This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json) Hash identifier: Q6atnhpV3dL2OPvq8Yz5A1IppEYJwunPAWU3X5dBJ2I= Subject key identifier: B8:D1:2B:07:A2:26:3B:AD:EC:66:8E:71:A9:74:47:91:EF:3C:83:74 Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Certificate serial: 019AF12D4BDFB9EC473F160DB05971750B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft Manifest number: 024D Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=) 2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=) 3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: gcT7ugIp/IRiYoVRHQUwBPOpFG9s59eIEPYVA0n1tfU=) 4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4b:df:b9:ec:47:3f:16:0d:b0:59:71:75:0b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=b8d12b07a2263badec668e71a9744791ef3c8374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:98:d9:9c:ec:03:dc:bc:d3:2f:e6:08:9e: df:c1:86:d1:7f:ee:6f:ac:3f:8b:62:97:f2:b8:30: 6e:21:c7:cc:6f:f3:9c:64:55:f3:52:6c:0b:08:8c: 90:4a:49:62:04:c9:17:3d:db:2f:c9:21:52:67:8e: 5a:d8:01:b5:5e:e6:a6:45:fe:91:87:9e:4a:15:d2: ae:fa:bb:2a:d5:d8:26:a1:aa:39:f1:03:ae:cb:f4: 07:a2:e1:3d:fe:fc:24:75:2d:3e:3a:d2:a5:e0:06: 51:6f:d1:07:63:38:19:44:c9:1f:a1:ae:26:3d:86: 68:46:dc:08:9a:01:3d:2e:36:00:88:c4:3a:c5:85: 3d:82:55:44:3c:1c:9c:af:46:ef:f4:b2:ea:92:d8: 48:1e:18:28:45:08:6c:6d:43:62:32:76:18:ca:4d: d9:2b:6e:2a:b0:ed:bd:be:67:b2:4b:70:f9:e0:5f: 7b:d7:11:81:18:8a:65:1b:3c:25:91:23:d0:cd:7e: 4b:0c:28:05:23:81:d2:a8:d1:ff:00:fa:f0:2b:fc: eb:1b:61:5a:24:71:d2:e5:9f:85:54:53:96:6b:b5: bf:4d:93:89:4e:ea:9c:d3:54:fa:9a:e4:19:7b:03: e2:d2:33:de:2c:cb:57:92:81:98:09:2c:69:56:cb: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:2B:07:A2:26:3B:AD:EC:66:8E:71:A9:74:47:91:EF:3C:83:74 X509v3 Authority Key Identifier: keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:52:82:7b:87:eb:73:8a:21:e0:e9:a5:4b:44:b1:fc:09:6a: e8:25:b0:7a:25:c0:53:81:04:90:d3:6f:0b:35:78:34:f2:12: 0d:5d:18:3a:08:96:a6:c3:de:cd:0b:ec:21:27:ce:3a:34:fa: e1:57:53:7a:1d:93:a2:52:11:c7:45:76:f0:60:08:ec:d1:6f: 15:71:76:1f:98:5a:2a:2a:8c:78:44:b5:d0:c1:5a:7c:43:3a: 6f:8d:ea:19:e4:6a:f6:05:2d:da:b9:65:26:b3:39:0c:1e:f7: 24:4b:39:9f:14:4d:2c:66:4c:c9:2c:32:4b:1b:6b:55:4a:66: 95:bc:54:4b:23:10:95:b3:37:2f:67:44:4c:5a:b0:2a:51:8a: 04:fb:fe:a6:9b:bd:53:cd:a9:a8:53:64:ca:a5:e5:57:15:91: fd:31:97:93:97:52:5d:3e:5b:6b:09:ea:4a:5c:73:ed:54:6c: 7f:24:f2:0c:68:97:3c:bd:19:16:c7:e0:84:af:f8:05:3f:97: 68:0a:67:da:70:6f:02:88:b5:27:36:84:81:f0:fd:5e:32:dc: 76:2d:28:35:4f:6a:5b:e4:a7:91:4c:80:6f:0f:bf:b0:cb:72: 11:25:e2:17:f8:53:c5:89:b6:1f:f3:1a:bb:53:8b:b5:f3:3b: c7:cb:93:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUvfuexHPxYNsFlxdQuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh NzFjNGIwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD EyhiOGQxMmIwN2EyMjYzYmFkZWM2NjhlNzFhOTc0NDc5MWVmM2M4Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptOY2ZzsA9y80y/mCJ7fwYbRf+5v rD+LYpfyuDBuIcfMb/OcZFXzUmwLCIyQSkliBMkXPdsvySFSZ45a2AG1XuamRf6R h55KFdKu+rsq1dgmoao58QOuy/QHouE9/vwkdS0+OtKl4AZRb9EHYzgZRMkfoa4m PYZoRtwImgE9LjYAiMQ6xYU9glVEPBycr0bv9LLqkthIHhgoRQhsbUNiMnYYyk3Z K24qsO29vmeyS3D54F971xGBGIplGzwlkSPQzX5LDCgFI4HSqNH/APrwK/zrG2Fa JHHS5Z+FVFOWa7W/TZOJTuqc01T6muQZewPi0jPeLMtXkoGYCSxpVstoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjRKweiJjut7GaOcal0R5HvPIN0MB8GA1UdIwQY MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElKCe4fr c4oh4OmlS0Sx/Alq6CWweiXAU4EEkNNvCzV4NPISDV0YOgiWpsPezQvsISfOOjT6 4VdTeh2TolIRx0V28GAI7NFvFXF2H5haKiqMeES10MFafEM6b43qGeRq9gUt2rll JrM5DB73JEs5nxRNLGZMySwySxtrVUpmlbxUSyMQlbM3L2dETFqwKlGKBPv+ppu9 U82pqFNkyqXlVxWR/TGXk5dSXT5bawnqSlxz7VRsfyTyDGiXPL0ZFsfghK/4BT+X aApn2nBvAoi1JzaEgfD9XjLcdi0oNU9qW+SnkUyAbw+/sMtyESXiF/hTxYm2H/Ma u1OLtfM7x8uTVw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:42 2025 by rpki-client