This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json) Hash identifier: 2QLwJaGKUG3iiKWnlCLyxDnH/v4WDAiYivXTf9moV0A= Subject key identifier: 35:36:E2:8F:83:93:6A:F5:D7:CE:13:D5:0E:32:94:9C:59:B9:13:67 Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19 Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519 Certificate serial: 019AF1D24C42D2A84F5BD95C61582E5D8B5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft Manifest number: 0455 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: fRQ7cFFLngLAFVfGNECgmFzIfPOcwIQXzlfqx3r6EK0=) 2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4c:42:d2:a8:4f:5b:d9:5c:61:58:2e:5d:8b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519 Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=3536e28f83936af5d7ce13d50e32949c59b91367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:43:78:3e:85:1c:a3:36:75:dd:92:2f:ab: 81:64:65:4a:49:ea:e7:a6:76:62:97:72:c5:d8:57: 00:95:5b:a4:e2:23:40:20:26:69:45:55:ad:b1:d0: c4:64:5c:53:f8:31:27:20:80:dc:63:9f:3f:97:99: 27:d2:b4:b3:21:69:74:5e:17:6b:b6:41:5a:d3:61: b7:fc:29:d9:e2:e0:ab:10:98:22:59:84:1e:f2:8a: 36:95:3b:47:a2:33:6a:01:98:10:31:e9:d7:8d:53: 36:0d:3b:65:31:dc:f9:ba:7d:b3:22:37:44:47:df: b3:75:5b:fa:09:93:b9:25:85:57:50:41:b4:62:0f: f1:a9:f6:d8:5c:bc:51:e0:11:50:99:d7:b8:8c:5b: ec:4e:29:49:a2:db:1c:5d:f8:da:88:47:4d:48:10: bb:13:5e:66:d3:e6:53:b2:0c:ee:72:aa:31:86:94: 30:48:96:07:1e:06:27:e1:50:a7:da:c1:73:03:25: 61:12:ff:be:46:50:8f:60:ab:88:7d:03:c3:01:73: 63:42:c5:e3:7f:2d:c2:c2:15:5a:9d:51:d1:72:34: 6f:38:2a:02:79:3d:e8:32:a4:84:f3:bc:d4:a5:02: c8:60:72:c9:4e:ed:2a:b5:39:b9:d0:3d:f5:20:42: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:36:E2:8F:83:93:6A:F5:D7:CE:13:D5:0E:32:94:9C:59:B9:13:67 X509v3 Authority Key Identifier: keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0c:40:0a:48:bd:19:ef:d1:33:f4:d6:6e:83:03:2e:cb:00: ac:ef:91:81:fc:9d:95:bf:9d:5b:6c:5e:1f:81:26:36:76:46: 9a:da:6a:93:ce:f6:b9:88:e0:cc:27:bc:1b:0e:3a:e0:ed:75: ae:2a:ac:43:e3:ae:6f:52:77:b5:4c:ed:6f:75:bf:f0:33:43: b5:c2:7e:a8:40:88:ee:53:56:b3:69:cf:3b:41:f5:86:63:cb: 3b:98:13:08:58:a5:fa:3c:1f:32:58:30:0e:49:12:8d:0f:47: 87:98:32:ff:72:80:fe:7a:fb:0c:55:b3:25:e2:21:dc:60:3b: 3b:b4:be:9c:7e:65:3b:fb:3f:81:26:c5:7a:ba:8f:bd:79:4d: 17:0c:02:b1:c0:7c:38:03:c6:58:ca:17:38:a8:c8:3d:9b:4b: 7d:81:da:d8:08:84:13:f5:fd:0f:35:78:d2:b7:8c:e0:4a:c3: 52:48:8a:73:43:62:c2:21:46:c2:e1:4b:fa:51:de:5b:ef:14: d2:3b:1e:2b:47:15:71:47:23:9a:ea:08:6c:82:92:a8:af:1a: 16:a3:5f:8c:d9:8c:c1:14:72:43:5c:0a:6c:5a:30:9e:68:52: c4:0b:9b:29:ae:a1:f0:9a:32:e5:9a:06:54:a9:18:1e:76:f3: 46:03:1c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kxC0qhPW9lcYVguXYtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTQzNzBjNGJhOWJkZTJiOTgzNzZiZjhmOTQyYTk0OTI2 YzE1MTkwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD EygzNTM2ZTI4ZjgzOTM2YWY1ZDdjZTEzZDUwZTMyOTQ5YzU5YjkxMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkZDeD6FHKM2dd2SL6uBZGVKSern pnZil3LF2FcAlVuk4iNAICZpRVWtsdDEZFxT+DEnIIDcY58/l5kn0rSzIWl0Xhdr tkFa02G3/CnZ4uCrEJgiWYQe8oo2lTtHojNqAZgQMenXjVM2DTtlMdz5un2zIjdE R9+zdVv6CZO5JYVXUEG0Yg/xqfbYXLxR4BFQmde4jFvsTilJotscXfjaiEdNSBC7 E15m0+ZTsgzucqoxhpQwSJYHHgYn4VCn2sFzAyVhEv++RlCPYKuIfQPDAXNjQsXj fy3CwhVanVHRcjRvOCoCeT3oMqSE87zUpQLIYHLJTu0qtTm50D31IEIQwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDU24o+Dk2r1184T1Q4ylJxZuRNnMB8GA1UdIwQY MBaAFGpUNwxLqb3iuYN2v4+UKpSSbBUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmIt NTAzYjk5ZDVhZDY4LzEvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmItNTAzYjk5ZDVhZDY4 LzEvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgxACki9 Ge/RM/TWboMDLssArO+Rgfydlb+dW2xeH4EmNnZGmtpqk872uYjgzCe8Gw464O11 riqsQ+Oub1J3tUztb3W/8DNDtcJ+qECI7lNWs2nPO0H1hmPLO5gTCFil+jwfMlgw DkkSjQ9Hh5gy/3KA/nr7DFWzJeIh3GA7O7S+nH5lO/s/gSbFerqPvXlNFwwCscB8 OAPGWMoXOKjIPZtLfYHa2AiEE/X9DzV40reM4ErDUkiKc0NiwiFGwuFL+lHeW+8U 0jseK0cVcUcjmuoIbIKSqK8aFqNfjNmMwRRyQ1wKbFownmhSxAubKa6h8Joy5ZoG VKkYHnbzRgMccg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:07 2025 by rpki-client