This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft File: aaX4To643Eyfm9j9rug-yK9uAl4.mft (raw, json) Hash identifier: 8ph1xjjRiGLVpVJsjlGjxOFHSWbovWXyXkw3JsbASY4= Subject key identifier: BC:21:86:93:61:2E:E0:66:11:DA:05:77:E9:03:9E:E2:07:A9:79:C7 Authority key identifier: 69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E Certificate issuer: /CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e Certificate serial: 019AF163EE75AD6DF531B4DD5F22665B4B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft Manifest number: C3 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: aaX4To643Eyfm9j9rug-yK9uAl4.crl (hash: 181/6xFMwHbhGQkAwnrwL69i/cfcU2KCSPl1b2Z7NjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:75:ad:6d:f5:31:b4:dd:5f:22:66:5b:4b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=bc218693612ee06611da0577e9039ee207a979c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:30:23:7b:5d:0a:f4:42:56:a1:8b:f7:d5: ba:76:de:d2:b8:11:1f:17:9e:69:a7:40:2c:cd:09: 6a:c7:b0:7a:80:37:95:96:e0:ef:09:a0:f3:a7:5b: 96:12:9e:b3:7d:bc:f4:26:12:a4:09:21:5c:02:ab: 0c:0f:eb:0b:bf:8d:e5:e5:fe:bb:8e:d3:7d:0a:f3: fb:56:72:d5:73:66:64:04:d9:bb:65:70:4b:c6:56: cc:66:91:17:c9:50:f1:53:ba:d6:10:d4:37:40:28: bf:eb:c9:d6:6d:20:22:f6:51:27:7f:49:a6:ca:4e: ff:1d:98:69:34:fb:bd:48:79:a6:24:6c:c8:64:6d: 39:71:34:77:91:f9:8f:9e:d4:78:d0:6b:d8:df:89: 36:3f:4d:09:ba:14:83:c1:89:16:53:96:a3:a4:50: c9:33:ad:a9:7e:c3:b8:76:ab:59:bd:3d:1f:1b:77: f0:9d:ec:c6:e4:7c:f9:2f:7b:fe:5c:4e:f0:43:5a: 79:35:f7:8f:fe:05:3c:8b:47:71:37:9e:6e:9e:ef: ac:d8:a2:d0:b4:d5:bc:ed:f9:96:d9:62:20:01:c8: 70:37:66:f0:92:f0:de:ee:48:d8:3b:4c:33:5d:d7: 7d:d6:6d:2e:31:4d:fc:a6:79:e9:aa:ca:a2:45:0e: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:21:86:93:61:2E:E0:66:11:DA:05:77:E9:03:9E:E2:07:A9:79:C7 X509v3 Authority Key Identifier: keyid:69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6a:92:26:f0:ea:5d:ba:0c:7d:ea:55:00:6b:06:a7:ad:e4: aa:8a:43:a3:41:57:ae:aa:37:04:46:ff:97:17:a5:cf:e9:9c: 68:f8:5d:7d:eb:53:bc:b2:d7:e6:52:82:d5:53:2e:35:54:d4: 41:36:ae:c6:75:b5:76:59:c7:1b:58:0e:ab:b3:91:4a:37:59: 3f:39:41:fe:16:9d:53:5a:eb:e2:a7:72:6b:88:1a:0c:16:10: f4:07:41:97:94:bb:1b:a4:59:fa:96:2b:b5:0e:71:fe:4f:dd: 9f:ec:6e:3d:dc:30:6e:21:52:eb:1b:43:81:ad:f7:b3:41:55: 0f:6e:45:fe:4d:e3:92:f2:82:52:2c:48:da:35:39:53:4b:5a: e7:a5:59:19:74:0b:99:2b:36:43:8c:cd:8f:2a:3f:99:69:2d: 35:bb:5a:89:5b:a6:84:0a:d4:01:19:93:7a:cb:d7:f6:69:d2: 39:7d:83:9c:da:e6:f1:90:27:55:d2:14:09:3d:8c:04:f7:8c: 67:ea:14:cc:00:0c:ac:32:83:3c:cb:62:14:67:8c:66:2f:6d: e1:19:52:bc:5a:80:d1:6f:0b:31:0d:ef:39:b1:29:9e:fc:0b: 6e:db:c9:23:a0:4e:47:71:af:e6:47:9c:00:c5:24:e3:64:bd: 93:e9:1d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+51rW31MbTdXyJmW0sIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTVmODRlOGViOGRjNGM5ZjliZDhmZGFlZTgzZWM4YWY2 ZTAyNWUwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhiYzIxODY5MzYxMmVlMDY2MTFkYTA1NzdlOTAzOWVlMjA3YTk3OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpkwI3tdCvRCVqGL99W6dt7SuBEf F55pp0AszQlqx7B6gDeVluDvCaDzp1uWEp6zfbz0JhKkCSFcAqsMD+sLv43l5f67 jtN9CvP7VnLVc2ZkBNm7ZXBLxlbMZpEXyVDxU7rWENQ3QCi/68nWbSAi9lEnf0mm yk7/HZhpNPu9SHmmJGzIZG05cTR3kfmPntR40GvY34k2P00JuhSDwYkWU5ajpFDJ M62pfsO4dqtZvT0fG3fwnezG5Hz5L3v+XE7wQ1p5NfeP/gU8i0dxN55unu+s2KLQ tNW87fmW2WIgAchwN2bwkvDe7kjYO0wzXdd91m0uMU38pnnpqsqiRQ79PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwhhpNhLuBmEdoFd+kDnuIHqXnHMB8GA1UdIwQY MBaAFGml+E6OuNxMn5vY/a7oPsivbgJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQt YWQ1ZTZiNzg1N2MwLzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQtYWQ1ZTZiNzg1N2Mw LzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWqSJvDq XboMfepVAGsGp63kqopDo0FXrqo3BEb/lxelz+mcaPhdfetTvLLX5lKC1VMuNVTU QTauxnW1dlnHG1gOq7ORSjdZPzlB/hadU1rr4qdya4gaDBYQ9AdBl5S7G6RZ+pYr tQ5x/k/dn+xuPdwwbiFS6xtDga33s0FVD25F/k3jkvKCUixI2jU5U0ta56VZGXQL mSs2Q4zNjyo/mWktNbtaiVumhArUARmTesvX9mnSOX2DnNrm8ZAnVdIUCT2MBPeM Z+oUzAAMrDKDPMtiFGeMZi9t4RlSvFqA0W8LMQ3vObEpnvwLbtvJI6BOR3Gv5kec AMUk42S9k+kdvg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:46 2025 by rpki-client