This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft File: aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json) Hash identifier: s+tBEdRWTcNqmsW0VWp9XToxcpEI1aHzVoW7sX6yqa0= Subject key identifier: 9F:00:DC:DC:19:2D:07:80:EA:FD:9D:E2:9B:9D:91:61:86:A8:40:0A Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D Certificate issuer: /CN=6802268c1f166c9df51a342045bb132f0f96c82d Certificate serial: 019B2EFAD8C831313DC7CA9FA50EFA04C3C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft Manifest number: 0D03 Signing time: Thu 18 Dec 2025 01:02:29 +0000 Manifest this update: Thu 18 Dec 2025 01:02:29 +0000 Manifest next update: Fri 19 Dec 2025 01:02:29 +0000 Files and hashes: 1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: cWFYVCT2N+Ze8/2NSG1u1hPbtrtNTtiT66LxIq+TQq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:d8:c8:31:31:3d:c7:ca:9f:a5:0e:fa:04:c3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d Validity Not Before: Dec 18 01:02:29 2025 GMT Not After : Dec 19 01:02:29 2025 GMT Subject: CN=9f00dcdc192d0780eafd9de29b9d916186a8400a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:b4:14:08:7d:99:78:57:f4:ed:c8:ef:27: 01:04:3e:c6:33:a7:11:37:a8:a8:62:7b:16:1b:07: 1c:cd:60:04:03:44:1e:cc:7d:9e:d8:23:2b:9a:9d: ae:ff:0b:e8:08:5e:47:1d:ec:1b:c7:31:11:36:22: 23:69:9c:a7:3b:5c:77:64:08:2f:37:04:03:77:7f: d1:5c:c2:b9:9e:3c:4d:0d:70:20:f7:55:b9:f6:25: 4e:80:59:a9:12:ea:38:c8:35:17:11:a0:2f:6d:cd: a4:fd:94:00:0e:ec:cd:cb:36:2b:2c:7a:d6:e3:04: 51:54:d3:da:a8:12:33:98:52:bb:40:8e:99:cd:47: 82:cc:40:4c:82:a9:3b:c1:f0:cb:22:24:60:30:52: 34:06:da:5b:b8:63:16:dd:00:75:f4:34:0e:aa:e7: 83:6e:7f:b8:a3:89:61:19:d7:d9:57:1a:5d:2f:64: 82:82:60:72:21:63:39:4f:01:07:a5:9e:f6:2a:66: d6:d2:f7:41:7a:36:6a:dd:a4:d6:2d:e2:8d:92:ca: d5:3e:73:a6:1b:86:16:26:e4:db:9c:1c:fa:0c:d9: b4:b8:42:62:f7:1c:23:c6:af:4d:a9:fa:fe:1d:c3: af:d3:8b:c9:34:12:ba:be:fd:72:5e:09:a2:cf:29: f4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:00:DC:DC:19:2D:07:80:EA:FD:9D:E2:9B:9D:91:61:86:A8:40:0A X509v3 Authority Key Identifier: keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:35:8d:22:5f:87:02:a0:35:e3:f6:eb:a5:c7:87:81:57:4b: fa:77:61:73:a0:fd:6d:74:db:d0:4b:32:56:f2:cc:9c:88:65: bb:62:44:f2:7b:8c:e8:62:a1:85:a8:5b:12:2d:8c:4d:07:f5: cb:b8:95:03:86:67:0a:99:5a:f3:88:87:6f:d7:c6:6c:69:8c: 47:98:da:54:85:37:a5:eb:46:71:07:77:9e:c3:f9:a1:cd:7e: 3d:4d:6e:af:a9:41:2a:43:27:91:f1:f6:ca:f9:81:63:8c:3e: 34:4a:18:46:4f:7e:13:a8:ef:3f:7a:52:97:70:67:15:67:5e: 3a:01:44:33:5d:a3:fb:1d:83:00:77:31:94:a5:9c:46:e8:ff: 89:00:19:f4:18:f4:9e:7e:1b:5f:d0:dd:39:68:17:19:68:97: 31:c2:c3:b4:76:e9:1b:6f:5d:7f:5b:c1:17:62:7d:40:8c:d0: 71:e2:bd:93:15:30:25:85:40:47:d8:6e:c1:cd:b1:96:f5:45: d9:1a:89:57:8c:85:7c:8e:fd:99:e6:c3:f1:5b:07:c6:87:6c: 2f:4b:08:e1:4b:1a:04:91:37:a2:70:6e:8d:fb:3a:93:9a:96: b7:ef:b3:5f:0b:e5:c0:9a:b1:71:4b:92:4a:37:94:34:f2:27: 1d:b0:06:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+tjIMTE9x8qfpQ76BMPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MDIyNjhjMWYxNjZjOWRmNTFhMzQyMDQ1YmIxMzJmMGY5 NmM4MmQwHhcNMjUxMjE4MDEwMjI5WhcNMjUxMjE5MDEwMjI5WjAzMTEwLwYDVQQD Eyg5ZjAwZGNkYzE5MmQwNzgwZWFmZDlkZTI5YjlkOTE2MTg2YTg0MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiC0FAh9mXhX9O3I7ycBBD7GM6cR N6ioYnsWGwcczWAEA0QezH2e2CMrmp2u/wvoCF5HHewbxzERNiIjaZynO1x3ZAgv NwQDd3/RXMK5njxNDXAg91W59iVOgFmpEuo4yDUXEaAvbc2k/ZQADuzNyzYrLHrW 4wRRVNPaqBIzmFK7QI6ZzUeCzEBMgqk7wfDLIiRgMFI0BtpbuGMW3QB19DQOqueD bn+4o4lhGdfZVxpdL2SCgmByIWM5TwEHpZ72KmbW0vdBejZq3aTWLeKNksrVPnOm G4YWJuTbnBz6DNm0uEJi9xwjxq9Nqfr+HcOv04vJNBK6vv1yXgmizyn0KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8A3NwZLQeA6v2d4pudkWGGqEAKMB8GA1UdIwQY MBaAFGgCJowfFmyd9Ro0IEW7Ey8PlsgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUt ZTNjMjJkMGY2MjA3LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUtZTNjMjJkMGY2MjA3 LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzWNIl+H AqA14/brpceHgVdL+ndhc6D9bXTb0EsyVvLMnIhlu2JE8nuM6GKhhahbEi2MTQf1 y7iVA4ZnCpla84iHb9fGbGmMR5jaVIU3petGcQd3nsP5oc1+PU1ur6lBKkMnkfH2 yvmBY4w+NEoYRk9+E6jvP3pSl3BnFWdeOgFEM12j+x2DAHcxlKWcRuj/iQAZ9Bj0 nn4bX9DdOWgXGWiXMcLDtHbpG29df1vBF2J9QIzQceK9kxUwJYVAR9huwc2xlvVF 2RqJV4yFfI79mebD8VsHxodsL0sI4UsaBJE3onBujfs6k5qWt++zXwvlwJqxcUuS SjeUNPInHbAGVQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:02:53 2025 by rpki-client