This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json) Hash identifier: dw0pLHflAdzna9Wb8sgE8ez7QgUpz7olSU8s8kfXkTk= Subject key identifier: F1:F7:BE:1C:B3:7E:F0:F7:C6:52:DC:77:F4:24:BF:67:C2:B7:E7:D9 Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56 Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956 Certificate serial: 019AF12CF1E0C919006EED67111624A12227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft Manifest number: 0B59 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: HY6KhRpWNa4zHYGwGUaJALdh1Cfr4MP3ygz64RTr1S8=) 2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f1:e0:c9:19:00:6e:ed:67:11:16:24:a1:22:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956 Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=f1f7be1cb37ef0f7c652dc77f424bf67c2b7e7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:db:39:fb:8d:e6:63:9c:63:0c:86:c5:32: 85:7f:87:c9:47:2f:6c:5f:6b:f7:bd:f9:de:ff:eb: b0:a2:33:ee:b3:e1:c6:82:69:b0:9c:48:8a:eb:f8: c4:5a:1e:86:24:47:0a:9e:a5:f1:48:cd:68:c1:23: e0:00:61:71:8e:67:3c:fc:82:3d:e6:76:33:b5:97: 52:d7:a6:b0:a8:be:0d:a5:b5:1c:40:7a:cd:0e:50: c1:02:53:c2:0c:69:f7:76:6c:f8:ec:78:f9:ce:18: b5:ca:80:c0:c0:1c:01:75:ac:87:2b:56:4a:46:03: cc:e7:f1:ee:46:af:8e:fe:29:67:96:e0:12:dd:f0: b7:6b:7e:77:25:04:05:ec:e0:6f:5d:44:bf:be:52: a4:8c:f9:b6:35:b0:39:f1:25:26:05:44:06:01:1f: 24:e2:1d:4f:49:9e:14:b8:6d:be:c2:af:19:da:dc: ad:88:aa:ed:a8:d8:a2:72:c0:f8:a3:90:53:d9:aa: 77:0b:f7:ec:55:51:40:bb:4f:93:98:87:39:c0:58: ed:8b:3f:1e:44:e1:b9:5e:57:0a:d3:5b:bc:c3:38: 08:df:13:e2:2f:84:db:0d:21:24:2b:96:34:59:c9: 94:38:d6:e0:20:e7:ad:4d:52:8e:87:9b:71:c6:03: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F7:BE:1C:B3:7E:F0:F7:C6:52:DC:77:F4:24:BF:67:C2:B7:E7:D9 X509v3 Authority Key Identifier: keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f4:17:50:99:46:02:f9:6a:86:32:cf:c5:be:fb:1d:38:08: 46:c4:d4:60:52:76:1a:9f:35:5e:7e:d3:6a:9d:ba:46:bb:8b: 45:9a:63:cb:cf:cc:56:dd:ca:fc:3c:3e:62:79:65:fb:b0:51: db:95:b0:1a:3b:ef:8d:8a:af:4b:1e:06:b3:6b:a9:ee:e7:a5: 32:ff:1a:60:72:91:51:39:e0:53:6e:4e:c1:f5:41:51:56:17: e3:15:a9:49:76:aa:bb:ee:c4:1d:3e:b0:40:02:d9:7c:ec:79: 11:cd:c0:1e:46:a8:87:6a:75:1a:1b:22:2c:2f:7a:d7:3b:59: 07:f1:6e:37:8e:e3:02:e9:73:7e:82:dd:e2:e1:c6:37:a2:f1: 9d:06:a0:f9:53:8d:3b:dc:95:59:ed:f7:fa:74:5b:88:6f:ea: 6a:8f:91:72:40:be:0f:67:0f:99:a0:5e:13:05:78:51:94:8d: c5:32:dc:d7:56:32:8b:76:39:e6:ac:ea:ee:aa:5b:1d:96:88: 21:93:c3:10:4c:04:f9:a9:21:e2:bd:d7:ed:c3:57:d4:f2:4e: 7f:0e:68:24:ac:33:ae:b5:df:83:8b:f2:9e:da:14:37:3c:b4: c5:f6:af:80:5b:1e:44:a6:01:55:38:8b:48:d3:e7:b6:51:0d: 0c:ff:dd:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPHgyRkAbu1nERYkoSInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw MjQ5NTYwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhmMWY3YmUxY2IzN2VmMGY3YzY1MmRjNzdmNDI0YmY2N2MyYjdlN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSHbOfuN5mOcYwyGxTKFf4fJRy9s X2v3vfne/+uwojPus+HGgmmwnEiK6/jEWh6GJEcKnqXxSM1owSPgAGFxjmc8/II9 5nYztZdS16awqL4NpbUcQHrNDlDBAlPCDGn3dmz47Hj5zhi1yoDAwBwBdayHK1ZK RgPM5/HuRq+O/ilnluAS3fC3a353JQQF7OBvXUS/vlKkjPm2NbA58SUmBUQGAR8k 4h1PSZ4UuG2+wq8Z2tytiKrtqNiicsD4o5BT2ap3C/fsVVFAu0+TmIc5wFjtiz8e ROG5XlcK01u8wzgI3xPiL4TbDSEkK5Y0WcmUONbgIOetTVKOh5txxgNrAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH3vhyzfvD3xlLcd/Qkv2fCt+fZMB8GA1UdIwQY MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0 LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvQXUJlG AvlqhjLPxb77HTgIRsTUYFJ2Gp81Xn7Tap26RruLRZpjy8/MVt3K/Dw+Ynll+7BR 25WwGjvvjYqvSx4Gs2up7uelMv8aYHKRUTngU25OwfVBUVYX4xWpSXaqu+7EHT6w QALZfOx5Ec3AHkaoh2p1GhsiLC961ztZB/FuN47jAulzfoLd4uHGN6LxnQag+VON O9yVWe33+nRbiG/qao+RckC+D2cPmaBeEwV4UZSNxTLc11Yyi3Y55qzq7qpbHZaI IZPDEEwE+akh4r3X7cNX1PJOfw5oJKwzrrXfg4vyntoUNzy0xfavgFseRKYBVTiL SNPntlENDP/dKw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:26 2025 by rpki-client