This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json) Hash identifier: k7wcxAPXlRzSBibAvzFCWPuvmaTMRAjyuadgMKVVCoY= Subject key identifier: F2:50:BD:9A:24:C3:AC:AC:9B:A5:C2:81:74:D3:7F:3C:88:D2:DD:C4 Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Certificate serial: 019AF31CA957E40E2A9B731291539A00BA36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:13 +0000 Manifest this update: Sat 06 Dec 2025 10:02:13 +0000 Manifest next update: Sun 07 Dec 2025 10:02:13 +0000 Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=) 2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=) 3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: 1Bdo3XyBXF8JtUv6ISR77EVucwgX+X+C3Hdkt+0Zyn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a9:57:e4:0e:2a:9b:73:12:91:53:9a:00:ba:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Validity Not Before: Dec 6 10:02:13 2025 GMT Not After : Dec 7 10:02:13 2025 GMT Subject: CN=f250bd9a24c3acac9ba5c28174d37f3c88d2ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:68:68:5f:d8:52:b4:ae:14:3c:48:b6:7a: d3:1c:5a:ae:f6:5b:9c:7b:e1:5f:37:13:67:17:25: e2:46:f3:e6:26:b1:af:bd:10:1f:0a:af:12:89:5c: 99:88:00:fa:2d:fd:3e:65:27:75:c7:ae:0a:a6:e3: 97:ff:30:14:79:9e:ab:b0:af:41:00:a6:d9:24:b8: 0d:73:67:c9:8d:d0:64:bd:6b:b7:e1:d7:0c:81:6a: 74:f1:10:77:8c:91:97:92:54:39:91:32:86:80:9c: 7f:cb:94:08:6a:af:cc:dc:52:26:90:65:e7:cb:4c: 70:df:6b:00:d1:df:4d:5c:3c:5c:fb:58:44:84:88: c7:a2:17:ff:75:d7:93:dd:25:46:d9:d4:73:a1:d1: b9:3d:b7:7b:76:7d:3b:b9:0f:bd:60:2a:c0:13:d1: 2a:47:e3:61:18:75:fd:5a:f8:e0:e3:db:f5:55:a0: 7a:5e:53:f9:12:ef:81:13:44:e6:d2:98:12:01:99: f9:30:23:66:6f:ec:9a:f3:13:08:ac:46:94:e3:9e: 70:c1:09:7d:db:78:58:5a:c9:da:43:bf:d3:a3:a2: 4a:ba:24:7a:a7:fd:b3:66:09:7f:b1:5a:a1:3d:68: b1:86:63:b5:9d:0a:ca:40:da:bc:f6:04:fd:63:1b: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:50:BD:9A:24:C3:AC:AC:9B:A5:C2:81:74:D3:7F:3C:88:D2:DD:C4 X509v3 Authority Key Identifier: keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:90:36:24:ae:6b:12:7b:fe:fa:5d:d5:09:15:12:87:95:64: d4:ff:a4:66:fc:4f:13:53:9b:b6:6b:df:a5:5a:88:39:b1:d0: 96:8c:c3:56:dc:84:92:15:52:1b:ee:3f:0e:77:71:c8:f9:56: f3:40:fc:df:6b:e9:c4:68:26:63:8d:82:89:fc:0a:6c:2d:99: 62:dc:23:12:ba:ef:9e:a4:46:e1:fb:34:bc:1b:3a:e4:f9:2c: 78:57:d4:20:e2:e3:96:8c:0d:24:92:df:10:df:67:0d:4d:a0: 9b:ed:86:38:4e:ad:31:da:d9:0e:81:d5:f8:99:99:99:86:4b: b6:e1:87:91:4e:5f:45:d8:b3:72:1e:5a:80:91:f3:21:bf:8a: 28:70:2f:20:60:7e:ad:a5:0c:46:8b:32:1a:6d:61:c2:66:97: cd:c0:6b:76:73:17:f5:15:e5:4a:0a:f8:a2:59:73:5f:7c:21: a5:ab:8c:d8:db:33:94:6d:80:41:a6:8d:dc:e5:ab:87:83:c8: fe:21:d6:34:a5:5a:98:9c:87:08:29:36:48:a7:a7:7c:d3:55: 4e:ce:bc:c6:59:0b:46:9b:9a:3a:1c:ea:0a:0d:d2:df:37:e2: ff:85:89:21:1a:31:a7:33:43:27:c3:93:df:65:60:25:c6:f4: e1:22:78:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKlX5A4qm3MSkVOaALo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx YTYwNDUwHhcNMjUxMjA2MTAwMjEzWhcNMjUxMjA3MTAwMjEzWjAzMTEwLwYDVQQD EyhmMjUwYmQ5YTI0YzNhY2FjOWJhNWMyODE3NGQzN2YzYzg4ZDJkZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8JoaF/YUrSuFDxItnrTHFqu9luc e+FfNxNnFyXiRvPmJrGvvRAfCq8SiVyZiAD6Lf0+ZSd1x64KpuOX/zAUeZ6rsK9B AKbZJLgNc2fJjdBkvWu34dcMgWp08RB3jJGXklQ5kTKGgJx/y5QIaq/M3FImkGXn y0xw32sA0d9NXDxc+1hEhIjHohf/ddeT3SVG2dRzodG5Pbd7dn07uQ+9YCrAE9Eq R+NhGHX9Wvjg49v1VaB6XlP5Eu+BE0Tm0pgSAZn5MCNmb+ya8xMIrEaU455wwQl9 23hYWsnaQ7/To6JKuiR6p/2zZgl/sVqhPWixhmO1nQrKQNq89gT9YxucqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJQvZokw6ysm6XCgXTTfzyI0t3EMB8GA1UdIwQY MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4 LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpA2JK5r Env++l3VCRUSh5Vk1P+kZvxPE1ObtmvfpVqIObHQlozDVtyEkhVSG+4/DndxyPlW 80D832vpxGgmY42CifwKbC2ZYtwjErrvnqRG4fs0vBs65PkseFfUIOLjlowNJJLf EN9nDU2gm+2GOE6tMdrZDoHV+JmZmYZLtuGHkU5fRdizch5agJHzIb+KKHAvIGB+ raUMRosyGm1hwmaXzcBrdnMX9RXlSgr4ollzX3whpauM2NszlG2AQaaN3OWrh4PI /iHWNKVamJyHCCk2SKenfNNVTs68xlkLRpuaOhzqCg3S3zfi/4WJIRoxpzNDJ8OT 32VgJcb04SJ4Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:07 2025 by rpki-client