This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json) Hash identifier: lPeqq7gSvsdCQiFNP+k0TmB+os7IeiHaQ4azOBj1AU8= Subject key identifier: EF:E4:D8:C4:71:D0:3F:6C:D4:EE:26:B0:C6:6B:16:79:83:C3:F8:18 Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Certificate serial: 019AF578571534E5D8F4C9BC31125B03BD4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft Manifest number: 0FD8 Signing time: Sat 06 Dec 2025 21:01:35 +0000 Manifest this update: Sat 06 Dec 2025 21:01:35 +0000 Manifest next update: Sun 07 Dec 2025 21:01:35 +0000 Files and hashes: 1: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: mhJ8pd8dfx/FMiL6GIfcpMCbjX5yEJ7hJCKZFQC12R0=) 2: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (hash: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:57:15:34:e5:d8:f4:c9:bc:31:12:5b:03:bd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1 Validity Not Before: Dec 6 21:01:35 2025 GMT Not After : Dec 7 21:01:35 2025 GMT Subject: CN=efe4d8c471d03f6cd4ee26b0c66b167983c3f818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:a3:2e:eb:bd:67:95:de:ed:01:e2:ee:7c: d3:84:14:23:15:62:e5:3e:ba:5c:8f:72:ed:3f:3e: 34:0a:6e:34:b5:3e:12:01:3d:73:ba:d6:ee:bf:18: d1:e5:87:9c:30:43:47:1c:30:19:6e:22:49:ca:13: d2:81:6c:86:88:93:91:01:d9:7c:7b:54:bb:f6:84: 3a:43:70:1a:5e:9b:ce:43:4e:7c:16:ae:6d:18:99: f5:56:8f:e9:15:3d:c6:fd:0e:89:d0:49:60:f7:3f: c3:cd:d8:33:76:6b:8c:3f:e1:28:4c:c4:b6:23:a9: d6:bd:c6:92:68:61:56:d3:be:1e:64:7e:33:1b:27: 2f:14:7a:9d:a2:87:0c:5b:4b:90:5e:3c:71:34:f3: ae:d8:40:b8:e2:58:9b:67:98:39:be:3e:99:37:77: 34:9a:4b:4a:61:09:0e:11:9d:98:96:9e:f9:b0:6a: 75:bc:ab:53:51:30:64:49:48:e0:70:13:00:9c:23: f9:0d:84:38:2d:4d:04:c1:40:27:60:fc:7d:9c:b4: 1e:e4:d4:13:00:66:30:e8:7f:23:45:a8:0d:ee:af: a9:84:56:54:ea:90:2d:64:dd:53:03:28:9d:aa:db: a8:7f:03:6b:3d:44:c4:94:fd:cd:aa:cd:63:02:63: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E4:D8:C4:71:D0:3F:6C:D4:EE:26:B0:C6:6B:16:79:83:C3:F8:18 X509v3 Authority Key Identifier: keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:fb:7c:ce:b9:08:8b:0b:8c:dd:0f:ef:9b:39:6a:9f:89:80: 82:ea:b0:e2:b7:1d:3f:ef:53:dd:d6:e7:75:af:f9:fd:5e:3c: da:39:d6:16:e5:c5:c7:dc:3c:39:0d:a9:5a:f4:08:ea:ce:1e: ae:cb:15:42:2b:b1:29:29:dc:2b:a2:d5:8a:80:e0:01:56:6c: 35:49:b6:2e:84:47:4c:5f:3f:5a:3b:18:e7:e9:38:55:e6:91: 91:6f:90:3c:e1:97:b9:79:a6:8e:5f:a2:0c:e6:7f:1a:2f:78: 5f:54:0a:c6:0a:fa:ee:32:02:a4:f8:3a:7a:c1:6b:ed:38:8a: 4e:4c:5e:7a:62:f9:dd:ae:42:d7:c1:db:15:cc:1c:2f:85:66: 19:ec:b6:cc:ed:f8:58:ea:3e:f4:f5:b1:b6:d9:8e:a7:c3:05: 9d:b4:36:cd:a0:ff:22:4e:c5:1c:ef:61:6b:8e:ba:cd:80:97: cd:1a:1c:4d:c3:7b:0d:70:c7:e3:24:f8:68:3a:70:40:0a:29: 9d:59:85:c6:60:44:42:75:d2:0d:75:85:f1:88:f0:9a:85:a0: 92:7e:83:e8:31:fa:63:82:4c:b0:98:1f:dd:ac:cb:e5:a1:37: 9e:d5:59:e6:03:8f:f6:fe:3b:9a:77:fa:67:4e:4a:4b:56:da: 3c:cc:bb:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFcVNOXY9Mm8MRJbA71NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTE1N2U0MTlmYjVhMThiYTJiZWFmMmRlNTQ1ZjJiYjNk ZWNmZDEwHhcNMjUxMjA2MjEwMTM1WhcNMjUxMjA3MjEwMTM1WjAzMTEwLwYDVQQD EyhlZmU0ZDhjNDcxZDAzZjZjZDRlZTI2YjBjNjZiMTY3OTgzYzNmODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmSjLuu9Z5Xe7QHi7nzThBQjFWLl Prpcj3LtPz40Cm40tT4SAT1zutbuvxjR5YecMENHHDAZbiJJyhPSgWyGiJORAdl8 e1S79oQ6Q3AaXpvOQ058Fq5tGJn1Vo/pFT3G/Q6J0Elg9z/DzdgzdmuMP+EoTMS2 I6nWvcaSaGFW074eZH4zGycvFHqdoocMW0uQXjxxNPOu2EC44libZ5g5vj6ZN3c0 mktKYQkOEZ2Ylp75sGp1vKtTUTBkSUjgcBMAnCP5DYQ4LU0EwUAnYPx9nLQe5NQT AGYw6H8jRagN7q+phFZU6pAtZN1TAyidqtuofwNrPUTElP3Nqs1jAmOTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/k2MRx0D9s1O4msMZrFnmDw/gYMB8GA1UdIwQY MBaAFGtRV+QZ+1oYuivq8t5UXyuz3s/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEt MzI4OTFhNTgzMzdmLzEvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNmNhMWItNjdkYy00MDRmLThkNjEtMzI4OTFhNTgzMzdm LzEvYTFGWDVCbjdXaGk2Sy1yeTNsUmZLN1BlejlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFft8zrkI iwuM3Q/vmzlqn4mAguqw4rcdP+9T3dbnda/5/V482jnWFuXFx9w8OQ2pWvQI6s4e rssVQiuxKSncK6LVioDgAVZsNUm2LoRHTF8/WjsY5+k4VeaRkW+QPOGXuXmmjl+i DOZ/Gi94X1QKxgr67jICpPg6esFr7TiKTkxeemL53a5C18HbFcwcL4VmGey2zO34 WOo+9PWxttmOp8MFnbQ2zaD/Ik7FHO9ha466zYCXzRocTcN7DXDH4yT4aDpwQAop nVmFxmBEQnXSDXWF8YjwmoWgkn6D6DH6Y4JMsJgf3azL5aE3ntVZ5gOP9v47mnf6 Z05KS1baPMy78A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:48:12 2025 by rpki-client