This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json) Hash identifier: bxkLk77e7LuA84JySUHEuhOPowzlfuchimhQfqBtuoM= Subject key identifier: 40:53:EA:90:DC:91:D0:A7:00:17:43:B5:90:B9:AF:85:EE:31:C2:53 Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Certificate serial: 019AF31B7771980D5DD763AA8940F2EB46C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft Manifest number: 0442 Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: xZ/m4cc3szYsgSQIAIi7Iea1jyqOJaesktjpnJN8SmM=) 2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:77:71:98:0d:5d:d7:63:aa:89:40:f2:eb:46:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=4053ea90dc91d0a7001743b590b9af85ee31c253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:47:b9:95:e1:5b:7f:5f:f5:45:4c:04:64:82: b6:00:4d:65:5f:8e:7f:d3:09:2a:57:3c:e1:7b:1e: 5d:f3:84:67:91:0a:0e:53:6d:bb:ae:7d:b3:cb:2b: 3d:f7:60:91:4b:f3:e5:4e:c4:20:4e:b2:b0:8d:7a: 33:d8:d6:02:b4:67:7a:75:54:7b:5d:75:7b:de:b0: 9a:d6:c8:10:dc:5b:45:a2:76:80:4e:2c:00:82:fe: 21:c4:3e:1f:65:68:99:01:d7:90:65:2c:19:19:80: df:8a:7f:db:49:8a:a3:1b:67:b8:a8:93:7b:32:95: ef:d5:11:49:e2:82:97:69:ed:21:c2:62:2e:b3:7a: 22:f0:34:2f:27:6b:08:df:0b:3a:e7:00:4b:3b:86: 1f:bb:e6:77:cd:ec:ae:3e:15:10:2c:b5:9d:db:1f: c0:4a:09:38:63:4d:24:17:b0:04:86:12:6c:b9:f0: 8c:d5:d6:66:d9:15:e0:ef:c4:62:5f:48:ef:34:af: 2c:16:d3:60:91:61:e8:4d:89:5b:dd:9b:81:68:ea: 9e:a7:d7:9b:68:1c:70:cd:4c:31:86:c2:41:2a:51: 86:a5:72:5a:fa:39:3a:1c:16:5b:c8:2e:29:42:bc: 64:d0:75:fa:f8:20:bc:7a:ef:eb:60:55:80:39:2d: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:EA:90:DC:91:D0:A7:00:17:43:B5:90:B9:AF:85:EE:31:C2:53 X509v3 Authority Key Identifier: keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fc:4e:5d:54:dc:a9:24:72:c3:69:a3:d1:9b:64:93:10:03: ef:8d:1e:ad:8c:88:dc:47:79:43:88:8d:be:a2:fe:97:d6:6b: 3e:69:f7:38:4c:e6:14:d7:1e:80:e3:16:b1:d3:89:f8:50:89: 27:29:f1:d1:2c:17:88:2d:2a:61:1d:1b:5d:53:42:cb:4e:10: 3e:c9:d2:76:5c:48:26:20:71:26:b3:51:92:08:7c:83:1b:37: ab:65:7d:a9:7e:f7:88:38:21:d2:fe:21:38:17:fe:f7:f0:d3: 6a:4a:31:e3:61:2f:46:62:18:10:4f:f7:eb:e8:51:3d:38:32: ee:cf:a8:ae:17:72:16:3c:98:b1:8a:74:9e:b3:a1:3d:27:69: 4a:7d:e7:dc:c6:4f:d7:35:38:ab:5c:f0:1a:d1:35:94:90:1b: 43:c0:91:34:8b:f6:f7:d4:5d:9e:e4:8c:1e:40:92:e6:28:83: ea:2a:e8:f6:58:c8:c5:20:d2:33:93:2b:22:96:17:c7:48:8e: 21:1a:1d:a3:a0:dc:99:52:70:be:3d:a0:eb:46:ad:f5:94:5b: a4:90:e0:16:56:8a:11:d3:ce:e3:26:2d:b3:03:46:b1:7c:5d: c9:bf:c3:bb:bf:2d:de:2b:f8:1f:42:f9:17:b9:19:32:37:65: 0b:44:a8:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3dxmA1d12OqiUDy60bEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5 NGQxMzQwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD Eyg0MDUzZWE5MGRjOTFkMGE3MDAxNzQzYjU5MGI5YWY4NWVlMzFjMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ee5leFbf1/1RUwEZIK2AE1lX45/ 0wkqVzzhex5d84RnkQoOU227rn2zyys992CRS/PlTsQgTrKwjXoz2NYCtGd6dVR7 XXV73rCa1sgQ3FtFonaATiwAgv4hxD4fZWiZAdeQZSwZGYDfin/bSYqjG2e4qJN7 MpXv1RFJ4oKXae0hwmIus3oi8DQvJ2sI3ws65wBLO4Yfu+Z3zeyuPhUQLLWd2x/A Sgk4Y00kF7AEhhJsufCM1dZm2RXg78RiX0jvNK8sFtNgkWHoTYlb3ZuBaOqep9eb aBxwzUwxhsJBKlGGpXJa+jk6HBZbyC4pQrxk0HX6+CC8eu/rYFWAOS07jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBT6pDckdCnABdDtZC5r4XuMcJTMB8GA1UdIwQY MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt ZTNjNTViYjc3MjhlLzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPxOXVTc qSRyw2mj0ZtkkxAD740erYyI3Ed5Q4iNvqL+l9ZrPmn3OEzmFNcegOMWsdOJ+FCJ Jynx0SwXiC0qYR0bXVNCy04QPsnSdlxIJiBxJrNRkgh8gxs3q2V9qX73iDgh0v4h OBf+9/DTakox42EvRmIYEE/36+hRPTgy7s+orhdyFjyYsYp0nrOhPSdpSn3n3MZP 1zU4q1zwGtE1lJAbQ8CRNIv299RdnuSMHkCS5iiD6iro9ljIxSDSM5MrIpYXx0iO IRodo6DcmVJwvj2g60at9ZRbpJDgFlaKEdPO4yYtswNGsXxdyb/Du78t3iv4H0L5 F7kZMjdlC0SobQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:44 2025 by rpki-client