This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json) Hash identifier: SitrYOLxAnnYQAsZvnQYNh38lp2W39zH/mklgrB0NWg= Subject key identifier: E5:4A:4E:DB:63:E5:43:EE:18:C3:59:2A:62:24:82:EA:BB:27:45:B0 Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f Certificate serial: 019B3E6D9B104D93B7C65797A14C781971D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:02:08 +0000 Manifest this update: Sun 21 Dec 2025 01:02:08 +0000 Manifest next update: Mon 22 Dec 2025 01:02:08 +0000 Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=) 2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: b+ay3xFQF5BQcBC6VGYgFGBtb67Cdgdf5hKl+YjHhi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:9b:10:4d:93:b7:c6:57:97:a1:4c:78:19:71:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f Validity Not Before: Dec 21 01:02:08 2025 GMT Not After : Dec 22 01:02:08 2025 GMT Subject: CN=e54a4edb63e543ee18c3592a622482eabb2745b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:96:10:10:91:92:f2:59:c8:62:eb:8f:72: 35:f3:42:ca:c4:70:55:9d:02:77:f4:ba:2f:3b:3b: a1:40:b8:5d:33:63:3d:9e:88:ef:39:43:2a:de:74: b5:93:a0:c6:de:0f:c6:b0:30:9f:2d:63:a0:03:e3: 54:26:00:46:fa:1d:35:ea:5b:24:57:aa:ba:7a:47: e3:ce:ce:55:81:ba:e1:2d:e0:67:ec:83:3e:2c:a6: 7b:23:90:ed:97:4b:cc:87:99:89:83:2c:d8:95:1b: 43:0f:3b:c9:39:42:1d:b9:72:db:1c:6b:de:6f:65: 97:89:f0:fc:77:34:62:0a:8b:b6:0b:82:a9:2d:6a: 1d:bd:b8:df:2d:21:70:fa:19:d8:af:5d:5c:43:5d: 44:3a:4c:07:25:19:cf:6a:77:b8:67:63:d6:ad:ab: 1c:58:30:83:e1:48:d5:a6:12:98:8d:0c:06:01:aa: 70:d6:47:f5:3a:38:39:7e:ce:0a:cb:86:87:13:a8: db:2a:cd:5c:87:f3:1e:fd:61:bf:55:39:c4:4f:8b: 9d:e2:7a:7e:39:28:77:72:21:ad:a7:75:dc:9f:7f: 01:ff:2e:44:91:bf:b3:8a:36:51:a8:a5:39:9b:47: 34:b7:9b:2c:7d:17:2f:d4:77:1c:0b:a2:d4:94:6b: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4A:4E:DB:63:E5:43:EE:18:C3:59:2A:62:24:82:EA:BB:27:45:B0 X509v3 Authority Key Identifier: keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:fd:b1:bc:1f:c3:33:53:e0:b9:95:ff:93:8a:ea:87:54:df: ca:bc:ad:4c:be:91:3d:ae:61:9c:f9:97:f0:4f:13:20:bc:e2: 5a:f0:c0:87:d3:16:e9:04:6d:f3:26:b3:ca:af:44:5f:28:4a: 34:03:da:ca:8d:85:3f:38:50:51:4d:1f:2b:d2:46:9a:0a:3c: d1:5e:75:9f:d8:ee:bb:0b:05:5b:83:c9:a8:83:ba:ef:4c:7b: 57:d6:05:42:79:bd:d9:7d:87:9d:da:16:d8:51:20:28:7f:87: 37:ee:63:61:d6:67:c0:c9:27:62:ba:05:fa:d2:f8:ac:d8:a5: 2f:11:e3:f2:86:33:e6:1b:e4:aa:16:60:87:3d:7d:0c:ac:9f: 4c:19:87:9c:d6:b7:00:94:c2:04:2e:80:1d:29:92:5d:c0:6b: f5:f2:df:89:a3:7a:9b:97:87:1b:cf:4b:58:c7:0f:ec:50:2c: 8d:31:6b:1c:3c:85:e2:ef:e2:90:8b:29:5a:3b:ef:af:61:cf: 05:fd:7c:ef:5e:43:92:df:a2:90:e3:9d:7b:da:f4:1c:c8:45: f5:b6:68:9b:de:33:75:4c:d3:19:83:16:63:71:97:75:c0:5b: 43:c4:47:24:cd:cc:6f:fc:b1:5a:98:c9:36:dd:37:7c:a3:86: 59:42:36:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZsQTZO3xleXoUx4GXHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZWM1MGNiMzNhZTE4NjBkNGNjNWZiNjdlNDNkMzkzMDQy MjRiNGYwHhcNMjUxMjIxMDEwMjA4WhcNMjUxMjIyMDEwMjA4WjAzMTEwLwYDVQQD EyhlNTRhNGVkYjYzZTU0M2VlMThjMzU5MmE2MjI0ODJlYWJiMjc0NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsKWEBCRkvJZyGLrj3I180LKxHBV nQJ39LovOzuhQLhdM2M9nojvOUMq3nS1k6DG3g/GsDCfLWOgA+NUJgBG+h016lsk V6q6ekfjzs5VgbrhLeBn7IM+LKZ7I5Dtl0vMh5mJgyzYlRtDDzvJOUIduXLbHGve b2WXifD8dzRiCou2C4KpLWodvbjfLSFw+hnYr11cQ11EOkwHJRnPane4Z2PWrasc WDCD4UjVphKYjQwGAapw1kf1Ojg5fs4Ky4aHE6jbKs1ch/Me/WG/VTnET4ud4np+ OSh3ciGtp3Xcn38B/y5Ekb+zijZRqKU5m0c0t5ssfRcv1HccC6LUlGvWFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVKTttj5UPuGMNZKmIkguq7J0WwMB8GA1UdIwQY MBaAFAHsUMszrhhg1Mxftn5D05MEIktPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQt MTMwNjk4YTU5NTljLzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQtMTMwNjk4YTU5NTlj LzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/2xvB/D M1PguZX/k4rqh1TfyrytTL6RPa5hnPmX8E8TILziWvDAh9MW6QRt8yazyq9EXyhK NAPayo2FPzhQUU0fK9JGmgo80V51n9juuwsFW4PJqIO670x7V9YFQnm92X2HndoW 2FEgKH+HN+5jYdZnwMknYroF+tL4rNilLxHj8oYz5hvkqhZghz19DKyfTBmHnNa3 AJTCBC6AHSmSXcBr9fLfiaN6m5eHG89LWMcP7FAsjTFrHDyF4u/ikIspWjvvr2HP Bf18715Dkt+ikOOde9r0HMhF9bZom94zdUzTGYMWY3GXdcBbQ8RHJM3Mb/yxWpjJ Nt03fKOGWUI29A== -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:44 2025 by rpki-client