This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json) Hash identifier: SvVufMxMm4rbc8PgijOG8lou5LnobNWuuC27NVJDVE0= Subject key identifier: 91:DB:16:5C:F8:D4:36:16:44:8F:C4:D0:8F:96:77:03:6B:E6:EC:C1 Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15 Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15 Certificate serial: 019AF16417FE352B7E6D9EE7D816881CE81F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft Manifest number: 1643 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: VuecASVmjUcKvyphdlmWhBLtzCY.roa (hash: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=) 2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: 9Em1Z6NQ6Cn8KWIW9WA0NNuTvNu9SdFJABhT8sV5/Ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:17:fe:35:2b:7e:6d:9e:e7:d8:16:88:1c:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=91db165cf8d43616448fc4d08f9677036be6ecc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:7d:df:6e:a0:ac:51:95:bb:4e:31:39:fa: f6:37:57:e3:f4:06:40:47:fc:94:3b:be:9b:6a:64: af:ab:be:cb:be:51:4c:95:5f:33:29:dd:c8:1d:12: 80:99:29:82:b0:8a:06:cd:d2:07:d5:c7:37:0d:ff: 6e:92:7b:19:e6:1b:ca:34:0d:4e:79:37:e8:c3:90: 17:03:07:08:8b:04:58:fb:05:a6:15:93:87:e9:d1: c9:01:25:96:73:a9:82:05:9d:d3:55:16:0e:80:42: 45:1f:dc:eb:f8:c2:89:82:cf:6a:4d:14:48:cf:d4: 08:d8:ee:a3:2a:c9:a8:72:e0:21:76:4e:12:03:e8: 8a:71:5f:62:3d:5b:1c:c3:ef:0d:c8:59:d6:86:72: a9:19:64:14:86:2d:b1:6a:60:52:f1:bc:40:39:48: f1:f0:7c:d4:5b:e0:c0:20:44:fa:90:58:53:55:c8: 3e:b1:21:ba:cc:65:f0:12:f7:6b:6d:da:75:ca:e3: a7:f1:7a:31:e7:84:1d:4e:6c:db:bc:96:21:54:41: 35:51:9e:eb:81:ed:e5:74:ca:05:85:e0:d8:be:2f: 8e:a4:3c:ad:a7:56:dd:77:27:3a:40:da:34:f4:58: ca:09:8f:06:2a:83:55:98:e0:b2:c7:3a:77:0c:71: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DB:16:5C:F8:D4:36:16:44:8F:C4:D0:8F:96:77:03:6B:E6:EC:C1 X509v3 Authority Key Identifier: keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f5:49:07:a3:ef:e2:9f:cd:3c:e7:ba:41:ee:51:65:04:9b: 60:cc:84:9e:07:71:e0:70:cf:15:9b:30:f2:a3:e3:1e:8c:72: fe:1f:9c:fd:88:23:64:79:38:cc:4b:3f:c9:22:61:53:72:35: bd:c4:74:21:73:50:03:92:fc:7f:0a:30:1a:ae:d6:8d:a2:5b: 29:4b:d5:cf:11:bd:e4:53:3b:87:bb:5d:3a:f0:51:62:28:65: 81:87:ea:16:6f:e7:23:46:fd:f1:f1:52:42:8c:52:69:48:99: 4d:a3:e4:7f:77:72:b6:ff:c1:10:b1:02:dc:df:dc:c7:47:5b: 70:8c:97:93:1f:bc:3d:78:62:70:7a:1b:03:2f:ed:3c:d2:38: b7:c8:86:50:94:a8:74:1f:51:a9:af:77:c0:2e:0f:a8:f2:f8: a7:02:a2:5d:88:c9:95:d8:23:87:b8:76:6c:79:8d:4f:71:2c: 72:a8:d2:8e:74:76:bf:1c:11:56:fc:97:dd:3b:da:4b:d2:7f: 90:37:46:62:f9:e2:66:66:c5:c8:4b:a1:a4:7e:64:4f:6f:9a: fc:11:09:4d:11:a5:8f:53:d4:cc:ab:76:1d:6c:f3:1c:d3:1e: 55:0c:5c:7c:07:ae:b1:56:8f:b3:8b:84:b2:a8:5e:c0:9a:e0: 54:7b:71:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBf+NSt+bZ7n2BaIHOgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZmVkNTA4Y2NhNWY3MTZlNGRkOTc0ZGUzNTAwZTdkZDE5 YmFhMTUwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD Eyg5MWRiMTY1Y2Y4ZDQzNjE2NDQ4ZmM0ZDA4Zjk2NzcwMzZiZTZlY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif19326grFGVu04xOfr2N1fj9AZA R/yUO76bamSvq77LvlFMlV8zKd3IHRKAmSmCsIoGzdIH1cc3Df9uknsZ5hvKNA1O eTfow5AXAwcIiwRY+wWmFZOH6dHJASWWc6mCBZ3TVRYOgEJFH9zr+MKJgs9qTRRI z9QI2O6jKsmocuAhdk4SA+iKcV9iPVscw+8NyFnWhnKpGWQUhi2xamBS8bxAOUjx 8HzUW+DAIET6kFhTVcg+sSG6zGXwEvdrbdp1yuOn8Xox54QdTmzbvJYhVEE1UZ7r ge3ldMoFheDYvi+OpDytp1bddyc6QNo09FjKCY8GKoNVmOCyxzp3DHG5BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHbFlz41DYWRI/E0I+WdwNr5uzBMB8GA1UdIwQY MBaAFGj+1QjMpfcW5N2XTeNQDn3Rm6oVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNWVhMzEtN2JjMS00NzdhLThiZGMt NDFhMzVlN2MyMmY4LzEvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9jNWVhMzEtN2JjMS00NzdhLThiZGMtNDFhMzVlN2MyMmY4 LzEvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPVJB6Pv 4p/NPOe6Qe5RZQSbYMyEngdx4HDPFZsw8qPjHoxy/h+c/YgjZHk4zEs/ySJhU3I1 vcR0IXNQA5L8fwowGq7WjaJbKUvVzxG95FM7h7tdOvBRYihlgYfqFm/nI0b98fFS QoxSaUiZTaPkf3dytv/BELEC3N/cx0dbcIyXkx+8PXhicHobAy/tPNI4t8iGUJSo dB9Rqa93wC4PqPL4pwKiXYjJldgjh7h2bHmNT3EscqjSjnR2vxwRVvyX3TvaS9J/ kDdGYvniZmbFyEuhpH5kT2+a/BEJTRGlj1PUzKt2HWzzHNMeVQxcfAeusVaPs4uE sqhewJrgVHtxuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:15 2025 by rpki-client