This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json) Hash identifier: ia5qXptgWFIuFmnzifs8HMYyQJeveTqOkZEKvFag4oc= Subject key identifier: 64:32:E9:51:B0:CC:8D:F3:E9:95:87:F4:81:EA:25:36:08:F4:63:44 Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13 Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413 Certificate serial: 019AF1D20C6B7A747E002A08D53B8D7A9129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft Manifest number: 147A Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: uaBrDVmUznmtXWBK6809O4Y1jN0dsYQepoH0Lm2uWIE=) 2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0c:6b:7a:74:7e:00:2a:08:d5:3b:8d:7a:91:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=6432e951b0cc8df3e99587f481ea253608f46344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:f2:76:5a:7d:46:fa:f8:b8:c3:80:24:d9: 40:c6:5b:37:65:f4:f9:e2:26:9a:48:25:21:2f:7a: 1b:9d:81:34:21:c2:4a:30:03:bd:a5:7c:cb:80:4b: cb:23:dc:6e:d8:a6:6e:39:ed:ac:d1:1b:df:b2:53: 1a:7c:e9:54:d3:0b:5f:2a:72:a7:e5:e5:8b:74:4f: ab:37:dd:5a:31:db:62:86:f3:e0:5f:3a:f3:28:7c: a3:01:8f:ce:77:8b:2c:ef:58:3f:3d:cc:0c:d4:5d: 95:a1:2d:5b:f9:7a:1d:62:fa:bc:9b:1e:f4:a1:f4: c0:69:4c:ee:8b:cc:09:d8:d0:a6:60:41:1c:63:a0: d3:3e:9a:96:31:96:8f:c9:04:01:63:2c:37:bd:e6: 57:28:16:a0:81:b5:8c:84:63:e2:1c:fb:74:d7:b4: 19:ed:e8:f4:63:1f:ae:9e:43:0f:21:6c:44:8b:e3: da:43:97:8e:e4:c0:b4:90:c3:f7:f0:f2:ec:a2:0b: 75:c4:85:cd:2b:c1:e4:82:ef:4e:76:85:49:0d:07: 76:11:5c:3d:4b:b6:1f:28:39:96:49:ee:6a:fe:9b: 6c:d7:b7:9f:fc:7d:eb:91:4d:3d:cb:97:08:75:26: a9:a8:49:1d:b1:7a:65:a6:f6:51:04:e0:9a:8d:24: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:32:E9:51:B0:CC:8D:F3:E9:95:87:F4:81:EA:25:36:08:F4:63:44 X509v3 Authority Key Identifier: keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6b:e0:f2:64:d2:2c:43:98:22:8f:e9:48:d1:b1:0c:5d:1c: 26:31:ba:c9:af:0a:24:cb:26:ee:81:4d:b6:96:5b:9e:4a:13: b7:20:07:09:ca:8a:93:64:85:a3:eb:f0:3b:9c:7a:df:05:77: bb:1b:b6:4e:61:2a:02:99:a3:9d:6d:c1:c2:60:1c:c6:e7:0f: 80:bc:91:fa:36:46:43:06:36:af:89:bb:55:e1:fb:ba:1e:57: 7c:79:83:a7:df:31:48:80:cc:06:ee:0a:b0:7f:b9:b9:ca:c4: 05:b2:a9:80:c2:9e:c2:f8:19:de:2a:7e:c5:e2:78:b7:f4:93: f5:0c:3e:77:c8:a8:14:a0:d4:3b:d7:f2:44:91:61:7f:05:ba: 4d:b3:35:17:be:a5:33:5e:22:dd:04:56:1d:c3:db:3a:c3:5a: 10:74:93:9b:3f:35:be:2f:da:31:ec:94:1e:4d:d5:d7:b0:aa: 3d:39:08:a7:ca:21:05:16:e2:27:a3:d1:de:30:5f:09:bf:3e: 32:fd:7b:bc:b1:db:ff:e7:2c:94:ab:0c:da:cb:35:96:01:bf: d7:52:9c:83:4f:2f:ef:e1:3b:91:13:54:5f:d5:e9:b6:8c:b5: a5:2f:7c:47:99:a1:de:5c:57:02:54:14:e4:3a:20:2a:ba:94: c3:1b:74:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gxrenR+ACoI1TuNepEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDkyZDI3NDc4MTQzYzZhZTM5MDVjNDdmNTg0N2RmOWMw MmY0MTMwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD Eyg2NDMyZTk1MWIwY2M4ZGYzZTk5NTg3ZjQ4MWVhMjUzNjA4ZjQ2MzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorHydlp9Rvr4uMOAJNlAxls3ZfT5 4iaaSCUhL3obnYE0IcJKMAO9pXzLgEvLI9xu2KZuOe2s0RvfslMafOlU0wtfKnKn 5eWLdE+rN91aMdtihvPgXzrzKHyjAY/Od4ss71g/PcwM1F2VoS1b+XodYvq8mx70 ofTAaUzui8wJ2NCmYEEcY6DTPpqWMZaPyQQBYyw3veZXKBaggbWMhGPiHPt017QZ 7ej0Yx+unkMPIWxEi+PaQ5eO5MC0kMP38PLsogt1xIXNK8Hkgu9OdoVJDQd2EVw9 S7YfKDmWSe5q/pts17ef/H3rkU09y5cIdSapqEkdsXplpvZRBOCajSRzVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQy6VGwzI3z6ZWH9IHqJTYI9GNEMB8GA1UdIwQY MBaAFAgJLSdHgUPGrjkFxH9YR9+cAvQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWIt OTRjZjNhMzViZjhjLzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWItOTRjZjNhMzViZjhj LzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGvg8mTS LEOYIo/pSNGxDF0cJjG6ya8KJMsm7oFNtpZbnkoTtyAHCcqKk2SFo+vwO5x63wV3 uxu2TmEqApmjnW3BwmAcxucPgLyR+jZGQwY2r4m7VeH7uh5XfHmDp98xSIDMBu4K sH+5ucrEBbKpgMKewvgZ3ip+xeJ4t/ST9Qw+d8ioFKDUO9fyRJFhfwW6TbM1F76l M14i3QRWHcPbOsNaEHSTmz81vi/aMeyUHk3V17CqPTkIp8ohBRbiJ6PR3jBfCb8+ Mv17vLHb/+cslKsM2ss1lgG/11Kcg08v7+E7kRNUX9Xptoy1pS98R5mh3lxXAlQU 5DogKrqUwxt0bA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:20 2025 by rpki-client