This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json) Hash identifier: AB5/kB25ipi55zuK85X6p5yLKhf/9WcyRaRngncdzEU= Subject key identifier: 0F:24:D5:32:BD:EC:84:8E:34:17:5C:67:70:33:1B:00:EA:B3:EC:80 Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84 Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084 Certificate serial: 019B3CEC25DBAE41F13B6838D528C81AE34B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft Manifest number: 060A Signing time: Sat 20 Dec 2025 18:01:07 +0000 Manifest this update: Sat 20 Dec 2025 18:01:07 +0000 Manifest next update: Sun 21 Dec 2025 18:01:07 +0000 Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: rcOnh5OjDk7yYaQ29TjicGTfviv87zWY4Z1ZEJVvDSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:25:db:ae:41:f1:3b:68:38:d5:28:c8:1a:e3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084 Validity Not Before: Dec 20 18:01:07 2025 GMT Not After : Dec 21 18:01:07 2025 GMT Subject: CN=0f24d532bdec848e34175c6770331b00eab3ec80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:ee:df:5e:b9:0e:8e:16:cd:c7:a5:8c:5a: b6:21:05:c4:b7:01:77:32:3f:8e:97:92:16:65:55: 1a:a6:0f:99:cc:ac:b6:b4:7e:91:24:16:56:e7:6a: 7a:ef:b8:b0:bb:db:3a:66:50:88:d7:eb:19:92:73: f2:17:04:4d:9f:53:f8:c2:2c:82:8a:9c:24:5a:11: 30:80:df:df:48:78:5b:10:95:1f:44:50:21:90:c5: 10:e5:68:10:84:1b:9b:5b:44:c2:8b:df:5e:18:71: ce:7c:c5:61:dc:ab:01:4f:07:69:22:37:6e:9d:1d: 5a:78:89:f9:62:0d:7a:f3:51:e5:1d:de:0c:2b:f9: 5a:d7:f9:6f:8c:b7:68:f9:0d:95:51:ee:88:7c:90: 2b:a1:05:c8:18:6e:7a:5d:b2:09:d4:8f:35:2b:a1: a3:02:51:4e:b3:1d:df:7c:7e:a1:84:c6:a8:a1:70: 13:cf:b0:c6:78:54:81:d7:84:12:92:42:f0:1d:2a: 4b:2e:89:27:26:71:5f:d9:c4:db:0f:c3:54:b5:c5: 18:1e:f3:14:17:61:32:12:e8:dc:86:1b:be:9d:95: b1:50:cc:63:92:c3:97:e2:5d:6a:a7:b2:01:57:b3: 1d:79:e4:6c:38:5e:48:4c:c1:84:64:e7:0e:b8:6b: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:D5:32:BD:EC:84:8E:34:17:5C:67:70:33:1B:00:EA:B3:EC:80 X509v3 Authority Key Identifier: keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c1:e6:de:43:b1:43:64:78:14:37:ba:e9:47:f5:7f:0f:32: 9e:ef:a5:e4:66:eb:31:6b:93:18:f8:57:b8:b8:a9:3c:55:d8: 5e:1e:33:79:44:ab:4c:e5:8c:f6:06:44:69:9a:ec:95:2c:41: ed:c2:de:fa:95:b0:44:66:77:0d:72:5c:99:4e:f9:14:c2:9e: 22:9c:13:6f:fe:43:b3:8c:82:a3:5a:98:08:94:81:b6:ec:03: fa:09:c8:4b:da:9e:c5:39:24:cc:a9:43:19:ad:86:c8:15:6b: 3e:a8:53:c2:34:d2:2e:14:bb:49:1b:82:f9:36:73:44:1f:49: 5b:30:de:48:93:e1:77:d5:bd:c2:7a:d5:a8:be:cb:d2:e7:a4: 03:15:02:b7:8c:ef:4a:d1:ac:da:d9:17:c9:83:4d:e4:34:f1: 51:09:32:5a:1c:f9:79:37:fb:27:44:d4:ad:48:91:bc:07:6a: 9d:ad:65:3e:63:16:4e:f9:6b:00:c2:e9:ca:01:23:d7:e5:27: 6d:f4:04:46:71:3f:52:a6:85:f7:7a:a2:e0:e4:d2:27:ed:29: 30:9d:e4:5e:6c:27:ef:e3:f3:66:75:50:1d:b8:71:74:22:4c: b9:3c:60:88:ac:c0:2a:60:87:97:ca:0f:45:18:c2:61:c9:ee: 9c:d8:6f:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87CXbrkHxO2g41SjIGuNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDdhZDdkZmFlZGI5NjAzMjBlZDE3NDA3MTUyNDhiODk1 YWIwODQwHhcNMjUxMjIwMTgwMTA3WhcNMjUxMjIxMTgwMTA3WjAzMTEwLwYDVQQD EygwZjI0ZDUzMmJkZWM4NDhlMzQxNzVjNjc3MDMzMWIwMGVhYjNlYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JHu3165Do4WzceljFq2IQXEtwF3 Mj+Ol5IWZVUapg+ZzKy2tH6RJBZW52p677iwu9s6ZlCI1+sZknPyFwRNn1P4wiyC ipwkWhEwgN/fSHhbEJUfRFAhkMUQ5WgQhBubW0TCi99eGHHOfMVh3KsBTwdpIjdu nR1aeIn5Yg1681HlHd4MK/la1/lvjLdo+Q2VUe6IfJAroQXIGG56XbIJ1I81K6Gj AlFOsx3ffH6hhMaooXATz7DGeFSB14QSkkLwHSpLLoknJnFf2cTbD8NUtcUYHvMU F2EyEujchhu+nZWxUMxjksOX4l1qp7IBV7MdeeRsOF5ITMGEZOcOuGt74QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8k1TK97ISONBdcZ3AzGwDqs+yAMB8GA1UdIwQY MBaAFGkHrX367blgMg7RdAcVJIuJWrCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kYzA3Y2UtMzRmMS00YWM5LTkzZDct ZDFiNTZjODQ0MTg4LzEvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kYzA3Y2UtMzRmMS00YWM5LTkzZDctZDFiNTZjODQ0MTg4 LzEvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsHm3kOx Q2R4FDe66Uf1fw8ynu+l5GbrMWuTGPhXuLipPFXYXh4zeUSrTOWM9gZEaZrslSxB 7cLe+pWwRGZ3DXJcmU75FMKeIpwTb/5Ds4yCo1qYCJSBtuwD+gnIS9qexTkkzKlD Ga2GyBVrPqhTwjTSLhS7SRuC+TZzRB9JWzDeSJPhd9W9wnrVqL7L0uekAxUCt4zv StGs2tkXyYNN5DTxUQkyWhz5eTf7J0TUrUiRvAdqna1lPmMWTvlrAMLpygEj1+Un bfQERnE/UqaF93qi4OTSJ+0pMJ3kXmwn7+PzZnVQHbhxdCJMuTxgiKzAKmCHl8oP RRjCYcnunNhvvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:54 2025 by rpki-client