This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft File: aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json) Hash identifier: uTjukJZK3Mty0eTz+UQ9NlWx+jA3MjxPeQnQHquC3Cc= Subject key identifier: BC:28:DD:8A:59:B7:A0:90:1A:8C:62:0F:0D:25:AF:15:6F:4A:97:0C Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D Certificate issuer: /CN=6802268c1f166c9df51a342045bb132f0f96c82d Certificate serial: 019AF12CE9461AEEACDC077A4A77B729839A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft Manifest number: 0CE3 Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: d3r2TYdkGvC0ycbkkDGc8XiMfl3YpWVhu3JLSTl4r6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e9:46:1a:ee:ac:dc:07:7a:4a:77:b7:29:83:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=bc28dd8a59b7a0901a8c620f0d25af156f4a970c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:33:5f:98:ed:51:68:8b:4d:49:73:9e:de: 13:25:f5:ba:5f:4b:3b:62:8d:f9:16:25:46:e3:86: 10:8b:63:50:1d:7c:71:6c:1e:91:d7:80:cb:b0:0a: bc:42:91:c6:fd:61:02:1c:4f:00:31:8a:d8:65:d2: 2b:4d:9b:11:09:f2:d4:ba:2e:ec:68:8d:f2:33:50: 1e:4b:ce:8c:32:ac:69:38:fd:01:78:da:33:b0:d0: c7:f6:17:69:2c:2a:92:9d:6c:86:ef:58:65:da:04: 2d:58:d3:48:59:1c:4d:47:bb:bf:0a:d1:ee:ad:35: f3:be:57:0a:db:75:d6:d6:20:1d:1a:21:b2:76:9d: 00:be:f7:81:13:cb:a2:f0:67:36:c1:b1:54:9e:41: f9:d2:d5:7e:41:a2:57:d7:1f:af:c2:0b:95:91:89: f6:f9:b2:66:b7:33:ee:d6:6c:20:31:7a:7a:24:b7: 1b:ff:cb:8b:19:bf:c1:3a:d5:e3:63:50:0f:8f:1b: 8e:19:ef:1b:f0:ec:b7:db:d4:4f:5f:26:5f:d4:9c: 59:4d:fc:8c:33:86:55:6e:2a:2c:e2:6f:06:36:d2: f6:5b:29:39:c9:0f:fb:93:33:73:7c:19:e9:b1:72: 76:0f:3e:04:31:b3:4b:04:74:db:03:29:04:ca:0b: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:28:DD:8A:59:B7:A0:90:1A:8C:62:0F:0D:25:AF:15:6F:4A:97:0C X509v3 Authority Key Identifier: keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:71:c6:75:76:7f:b7:cd:5d:ae:92:81:95:0f:7d:fd:7e:23: cf:02:0c:eb:ea:95:3e:62:67:cb:ce:03:86:ba:e3:52:ae:52: 63:3b:29:03:50:59:4f:cc:93:4c:36:c8:9d:3f:a7:e3:30:ff: cf:79:55:5b:fe:04:f1:35:50:60:a4:f9:f3:47:cd:f0:26:79: 92:9b:5a:6e:3f:4a:9d:43:57:be:20:c3:96:19:60:d8:5c:9b: c1:57:13:2e:55:4f:8a:3f:d3:68:31:c1:b7:ac:6e:ef:56:43: b4:64:48:5c:49:8b:e6:b4:f4:fe:75:da:c8:05:0a:7e:80:cb: db:16:d3:15:b0:dd:56:36:42:70:b0:b9:ac:9b:5b:24:44:a1: 8b:59:86:ad:52:b9:be:f3:52:8c:97:2f:97:af:05:3b:1f:99: bc:26:ad:79:53:2f:4e:93:54:74:61:3e:10:5c:14:bf:ce:ff: 28:7e:e3:1b:ea:34:e4:4e:88:5a:aa:b9:8c:e1:ed:ce:09:14: d9:2c:09:07:1b:fa:c2:94:16:71:2d:33:c4:c7:5f:db:7c:64: 1e:17:12:22:22:d1:c5:d8:69:a2:bc:9a:7c:db:d2:7c:a0:5d: 76:b3:dd:35:6d:60:61:0f:fb:3f:03:46:85:2a:12:e6:18:0f: 41:44:df:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOlGGu6s3Ad6Sne3KYOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MDIyNjhjMWYxNjZjOWRmNTFhMzQyMDQ1YmIxMzJmMGY5 NmM4MmQwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD EyhiYzI4ZGQ4YTU5YjdhMDkwMWE4YzYyMGYwZDI1YWYxNTZmNGE5NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb0zX5jtUWiLTUlznt4TJfW6X0s7 Yo35FiVG44YQi2NQHXxxbB6R14DLsAq8QpHG/WECHE8AMYrYZdIrTZsRCfLUui7s aI3yM1AeS86MMqxpOP0BeNozsNDH9hdpLCqSnWyG71hl2gQtWNNIWRxNR7u/CtHu rTXzvlcK23XW1iAdGiGydp0AvveBE8ui8Gc2wbFUnkH50tV+QaJX1x+vwguVkYn2 +bJmtzPu1mwgMXp6JLcb/8uLGb/BOtXjY1APjxuOGe8b8Oy329RPXyZf1JxZTfyM M4ZVbios4m8GNtL2Wyk5yQ/7kzNzfBnpsXJ2Dz4EMbNLBHTbAykEyguovwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwo3YpZt6CQGoxiDw0lrxVvSpcMMB8GA1UdIwQY MBaAFGgCJowfFmyd9Ro0IEW7Ey8PlsgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUt ZTNjMjJkMGY2MjA3LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUtZTNjMjJkMGY2MjA3 LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanHGdXZ/ t81drpKBlQ99/X4jzwIM6+qVPmJny84DhrrjUq5SYzspA1BZT8yTTDbInT+n4zD/ z3lVW/4E8TVQYKT580fN8CZ5kptabj9KnUNXviDDlhlg2FybwVcTLlVPij/TaDHB t6xu71ZDtGRIXEmL5rT0/nXayAUKfoDL2xbTFbDdVjZCcLC5rJtbJEShi1mGrVK5 vvNSjJcvl68FOx+ZvCateVMvTpNUdGE+EFwUv87/KH7jG+o05E6IWqq5jOHtzgkU 2SwJBxv6wpQWcS0zxMdf23xkHhcSIiLRxdhporyafNvSfKBddrPdNW1gYQ/7PwNG hSoS5hgPQUTfQA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:03 2025 by rpki-client