This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json) Hash identifier: 9sd0DSZjDVWb8sVgp+SF0mzqauWU+EseoW1Y92cb96Q= Subject key identifier: 2F:A7:D2:F0:2D:D4:B8:38:9D:1F:3D:FA:CA:DA:1D:F8:CC:C0:8E:96 Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8 Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8 Certificate serial: 019AF2771DAFA02C39FB3E9E9E842E0DFB38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft Manifest number: 064F Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=) 2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: CRg3/KxSQ9zC07IFpSjrwuQHnvDo0vwGYpOBeMt2FrQ=) 3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1d:af:a0:2c:39:fb:3e:9e:9e:84:2e:0d:fb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=2fa7d2f02dd4b8389d1f3dfacada1df8ccc08e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:52:87:b9:7a:5c:aa:1d:05:0f:32:83:58: 5d:be:41:a4:5b:ad:a5:30:26:f7:3d:3f:4a:1c:c8: b9:6c:a9:d8:83:79:5c:b2:30:0a:59:fc:93:b1:37: a7:d0:09:e1:97:83:06:a8:18:ff:ef:0c:82:fb:12: ed:75:46:2e:d2:0c:3a:9a:0a:d6:d1:05:6f:af:9c: c1:8b:ec:38:37:58:28:d6:a4:af:d1:d7:24:e5:18: 51:5b:b0:9a:c3:37:c9:25:07:52:d6:27:f8:27:b7: ed:47:09:53:f3:ad:76:c5:2f:54:28:14:84:d3:58: 38:db:ac:99:dd:72:ab:6e:4b:5b:7d:cd:e0:d0:85: b0:70:62:9d:07:56:ff:11:f9:fd:01:8a:be:b0:83: 4b:8d:1a:82:d7:bc:9d:16:c8:05:af:08:54:2a:7b: ba:b9:32:60:a4:78:1c:1f:d4:ab:d3:12:ba:00:30: 8c:60:aa:d6:49:09:6c:2b:3d:14:12:75:7c:30:83: 7c:24:5e:d0:78:c5:36:d8:fa:f7:fa:dd:14:77:24: 82:6a:fc:7b:61:4d:76:b9:1f:2e:e3:65:c7:5e:08: 4d:aa:e0:33:ce:62:5c:ed:49:76:73:a5:e3:a2:2a: 1b:25:da:d0:76:5e:30:d4:3c:5a:92:1e:93:c1:18: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A7:D2:F0:2D:D4:B8:38:9D:1F:3D:FA:CA:DA:1D:F8:CC:C0:8E:96 X509v3 Authority Key Identifier: keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e2:e3:da:f2:51:c1:7b:f1:07:89:87:d4:b4:8d:f6:86:71: bd:09:3e:bc:77:32:ee:04:e6:d3:0c:d3:a3:c3:dd:90:91:f6: 93:3b:5b:56:87:8f:b0:e2:55:1e:22:7f:55:05:77:81:bc:01: 26:2c:15:9d:09:8e:93:e0:93:05:f6:97:52:77:52:4f:49:c4: 99:44:b8:c7:f1:47:09:de:7e:2a:04:8a:fb:94:09:3d:50:1c: 10:6b:f2:46:ad:31:53:67:41:48:70:58:1e:ff:40:77:58:ec: 44:59:e2:9f:39:a5:80:ed:cb:b0:32:e4:bb:b7:eb:08:91:50: 35:20:c6:b4:eb:a1:77:f6:a0:a3:a7:e4:85:16:b4:97:6c:cd: dd:ae:49:25:df:bd:6a:ed:0b:29:b6:af:5c:04:8f:c1:61:4c: ad:a5:00:f1:c2:95:9b:f8:c9:8e:52:85:5d:40:95:d6:d3:99: 86:c1:10:f6:14:6b:ac:63:86:f9:bf:a9:97:04:76:c6:1e:68: 30:a8:8c:3c:de:af:36:f6:08:3d:ea:bb:91:a3:90:23:72:07: b1:f4:58:2c:4c:3e:23:45:c1:5a:e8:b4:70:af:14:5e:3e:b0: 6a:42:8d:25:cf:be:8f:d1:f8:21:16:71:e8:b3:17:81:d9:31: e3:b1:be:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydx2voCw5+z6enoQuDfs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3 OTAwYTgwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD EygyZmE3ZDJmMDJkZDRiODM4OWQxZjNkZmFjYWRhMWRmOGNjYzA4ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGlSh7l6XKodBQ8yg1hdvkGkW62l MCb3PT9KHMi5bKnYg3lcsjAKWfyTsTen0Anhl4MGqBj/7wyC+xLtdUYu0gw6mgrW 0QVvr5zBi+w4N1go1qSv0dck5RhRW7CawzfJJQdS1if4J7ftRwlT8612xS9UKBSE 01g426yZ3XKrbktbfc3g0IWwcGKdB1b/Efn9AYq+sINLjRqC17ydFsgFrwhUKnu6 uTJgpHgcH9Sr0xK6ADCMYKrWSQlsKz0UEnV8MIN8JF7QeMU22Pr3+t0UdySCavx7 YU12uR8u42XHXghNquAzzmJc7Ul2c6XjoiobJdrQdl4w1Dxakh6TwRi77QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+n0vAt1Lg4nR89+sraHfjMwI6WMB8GA1UdIwQY MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt NTY2M2RlMTZkNjZmLzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDktNTY2M2RlMTZkNjZm LzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+Lj2vJR wXvxB4mH1LSN9oZxvQk+vHcy7gTm0wzTo8PdkJH2kztbVoePsOJVHiJ/VQV3gbwB JiwVnQmOk+CTBfaXUndST0nEmUS4x/FHCd5+KgSK+5QJPVAcEGvyRq0xU2dBSHBY Hv9Ad1jsRFninzmlgO3LsDLku7frCJFQNSDGtOuhd/ago6fkhRa0l2zN3a5JJd+9 au0LKbavXASPwWFMraUA8cKVm/jJjlKFXUCV1tOZhsEQ9hRrrGOG+b+plwR2xh5o MKiMPN6vNvYIPeq7kaOQI3IHsfRYLEw+I0XBWui0cK8UXj6wakKNJc++j9H4IRZx 6LMXgdkx47G+bg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:12 2025 by rpki-client