This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json) Hash identifier: oklxFyiCBbVEmgGMWslZJHNM6rNDXOzv3H01graNDqs= Subject key identifier: 54:9F:4F:9A:C5:16:57:E0:9F:BC:28:79:06:28:F1:23:1E:41:AB:32 Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13 Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413 Certificate serial: 019B2BC184B550F7A1DB65163D21534B1EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft Manifest number: 1498 Signing time: Wed 17 Dec 2025 10:01:01 +0000 Manifest this update: Wed 17 Dec 2025 10:01:01 +0000 Manifest next update: Thu 18 Dec 2025 10:01:01 +0000 Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: ghXkQVVgSnhmaJ/5Hdtzwu43aKHStx5L8hLrwCIFSFU=) 2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:84:b5:50:f7:a1:db:65:16:3d:21:53:4b:1e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413 Validity Not Before: Dec 17 10:01:01 2025 GMT Not After : Dec 18 10:01:01 2025 GMT Subject: CN=549f4f9ac51657e09fbc28790628f1231e41ab32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:14:6a:56:8d:ae:41:0e:16:b7:d5:1d:cd: ec:12:da:25:d2:89:54:25:f1:73:23:c8:4e:82:b2: 28:ba:9b:94:cd:80:63:c2:9d:bc:70:44:bd:4c:e3: 4e:1d:4a:c5:7d:36:ab:5c:2d:d0:95:8a:08:f4:ec: 5e:64:25:cb:a0:e5:a0:38:eb:67:49:62:6e:63:28: bc:68:9a:cc:4a:c0:c8:b4:5b:eb:9f:3e:16:f7:b8: 80:04:32:18:08:72:a1:53:2f:2c:f5:97:2e:1e:af: 54:48:fb:83:9c:d0:b8:1f:8d:d5:fd:e2:70:76:2d: 33:b9:54:16:aa:34:b9:2a:54:83:ce:d3:b1:ef:ef: 6b:56:38:0f:e8:91:51:7f:2a:7a:fd:5e:16:b6:51: 03:a1:64:e9:84:2f:f4:fb:aa:5b:6a:d6:92:dc:f5: 5e:1b:78:54:77:6a:d8:ae:f6:0e:0b:7d:8a:c8:02: 52:e6:4c:75:a3:9d:f0:53:ba:23:79:b7:43:95:40: a2:4d:65:26:3e:fe:a6:1c:b2:86:5a:20:1b:97:46: a0:e7:f2:95:76:21:31:13:02:12:43:e7:f4:b3:c8: 15:7e:7e:7c:6e:d5:cd:ae:2b:8a:b1:89:46:bc:85: 88:e9:7e:25:17:3b:05:49:7a:a6:83:4f:cd:05:0e: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9F:4F:9A:C5:16:57:E0:9F:BC:28:79:06:28:F1:23:1E:41:AB:32 X509v3 Authority Key Identifier: keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ce:b7:51:a1:80:0d:03:06:01:72:bd:e8:d7:f3:cc:b7:57: 44:29:8e:89:d0:4b:71:2c:26:84:50:81:cd:97:ae:3a:19:f8: 3f:f5:2a:17:0f:c2:7c:f9:00:3e:96:e0:de:3e:53:a9:4c:0a: 8b:fd:a0:2b:7b:29:0a:78:6e:c4:eb:e5:71:42:5e:91:95:00: 21:73:e9:e3:7c:9a:1f:16:63:e3:44:60:e9:44:c1:74:6d:3a: 1e:78:3b:1f:83:9d:55:d0:43:5e:e0:ca:c3:be:b3:1c:b9:c3: 97:e3:7b:ef:fb:31:6e:68:a9:7c:d0:67:bf:cb:e7:10:08:4f: 09:0a:a6:b7:99:64:81:18:46:7c:e8:51:19:0d:b0:4d:c4:65: 1c:3c:65:73:0a:25:23:2a:e4:5d:c3:69:95:6b:47:4c:ec:aa: fc:34:53:5e:de:4f:a7:2d:c8:27:e7:01:ca:16:2f:ad:bb:d1: 03:9c:91:5e:e3:0e:78:b7:58:a1:e3:b7:8b:d0:f3:dd:fd:42: 52:31:3e:d1:f5:38:a3:a6:c7:c1:eb:e7:16:77:0c:6d:4c:3f: 85:40:64:d4:f1:c0:52:a0:c8:18:ee:cc:67:a1:7d:a9:58:4d: 54:2b:8c:0c:ac:99:ec:74:3c:5c:08:7e:d7:be:6b:7c:6b:2f: ac:7f:a3:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwYS1UPeh22UWPSFTSx7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDkyZDI3NDc4MTQzYzZhZTM5MDVjNDdmNTg0N2RmOWMw MmY0MTMwHhcNMjUxMjE3MTAwMTAxWhcNMjUxMjE4MTAwMTAxWjAzMTEwLwYDVQQD Eyg1NDlmNGY5YWM1MTY1N2UwOWZiYzI4NzkwNjI4ZjEyMzFlNDFhYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXkUalaNrkEOFrfVHc3sEtol0olU JfFzI8hOgrIoupuUzYBjwp28cES9TONOHUrFfTarXC3QlYoI9OxeZCXLoOWgOOtn SWJuYyi8aJrMSsDItFvrnz4W97iABDIYCHKhUy8s9ZcuHq9USPuDnNC4H43V/eJw di0zuVQWqjS5KlSDztOx7+9rVjgP6JFRfyp6/V4WtlEDoWTphC/0+6pbataS3PVe G3hUd2rYrvYOC32KyAJS5kx1o53wU7ojebdDlUCiTWUmPv6mHLKGWiAbl0ag5/KV diExEwISQ+f0s8gVfn58btXNriuKsYlGvIWI6X4lFzsFSXqmg0/NBQ5nMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSfT5rFFlfgn7woeQYo8SMeQasyMB8GA1UdIwQY MBaAFAgJLSdHgUPGrjkFxH9YR9+cAvQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWIt OTRjZjNhMzViZjhjLzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWItOTRjZjNhMzViZjhj LzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARc63UaGA DQMGAXK96NfzzLdXRCmOidBLcSwmhFCBzZeuOhn4P/UqFw/CfPkAPpbg3j5TqUwK i/2gK3spCnhuxOvlcUJekZUAIXPp43yaHxZj40Rg6UTBdG06Hng7H4OdVdBDXuDK w76zHLnDl+N77/sxbmipfNBnv8vnEAhPCQqmt5lkgRhGfOhRGQ2wTcRlHDxlcwol IyrkXcNplWtHTOyq/DRTXt5Ppy3IJ+cByhYvrbvRA5yRXuMOeLdYoeO3i9Dz3f1C UjE+0fU4o6bHwevnFncMbUw/hUBk1PHAUqDIGO7MZ6F9qVhNVCuMDKyZ7HQ8XAh+ 175rfGsvrH+jOA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:55 2025 by rpki-client