This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json) Hash identifier: Y/4RlNKDNrp+1iX2Zqa94RPjZ0cxg1BmpT7IzCQQZe4= Subject key identifier: 55:B8:AE:A3:B3:ED:82:5C:7A:D4:F1:42:37:15:1E:B5:A7:52:63:E7 Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a Certificate serial: 019AF8418E255772E966CD358A9382EC3508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft Manifest number: 1768 Signing time: Sun 07 Dec 2025 10:00:37 +0000 Manifest this update: Sun 07 Dec 2025 10:00:37 +0000 Manifest next update: Mon 08 Dec 2025 10:00:37 +0000 Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: TW6VTwtWody9pT6oe0LZW36q8XGGKs6kWgFNiEdQcys=) 2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:41:8e:25:57:72:e9:66:cd:35:8a:93:82:ec:35:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a Validity Not Before: Dec 7 10:00:37 2025 GMT Not After : Dec 8 10:00:37 2025 GMT Subject: CN=55b8aea3b3ed825c7ad4f14237151eb5a75263e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:5e:b6:fa:6a:18:48:af:79:da:51:aa:b8: 00:7c:f1:75:01:d0:44:dc:f3:75:c9:f6:3a:f6:c2: 6f:a0:60:b5:c5:2f:60:74:23:9e:75:4c:8b:84:5a: af:7e:3d:2c:54:d2:cf:22:10:ca:c7:33:49:8a:61: 92:39:70:4f:ab:47:16:f0:ac:09:7d:8b:d4:68:6b: 26:fd:65:f6:f9:95:a0:63:62:b0:b3:67:84:ee:96: e9:b6:b3:e6:83:9c:77:f8:16:d5:a5:8f:8f:99:cb: da:da:6d:c4:9a:a5:86:55:39:49:79:21:c4:7f:5e: 6f:05:96:98:51:f2:0f:86:78:46:c8:71:a5:e7:d4: 13:e1:4e:b8:3c:aa:41:5f:68:32:eb:85:9b:23:28: 46:fd:4d:ba:b2:ef:0d:6b:99:7c:a2:be:86:e3:6a: 71:99:35:3b:74:94:44:8e:b6:35:5e:09:a7:08:8d: 58:a7:a0:d6:79:4a:4c:fc:8c:de:d6:99:06:9f:d9: 2b:60:e3:e0:9c:a6:11:2d:e9:dd:0f:3d:72:b1:d3: 9e:9b:d8:a0:ba:f1:78:c2:d9:93:8f:c9:1c:b6:52: 81:8e:13:56:86:7b:4e:c8:99:56:36:95:5b:d8:72: c7:fb:86:36:72:93:5e:59:4f:7e:fe:c3:62:b5:16: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B8:AE:A3:B3:ED:82:5C:7A:D4:F1:42:37:15:1E:B5:A7:52:63:E7 X509v3 Authority Key Identifier: keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:98:04:e0:84:ad:0a:38:1b:72:12:9d:8a:7e:eb:8d:5e:ff: ad:69:c4:68:c3:24:a8:ae:e6:f7:c3:54:99:49:00:e5:0d:53: 05:05:b9:81:0c:e7:fc:d2:cd:8d:54:25:38:cc:84:a5:89:25: 63:88:6d:9d:6f:49:ba:68:48:d9:ac:15:50:2a:50:1e:15:bb: 1a:f5:d0:9a:a9:0e:3f:90:26:dd:46:9c:5f:e5:52:81:3c:31: dd:4d:2e:d0:71:7c:3b:9c:79:cd:c3:a7:fa:83:6b:29:91:07: 24:58:84:13:20:0f:aa:b7:93:e2:11:65:4f:7b:1b:c2:7b:40: 3a:21:a3:62:b2:3c:d9:16:92:87:85:7d:22:0e:f1:ac:b3:d9: ae:92:ef:bd:75:d4:a3:ef:ef:b1:37:68:51:f6:47:57:60:f8: f4:7e:9b:7f:9a:ce:18:10:82:f1:ac:50:3f:20:cb:3e:10:a1: c3:71:6f:da:03:b1:19:61:d3:1f:2b:15:1a:29:51:3a:32:23: d3:d9:1e:f3:91:ba:ba:25:ed:c1:cf:5a:4c:58:a4:2a:a1:31: b6:fb:ff:f0:8a:a9:18:96:37:3c:d3:6d:fc:f1:9f:6b:02:44: 14:c5:62:c5:28:78:54:14:e2:2a:d3:7c:78:ea:48:44:f6:10: af:8c:e9:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4QY4lV3LpZs01ipOC7DUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjFlOTAwMDk3N2JhZDU4Yzg3NzA1ZTNiMTY1YjA4NDgz ZjBiM2EwHhcNMjUxMjA3MTAwMDM3WhcNMjUxMjA4MTAwMDM3WjAzMTEwLwYDVQQD Eyg1NWI4YWVhM2IzZWQ4MjVjN2FkNGYxNDIzNzE1MWViNWE3NTI2M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi9etvpqGEivedpRqrgAfPF1AdBE 3PN1yfY69sJvoGC1xS9gdCOedUyLhFqvfj0sVNLPIhDKxzNJimGSOXBPq0cW8KwJ fYvUaGsm/WX2+ZWgY2Kws2eE7pbptrPmg5x3+BbVpY+Pmcva2m3EmqWGVTlJeSHE f15vBZaYUfIPhnhGyHGl59QT4U64PKpBX2gy64WbIyhG/U26su8Na5l8or6G42px mTU7dJREjrY1XgmnCI1Yp6DWeUpM/Ize1pkGn9krYOPgnKYRLendDz1ysdOem9ig uvF4wtmTj8kctlKBjhNWhntOyJlWNpVb2HLH+4Y2cpNeWU9+/sNitRYf4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFW4rqOz7YJcetTxQjcVHrWnUmPnMB8GA1UdIwQY MBaAFGth6QAJd7rVjIdwXjsWWwhIPws6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMt MjIyOGY5YWQ3NTBmLzEvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMtMjIyOGY5YWQ3NTBm LzEvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJgE4ISt CjgbchKdin7rjV7/rWnEaMMkqK7m98NUmUkA5Q1TBQW5gQzn/NLNjVQlOMyEpYkl Y4htnW9JumhI2awVUCpQHhW7GvXQmqkOP5Am3UacX+VSgTwx3U0u0HF8O5x5zcOn +oNrKZEHJFiEEyAPqreT4hFlT3sbwntAOiGjYrI82RaSh4V9Ig7xrLPZrpLvvXXU o+/vsTdoUfZHV2D49H6bf5rOGBCC8axQPyDLPhChw3Fv2gOxGWHTHysVGilROjIj 09ke85G6uiXtwc9aTFikKqExtvv/8IqpGJY3PNNt/PGfawJEFMVixSh4VBTiKtN8 eOpIRPYQr4zpYQ== -----END CERTIFICATE-----Generated at Sun Dec 7 16:33:38 2025 by rpki-client