This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json) Hash identifier: lH6j5rAnIKgqE3n2C2vaDJxJ2imfjgIvIs2oA0L7q0g= Subject key identifier: 20:D8:C9:E9:29:F9:6E:B8:64:62:3F:D7:14:90:44:C7:EF:77:40:7F Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Certificate serial: 019AF19B2E7ED9E00AADA8F731CDA9E5A9D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft Manifest number: 08BB Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=) 2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: mo/82OvhWfHnPFwhI3FOHFlToewmmMLvyCCdl0t1SB8=) 3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2e:7e:d9:e0:0a:ad:a8:f7:31:cd:a9:e5:a9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0 Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=20d8c9e929f96eb864623fd7149044c7ef77407f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:87:07:cf:f2:3d:64:df:19:bd:c5:94:18: d5:8d:0e:e8:16:d1:38:17:7b:0f:c5:3e:f7:81:ca: c8:60:c7:d7:06:22:31:1e:ee:02:b2:98:5d:61:a5: 36:a7:67:68:18:0e:08:26:99:89:02:86:74:a0:1c: 53:5e:2e:89:5c:06:f6:d7:81:70:5a:5c:ea:8c:69: 14:36:f3:37:2d:c3:b2:a6:72:08:63:0a:5e:02:81: e3:b5:6c:fe:38:22:62:ee:63:29:02:e9:bd:da:a3: 4c:b7:6f:ca:e9:79:bf:d9:39:f0:d7:9f:fd:cc:99: 73:ff:46:7d:f6:32:14:9a:78:69:bb:44:52:1b:aa: 0f:41:bf:5f:86:7b:52:60:73:bb:a0:8e:25:df:d7: 1f:43:68:45:d2:b6:75:66:19:d3:41:39:0f:01:97: 6b:ed:60:54:77:d2:37:26:b1:0b:bd:9e:d3:44:8b: 87:c3:b6:be:9e:33:28:d3:ae:44:b3:8e:98:0d:27: ae:96:db:7e:f8:75:74:37:b7:47:45:22:9d:f4:8b: 93:d3:8f:73:8d:22:00:e3:12:16:14:f1:7f:79:35: 48:24:59:90:50:7d:15:ef:98:2f:ed:8e:e0:75:64: 63:ae:a7:98:e8:87:2a:86:02:e5:ea:bf:52:e8:40: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:C9:E9:29:F9:6E:B8:64:62:3F:D7:14:90:44:C7:EF:77:40:7F X509v3 Authority Key Identifier: keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:14:43:13:29:c9:9f:cd:f5:4f:b7:3f:5d:01:4f:85:da:02: 22:6d:73:19:1c:39:d4:7c:19:f2:53:48:b9:2a:83:2a:68:dd: 06:5c:8f:24:c3:7b:f1:28:13:a6:7b:6c:6c:67:8f:45:6f:3d: aa:63:1e:46:1e:ad:d3:e2:96:ba:8e:9f:47:da:ed:cf:55:af: 46:d2:fc:8e:14:63:57:c5:da:31:ee:20:8c:8e:75:e9:82:90: 13:4b:21:b6:6e:74:97:d9:c2:4a:6d:c0:01:7f:f6:32:5e:7b: 9e:c3:bd:58:77:1a:fd:28:ba:1f:8f:d0:78:cc:a0:fd:c5:a4: 16:d5:43:63:66:87:cd:9f:8e:e2:ba:a1:4d:52:c2:41:d7:1e: 20:b0:dc:4a:0e:d6:d5:d4:cb:eb:69:55:6a:1e:9c:fd:e6:8b: bd:1b:fe:5f:5d:0c:cd:05:1d:c3:21:28:93:5c:d1:04:5d:96: 01:55:3c:c7:65:c0:eb:83:92:cf:69:6f:f8:8c:a3:32:63:df: 0c:4d:90:9f:65:0a:2a:5e:d3:c7:98:cd:44:67:28:55:ec:81: 9e:41:c6:b8:15:45:91:af:86:13:9c:54:43:2f:a0:8c:c5:8a: 2a:5e:46:0e:51:83:2c:da:eb:68:7c:f1:1c:ca:b7:da:99:ff: 7d:94:17:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy5+2eAKraj3Mc2p5anYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWJiMTBhNTU3MjE3NWIwM2EzYzdjYmZiZTkzOGI3YjE0 NDFhYzAwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD EygyMGQ4YzllOTI5Zjk2ZWI4NjQ2MjNmZDcxNDkwNDRjN2VmNzc0MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0iHB8/yPWTfGb3FlBjVjQ7oFtE4 F3sPxT73gcrIYMfXBiIxHu4CsphdYaU2p2doGA4IJpmJAoZ0oBxTXi6JXAb214Fw WlzqjGkUNvM3LcOypnIIYwpeAoHjtWz+OCJi7mMpAum92qNMt2/K6Xm/2Tnw15/9 zJlz/0Z99jIUmnhpu0RSG6oPQb9fhntSYHO7oI4l39cfQ2hF0rZ1ZhnTQTkPAZdr 7WBUd9I3JrELvZ7TRIuHw7a+njMo065Es46YDSeultt++HV0N7dHRSKd9IuT049z jSIA4xIWFPF/eTVIJFmQUH0V75gv7Y7gdWRjrqeY6IcqhgLl6r9S6EBsEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDYyekp+W64ZGI/1xSQRMfvd0B/MB8GA1UdIwQY MBaAFGmbsQpVchdbA6PHy/vpOLexRBrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMt OGFhZTQzMDYzYmNhLzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMtOGFhZTQzMDYzYmNh LzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRRDEynJ n831T7c/XQFPhdoCIm1zGRw51HwZ8lNIuSqDKmjdBlyPJMN78SgTpntsbGePRW89 qmMeRh6t0+KWuo6fR9rtz1WvRtL8jhRjV8XaMe4gjI516YKQE0shtm50l9nCSm3A AX/2Ml57nsO9WHca/Si6H4/QeMyg/cWkFtVDY2aHzZ+O4rqhTVLCQdceILDcSg7W 1dTL62lVah6c/eaLvRv+X10MzQUdwyEok1zRBF2WAVU8x2XA64OSz2lv+IyjMmPf DE2Qn2UKKl7Tx5jNRGcoVeyBnkHGuBVFka+GE5xUQy+gjMWKKl5GDlGDLNrraHzx HMq32pn/fZQXTg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:50 2025 by rpki-client