This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft File: aWZRzL2U9r6et0MyEiM1yrvvw5o.mft (raw, json) Hash identifier: 7TJI9if01pQDT5qVpvRWQlH/snChQk/+dW4QvF7cuHc= Subject key identifier: F4:F7:F4:01:63:BB:83:01:B5:83:50:FA:70:13:54:21:13:11:46:53 Authority key identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A Certificate issuer: /CN=696651ccbd94f6be9eb74332122335cabbefc39a Certificate serial: 019AF19B86A9CA5C06D1E6D5AFA53B82F06B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft Manifest number: 068E Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: aWZRzL2U9r6et0MyEiM1yrvvw5o.crl (hash: qwNc6VvXiBc1ynunmjiW90qOIPaHiprBqKOp/SYYKA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:86:a9:ca:5c:06:d1:e6:d5:af:a5:3b:82:f0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696651ccbd94f6be9eb74332122335cabbefc39a Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=f4f7f40163bb8301b58350fa7013542113114653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:e9:90:01:bd:59:77:ce:b1:a0:04:9a:13: a0:76:cd:89:ef:57:4a:e7:88:e2:97:63:49:5e:23: a1:b5:77:c0:ce:25:61:8a:f1:b4:7a:13:69:9a:ab: f2:f4:df:ad:2d:11:f7:e9:0c:ff:fd:72:d3:18:ab: 99:44:ff:a3:57:4d:13:dd:b2:79:87:6b:4f:b7:45: cd:c6:29:cc:75:c9:61:fc:01:83:f4:a2:17:61:60: 39:b5:54:a2:15:e4:28:4c:89:09:61:27:17:ac:8c: 19:ab:49:7d:75:d1:62:e7:8c:91:aa:7c:6d:89:71: 7f:ce:2f:b2:bd:55:88:8f:83:98:c3:08:23:4b:d6: 82:64:9d:fd:81:c5:8e:92:18:f4:fa:7e:d1:80:ea: e9:7f:bc:d7:ce:78:2d:d7:3c:a3:80:b4:cc:88:a7: 12:8b:82:b9:a1:d5:3d:e6:dd:2d:89:e1:c6:f3:a5: d9:4c:f4:de:fa:f4:19:7b:e0:41:9f:87:93:ed:c7: a5:a2:97:4e:91:d0:ea:72:d2:94:87:59:b7:49:ef: 71:70:be:78:bc:e3:f0:e4:8a:71:3f:01:26:1b:17: 94:8e:dd:31:c2:bb:5e:64:43:7d:57:50:6b:ad:fa: 5b:e3:0b:5f:03:c9:f0:cd:7e:6d:37:64:7b:06:79: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F7:F4:01:63:BB:83:01:B5:83:50:FA:70:13:54:21:13:11:46:53 X509v3 Authority Key Identifier: keyid:69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a5:a3:2d:8d:9f:8b:70:59:f3:70:29:23:81:14:3d:e6:7e: b9:eb:46:d5:b7:6d:cc:6c:f8:5d:d2:30:85:0f:fb:1d:52:0b: fe:c1:8f:3b:ab:ef:60:be:1d:ae:dd:62:41:a1:dc:26:d8:f5: 86:00:21:15:b1:21:94:70:0a:f9:c6:1b:7d:7c:25:61:c0:f5: 91:e0:67:0a:b7:bc:26:99:04:d2:7e:0e:bf:58:0e:54:4b:00: 5b:33:99:4e:3f:66:dd:48:86:87:79:33:c3:9f:2d:9f:a6:10: 6e:aa:88:13:17:a4:f1:d1:99:fa:78:03:32:0e:23:c4:5a:db: c5:89:97:18:f3:1c:de:a1:5c:bd:ce:62:2a:19:42:0a:95:a1: 1a:ee:59:d9:50:ec:1b:4b:5a:14:7e:8b:00:a8:20:43:c7:fb: 92:f3:c0:ac:2c:95:e4:ae:d5:1c:f7:f2:f3:4d:e2:4f:e1:96: e5:36:3a:88:46:81:9a:19:e8:ff:05:ad:40:7e:f8:a4:ac:fa: f1:52:2d:ac:d0:c3:32:70:50:f7:69:3f:74:9e:1e:1f:14:8a: 3e:59:12:25:ac:20:50:53:f7:f0:bf:b7:52:b2:58:a4:18:19: 7c:b5:aa:6f:01:8c:95:50:b2:d4:1d:4e:dd:2e:40:ec:8f:df: e0:9b:8d:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4apylwG0ebVr6U7gvBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjY1MWNjYmQ5NGY2YmU5ZWI3NDMzMjEyMjMzNWNhYmJl ZmMzOWEwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EyhmNGY3ZjQwMTYzYmI4MzAxYjU4MzUwZmE3MDEzNTQyMTEzMTE0NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUPpkAG9WXfOsaAEmhOgds2J71dK 54jil2NJXiOhtXfAziVhivG0ehNpmqvy9N+tLRH36Qz//XLTGKuZRP+jV00T3bJ5 h2tPt0XNxinMdclh/AGD9KIXYWA5tVSiFeQoTIkJYScXrIwZq0l9ddFi54yRqnxt iXF/zi+yvVWIj4OYwwgjS9aCZJ39gcWOkhj0+n7RgOrpf7zXzngt1zyjgLTMiKcS i4K5odU95t0tieHG86XZTPTe+vQZe+BBn4eT7celopdOkdDqctKUh1m3Se9xcL54 vOPw5IpxPwEmGxeUjt0xwrteZEN9V1Brrfpb4wtfA8nwzX5tN2R7Bnk3aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT39AFju4MBtYNQ+nATVCETEUZTMB8GA1UdIwQY MBaAFGlmUcy9lPa+nrdDMhIjNcq778OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdaUnpMMlU5cjZldDBNeUVpTTF5cnZ2dzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kY2MyMmUtYWFiMy00ZTE3LWE0YTAt ZDg3MDE3ZDdhNmFjLzEvYVdaUnpMMlU5cjZldDBNeUVpTTF5cnZ2dzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9kY2MyMmUtYWFiMy00ZTE3LWE0YTAtZDg3MDE3ZDdhNmFj LzEvYVdaUnpMMlU5cjZldDBNeUVpTTF5cnZ2dzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqWjLY2f i3BZ83ApI4EUPeZ+uetG1bdtzGz4XdIwhQ/7HVIL/sGPO6vvYL4drt1iQaHcJtj1 hgAhFbEhlHAK+cYbfXwlYcD1keBnCre8JpkE0n4Ov1gOVEsAWzOZTj9m3UiGh3kz w58tn6YQbqqIExek8dGZ+ngDMg4jxFrbxYmXGPMc3qFcvc5iKhlCCpWhGu5Z2VDs G0taFH6LAKggQ8f7kvPArCyV5K7VHPfy803iT+GW5TY6iEaBmhno/wWtQH74pKz6 8VItrNDDMnBQ92k/dJ4eHxSKPlkSJawgUFP38L+3UrJYpBgZfLWqbwGMlVCy1B1O 3S5A7I/f4JuN3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:13 2025 by rpki-client