This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json) Hash identifier: KadKFdQj1/ENGn3MXpkZJQ2oCva+oX+/bJKCm+Plx0g= Subject key identifier: B8:40:12:99:FC:33:54:76:E5:3D:4A:42:09:EA:D5:27:23:7C:71:CA Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43 Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343 Certificate serial: 019AF20927F6D886DC3E1BA457A76CA619A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft Manifest number: 0D2C Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: oNVa/PNUDgPn/GXH+3OO3aCYivbMRbLF1tpRRugoEqg=) 2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:27:f6:d8:86:dc:3e:1b:a4:57:a7:6c:a6:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=b8401299fc335476e53d4a4209ead527237c71ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:19:0d:b4:f6:6d:3f:ab:a6:5b:7f:3d:ba: 01:43:2d:1c:a3:de:5b:9e:44:b3:4c:e5:36:f0:09: db:c7:2d:bf:63:13:b0:65:77:99:33:7c:a7:14:40: 8e:63:ba:76:75:83:1c:44:74:c3:bd:3b:4c:33:e7: 51:7f:10:eb:6b:ae:b7:8d:85:ec:d0:cf:18:6e:2c: 85:05:de:b1:6d:ff:de:d5:04:d8:de:86:82:53:3c: 43:3d:99:85:00:6a:96:ee:a1:e1:06:92:65:75:2d: 58:48:89:20:0e:4a:04:17:66:ac:be:e7:4b:cd:46: 8a:7e:68:98:a3:b8:9b:88:da:90:45:36:25:ba:19: 63:57:7c:20:d3:03:1c:d9:02:b1:ca:43:c4:b3:2f: ec:a5:ee:33:b1:2b:12:18:f9:a5:c5:57:26:90:0f: 78:46:59:2a:e0:79:90:9f:fe:11:a6:1a:b5:fd:02: fe:97:0d:4b:e1:6a:7d:b0:e3:d4:70:14:96:63:29: ec:69:39:ed:bd:ff:92:82:a6:ef:e1:09:56:b2:25: 55:aa:9d:dd:70:e6:76:07:19:d4:17:0e:98:50:56: 1f:1a:c5:8d:4d:a3:58:d6:b9:c4:2a:c9:3b:03:6d: 97:b0:14:7b:f3:46:b0:ca:17:67:a8:53:81:6c:bb: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:12:99:FC:33:54:76:E5:3D:4A:42:09:EA:D5:27:23:7C:71:CA X509v3 Authority Key Identifier: keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:96:98:d2:44:f5:fe:04:72:eb:78:f8:2c:fc:e6:42:1b:81: 2a:00:db:cf:c6:c7:ec:85:72:21:13:db:bb:44:bc:b2:62:2e: cf:88:0b:f6:f3:8b:dc:16:82:62:e5:f3:c3:d9:e8:1b:0b:88: 5b:9b:2b:4e:6b:c1:bc:cf:38:4c:80:d5:c4:6e:f8:4e:5e:b4: df:e7:b1:1f:35:75:ba:15:ac:c7:3a:ad:16:d8:66:5c:0c:d3: b7:f4:99:8c:e2:ac:bb:d6:f6:d5:c8:62:9a:3b:b7:c0:94:85: 5f:e5:b8:fc:9c:e5:d1:92:77:8e:36:da:64:3a:6e:9d:5e:8f: 30:8f:37:06:d7:bc:e9:ff:f0:8e:f4:76:ab:b0:6e:d8:cf:b0: 22:72:0b:e0:ce:54:b9:75:79:f1:63:b8:77:4e:d7:97:44:2f: 05:5b:6f:db:2c:6a:6b:22:c0:8f:b0:a0:2b:f2:f1:2c:ec:6e: 38:4e:ec:1f:bc:6d:db:0f:67:ed:f4:b7:42:df:83:93:ff:ea: cb:a0:07:5f:b7:19:ea:08:65:8d:c1:e3:5c:95:60:a9:a5:5b: cd:e0:83:23:4b:9e:28:e5:86:af:4c:37:2a:83:0d:3e:7c:0a: 1e:4c:fc:f0:f6:57:99:20:f8:a8:c5:0b:e6:df:ba:70:f1:5f: 82:e1:17:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSf22IbcPhukV6dsphmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGQwZmVlMmNkNTY2OTY1Y2EwOGRiNTUwNjYzY2IyMGI0 MTIzNDMwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhiODQwMTI5OWZjMzM1NDc2ZTUzZDRhNDIwOWVhZDUyNzIzN2M3MWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplAZDbT2bT+rplt/PboBQy0co95b nkSzTOU28Anbxy2/YxOwZXeZM3ynFECOY7p2dYMcRHTDvTtMM+dRfxDra663jYXs 0M8YbiyFBd6xbf/e1QTY3oaCUzxDPZmFAGqW7qHhBpJldS1YSIkgDkoEF2asvudL zUaKfmiYo7ibiNqQRTYluhljV3wg0wMc2QKxykPEsy/spe4zsSsSGPmlxVcmkA94 Rlkq4HmQn/4Rphq1/QL+lw1L4Wp9sOPUcBSWYynsaTntvf+Sgqbv4QlWsiVVqp3d cOZ2BxnUFw6YUFYfGsWNTaNY1rnEKsk7A22XsBR780awyhdnqFOBbLt7IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhAEpn8M1R25T1KQgnq1ScjfHHKMB8GA1UdIwQY MBaAFAAND+4s1WaWXKCNtVBmPLILQSNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTkt Yjk0MWJhOTIxYjNmLzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTktYjk0MWJhOTIxYjNm LzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpaY0kT1 /gRy63j4LPzmQhuBKgDbz8bH7IVyIRPbu0S8smIuz4gL9vOL3BaCYuXzw9noGwuI W5srTmvBvM84TIDVxG74Tl603+exHzV1uhWsxzqtFthmXAzTt/SZjOKsu9b21chi mju3wJSFX+W4/Jzl0ZJ3jjbaZDpunV6PMI83Bte86f/wjvR2q7Bu2M+wInIL4M5U uXV58WO4d07Xl0QvBVtv2yxqayLAj7CgK/LxLOxuOE7sH7xt2w9n7fS3Qt+Dk//q y6AHX7cZ6ghljcHjXJVgqaVbzeCDI0ueKOWGr0w3KoMNPnwKHkz88PZXmSD4qMUL 5t+6cPFfguEXwg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:00:37 2025 by rpki-client