:D1:DD:06:1D:C1:5A:01:AC:CD:5A:41:98 X509v3 Authority Key Identifier: keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4f:80:15:7d:e3:5e:be:78:6f:4b:92:ef:4a:9f:10:bc:b0: 00:9a:28:a2:11:0d:c5:20:82:ef:37:b1:ca:ce:b4:e7:98:eb: 6c:1b:c9:b0:6b:ff:e3:ec:4f:17:f0:18:bd:e9:1d:82:f0:e6: 68:00:1b:ab:b4:6b:bf:ee:a3:18:ed:ae:8f:a9:a1:4c:63:65: bd:5a:75:c2:3a:da:e2:02:07:cd:96:68:be:0b:a4:a2:65:40: 85:f2:5e:9d:71:83:4b:0b:95:5b:bb:bf:bc:cd:a0:24:75:72: 99:04:03:1f:11:78:d3:3a:1d:1f:04:5c:6c:d1:31:57:8f:05: ce:d0:be:a3:73:b7:8c:40:85:cb:93:5e:a7:ee:dc:70:8b:3e: d8:da:fb:58:97:fc:77:72:ae:3d:64:9b:fd:52:f6:2c:66:51: 59:86:2a:61:03:ae:11:b5:a9:79:95:43:1e:38:53:59:0f:2b: c9:bf:61:47:07:ce:d3:6f:60:b4:e9:c8:ad:81:9b:d9:bf:2a: ed:22:67:bd:00:89:15:e8:f4:07:31:aa:71:a9:6a:91:84:b9: 33:79:fd:7e:a3:30:55:a5:32:7c:ec:d2:b7:77:4b:e6:8f:06: c9:e2:42:a2:5a:c0:5c:09:20:d5:65:9c:d4:ee:07:26:f2:e0: c1:e3:6f:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvMECHQnPq0uofGOUb5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz MmZlM2YwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD Eyg3NTNiYWQwYmVlN2ViNzAzZDFkZDA2MWRjMTVhMDFhY2NkNWE0MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5yb8cKfw5bJ2rkgiS9Dfgq8Yab/ l/vSeXIGKC9+dACy+THeULB2Owd1N5ro+au52Yp05/wr6t0rZZL9jZcSof9SASNT ckUBc6AH8R3XnnnIqbpxQR7wRaDYqr5cQyq8/AZeORih5y6s2IZUrQYENcvulNeS dZjpGTfJhfEz9n0bxU/v7CxzPPZui3q2mdMk8uD3mj3u5AJ2KmEC729ozwYzajxr 71UZV8s6ywK4vorQmQaj8SGvRLj/lBiO64cuNQMrI4/A1lhxjFZIIFzoPxqTizCQ 5tcX8hAPnDxawbKcbNaQlPrOR3/UUoPFVPcMvnRLs6o7+KYf9Q5RLYK+8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU7rQvufrcD0d0GHcFaAazNWkGYMB8GA1UdIwQY MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4 LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE+AFX3j Xr54b0uS70qfELywAJooohENxSCC7zexys6055jrbBvJsGv/4+xPF/AYvekdgvDm aAAbq7Rrv+6jGO2uj6mhTGNlvVp1wjra4gIHzZZovgukomVAhfJenXGDSwuVW7u/ vM2gJHVymQQDHxF40zodHwRcbNExV48FztC+o3O3jECFy5Nep+7ccIs+2Nr7WJf8 d3KuPWSb/VL2LGZRWYYqYQOuEbWpeZVDHjhTWQ8ryb9hRwfO029gtOnIrYGb2b8q 7SJnvQCJFej0BzGqcalqkYS5M3n9fqMwVaUyfOzSt3dL5o8GyeJColrAXAkg1WWc 1O4HJvLgweNvWw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:18 2025 by rpki-client