This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json) Hash identifier: Aj2HdUCT/ADB9WCSPx1cyHfVFeQuSPbrmUf/5ne3wn0= Subject key identifier: AE:3F:11:FA:80:4F:9E:3C:B0:9D:C2:28:6D:62:82:29:D3:26:8B:F1 Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f Certificate serial: 019AF577FCB4211A2B0F930F79D20961F32D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft Manifest number: 06DD Signing time: Sat 06 Dec 2025 21:01:12 +0000 Manifest this update: Sat 06 Dec 2025 21:01:12 +0000 Manifest next update: Sun 07 Dec 2025 21:01:12 +0000 Files and hashes: 1: DZ3MwVW27YJjTXL81Us54BEw8Ws.roa (hash: YPwEXqNgTojazI3UWL2Hg790NFdOZ5Zp1qDnzkWSOdQ=) 2: O8RYzdOGcber5Lyd0fkaQNOBiZM.roa (hash: /upGWqeDSmoTCs0TmrDJ+JgYywdWmCG+PwMCdlRHNTc=) 3: ZuaAuBr3mjYLZzt7nOoi3jtwzIY.roa (hash: WFz46VHFEUHY6d8iPoLy2pWWOpD7nX+IiME/4TJnl4M=) 4: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: UBPvvX5ygRRqw3lnQ1rvCmWjwks/mJaFvsMKtdDBBXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:fc:b4:21:1a:2b:0f:93:0f:79:d2:09:61:f3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f Validity Not Before: Dec 6 21:01:12 2025 GMT Not After : Dec 7 21:01:12 2025 GMT Subject: CN=ae3f11fa804f9e3cb09dc2286d628229d3268bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:1e:9d:95:cf:36:f1:8f:38:8c:60:10:bd: 62:ab:7e:fb:1f:35:84:6f:7a:6f:3b:2a:68:c3:e4: 90:f4:6c:5f:fe:f2:17:bf:96:a2:40:74:6d:da:c8: 55:0b:f3:14:d8:36:e1:86:bc:4f:a9:13:03:bd:1e: d6:48:79:0f:b6:a3:ca:1b:4a:2d:9a:55:68:ff:65: 9d:80:b1:82:3c:65:82:c7:07:6a:5c:dd:84:0e:68: 41:65:9f:ae:af:c0:b8:a4:07:04:07:ab:6f:01:bf: 44:08:c3:4c:2d:18:19:01:e9:11:3a:59:02:51:f0: f2:55:d7:fc:62:49:2e:a7:04:68:b5:60:71:70:04: fe:f7:e7:a7:78:61:6a:9b:0e:57:88:53:07:47:d7: eb:08:e8:82:d5:12:79:d5:b8:73:f7:4d:db:c9:a2: 0b:ba:7b:24:fa:96:73:f2:d9:aa:ce:f6:34:e3:cd: da:20:7a:1d:4f:b1:24:71:91:40:84:75:cf:7f:95: 57:3a:82:a6:0d:d7:2b:88:e6:59:25:4f:98:00:4d: b5:b3:2a:e2:5d:3d:9d:67:c8:49:8c:b2:1c:7c:72: 36:1f:a8:f4:7b:29:9d:f6:cf:0f:aa:ed:ed:66:56: cc:aa:7b:0a:0f:ab:aa:a5:4b:4e:ff:33:a9:4e:cf: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3F:11:FA:80:4F:9E:3C:B0:9D:C2:28:6D:62:82:29:D3:26:8B:F1 X509v3 Authority Key Identifier: keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bb:9c:bd:33:4e:be:f4:9a:a4:b8:a3:43:8e:dc:78:a4:b0: c6:46:9a:1c:3f:03:f6:91:46:58:b0:88:7a:5b:eb:8b:28:6d: c8:89:cb:3e:c2:b9:2e:76:74:cc:49:59:b3:69:a9:98:eb:46: 15:da:68:ff:de:fd:bd:bc:ee:f9:6e:f3:64:67:f4:e8:37:a8: c5:86:b1:9d:07:2e:1d:2f:44:95:83:1c:d4:5f:97:6c:07:6b: 2f:f3:6f:d6:93:f9:48:b3:f9:e8:c6:99:2d:cf:f1:e6:84:26: d9:fb:df:9c:3a:94:68:c4:c6:aa:e1:31:a5:4c:e4:28:48:1f: b2:9e:dc:34:97:a5:d3:d5:a4:9c:80:7a:82:cd:6d:b7:7e:f2: e5:6c:7a:ca:c1:89:a7:95:c9:a2:51:21:f7:9a:45:97:15:ed: 71:1d:7e:ea:c1:37:71:f9:36:50:10:a6:7d:57:e2:29:2b:26: 62:ba:cc:0b:46:25:a6:52:0e:03:dc:7c:cd:4a:ad:c1:a8:f5: 9e:80:18:e7:ce:68:8c:9a:db:d1:9a:a4:57:c0:6a:3d:9b:72: a0:6f:74:41:e4:bd:55:d9:fa:b4:23:c4:8f:c4:ca:ea:3a:9a: 10:78:e4:eb:e0:5b:70:63:c3:7d:bf:ab:67:e3:9a:a2:f4:02: 41:b8:c0:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/y0IRorD5MPedIJYfMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm NGQxNWYwHhcNMjUxMjA2MjEwMTEyWhcNMjUxMjA3MjEwMTEyWjAzMTEwLwYDVQQD EyhhZTNmMTFmYTgwNGY5ZTNjYjA5ZGMyMjg2ZDYyODIyOWQzMjY4YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVcenZXPNvGPOIxgEL1iq377HzWE b3pvOypow+SQ9Gxf/vIXv5aiQHRt2shVC/MU2DbhhrxPqRMDvR7WSHkPtqPKG0ot mlVo/2WdgLGCPGWCxwdqXN2EDmhBZZ+ur8C4pAcEB6tvAb9ECMNMLRgZAekROlkC UfDyVdf8YkkupwRotWBxcAT+9+eneGFqmw5XiFMHR9frCOiC1RJ51bhz903byaIL unsk+pZz8tmqzvY0483aIHodT7EkcZFAhHXPf5VXOoKmDdcriOZZJU+YAE21syri XT2dZ8hJjLIcfHI2H6j0eymd9s8Pqu3tZlbMqnsKD6uqpUtO/zOpTs9oswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4/EfqAT548sJ3CKG1iginTJovxMB8GA1UdIwQY MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt NTAwN2RkZTM1MDQ1LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEtNTAwN2RkZTM1MDQ1 LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLucvTNO vvSapLijQ47ceKSwxkaaHD8D9pFGWLCIelvriyhtyInLPsK5LnZ0zElZs2mpmOtG Fdpo/979vbzu+W7zZGf06DeoxYaxnQcuHS9ElYMc1F+XbAdrL/Nv1pP5SLP56MaZ Lc/x5oQm2fvfnDqUaMTGquExpUzkKEgfsp7cNJel09WknIB6gs1tt37y5Wx6ysGJ p5XJolEh95pFlxXtcR1+6sE3cfk2UBCmfVfiKSsmYrrMC0YlplIOA9x8zUqtwaj1 noAY585ojJrb0ZqkV8BqPZtyoG90QeS9Vdn6tCPEj8TK6jqaEHjk6+BbcGPDfb+r Z+OaovQCQbjAJQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:36 2025 by rpki-client