This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json) Hash identifier: AItvez7Kdym/mnUGMFf8c6K2mdUiHN1JBS9s7XSQ8pQ= Subject key identifier: 73:6E:70:CB:29:15:75:1A:7A:4B:D3:53:71:EE:AF:56:E6:85:1D:37 Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3 Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3 Certificate serial: 019AF5E5A01586A4015612562397A3E6AA0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft Manifest number: 0451 Signing time: Sat 06 Dec 2025 23:00:57 +0000 Manifest this update: Sat 06 Dec 2025 23:00:57 +0000 Manifest next update: Sun 07 Dec 2025 23:00:57 +0000 Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=) 2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: rldMIvzogkUtayjSTP0b8QUSI9Jmn5NzPRXgYvrfdgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:a0:15:86:a4:01:56:12:56:23:97:a3:e6:aa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3 Validity Not Before: Dec 6 23:00:57 2025 GMT Not After : Dec 7 23:00:57 2025 GMT Subject: CN=736e70cb2915751a7a4bd35371eeaf56e6851d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:e6:86:f7:25:78:1c:06:45:2f:b7:aa:e6: 7e:a9:33:e1:a0:ee:8e:c9:93:51:ae:fe:30:16:65: 09:cf:1c:ea:f1:00:78:5e:64:23:62:52:e5:22:2b: 87:bb:ce:35:f6:46:96:31:8f:59:3a:7b:73:60:6f: de:96:6a:76:46:21:81:f7:9d:33:da:4b:15:89:c8: 60:9d:3e:d9:66:3a:a7:62:90:ce:4b:f2:e1:25:bd: 30:f1:2f:91:d3:2d:49:86:b5:13:97:6e:3a:2a:cb: 16:d3:3b:be:6d:bf:68:72:49:8f:4c:b9:ad:37:e2: 4c:04:01:7d:aa:ad:88:ca:c5:55:32:42:de:b6:17: 8b:46:53:76:9b:ea:2e:06:5b:1e:c8:6f:4b:c0:a4: e9:9f:f1:d8:ff:cb:14:42:9a:0c:35:31:f1:f9:c5: 4f:bc:6f:92:b1:3a:de:c3:97:43:71:a3:0e:38:47: db:a3:36:60:2f:90:06:61:be:a7:f5:f8:a1:33:ca: 18:fb:a6:93:8c:48:1d:f9:13:0d:95:de:cc:34:2d: 48:aa:6a:dd:bd:0c:20:0d:a1:3e:1e:df:c8:b3:96: b3:9d:4d:f0:7a:d4:03:93:54:92:59:a5:2a:a8:24: 93:ea:e8:21:b8:1f:31:c6:38:99:d2:f8:4a:d6:29: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6E:70:CB:29:15:75:1A:7A:4B:D3:53:71:EE:AF:56:E6:85:1D:37 X509v3 Authority Key Identifier: keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:90:2f:48:8a:cc:97:94:d5:1b:c1:b1:2e:07:db:f8:c0:20: 9a:af:d3:d1:43:cc:1b:e0:4c:aa:d1:d0:35:c1:e0:8f:b4:77: 7b:8f:d1:1e:21:10:65:59:59:15:c3:72:97:c0:c0:5e:44:6a: 94:58:b1:fb:5d:ca:8e:11:21:f1:29:94:df:5c:fa:5f:82:f5: fb:ea:01:d4:80:a8:32:c1:b6:e7:6a:fb:29:7d:27:22:40:82: 12:97:ff:32:3a:d0:b0:ef:f8:7f:e4:da:62:a6:3a:92:a3:96: 0a:d7:73:5d:98:a5:53:95:40:fb:a1:87:49:ea:39:39:fa:0b: 1b:55:81:78:37:e9:a6:e7:ba:03:2c:10:df:78:51:d5:3a:6e: 3b:aa:6a:1e:59:12:63:58:d1:20:c4:db:22:01:d9:19:da:2e: f0:f2:fc:0e:97:13:6e:57:a8:ff:6e:55:38:6a:29:ee:65:70: 98:9e:d1:ba:2b:49:3f:50:04:3d:ed:f2:a5:cd:f6:0b:f4:1b: 60:6e:83:4b:8b:3e:6a:72:da:18:cd:39:f1:a6:48:ec:09:c3: a1:96:fc:ab:e6:c1:a0:fb:95:b8:d0:97:12:c1:3f:a3:27:61: a2:4a:26:ce:a6:c7:eb:7e:32:3d:4d:70:be:8d:77:49:b0:14: cc:f3:bb:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15aAVhqQBVhJWI5ej5qoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3 NjhmYzMwHhcNMjUxMjA2MjMwMDU3WhcNMjUxMjA3MjMwMDU3WjAzMTEwLwYDVQQD Eyg3MzZlNzBjYjI5MTU3NTFhN2E0YmQzNTM3MWVlYWY1NmU2ODUxZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrHmhvcleBwGRS+3quZ+qTPhoO6O yZNRrv4wFmUJzxzq8QB4XmQjYlLlIiuHu8419kaWMY9ZOntzYG/elmp2RiGB950z 2ksVichgnT7ZZjqnYpDOS/LhJb0w8S+R0y1JhrUTl246KssW0zu+bb9ockmPTLmt N+JMBAF9qq2IysVVMkLetheLRlN2m+ouBlseyG9LwKTpn/HY/8sUQpoMNTHx+cVP vG+SsTrew5dDcaMOOEfbozZgL5AGYb6n9fihM8oY+6aTjEgd+RMNld7MNC1Iqmrd vQwgDaE+Ht/Is5aznU3wetQDk1SSWaUqqCST6ughuB8xxjiZ0vhK1ikueQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNucMspFXUaekvTU3Hur1bmhR03MB8GA1UdIwQY MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct Njk5Y2Y3YjA5NTkwLzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJAvSIrM l5TVG8GxLgfb+MAgmq/T0UPMG+BMqtHQNcHgj7R3e4/RHiEQZVlZFcNyl8DAXkRq lFix+13KjhEh8SmU31z6X4L1++oB1ICoMsG252r7KX0nIkCCEpf/MjrQsO/4f+Ta YqY6kqOWCtdzXZilU5VA+6GHSeo5OfoLG1WBeDfppue6AywQ33hR1TpuO6pqHlkS Y1jRIMTbIgHZGdou8PL8DpcTbleo/25VOGop7mVwmJ7RuitJP1AEPe3ypc32C/Qb YG6DS4s+anLaGM058aZI7AnDoZb8q+bBoPuVuNCXEsE/oydhokomzqbH634yPU1w vo13SbAUzPO7xA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:22:33 2025 by rpki-client