This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json) Hash identifier: DYyNUFR6af6dtS0i/DwsI3GVGVaHqsR4FkFEmYU9FN0= Subject key identifier: AE:FB:63:BB:69:97:27:8C:DD:6F:36:71:3C:3F:7C:F1:AC:B2:34:FE Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d Certificate serial: 019AF31C8130A9D59885AA78293781E30068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: 07Ec5t3VCOY+RM5wVBEFRth5XlWv6rpbIiXYmFehOT0=) 2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:81:30:a9:d5:98:85:aa:78:29:37:81:e3:00:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=aefb63bb6997278cdd6f36713c3f7cf1acb234fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7a:67:ee:d5:94:ad:33:30:d9:bb:24:27:a5: 49:82:76:df:5b:88:75:5a:11:c5:44:8a:c8:62:e2: 31:bc:8d:3e:1f:8d:54:3b:5d:0d:cb:54:0c:0f:69: 15:40:93:8c:00:f1:ed:d6:1e:c3:9e:1b:e8:85:5d: f4:e3:75:cc:df:11:92:a6:ea:0c:f0:c3:18:76:99: 83:bb:da:46:99:70:c1:de:ae:19:d5:0d:88:9c:77: c2:c9:e1:87:b6:c6:41:c6:5c:2f:d1:0a:d8:b1:9d: 2e:1d:79:36:55:20:6a:40:4d:53:8a:16:98:26:0b: be:71:4e:d2:fa:34:17:4c:c7:2a:ac:c6:ef:05:7a: bf:59:69:40:60:11:d1:b2:67:87:03:08:39:be:ac: 25:96:63:32:56:d3:31:2b:25:47:81:87:e4:77:08: fd:bb:d4:71:b6:42:12:cf:89:6f:a3:52:be:03:d0: aa:21:89:65:31:cf:d9:b1:1c:0a:32:8c:ac:cd:2a: c7:a7:e6:2a:8b:a1:63:19:26:c7:a6:25:8c:50:78: af:b8:69:ad:6f:8f:fd:50:62:95:ba:0d:76:cc:ca: 74:e3:82:df:5c:b6:a3:1a:22:88:87:00:d3:67:c2: ac:ff:ae:38:1e:82:d2:b0:28:c1:b8:37:ac:a3:16: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:63:BB:69:97:27:8C:DD:6F:36:71:3C:3F:7C:F1:AC:B2:34:FE X509v3 Authority Key Identifier: keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:74:41:8d:c9:af:df:d3:01:cc:a1:86:79:2a:12:40:33:a3: 3a:86:34:96:8d:69:6d:f7:83:f0:79:c6:02:6c:a6:4f:88:39: 65:8c:da:b0:2a:e6:3e:da:2e:d9:dc:7e:a0:78:bf:78:9b:e6: fe:62:c5:f7:4d:ad:de:bc:74:9c:64:ff:6f:fa:fb:0d:07:9d: f6:5f:86:7f:ab:2b:52:23:3a:29:e2:90:02:af:07:32:a8:a4: f3:40:46:b9:bf:ac:4c:25:10:c6:b4:89:c9:26:50:44:aa:03: 32:f5:70:d0:57:c6:2a:54:1d:b2:c9:39:0f:90:1b:5a:71:e4: a5:99:59:16:d8:1c:4f:34:68:66:a8:c7:d0:6c:5a:a3:d5:a9: ff:86:e0:c3:4d:cb:6b:81:8b:25:7e:69:61:90:ce:3a:68:86: d2:f4:c7:ce:85:fc:5c:d8:4b:2b:ce:97:6b:60:a4:4f:64:72: 45:f3:47:25:a1:ea:09:35:19:70:f9:65:b6:c8:38:d3:9b:6e: 56:bb:9e:23:82:d5:95:ec:a0:5c:1e:1c:d3:e2:bf:2f:41:57: 4a:3a:1f:92:fa:8e:5a:55:05:da:28:a1:16:40:13:82:73:46: 17:55:72:90:1e:db:e3:a6:8b:8c:40:21:05:af:68:d8:11:3f: a9:00:71:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIEwqdWYhap4KTeB4wBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTEyNDVhZTIwMjUxNTVjMDliZWMyNWE4OTkxZDU2N2Fm MTg0MWQwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD EyhhZWZiNjNiYjY5OTcyNzhjZGQ2ZjM2NzEzYzNmN2NmMWFjYjIzNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73pn7tWUrTMw2bskJ6VJgnbfW4h1 WhHFRIrIYuIxvI0+H41UO10Ny1QMD2kVQJOMAPHt1h7DnhvohV3043XM3xGSpuoM 8MMYdpmDu9pGmXDB3q4Z1Q2InHfCyeGHtsZBxlwv0QrYsZ0uHXk2VSBqQE1TihaY Jgu+cU7S+jQXTMcqrMbvBXq/WWlAYBHRsmeHAwg5vqwllmMyVtMxKyVHgYfkdwj9 u9RxtkISz4lvo1K+A9CqIYllMc/ZsRwKMoyszSrHp+Yqi6FjGSbHpiWMUHivuGmt b4/9UGKVug12zMp044LfXLajGiKIhwDTZ8Ks/644HoLSsCjBuDesoxYJYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK77Y7tplyeM3W82cTw/fPGssjT+MB8GA1UdIwQY MBaAFGkRJFriAlFVwJvsJaiZHVZ68YQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDct MWUxZTljYmY0N2RhLzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDctMWUxZTljYmY0N2Rh LzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXRBjcmv 39MBzKGGeSoSQDOjOoY0lo1pbfeD8HnGAmymT4g5ZYzasCrmPtou2dx+oHi/eJvm /mLF902t3rx0nGT/b/r7DQed9l+Gf6srUiM6KeKQAq8HMqik80BGub+sTCUQxrSJ ySZQRKoDMvVw0FfGKlQdssk5D5AbWnHkpZlZFtgcTzRoZqjH0Gxao9Wp/4bgw03L a4GLJX5pYZDOOmiG0vTHzoX8XNhLK86Xa2CkT2RyRfNHJaHqCTUZcPlltsg405tu VrueI4LVleygXB4c0+K/L0FXSjofkvqOWlUF2iihFkATgnNGF1VykB7b46aLjEAh Ba9o2BE/qQBxZg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:52 2025 by rpki-client