This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json) Hash identifier: z2Bu9/eYVgO7pPW+6q11cIhrSUyazQT7kbLH2d5VpYU= Subject key identifier: 00:4B:C2:29:14:79:08:6C:98:CE:54:04:C4:03:52:73:ED:D1:31:0B Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Certificate serial: 019AF5781CC1BC072D367B844DC31AD1F230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft Manifest number: 0173 Signing time: Sat 06 Dec 2025 21:01:20 +0000 Manifest this update: Sat 06 Dec 2025 21:01:20 +0000 Manifest next update: Sun 07 Dec 2025 21:01:20 +0000 Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: JVp5CxXf0tRiS59BC1qekAvgwPmvSnENXd6q8RKEDYA=) 2: kvtNOhaPDDcYSNhoNOrRM4T-fmM.roa (hash: Z6M9k5kPeExTY6hgAM3xRd+EQBgJ9P/v9dQD7xXO8UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:1c:c1:bc:07:2d:36:7b:84:4d:c3:1a:d1:f2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Validity Not Before: Dec 6 21:01:20 2025 GMT Not After : Dec 7 21:01:20 2025 GMT Subject: CN=004bc2291479086c98ce5404c4035273edd1310b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:2e:73:9b:8b:48:55:f2:f9:e7:2c:26:d6: 96:01:29:6e:0c:c8:31:89:95:93:0f:34:ce:1b:1b: 95:83:e4:28:a7:f9:21:22:ca:2c:fe:0a:6a:e0:33: 90:f5:71:7e:61:58:19:8f:6b:74:c6:29:55:f3:73: 87:c4:13:20:45:33:e7:d4:76:a1:e5:80:6f:be:f9: da:8a:b9:17:09:47:e6:86:23:61:d5:8d:3c:7e:34: 95:2e:20:54:82:aa:4d:02:f2:21:f7:0a:60:d8:2e: 89:24:eb:11:bb:15:39:cc:60:0f:4e:bf:18:77:c1: 8e:ac:b3:8f:6d:15:fc:d1:42:e1:85:8e:cb:aa:2b: 78:d9:4d:f8:6b:d7:c2:70:91:37:91:b2:63:2a:26: 78:df:ff:e6:9c:05:cf:a6:6c:bc:ad:0e:1b:f6:18: 0f:d9:26:9a:9d:67:67:7a:99:37:47:0c:82:70:7c: e5:67:8a:d1:39:df:4f:bf:9c:5a:a6:ac:fe:05:08: 48:94:c3:58:b6:89:72:c8:ad:1d:99:da:e3:77:6c: 90:55:b0:9d:0c:59:0f:3e:5b:cf:e8:57:fb:24:ff: ea:92:08:9e:7a:e9:12:97:47:c8:58:71:49:e0:6c: 87:66:a2:24:33:79:81:1f:30:64:7e:c3:0e:07:31: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4B:C2:29:14:79:08:6C:98:CE:54:04:C4:03:52:73:ED:D1:31:0B X509v3 Authority Key Identifier: keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2b:aa:91:c5:7f:f5:ac:8c:c8:7d:90:86:ae:1c:be:f0:0e: 92:a3:a2:e1:69:c2:01:c1:05:71:94:38:7d:c3:f4:75:2e:ef: 2b:0e:b1:4b:99:62:91:02:5d:d4:af:3e:81:81:87:7a:96:04: 73:3d:fe:9f:c8:3b:77:9d:8f:fe:b5:16:a4:12:ed:9e:bb:fc: 32:59:fa:76:10:54:5c:6b:bf:37:68:56:76:ab:c7:28:a9:cd: 34:32:19:42:cf:e5:ef:50:cc:7f:83:22:f8:2b:96:50:3d:fc: 3a:0b:59:c5:4d:90:56:ce:ba:a8:24:8c:a5:c0:81:56:e2:7a: 06:2d:91:31:d4:75:34:de:38:3d:a6:96:71:1c:c0:0f:a4:cc: f4:8b:3f:41:94:e6:49:ca:5d:ff:a9:c8:a8:92:4d:2a:80:2e: cc:ac:05:6c:c3:a3:32:99:a1:23:84:17:08:4c:9d:a8:5b:5b: de:39:55:b5:4b:eb:68:bb:1e:90:05:eb:99:4e:0f:21:53:9f: 44:6c:29:34:b2:3f:7d:4d:88:bd:2d:64:53:e2:76:ae:71:c3: d8:7e:7e:e3:c7:0f:41:bc:18:72:32:dc:52:58:6e:a2:02:11: 23:fb:9f:eb:5f:7b:18:8f:05:43:4e:44:06:f1:41:ae:36:ee: 27:aa:b9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBzBvActNnuETcMa0fIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YTZkMmVkNDZmOWQ4OWIxZGQ2MjE3NzViZDlmYjU1MzZi ZjQ0Y2QwHhcNMjUxMjA2MjEwMTIwWhcNMjUxMjA3MjEwMTIwWjAzMTEwLwYDVQQD EygwMDRiYzIyOTE0NzkwODZjOThjZTU0MDRjNDAzNTI3M2VkZDEzMTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjMuc5uLSFXy+ecsJtaWASluDMgx iZWTDzTOGxuVg+Qop/khIsos/gpq4DOQ9XF+YVgZj2t0xilV83OHxBMgRTPn1Hah 5YBvvvnairkXCUfmhiNh1Y08fjSVLiBUgqpNAvIh9wpg2C6JJOsRuxU5zGAPTr8Y d8GOrLOPbRX80ULhhY7Lqit42U34a9fCcJE3kbJjKiZ43//mnAXPpmy8rQ4b9hgP 2SaanWdnepk3RwyCcHzlZ4rROd9Pv5xapqz+BQhIlMNYtolyyK0dmdrjd2yQVbCd DFkPPlvP6Ff7JP/qkgieeukSl0fIWHFJ4GyHZqIkM3mBHzBkfsMOBzG8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABLwikUeQhsmM5UBMQDUnPt0TELMB8GA1UdIwQY MBaAFGim0u1G+dibHdYhd1vZ+1U2v0TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEt MDhhMjJkZTc3ZTViLzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEtMDhhMjJkZTc3ZTVi LzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSuqkcV/ 9ayMyH2Qhq4cvvAOkqOi4WnCAcEFcZQ4fcP0dS7vKw6xS5likQJd1K8+gYGHepYE cz3+n8g7d52P/rUWpBLtnrv8Mln6dhBUXGu/N2hWdqvHKKnNNDIZQs/l71DMf4Mi +CuWUD38OgtZxU2QVs66qCSMpcCBVuJ6Bi2RMdR1NN44PaaWcRzAD6TM9Is/QZTm Scpd/6nIqJJNKoAuzKwFbMOjMpmhI4QXCEydqFtb3jlVtUvraLsekAXrmU4PIVOf RGwpNLI/fU2IvS1kU+J2rnHD2H5+48cPQbwYcjLcUlhuogIRI/uf6197GI8FQ05E BvFBrjbuJ6q5Ug== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:09 2025 by rpki-client