This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json) Hash identifier: gSK591QVvqL+Qw0x4UQFFbbxjuDXkDTsYcD7hwGMcEU= Subject key identifier: 66:D1:08:CD:8D:8E:E9:1F:B0:FF:52:89:7D:D5:4C:94:1C:0E:AA:78 Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2 Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2 Certificate serial: 019AF31BEF603EB8F53EB59FC4123A9D64C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft Manifest number: 02AA Signing time: Sat 06 Dec 2025 10:01:25 +0000 Manifest this update: Sat 06 Dec 2025 10:01:25 +0000 Manifest next update: Sun 07 Dec 2025 10:01:25 +0000 Files and hashes: 1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=) 2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: 9PbD7J1tt2epnlpwRYr6XlXVa+CznPkkSYfkrb+2lBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ef:60:3e:b8:f5:3e:b5:9f:c4:12:3a:9d:64:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2 Validity Not Before: Dec 6 10:01:25 2025 GMT Not After : Dec 7 10:01:25 2025 GMT Subject: CN=66d108cd8d8ee91fb0ff52897dd54c941c0eaa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:46:30:2c:c9:ea:12:d2:2f:cf:c0:57:ed: 01:95:8c:41:f5:17:3d:65:35:3a:59:d2:e6:c1:ee: 46:d5:19:c5:34:79:f2:9f:9c:46:9f:85:37:68:38: e9:73:4d:16:a1:0c:d4:9a:c8:4e:3e:a7:85:58:b5: 6d:ec:d7:6e:01:15:68:58:f6:3d:dd:b4:ec:8a:fb: 71:4b:3d:dc:21:6d:07:f0:1a:8d:f8:58:b7:3c:1c: d4:74:30:a0:99:f2:20:39:1a:ba:64:73:81:5f:0a: 9d:83:9d:c8:98:d3:07:78:19:cf:c7:0c:fe:ef:94: ce:ef:f2:4a:a4:ab:61:3c:7e:86:69:06:4b:0e:67: c4:3f:1f:80:0b:32:2e:01:98:eb:e4:ad:77:f5:99: cb:35:8f:07:51:31:92:ba:50:5c:2a:e7:43:c4:29: ca:7d:4f:1e:03:69:d8:db:b7:11:27:07:6e:21:52: 22:5a:09:c2:c5:cd:53:1d:e4:b3:9c:33:a0:4a:4f: bb:3a:65:c0:8f:98:50:c5:ef:65:50:82:68:5d:07: 5f:f0:99:04:5a:05:6f:06:da:1d:fc:96:5a:24:5d: 12:99:98:79:34:6f:e4:1d:0d:21:f0:58:e2:2c:48: f4:45:87:fa:b6:f5:ce:7e:48:3c:bb:bf:11:a7:81: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:08:CD:8D:8E:E9:1F:B0:FF:52:89:7D:D5:4C:94:1C:0E:AA:78 X509v3 Authority Key Identifier: keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:a8:b2:24:4b:27:c3:5c:f3:ab:f7:e1:12:bb:41:ee:4b:5f: ea:9e:f9:0a:4c:73:43:d0:d5:d8:a3:1a:bf:53:fd:90:37:fe: 9d:e9:cf:38:c5:b1:93:c3:b0:b1:5d:b4:b0:70:ba:eb:dc:c7: e3:b0:93:3c:ce:b6:76:87:27:06:84:09:4c:0c:08:47:fa:0a: fa:da:75:df:ea:38:69:13:e3:6f:bc:01:b3:2d:66:30:26:48: 88:42:21:b5:4c:7b:e1:23:5b:37:32:d4:2d:aa:e4:89:19:d2: 77:cf:ea:15:f0:df:ab:04:d9:0b:1b:0e:81:de:52:fd:d1:72: 3b:d1:d0:26:00:28:62:e6:81:46:f5:12:2f:1f:1c:2d:c4:f4: 07:ea:2d:4d:28:3b:32:5d:5f:a5:f6:33:21:c1:8e:a4:bf:5d: fd:0d:c9:c9:45:66:18:fd:4d:e5:4f:53:18:98:4a:60:06:8a: 22:cf:ef:80:66:f9:55:0f:bf:41:ee:83:af:1a:0b:6c:03:3d: 29:43:16:e2:a2:f1:cb:84:27:bb:6e:a8:90:e2:61:fd:09:88: 11:e3:2d:a9:34:ba:4d:9e:a9:24:ea:20:61:08:ff:78:6f:9c: ef:d2:3a:93:ec:5a:f2:92:a3:c4:fb:2e:d1:90:99:ff:82:e4: 11:96:0c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+9gPrj1PrWfxBI6nWTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzE2NjYzNjkyZjZjNjg0NTc0ZjY0NjBhYWNlNjI1N2Zi NzkyYTIwHhcNMjUxMjA2MTAwMTI1WhcNMjUxMjA3MTAwMTI1WjAzMTEwLwYDVQQD Eyg2NmQxMDhjZDhkOGVlOTFmYjBmZjUyODk3ZGQ1NGM5NDFjMGVhYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidRGMCzJ6hLSL8/AV+0BlYxB9Rc9 ZTU6WdLmwe5G1RnFNHnyn5xGn4U3aDjpc00WoQzUmshOPqeFWLVt7NduARVoWPY9 3bTsivtxSz3cIW0H8BqN+Fi3PBzUdDCgmfIgORq6ZHOBXwqdg53ImNMHeBnPxwz+ 75TO7/JKpKthPH6GaQZLDmfEPx+ACzIuAZjr5K139ZnLNY8HUTGSulBcKudDxCnK fU8eA2nY27cRJwduIVIiWgnCxc1THeSznDOgSk+7OmXAj5hQxe9lUIJoXQdf8JkE WgVvBtod/JZaJF0SmZh5NG/kHQ0h8FjiLEj0RYf6tvXOfkg8u78Rp4E7AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbRCM2NjukfsP9SiX3VTJQcDqp4MB8GA1UdIwQY MBaAFGjBZmNpL2xoRXT2Rgqs5iV/t5KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81N2M2ZWEtMWJiNS00MmEwLTg2Nzkt ZDA3ZmEzZTZiM2QzLzEvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81N2M2ZWEtMWJiNS00MmEwLTg2NzktZDA3ZmEzZTZiM2Qz LzEvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz6iyJEsn w1zzq/fhErtB7ktf6p75CkxzQ9DV2KMav1P9kDf+nenPOMWxk8OwsV20sHC669zH 47CTPM62docnBoQJTAwIR/oK+tp13+o4aRPjb7wBsy1mMCZIiEIhtUx74SNbNzLU LarkiRnSd8/qFfDfqwTZCxsOgd5S/dFyO9HQJgAoYuaBRvUSLx8cLcT0B+otTSg7 Ml1fpfYzIcGOpL9d/Q3JyUVmGP1N5U9TGJhKYAaKIs/vgGb5VQ+/Qe6DrxoLbAM9 KUMW4qLxy4Qnu26okOJh/QmIEeMtqTS6TZ6pJOogYQj/eG+c79I6k+xa8pKjxPsu 0ZCZ/4LkEZYMbg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:36 2025 by rpki-client