This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json) Hash identifier: cm/mQYyP+OMehL4slXw1HRdZ42++v0GV/oPzTRdxBHI= Subject key identifier: 4B:F9:5A:3A:CF:D6:F3:9B:A7:E5:1C:D1:FE:CB:18:50:4A:08:87:2B Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Certificate serial: 019B32D65CA2E1DF8EF1596FE704819A66F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft Manifest number: 026F Signing time: Thu 18 Dec 2025 19:01:07 +0000 Manifest this update: Thu 18 Dec 2025 19:01:07 +0000 Manifest next update: Fri 19 Dec 2025 19:01:07 +0000 Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=) 2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=) 3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: R6Fd9tjyYd5nhKH3rxvc/Ak+6KKSyWEX/CKnUAwVNhE=) 4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:5c:a2:e1:df:8e:f1:59:6f:e7:04:81:9a:66:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Validity Not Before: Dec 18 19:01:07 2025 GMT Not After : Dec 19 19:01:07 2025 GMT Subject: CN=4bf95a3acfd6f39ba7e51cd1fecb18504a08872b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:50:25:6a:c5:a3:d8:dc:5d:1a:cc:b9:ef: 79:9b:d5:ef:77:54:db:85:51:f3:39:6e:56:ac:56: 50:94:75:86:e0:a7:3a:51:6c:4e:e5:d8:68:00:fb: 8c:75:12:91:4d:98:68:6a:54:34:da:40:ca:db:36: b6:32:6f:c6:b8:ff:e6:44:50:29:af:42:d3:2a:62: b1:fe:33:b0:57:91:66:e1:3e:66:81:80:b4:6d:7d: 2c:a7:41:c1:40:8f:ce:cd:e8:3a:50:c8:b8:78:09: 33:a8:72:bb:71:d5:a8:da:aa:71:a0:9d:35:92:9f: 71:cf:26:60:81:10:1b:52:53:b0:cf:69:d4:2b:78: 35:9b:19:13:b1:ac:9e:16:97:f9:e1:ba:db:49:e6: 54:57:73:2a:6d:8e:13:8f:e8:48:24:61:6d:3b:4e: a8:73:af:5b:b7:d6:95:4a:e2:cb:71:6e:60:90:4a: b0:02:75:68:9f:22:7b:cb:8f:51:1b:dd:ca:b6:e8: fc:cc:41:d9:f3:19:0d:e7:dd:09:7e:c9:46:1a:0b: 8e:33:20:55:dc:62:09:55:89:88:ce:7d:68:99:d4: 08:52:ed:c5:db:67:cf:28:58:23:15:b8:10:af:fa: 39:e8:22:7f:ed:e3:24:92:1d:31:0e:19:9d:83:97: ee:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F9:5A:3A:CF:D6:F3:9B:A7:E5:1C:D1:FE:CB:18:50:4A:08:87:2B X509v3 Authority Key Identifier: keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d1:a5:ce:a5:ba:f3:fb:3d:44:99:c8:c0:6c:5a:28:12:38: 2a:4e:89:e9:67:df:a2:19:3f:43:36:ea:2b:4b:3e:f3:4b:aa: 25:19:50:63:65:11:ad:7d:2f:31:f2:50:e8:a9:4c:eb:3d:aa: 62:04:38:d5:cd:4d:2a:33:dd:36:78:1f:a1:2c:55:50:a7:7f: 16:42:dc:e7:99:0f:0a:b2:76:34:e5:1c:6c:65:e3:c3:ac:d0: f9:f7:79:a3:e1:87:20:23:9a:5e:2a:9d:4a:2a:44:68:aa:ee: bf:33:81:c3:0a:7b:df:de:4a:5b:f0:4d:9f:30:74:b6:bc:51: c6:fd:69:e1:a5:8c:ef:31:d7:68:0a:4e:b8:f2:a7:b6:5e:b5: eb:0f:30:a5:f3:e5:a1:fb:cb:b9:70:11:3f:d4:33:9a:7f:5f: ff:ec:39:e9:af:08:8e:d7:4c:5a:2c:85:02:3d:0f:dc:e7:c5: 52:77:43:29:ab:c9:ea:59:41:1e:7c:86:da:ae:d8:08:fa:aa: ef:20:3a:ff:1c:ae:6a:77:e0:6d:f5:e2:6d:2b:b8:36:ee:70: 08:cc:30:64:c4:d9:13:5f:23:da:2f:9a:92:b0:ec:7b:d9:9b: fa:52:cf:e3:80:a3:03:fa:de:cb:c8:5c:65:55:92:24:f7:65: d1:66:e6:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1lyi4d+O8Vlv5wSBmmb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh NzFjNGIwHhcNMjUxMjE4MTkwMTA3WhcNMjUxMjE5MTkwMTA3WjAzMTEwLwYDVQQD Eyg0YmY5NWEzYWNmZDZmMzliYTdlNTFjZDFmZWNiMTg1MDRhMDg4NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1lQJWrFo9jcXRrMue95m9Xvd1Tb hVHzOW5WrFZQlHWG4Kc6UWxO5dhoAPuMdRKRTZhoalQ02kDK2za2Mm/GuP/mRFAp r0LTKmKx/jOwV5Fm4T5mgYC0bX0sp0HBQI/Ozeg6UMi4eAkzqHK7cdWo2qpxoJ01 kp9xzyZggRAbUlOwz2nUK3g1mxkTsayeFpf54brbSeZUV3MqbY4Tj+hIJGFtO06o c69bt9aVSuLLcW5gkEqwAnVonyJ7y49RG93Ktuj8zEHZ8xkN590JfslGGguOMyBV 3GIJVYmIzn1omdQIUu3F22fPKFgjFbgQr/o56CJ/7eMkkh0xDhmdg5fuvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv5WjrP1vObp+Uc0f7LGFBKCIcrMB8GA1UdIwQY MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNGlzqW6 8/s9RJnIwGxaKBI4Kk6J6Wffohk/QzbqK0s+80uqJRlQY2URrX0vMfJQ6KlM6z2q YgQ41c1NKjPdNngfoSxVUKd/FkLc55kPCrJ2NOUcbGXjw6zQ+fd5o+GHICOaXiqd SipEaKruvzOBwwp7395KW/BNnzB0trxRxv1p4aWM7zHXaApOuPKntl616w8wpfPl ofvLuXARP9Qzmn9f/+w56a8IjtdMWiyFAj0P3OfFUndDKavJ6llBHnyG2q7YCPqq 7yA6/xyuanfgbfXibSu4Nu5wCMwwZMTZE18j2i+akrDse9mb+lLP44CjA/rey8hc ZVWSJPdl0Wbm2A== -----END CERTIFICATE-----Generated at Thu Dec 18 21:51:52 2025 by rpki-client