This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json) Hash identifier: 8+IiTKvUbdxUwJ5Per5iU6IMnPQuEc3ZYemLt8oZRQk= Subject key identifier: 84:A8:89:75:4A:13:EE:0E:11:F0:26:25:A5:26:04:E7:AB:02:86:B7 Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43 Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743 Certificate serial: 019AF0F5D32792E15F906E7136BA57DDF55E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft Manifest number: 3E Signing time: Sat 06 Dec 2025 00:00:33 +0000 Manifest this update: Sat 06 Dec 2025 00:00:33 +0000 Manifest next update: Sun 07 Dec 2025 00:00:33 +0000 Files and hashes: 1: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: 6V/b18f3AddtmoSGxKdVwJYwdbCW4pGrdwwxAbQH1gc=) 2: rVfDbsZrGJpjUZeNznbeAo8CFJY.roa (hash: F3KrQHQkHhqUHzLoNM3e3utebm2/Ci8CxuSs7+7DOWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d3:27:92:e1:5f:90:6e:71:36:ba:57:dd:f5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743 Validity Not Before: Dec 6 00:00:33 2025 GMT Not After : Dec 7 00:00:33 2025 GMT Subject: CN=84a889754a13ee0e11f02625a52604e7ab0286b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:37:cf:9b:b9:a8:ad:ab:b2:63:18:15:1c: fa:51:54:49:1f:a6:10:c9:2c:ed:59:15:ff:b1:bb: a5:65:1e:7c:d4:ce:b4:96:e6:13:bf:9d:b3:af:b8: 5a:86:8f:e4:2d:e8:81:50:1e:99:c3:d6:cf:a9:f8: cb:44:1f:f0:a9:87:33:e4:c7:81:a8:09:ae:5c:96: 42:96:57:73:ef:da:ef:ef:14:01:8b:2a:89:ce:71: 76:06:37:52:d7:26:7c:92:7d:40:6d:54:60:2e:aa: 17:77:3f:6a:19:54:2d:98:2d:da:89:7a:e8:72:b9: 5d:ff:b7:f4:43:a0:82:76:1c:db:93:be:5f:35:56: 99:47:42:20:a7:1d:04:d1:fc:27:c0:0b:87:bd:39: 7c:da:26:61:02:dd:af:ae:83:97:60:96:56:22:85: 66:53:3e:41:c9:a7:de:eb:2d:be:d6:ed:b7:bd:7b: ee:7f:50:bd:27:b0:63:eb:16:f0:b3:8c:11:fd:07: 53:9b:ab:60:66:68:81:18:46:19:76:47:f7:eb:20: 9f:be:70:58:b7:7d:2f:a1:b2:b4:88:7d:2a:a5:9e: d4:9c:38:36:3e:d0:93:28:8f:b0:9d:ed:dc:46:83: d1:ef:fb:3f:c1:d0:c4:61:e0:82:f0:7a:63:86:d3: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A8:89:75:4A:13:EE:0E:11:F0:26:25:A5:26:04:E7:AB:02:86:B7 X509v3 Authority Key Identifier: keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:71:61:32:4a:a8:4b:94:58:82:d4:d9:69:8f:fa:b6:b5:95: 8f:f7:8a:c3:e8:6b:45:92:09:e3:09:8c:20:87:36:7d:86:88: ec:fb:48:b8:99:f5:b6:32:bd:51:83:d9:d3:74:fc:df:c4:48: 56:70:7c:85:75:0e:99:2a:27:1f:3c:58:87:76:b3:44:99:62: af:ff:3d:9a:b4:37:af:1c:4f:4a:64:09:8c:33:5c:4f:e3:b2: 55:c1:06:98:2e:17:82:84:6d:2c:e8:b3:4f:e1:4c:9c:64:68: 5e:06:aa:f1:ca:71:6d:3a:aa:cd:12:c5:65:22:cc:07:6a:c2: 5a:86:4c:18:8a:3e:68:ee:60:f1:aa:89:35:ae:0e:1d:76:53: e2:07:89:f7:56:78:41:e0:bd:53:05:0d:c2:19:75:39:31:7c: cb:22:53:24:9f:a8:69:ff:2b:01:32:0d:27:f8:fd:a9:64:c0: 39:2e:48:7e:db:cb:69:55:6f:65:23:45:fc:57:98:01:4f:cf: d7:a3:0c:3f:06:8b:09:cc:70:15:47:7f:ce:8a:e1:15:89:78: dc:7e:76:45:fc:44:ea:ea:23:03:2b:6d:ac:d3:c6:7d:37:5f: c5:a8:dd:55:27:da:3b:91:7c:89:1c:b8:a6:81:b8:30:e0:7e: b7:f0:56:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dMnkuFfkG5xNrpX3fVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OWMxZDYxYzBmMzNjMzBiMDBiNWNhODBhMTVkMWQyNTU2 YzA3NDMwHhcNMjUxMjA2MDAwMDMzWhcNMjUxMjA3MDAwMDMzWjAzMTEwLwYDVQQD Eyg4NGE4ODk3NTRhMTNlZTBlMTFmMDI2MjVhNTI2MDRlN2FiMDI4NmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA83z5u5qK2rsmMYFRz6UVRJH6YQ ySztWRX/sbulZR581M60luYTv52zr7haho/kLeiBUB6Zw9bPqfjLRB/wqYcz5MeB qAmuXJZClldz79rv7xQBiyqJznF2BjdS1yZ8kn1AbVRgLqoXdz9qGVQtmC3aiXro crld/7f0Q6CCdhzbk75fNVaZR0Igpx0E0fwnwAuHvTl82iZhAt2vroOXYJZWIoVm Uz5Byafe6y2+1u23vXvuf1C9J7Bj6xbws4wR/QdTm6tgZmiBGEYZdkf36yCfvnBY t30vobK0iH0qpZ7UnDg2PtCTKI+wne3cRoPR7/s/wdDEYeCC8HpjhtMUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISoiXVKE+4OEfAmJaUmBOerAoa3MB8GA1UdIwQY MBaAFGicHWHA8zwwsAtcqAoV0dJVbAdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGIt MjIwYmM0M2NkMjQ2LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGItMjIwYmM0M2NkMjQ2 LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnFhMkqo S5RYgtTZaY/6trWVj/eKw+hrRZIJ4wmMIIc2fYaI7PtIuJn1tjK9UYPZ03T838RI VnB8hXUOmSonHzxYh3azRJlir/89mrQ3rxxPSmQJjDNcT+OyVcEGmC4XgoRtLOiz T+FMnGRoXgaq8cpxbTqqzRLFZSLMB2rCWoZMGIo+aO5g8aqJNa4OHXZT4geJ91Z4 QeC9UwUNwhl1OTF8yyJTJJ+oaf8rATINJ/j9qWTAOS5IftvLaVVvZSNF/FeYAU/P 16MMPwaLCcxwFUd/zorhFYl43H52RfxE6uojAyttrNPGfTdfxajdVSfaO5F8iRy4 poG4MOB+t/BWpg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:46 2025 by rpki-client