This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json) Hash identifier: aH511nZeXT2iMFv3X/cHDwF7OiP8cTwTKyKFIb3zpRE= Subject key identifier: 8C:FF:D1:CF:30:4A:03:6B:76:D1:75:3B:A8:34:C4:F1:2D:F3:D6:8A Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b Certificate serial: 019AF19B623299875AF4910B28D661FAD26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft Manifest number: 0E75 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: oLvUl939248k96HDWHtYH54RlTq0qpeflrPPV7g9PzM=) 2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:62:32:99:87:5a:f4:91:0b:28:d6:61:fa:d2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=8cffd1cf304a036b76d1753ba834c4f12df3d68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:5a:bb:41:81:ec:db:f8:13:61:ed:54:d4: c6:f2:85:d2:33:a3:2c:f2:b1:da:bc:33:04:bd:96: fd:47:59:01:f4:76:f3:8b:b8:c4:33:73:61:d6:18: 2b:d0:d9:c8:f1:bd:8e:a3:b9:03:58:5a:96:66:cc: d4:02:64:6b:1c:c6:00:42:27:c6:00:6c:6c:a4:e1: d5:32:ae:56:0e:24:04:7a:cb:d8:ed:f0:e4:94:30: e2:d1:1d:98:f3:71:59:72:aa:31:a6:18:47:73:53: dd:c0:27:c8:af:72:70:fd:ad:8d:ae:0b:75:c5:97: 46:1f:ad:0c:93:fa:78:12:18:6b:d7:f8:f9:45:da: d6:03:74:b4:dd:43:40:c5:ee:1f:97:53:94:93:81: a3:b0:8b:9d:33:e5:02:84:91:c3:ca:17:67:45:21: f8:47:c5:cc:6d:b8:32:4d:ab:70:f1:79:c8:c7:3e: 6e:94:7a:8c:a6:32:a3:92:57:08:c4:3c:f5:43:67: 34:bc:be:f7:79:79:6c:00:3b:70:6e:25:d9:1e:d3: 60:6a:ef:00:c0:ea:34:1f:c3:f6:59:3b:dc:35:3d: fd:b6:5c:51:e6:ad:db:5a:7d:a8:90:4f:6c:1a:05: 4d:60:43:17:91:a9:f5:38:39:08:1e:b5:2e:9f:e5: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FF:D1:CF:30:4A:03:6B:76:D1:75:3B:A8:34:C4:F1:2D:F3:D6:8A X509v3 Authority Key Identifier: keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5c:3f:b4:28:d6:e7:84:e0:71:9e:e9:0a:8e:e3:38:3a:48: fe:00:d8:0e:1d:46:c4:74:0f:92:74:ce:a6:ae:a3:e2:c5:bc: 22:5b:33:02:38:40:14:b8:f8:b8:d1:6b:5c:e8:1d:13:a9:f2: 85:2c:15:12:24:87:65:20:40:48:ab:0e:a1:91:d5:04:10:4e: cd:34:bc:f2:40:35:18:e3:5b:55:17:82:27:6e:d2:21:44:10: 47:21:20:94:6d:b2:dd:fe:8b:1a:8d:32:0e:a4:2e:92:45:0a: 9d:9a:4a:bc:b8:19:9c:31:4c:f7:ba:20:58:b6:1d:c9:75:03: c1:13:5f:57:28:7e:4b:82:15:2f:9f:bc:e6:1f:15:93:2d:3b: 2a:9a:ef:36:e4:54:ff:fb:cf:a2:9b:66:33:13:3c:69:15:12: 04:8f:29:34:87:8f:f4:d4:a1:af:c7:9c:50:84:6c:e6:cd:53: 04:b7:f9:ac:34:ad:a3:74:4d:8c:79:07:63:78:92:96:74:06: 18:f3:d9:d5:95:fa:42:0a:1e:22:8f:c4:2a:0a:7f:27:17:b4: c1:08:7d:f4:b5:91:80:a5:1f:3a:93:a4:84:06:83:42:4b:ee: d5:3c:3d:18:1d:78:dc:33:de:d1:c3:ea:35:ab:0c:52:ca:5f: b7:08:ec:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2IymYda9JELKNZh+tJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzIwYTkxMDNlMWFlMDBjYzc4OGM1ZGVjZmUwOTQ4Yzg0 YmNkMWIwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD Eyg4Y2ZmZDFjZjMwNGEwMzZiNzZkMTc1M2JhODM0YzRmMTJkZjNkNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Fau0GB7Nv4E2HtVNTG8oXSM6Ms 8rHavDMEvZb9R1kB9Hbzi7jEM3Nh1hgr0NnI8b2Oo7kDWFqWZszUAmRrHMYAQifG AGxspOHVMq5WDiQEesvY7fDklDDi0R2Y83FZcqoxphhHc1PdwCfIr3Jw/a2Nrgt1 xZdGH60Mk/p4Ehhr1/j5RdrWA3S03UNAxe4fl1OUk4GjsIudM+UChJHDyhdnRSH4 R8XMbbgyTatw8XnIxz5ulHqMpjKjklcIxDz1Q2c0vL73eXlsADtwbiXZHtNgau8A wOo0H8P2WTvcNT39tlxR5q3bWn2okE9sGgVNYEMXkan1ODkIHrUun+UnywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIz/0c8wSgNrdtF1O6g0xPEt89aKMB8GA1UdIwQY MBaAFGlyCpED4a4AzHiMXez+CUjIS80bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYt ODE3NGRkYWUzMWQzLzEvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYtODE3NGRkYWUzMWQz LzEvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFw/tCjW 54TgcZ7pCo7jODpI/gDYDh1GxHQPknTOpq6j4sW8IlszAjhAFLj4uNFrXOgdE6ny hSwVEiSHZSBASKsOoZHVBBBOzTS88kA1GONbVReCJ27SIUQQRyEglG2y3f6LGo0y DqQukkUKnZpKvLgZnDFM97ogWLYdyXUDwRNfVyh+S4IVL5+85h8Vky07KprvNuRU //vPoptmMxM8aRUSBI8pNIeP9NShr8ecUIRs5s1TBLf5rDSto3RNjHkHY3iSlnQG GPPZ1ZX6QgoeIo/EKgp/Jxe0wQh99LWRgKUfOpOkhAaDQkvu1Tw9GB143DPe0cPq NasMUspftwjsqw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:14 2025 by rpki-client