This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json) Hash identifier: zWdZ+HISWCac9WcHKbrTz3HK8BWGbB6YYMlQDdJGZI0= Subject key identifier: 87:72:ED:EA:CC:49:6A:46:0A:15:02:59:74:0C:B4:0A:64:D9:08:63 Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Certificate serial: 019AF3C01142C50B409082E355D61EEEB14D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft Manifest number: 01CA Signing time: Sat 06 Dec 2025 13:00:42 +0000 Manifest this update: Sat 06 Dec 2025 13:00:42 +0000 Manifest next update: Sun 07 Dec 2025 13:00:42 +0000 Files and hashes: 1: _ih0IDGdtVSv2B7pineBzs1nKB4.roa (hash: fb9kU4b5LG0UVoJvGOy+jPoLLrOl+4P8QNYdunyPUFs=) 2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: JF5Zm4jVC8lf7tvhubltYOgZCF9ylMygM+9xJaPwvLs=) 3: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:11:42:c5:0b:40:90:82:e3:55:d6:1e:ee:b1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Validity Not Before: Dec 6 13:00:42 2025 GMT Not After : Dec 7 13:00:42 2025 GMT Subject: CN=8772edeacc496a460a150259740cb40a64d90863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:20:a4:a5:72:92:fc:9f:de:11:a0:54:5f: 3a:fd:67:8f:82:c6:37:e6:3f:32:b5:7f:ed:64:52: 22:21:72:bb:38:99:98:60:aa:cd:29:d7:ac:6a:32: 7c:7a:1c:eb:0b:68:04:69:6b:9f:79:f9:0f:ed:c4: 65:be:c7:fd:71:f4:e3:e7:01:96:9d:5f:c6:74:5f: 31:6f:43:09:8a:c2:93:32:57:12:c5:1c:b9:94:a0: d1:d1:33:35:0a:29:8e:d2:3a:9b:2f:31:e9:8d:b9: 89:f3:19:f2:7a:84:17:05:82:b5:5c:c9:78:9e:98: 4f:14:f4:de:95:3c:50:fa:4e:6e:6a:06:29:66:12: 75:12:75:00:60:28:04:a0:71:93:e4:5d:92:18:7b: 29:06:31:da:e6:01:98:c4:cf:ff:e5:9b:ed:5d:b7: d7:7a:bf:ed:e8:d4:be:cc:6c:5b:04:86:2a:29:c1: 7e:16:48:7a:bc:8b:78:77:8d:b3:46:a6:c4:ee:ce: 7e:40:cd:cd:e1:1f:31:7a:cf:8d:4f:62:dc:1d:25: 4e:f7:8b:c1:05:54:30:93:3b:8c:9a:cd:b7:56:99: 91:82:ba:c0:e4:ca:6d:a6:b1:31:cc:d9:73:fe:61: b7:31:7a:38:84:db:45:81:73:74:95:dc:b4:4d:5b: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:72:ED:EA:CC:49:6A:46:0A:15:02:59:74:0C:B4:0A:64:D9:08:63 X509v3 Authority Key Identifier: keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:91:c9:19:21:4a:10:5a:52:c5:80:80:69:6f:da:6d:df:28: 91:a3:49:94:6b:96:12:b4:c0:99:84:82:06:a0:36:4c:2a:1f: 2e:47:42:9b:1e:0c:4e:d8:e3:dd:47:e9:34:f4:2d:a0:ff:21: 99:f6:c4:fc:4c:6d:04:0e:a2:b3:fd:84:df:5f:15:17:2b:a5: 47:6d:fd:ba:35:b8:59:98:af:90:7b:7a:d1:54:ed:b7:74:94: 91:a3:54:c4:11:a7:98:e2:be:98:c2:42:96:b1:a7:85:c3:ec: 30:43:e7:81:92:fa:6e:b3:ab:85:44:46:98:5e:63:8e:0a:36: 68:27:a1:75:df:5c:77:3f:73:ae:7b:de:8f:05:1a:0d:9d:28: 90:08:e6:ad:b1:19:76:01:ff:a0:7e:fe:43:39:1e:d3:e4:9e: 2e:57:55:d6:d7:3b:c2:d1:28:a7:b7:5f:bd:b3:cf:69:69:4f: ec:d4:fe:04:8b:51:0a:94:39:13:6f:c4:7c:45:ad:01:fd:3a: f0:9d:8e:21:f7:1c:a8:79:46:cd:f5:f6:b6:8b:ac:cc:d6:36: 94:47:6c:6a:d0:0c:62:80:54:b0:07:4c:4e:7c:8e:d3:01:1c: 53:3b:57:2f:64:2d:c6:b6:8c:60:00:57:0e:12:d5:d4:21:2c: 28:bb:97:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBFCxQtAkILjVdYe7rFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx YzhjZGQwHhcNMjUxMjA2MTMwMDQyWhcNMjUxMjA3MTMwMDQyWjAzMTEwLwYDVQQD Eyg4NzcyZWRlYWNjNDk2YTQ2MGExNTAyNTk3NDBjYjQwYTY0ZDkwODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMsgpKVykvyf3hGgVF86/WePgsY3 5j8ytX/tZFIiIXK7OJmYYKrNKdesajJ8ehzrC2gEaWufefkP7cRlvsf9cfTj5wGW nV/GdF8xb0MJisKTMlcSxRy5lKDR0TM1CimO0jqbLzHpjbmJ8xnyeoQXBYK1XMl4 nphPFPTelTxQ+k5uagYpZhJ1EnUAYCgEoHGT5F2SGHspBjHa5gGYxM//5ZvtXbfX er/t6NS+zGxbBIYqKcF+Fkh6vIt4d42zRqbE7s5+QM3N4R8xes+NT2LcHSVO94vB BVQwkzuMms23VpmRgrrA5MptprExzNlz/mG3MXo4hNtFgXN0ldy0TVvAjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdy7erMSWpGChUCWXQMtApk2QhjMB8GA1UdIwQY MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt YTI2Y2I2NDI5NDg2LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2 LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJHJGSFK EFpSxYCAaW/abd8okaNJlGuWErTAmYSCBqA2TCofLkdCmx4MTtjj3UfpNPQtoP8h mfbE/ExtBA6is/2E318VFyulR239ujW4WZivkHt60VTtt3SUkaNUxBGnmOK+mMJC lrGnhcPsMEPngZL6brOrhURGmF5jjgo2aCehdd9cdz9zrnvejwUaDZ0okAjmrbEZ dgH/oH7+Qzke0+SeLldV1tc7wtEop7dfvbPPaWlP7NT+BItRCpQ5E2/EfEWtAf06 8J2OIfccqHlGzfX2touszNY2lEdsatAMYoBUsAdMTnyO0wEcUztXL2QtxraMYABX DhLV1CEsKLuXxA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:31 2025 by rpki-client