This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json) Hash identifier: wfCUTIaoq1Vvh606HU6DmjnbvVLEdTFCnTaxlrvXJTk= Subject key identifier: 87:C0:C3:FA:EE:7C:6C:18:D0:09:09:0B:40:D7:73:71:08:58:C0:29 Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f Certificate serial: 019AF3F7E88B62F4B8822E33D5DAB945A523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft Manifest number: 0131 Signing time: Sat 06 Dec 2025 14:01:41 +0000 Manifest this update: Sat 06 Dec 2025 14:01:41 +0000 Manifest next update: Sun 07 Dec 2025 14:01:41 +0000 Files and hashes: 1: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: n9bdBAp1/Wpvbt9AA/vAiw7bnpUjWOLV0zB3KBVAYxk=) 2: tlGel_aESKh9Q5NcAJwydSlGFxg.roa (hash: +7ZMdrX7ZPoXi90BV30MCP++snK3AB9I77yJbSA2Q3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e8:8b:62:f4:b8:82:2e:33:d5:da:b9:45:a5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f Validity Not Before: Dec 6 14:01:41 2025 GMT Not After : Dec 7 14:01:41 2025 GMT Subject: CN=87c0c3faee7c6c18d009090b40d773710858c029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:8d:40:06:3e:66:35:d1:3c:32:a6:f4:21: de:36:77:98:0f:5c:13:08:4e:44:26:43:7e:b5:11: 1f:a9:ef:0c:5b:ed:16:95:49:08:66:74:07:9f:bd: 21:1a:9a:cf:14:f1:ef:26:8e:23:ee:6a:0a:7b:92: 9c:13:14:f7:52:ec:b0:87:b8:a7:4c:40:35:5d:c0: f2:3f:66:17:cc:60:72:85:46:d4:64:8b:a4:6c:cd: 69:1e:a7:39:ba:12:aa:38:05:b8:01:eb:32:9c:c9: 9b:e5:b6:0e:55:05:ce:a3:b8:2d:b0:f1:1e:04:19: 4a:be:09:96:48:08:a6:6f:75:f2:a1:1f:ed:fa:da: c7:9b:e8:33:a2:28:c4:c2:0d:84:a9:5f:67:ec:27: 16:95:0b:b9:8a:64:e6:6f:ec:4d:e9:af:66:de:15: 7f:74:2e:55:f5:1d:7d:39:73:b8:63:1b:6e:e8:7b: 3f:43:80:18:8b:b5:1a:a9:dd:e6:dc:dd:97:24:df: 46:22:2d:d5:e8:9f:13:a3:ed:52:86:f6:56:18:d7: 1c:74:37:e4:c5:0f:93:59:01:dc:b7:d9:f3:06:5e: f2:fb:96:03:0c:82:0e:6b:ff:2e:ec:00:0a:40:80: 95:44:89:46:c2:db:2e:41:f1:b1:1b:48:0b:1d:ff: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:C3:FA:EE:7C:6C:18:D0:09:09:0B:40:D7:73:71:08:58:C0:29 X509v3 Authority Key Identifier: keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e8:19:fe:74:0d:29:c6:59:3f:96:74:cd:05:98:60:56:d7: 83:e0:e7:7e:82:0e:c0:cb:12:69:d5:72:4c:d8:dc:0b:65:43: 28:11:b6:2a:50:0f:f9:56:17:92:59:36:e0:25:69:eb:de:c0: 4d:17:50:c0:59:a1:ea:e9:9e:41:15:98:2b:be:45:d9:5c:3b: a1:cf:e4:4f:af:48:19:f7:25:56:ba:ed:be:86:0c:94:58:21: 88:45:55:40:8d:cc:4c:55:70:0e:60:01:11:60:79:80:ec:dd: f8:36:03:6c:9a:9a:e3:98:e4:6f:ad:6a:86:d7:01:49:02:8c: 87:44:7b:1b:bb:cd:d3:34:00:6e:21:6b:a5:9c:dd:f5:a8:66: e0:74:fe:ad:0a:95:24:86:ac:2a:64:d3:9f:98:98:dd:93:69: 5a:83:c0:86:0f:09:e8:15:fe:bf:82:59:02:03:ea:05:92:65: 1c:43:1c:38:0f:e9:fa:74:f0:38:f1:0d:3c:47:6c:40:d9:bd: e7:e4:65:5d:47:ca:98:d7:50:7c:51:95:d4:76:75:e1:f0:e1: 16:ff:80:54:fe:03:c1:95:19:a3:67:46:61:96:aa:9a:c2:9c: 10:98:ff:d8:26:ae:38:23:33:80:03:80:14:74:91:71:3a:ae: b2:4b:42:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+iLYvS4gi4z1dq5RaUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODdhNGUyY2ZhOGVjZDAyYjUwNzMwMmIzYzZkYjE3ZjIx MTc0MmYwHhcNMjUxMjA2MTQwMTQxWhcNMjUxMjA3MTQwMTQxWjAzMTEwLwYDVQQD Eyg4N2MwYzNmYWVlN2M2YzE4ZDAwOTA5MGI0MGQ3NzM3MTA4NThjMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq6NQAY+ZjXRPDKm9CHeNneYD1wT CE5EJkN+tREfqe8MW+0WlUkIZnQHn70hGprPFPHvJo4j7moKe5KcExT3Uuywh7in TEA1XcDyP2YXzGByhUbUZIukbM1pHqc5uhKqOAW4AesynMmb5bYOVQXOo7gtsPEe BBlKvgmWSAimb3XyoR/t+trHm+gzoijEwg2EqV9n7CcWlQu5imTmb+xN6a9m3hV/ dC5V9R19OXO4Yxtu6Hs/Q4AYi7Uaqd3m3N2XJN9GIi3V6J8To+1ShvZWGNccdDfk xQ+TWQHct9nzBl7y+5YDDIIOa/8u7AAKQICVRIlGwtsuQfGxG0gLHf8G5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfAw/rufGwY0AkJC0DXc3EIWMApMB8GA1UdIwQY MBaAFAKHpOLPqOzQK1BzArPG2xfyEXQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAt OWVmOTY3ZmM3N2Q4LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAtOWVmOTY3ZmM3N2Q4 LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPegZ/nQN KcZZP5Z0zQWYYFbXg+DnfoIOwMsSadVyTNjcC2VDKBG2KlAP+VYXklk24CVp697A TRdQwFmh6umeQRWYK75F2Vw7oc/kT69IGfclVrrtvoYMlFghiEVVQI3MTFVwDmAB EWB5gOzd+DYDbJqa45jkb61qhtcBSQKMh0R7G7vN0zQAbiFrpZzd9ahm4HT+rQqV JIasKmTTn5iY3ZNpWoPAhg8J6BX+v4JZAgPqBZJlHEMcOA/p+nTwOPENPEdsQNm9 5+RlXUfKmNdQfFGV1HZ14fDhFv+AVP4DwZUZo2dGYZaqmsKcEJj/2CauOCMzgAOA FHSRcTqusktC2g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:55 2025 by rpki-client