This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json) Hash identifier: PVqbuDFgph00lAmCiWhxl4A2yQ5rOhyVMciYlceTVAE= Subject key identifier: 62:8F:7C:3F:68:B0:B2:BE:18:C7:11:71:8E:43:A8:99:DD:D0:C9:D1 Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a Certificate serial: 019AF087F855724DC4CC1FDD233D386A088D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 22:00:33 +0000 Manifest this update: Fri 05 Dec 2025 22:00:33 +0000 Manifest next update: Sat 06 Dec 2025 22:00:33 +0000 Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: ENfL7hmvodhbyK93fZXdJDw2rPzqhjRdb0DiY9wucFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f8:55:72:4d:c4:cc:1f:dd:23:3d:38:6a:08:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a Validity Not Before: Dec 5 22:00:33 2025 GMT Not After : Dec 6 22:00:33 2025 GMT Subject: CN=628f7c3f68b0b2be18c711718e43a899ddd0c9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:7f:e2:06:7c:47:8f:41:93:4a:2a:23:e3: 59:9a:79:55:3d:48:21:e6:62:f0:9a:cc:49:5e:d9: 6f:df:d1:cf:c9:d6:85:dc:a6:e2:50:90:d8:77:83: 47:39:d0:f5:86:68:0e:c4:b4:d4:c1:93:92:25:38: be:45:95:25:81:9d:02:ae:53:8e:4e:63:6c:60:77: fa:0d:4a:aa:0d:4a:6f:36:1b:e1:01:84:8c:67:d8: e2:a4:c7:00:9e:e5:b9:86:2b:5d:ad:16:1c:f3:4c: c8:fc:4f:10:27:13:96:af:13:da:4b:bb:37:73:e9: f0:18:9b:79:50:9f:ae:e5:25:74:e0:58:25:72:32: 90:7f:5d:f0:6f:64:ee:a2:fc:78:d1:50:b8:f4:8b: f5:2f:2b:ac:83:1b:b5:e6:ed:00:71:41:f2:e5:99: 4c:80:db:50:62:b6:a8:db:15:8d:4d:38:c9:99:f5: 9b:33:48:33:3f:eb:8b:66:81:b0:ed:b8:54:a4:55: 52:ef:6e:82:9d:72:34:0a:93:38:f1:99:17:1e:90: ad:49:c3:d6:e0:41:23:aa:40:91:09:5d:ec:d6:15: 13:c6:01:16:cc:96:e2:0f:d0:11:f4:5b:be:07:d6: 2d:9c:89:b4:85:8f:22:00:b4:b2:ed:1f:0e:66:c8: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8F:7C:3F:68:B0:B2:BE:18:C7:11:71:8E:43:A8:99:DD:D0:C9:D1 X509v3 Authority Key Identifier: keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:c0:af:d8:eb:5a:95:28:05:75:2d:a1:c2:1b:5e:b7:21: 6a:36:58:f7:67:dc:35:7b:5f:46:51:49:44:32:12:e5:b9:45: fb:3b:ef:39:c5:38:e9:03:dd:95:ee:48:ee:8e:8f:e1:6b:44: 1d:1c:79:71:92:24:a1:91:aa:e3:16:d0:37:68:f7:40:78:a5: 73:cc:2f:6e:f2:48:06:a8:6e:3c:2a:ee:35:a6:ff:db:ff:29: 05:d0:64:2d:f4:65:77:b2:3d:7e:20:a6:cf:5c:77:a2:b1:49: 39:9f:24:fd:40:73:01:a1:6f:05:93:b4:dd:01:7b:de:02:3e: e9:bd:be:51:fc:d2:f7:e8:c4:e9:3b:35:5c:42:df:d7:82:10: df:f7:82:93:19:ed:0d:e4:65:ed:9b:a7:0d:69:9d:47:0c:18: cc:3b:38:0b:89:ef:08:6a:03:42:2e:57:73:98:8b:71:58:de: a1:e1:13:f9:03:02:1e:5f:c0:9e:2a:7f:39:5c:3b:d4:65:7a: 4b:01:90:22:b8:07:9c:c4:1c:dc:75:1a:9a:e5:b1:f4:fa:5b: 34:f4:db:07:f4:f8:a4:4b:9d:2f:d6:c9:14:bc:fb:18:0e:b5: 2d:a4:d5:93:9e:9d:86:82:e4:69:01:83:ae:63:8e:cb:ed:83: cc:2f:06:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/hVck3EzB/dIz04agiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYTY2OWI2ZDVlMjI0MDUwMTdhZDM1OTg3Y2M1N2FjOTYy MzljOWEwHhcNMjUxMjA1MjIwMDMzWhcNMjUxMjA2MjIwMDMzWjAzMTEwLwYDVQQD Eyg2MjhmN2MzZjY4YjBiMmJlMThjNzExNzE4ZTQzYTg5OWRkZDBjOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurp/4gZ8R49Bk0oqI+NZmnlVPUgh 5mLwmsxJXtlv39HPydaF3KbiUJDYd4NHOdD1hmgOxLTUwZOSJTi+RZUlgZ0CrlOO TmNsYHf6DUqqDUpvNhvhAYSMZ9jipMcAnuW5hitdrRYc80zI/E8QJxOWrxPaS7s3 c+nwGJt5UJ+u5SV04FglcjKQf13wb2Tuovx40VC49Iv1Lyusgxu15u0AcUHy5ZlM gNtQYrao2xWNTTjJmfWbM0gzP+uLZoGw7bhUpFVS726CnXI0CpM48ZkXHpCtScPW 4EEjqkCRCV3s1hUTxgEWzJbiD9AR9Fu+B9YtnIm0hY8iALSy7R8OZsgexQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKPfD9osLK+GMcRcY5DqJnd0MnRMB8GA1UdIwQY MBaAFP2mabbV4iQFAXrTWYfMV6yWI5yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lY2NlODUtZTYxZi00ODIwLWFiMzYt ODlkM2NmNmM3MDI3LzEvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lY2NlODUtZTYxZi00ODIwLWFiMzYtODlkM2NmNmM3MDI3 LzEvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBTAr9jr WpUoBXUtocIbXrchajZY92fcNXtfRlFJRDIS5blF+zvvOcU46QPdle5I7o6P4WtE HRx5cZIkoZGq4xbQN2j3QHilc8wvbvJIBqhuPCruNab/2/8pBdBkLfRld7I9fiCm z1x3orFJOZ8k/UBzAaFvBZO03QF73gI+6b2+UfzS9+jE6Ts1XELf14IQ3/eCkxnt DeRl7ZunDWmdRwwYzDs4C4nvCGoDQi5Xc5iLcVjeoeET+QMCHl/Anip/OVw71GV6 SwGQIrgHnMQc3HUamuWx9PpbNPTbB/T4pEudL9bJFLz7GA61LaTVk56dhoLkaQGD rmOOy+2DzC8GYA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:56 2025 by rpki-client