This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft File: aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json) Hash identifier: 2SBBVEebq9RGcKZRhX5BXt8rVELDCxAMbKgDjK1Xjso= Subject key identifier: 00:20:FA:ED:0A:87:23:C9:FA:EF:98:98:6C:A6:76:64:49:A7:D3:EB Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62 Certificate issuer: /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62 Certificate serial: 019AF2ADBE9536A43FA6DED3A3CFF58D0702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft Manifest number: 033C Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: _EbNwpReLUVNd1YP_0CwE7ZjiIE.roa (hash: h2xnKbmoWDr+VElZXTIO8MYVw2Dx5IJspYhOYFMtbaw=) 2: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: 8DFQbBht6IIjjzC1VHUIebtdLGRF2GkbqPlMbz7JySw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:be:95:36:a4:3f:a6:de:d3:a3:cf:f5:8d:07:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=0020faed0a8723c9faef98986ca6766449a7d3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:f9:e5:4b:1b:39:d7:58:a8:bd:ce:19:e5: 02:85:eb:4e:85:a7:19:61:5a:15:44:ae:0f:38:18: 03:8b:4c:93:60:ac:ad:60:b6:e6:7f:34:b9:a4:87: 65:79:d1:3c:cd:84:7b:0b:4b:eb:f8:7c:16:d6:90: 38:4b:64:06:03:ae:3f:e7:e7:5d:eb:a6:aa:f5:63: 7b:42:0c:07:9a:7b:2c:67:ed:22:10:c0:b9:88:ac: 16:44:a6:7a:b0:a4:b5:53:7d:56:39:4a:c4:f2:8d: f6:10:0a:87:fd:96:da:00:6a:e5:ad:62:46:7f:2d: 17:a4:19:02:e0:5b:d9:2e:51:1b:75:53:ad:81:40: 5b:e2:cb:80:69:b9:01:fc:6b:b9:4e:6b:4b:9c:4b: a3:08:5a:b7:40:1b:07:64:7f:3c:3a:37:26:72:3e: 87:57:c7:34:e5:8d:6e:b7:ea:c2:eb:96:3f:5a:29: 03:b1:b9:f6:f8:92:7d:f6:ee:5c:b0:8f:25:9b:70: 76:8c:cb:5c:39:44:25:0c:cc:fe:c1:d2:29:fe:cc: eb:3e:54:05:81:c7:2e:3a:03:6f:5a:e5:36:47:b7: c7:f4:a1:a2:a8:1d:85:3e:4b:54:d6:36:e8:c8:a1: a7:62:4f:db:79:96:a5:39:fa:0c:60:67:f0:bc:65: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:20:FA:ED:0A:87:23:C9:FA:EF:98:98:6C:A6:76:64:49:A7:D3:EB X509v3 Authority Key Identifier: keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:db:f4:e0:b6:af:06:70:9e:be:e8:54:05:9d:d8:f8:19:58: e4:ff:d0:81:2b:30:4f:f5:12:2f:e1:be:fd:43:43:21:e8:42: 20:2f:20:ce:89:6d:33:d2:c4:6a:2c:3b:83:c7:4b:b1:6e:d2: 34:35:2b:12:89:7e:c3:4b:3c:62:71:1f:98:5c:5a:b7:e5:6f: 94:88:93:9b:56:40:45:d8:c8:17:bb:7d:cc:79:28:91:d4:4e: 0b:19:d2:4c:36:dc:14:5e:1c:2b:37:c4:7c:4d:0e:0e:be:c1: ce:fb:62:85:27:e4:5e:0f:43:73:b5:e2:f1:de:ee:d3:04:31: d0:a0:ae:4a:91:f7:2d:7b:c1:52:c0:1f:17:4e:5c:ff:b1:80: 23:91:74:2d:75:04:db:94:21:7c:26:d2:46:60:c8:88:2b:5e: d6:d8:c5:fc:5f:0a:47:c9:d2:38:2c:9f:90:67:31:25:c9:70: cc:6b:9e:5a:df:10:30:39:e3:b3:39:0b:4e:d1:dc:5d:c7:23: 01:8b:f7:2b:14:94:5c:86:ce:c4:c9:75:f9:70:5a:76:e8:e2: 6a:4e:68:76:56:7d:6d:06:fe:67:11:6b:d4:26:98:6a:87:70: 46:77:6d:76:62:c9:4f:f9:c0:ef:37:9a:6c:d1:3d:47:d3:aa: 28:48:e1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrb6VNqQ/pt7To8/1jQcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWIxYzFkNDkzMGJmYmZlMjVlYTdmMGE0NWQ3ZDBiNjEx ZTdmNjIwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD EygwMDIwZmFlZDBhODcyM2M5ZmFlZjk4OTg2Y2E2NzY2NDQ5YTdkM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJz55UsbOddYqL3OGeUChetOhacZ YVoVRK4POBgDi0yTYKytYLbmfzS5pIdledE8zYR7C0vr+HwW1pA4S2QGA64/5+dd 66aq9WN7QgwHmnssZ+0iEMC5iKwWRKZ6sKS1U31WOUrE8o32EAqH/ZbaAGrlrWJG fy0XpBkC4FvZLlEbdVOtgUBb4suAabkB/Gu5TmtLnEujCFq3QBsHZH88Ojcmcj6H V8c05Y1ut+rC65Y/WikDsbn2+JJ99u5csI8lm3B2jMtcOUQlDMz+wdIp/szrPlQF gccuOgNvWuU2R7fH9KGiqB2FPktU1jboyKGnYk/beZalOfoMYGfwvGXNRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAg+u0KhyPJ+u+YmGymdmRJp9PrMB8GA1UdIwQY MBaAFGnrHB1JML+/4l6n8KRdfQthHn9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQt ZTk5YWIyNjA1YTkwLzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQtZTk5YWIyNjA1YTkw LzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtv04Lav BnCevuhUBZ3Y+BlY5P/QgSswT/USL+G+/UNDIehCIC8gzoltM9LEaiw7g8dLsW7S NDUrEol+w0s8YnEfmFxat+VvlIiTm1ZARdjIF7t9zHkokdROCxnSTDbcFF4cKzfE fE0ODr7BzvtihSfkXg9Dc7Xi8d7u0wQx0KCuSpH3LXvBUsAfF05c/7GAI5F0LXUE 25QhfCbSRmDIiCte1tjF/F8KR8nSOCyfkGcxJclwzGueWt8QMDnjszkLTtHcXccj AYv3KxSUXIbOxMl1+XBadujiak5odlZ9bQb+ZxFr1CaYaodwRndtdmLJT/nA7zea bNE9R9OqKEjh6A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:01 2025 by rpki-client