This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json) Hash identifier: chqr1crwr0o/2eWHuusADj48j5Mzuv0vA3w2hgGeeac= Subject key identifier: 40:EA:6A:22:F8:BC:B8:A3:DB:73:6F:08:55:EE:11:A8:98:98:EE:9A Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Certificate serial: 019AF49C116DAC6EA1DD6F5CF1D596536DB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft Manifest number: 0103 Signing time: Sat 06 Dec 2025 17:01:00 +0000 Manifest this update: Sat 06 Dec 2025 17:01:00 +0000 Manifest next update: Sun 07 Dec 2025 17:01:00 +0000 Files and hashes: 1: UdICj6zPcID-7_Hf3d1V7ttrE0M.roa (hash: 1plINgz643oMJ6Sr7Nq6vQNGyijqcXnzXvCmKpTHyIY=) 2: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: u1SgdYgfBD8Tye1LqK++Ed14//dTBTyygFMR+CjzFC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:11:6d:ac:6e:a1:dd:6f:5c:f1:d5:96:53:6d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Validity Not Before: Dec 6 17:01:00 2025 GMT Not After : Dec 7 17:01:00 2025 GMT Subject: CN=40ea6a22f8bcb8a3db736f0855ee11a89898ee9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:13:5c:b8:8d:04:90:10:90:24:18:cb:6d: f6:a1:95:74:a2:a7:ea:cd:2e:b0:0d:b9:a1:b7:7d: 9c:6a:66:41:6b:27:28:be:40:0c:27:8a:54:79:7a: 91:c1:30:d5:32:eb:0f:95:80:06:ef:18:70:43:f6: d9:17:cb:87:66:23:ef:ff:19:84:ca:7a:c7:3f:33: 56:90:d7:4c:3d:66:9d:5f:e7:14:f1:fa:c2:5e:b9: 43:90:8f:e9:ef:50:a9:d8:25:78:8e:92:f7:2f:49: d7:d0:07:b8:ac:00:08:e9:9d:a9:a7:72:e5:87:81: 76:06:03:3e:65:e8:55:75:5a:d2:05:8a:31:3b:ee: a6:41:e3:3d:1b:b0:96:fc:ea:9a:5a:0d:8f:5b:d6: fa:6e:d8:3c:26:53:2b:33:73:68:0f:8e:43:7f:39: fa:74:22:72:0d:37:9f:00:67:0c:67:dd:f6:f8:3a: d8:54:9a:8f:06:3d:78:bc:19:e4:54:9e:43:f0:06: 11:49:ad:88:8c:c5:cc:4d:82:ef:ea:93:7f:97:19: a6:fc:59:ca:b1:e2:65:7f:c9:25:eb:de:9c:95:2b: d4:c4:35:f7:29:be:17:59:fb:d1:8b:4c:3a:32:d0: 96:d2:89:2d:d5:a4:de:cd:cb:7b:73:8b:bb:09:e2: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EA:6A:22:F8:BC:B8:A3:DB:73:6F:08:55:EE:11:A8:98:98:EE:9A X509v3 Authority Key Identifier: keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2f:98:d3:21:03:79:f7:92:b0:20:f5:f7:d0:7b:4d:2a:32: f4:94:ce:73:2b:fe:e8:d1:4f:c6:f7:c8:00:ab:c2:08:fe:24: e2:e3:6a:8d:06:20:60:c0:dd:82:26:1c:e5:e6:1d:5e:16:6a: d7:de:b0:fa:3a:c2:b6:8a:71:2b:18:ff:6f:d6:2c:7e:77:12: 77:67:0d:46:8f:75:78:a3:3d:b3:cd:c4:bb:5f:b0:65:7a:10: 61:0f:0b:cb:26:15:aa:2c:d8:6f:d8:ac:6e:cc:a0:a2:1c:cf: 70:69:e3:56:f1:d7:da:12:60:67:68:b8:ea:6f:58:66:a2:a6: 5a:b1:4b:66:6b:68:16:3f:a8:b2:db:61:5a:6b:70:a8:03:a2: b1:ee:68:5e:58:11:b2:e3:ab:1e:16:97:b2:2b:e0:99:9a:9f: 2d:c9:79:88:da:4d:f1:a8:72:31:71:a8:4d:06:5b:05:89:d3: ce:48:2b:4d:ae:b6:fb:22:b7:6d:d2:6c:29:69:03:f1:89:f0: 07:4b:f4:5b:5f:8d:48:68:d3:19:47:64:e4:3f:e9:11:fd:6c: 13:be:53:bb:a6:b7:3f:69:a1:0c:eb:c8:3c:99:ec:25:93:a1: a4:d3:9a:02:f5:6f:b8:e4:e0:df:50:7d:9d:1f:cf:c1:da:d0: 50:59:2f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBFtrG6h3W9c8dWWU221MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWVlMDhmZjY3MTYwMGQ0MDM0YTNlMWQ5ZDVhOTAyNDVj YzljMTUwHhcNMjUxMjA2MTcwMTAwWhcNMjUxMjA3MTcwMTAwWjAzMTEwLwYDVQQD Eyg0MGVhNmEyMmY4YmNiOGEzZGI3MzZmMDg1NWVlMTFhODk4OThlZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMwTXLiNBJAQkCQYy232oZV0oqfq zS6wDbmht32camZBaycovkAMJ4pUeXqRwTDVMusPlYAG7xhwQ/bZF8uHZiPv/xmE ynrHPzNWkNdMPWadX+cU8frCXrlDkI/p71Cp2CV4jpL3L0nX0Ae4rAAI6Z2pp3Ll h4F2BgM+ZehVdVrSBYoxO+6mQeM9G7CW/OqaWg2PW9b6btg8JlMrM3NoD45Dfzn6 dCJyDTefAGcMZ932+DrYVJqPBj14vBnkVJ5D8AYRSa2IjMXMTYLv6pN/lxmm/FnK seJlf8kl696clSvUxDX3Kb4XWfvRi0w6MtCW0okt1aTezct7c4u7CeIp+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDqaiL4vLij23NvCFXuEaiYmO6aMB8GA1UdIwQY MBaAFGme4I/2cWANQDSj4dnVqQJFzJwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEt MWQwOGFkZGNhMjcxLzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEtMWQwOGFkZGNhMjcx LzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAty+Y0yED efeSsCD199B7TSoy9JTOcyv+6NFPxvfIAKvCCP4k4uNqjQYgYMDdgiYc5eYdXhZq 196w+jrCtopxKxj/b9YsfncSd2cNRo91eKM9s83Eu1+wZXoQYQ8LyyYVqizYb9is bsygohzPcGnjVvHX2hJgZ2i46m9YZqKmWrFLZmtoFj+ostthWmtwqAOise5oXlgR suOrHhaXsivgmZqfLcl5iNpN8ahyMXGoTQZbBYnTzkgrTa62+yK3bdJsKWkD8Ynw B0v0W1+NSGjTGUdk5D/pEf1sE75Tu6a3P2mhDOvIPJnsJZOhpNOaAvVvuOTg31B9 nR/PwdrQUFkvCQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:15 2025 by rpki-client