This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json) Hash identifier: t2Ngv3g6DgIXlaUeSJPZbeV0FMmDzqDcCganCVzMcdI= Subject key identifier: 0B:20:22:F7:CA:77:23:33:43:A6:89:AA:4F:58:1A:0D:67:BA:B7:4A Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0 Certificate serial: 019AF1D1C689366BA80FDF0BBBD807479C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft Manifest number: 13F8 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=) 2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: tjADF5Muq5C8mDhPFm2LNUZ0nyP9E1CQxhtjjxQjxfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c6:89:36:6b:a8:0f:df:0b:bb:d8:07:47:9c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=0b2022f7ca77233343a689aa4f581a0d67bab74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:ea:5f:4c:6e:f6:dd:27:d6:10:ae:3e:88: d8:c4:fd:74:c5:6d:6d:21:ac:3a:42:f5:19:e4:ff: 6f:9d:e5:78:56:69:d2:13:fb:34:df:cd:ef:d9:d4: d2:12:cc:72:11:d0:62:05:cd:4f:a1:9c:11:39:55: 4d:a2:1b:3d:7e:50:8d:e4:11:0b:8d:77:2f:24:a6: 1e:7e:f9:d7:7a:a8:60:13:49:f1:2f:12:94:94:31: be:6a:ae:23:c5:38:a2:a3:3b:33:a5:e0:55:d2:9a: c0:eb:13:d2:0d:6f:08:52:81:3f:b9:0f:33:b8:71: ee:31:e7:cc:84:06:10:15:0e:16:e2:02:6f:2b:a2: 2d:a8:2b:89:4b:b8:11:55:41:f3:c7:7d:76:bf:f3: 92:01:55:05:0b:10:7c:75:db:00:d5:88:71:5e:14: 49:d0:fa:4f:9a:52:ec:b2:cd:fe:d1:8a:dd:18:34: d5:93:10:bf:13:1a:8e:c1:8e:0e:9d:31:dd:95:b5: 52:36:6c:ed:2e:05:34:a7:6a:3a:8a:b8:b9:ac:a9: 1b:c2:1c:9b:ef:ad:00:98:35:97:6a:0f:36:08:62: b3:11:52:b7:46:8b:3f:65:94:b2:ca:dc:9e:d9:1b: c2:5d:0f:eb:e6:71:b4:84:b9:51:4e:0e:2c:76:76: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:20:22:F7:CA:77:23:33:43:A6:89:AA:4F:58:1A:0D:67:BA:B7:4A X509v3 Authority Key Identifier: keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:94:67:07:d4:f9:55:2f:62:84:9a:75:54:ae:75:79:99:50: 40:13:e1:2c:1b:d8:4e:f5:16:3f:1a:c4:c3:ad:ac:c9:cc:91: 13:f5:31:b6:15:ba:db:24:6c:47:6e:1c:29:8e:c2:2c:05:18: db:1f:ca:b5:0e:ec:5d:4b:60:4e:3e:8e:63:1d:69:18:0e:be: 73:81:03:97:39:9f:9a:48:00:f1:06:75:f0:ec:b9:3d:98:40: 81:13:b5:b7:b1:cd:99:02:3a:4c:af:cf:35:a1:41:eb:49:e5: 60:5f:ce:5c:ab:2d:31:73:d1:4d:f0:95:bf:dc:da:1f:45:71: f4:7f:4d:15:7b:3a:43:f7:20:f1:b9:a2:4f:cd:d9:71:56:44: b4:ee:0f:5e:4a:3a:c3:eb:c9:ce:48:5a:71:8f:7d:b0:a4:81: 80:9e:56:cd:2e:85:e8:e1:04:1d:70:1c:46:79:d5:bd:5e:d8: 09:f1:36:df:53:68:e2:bc:01:45:c1:65:fb:09:2c:08:3d:72: 45:23:cf:5b:ca:00:23:1d:c6:3d:26:2e:f3:c6:8b:24:b2:40: d1:3f:dc:11:e0:ae:c8:fc:3b:57:99:eb:7a:32:1a:15:f2:2e: df:7e:ba:8f:b4:6c:7f:05:c6:ee:20:27:42:e2:56:32:a4:e9: d8:35:a3:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0caJNmuoD98Lu9gHR5x4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Nzg2YzE3OGQ2NWJlNzlhZTUwZDM1NTg1N2RhMTNhZDc0 YWJlYTAwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EygwYjIwMjJmN2NhNzcyMzMzNDNhNjg5YWE0ZjU4MWEwZDY3YmFiNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokDqX0xu9t0n1hCuPojYxP10xW1t Iaw6QvUZ5P9vneV4VmnSE/s0383v2dTSEsxyEdBiBc1PoZwROVVNohs9flCN5BEL jXcvJKYefvnXeqhgE0nxLxKUlDG+aq4jxTiiozszpeBV0prA6xPSDW8IUoE/uQ8z uHHuMefMhAYQFQ4W4gJvK6ItqCuJS7gRVUHzx312v/OSAVUFCxB8ddsA1YhxXhRJ 0PpPmlLsss3+0YrdGDTVkxC/ExqOwY4OnTHdlbVSNmztLgU0p2o6iri5rKkbwhyb 760AmDWXag82CGKzEVK3Ros/ZZSyytye2RvCXQ/r5nG0hLlRTg4sdna7NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsgIvfKdyMzQ6aJqk9YGg1nurdKMB8GA1UdIwQY MBaAFGl4bBeNZb55rlDTVYV9oTrXSr6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjIt OGI4ZWVjMTg2OTM0LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjItOGI4ZWVjMTg2OTM0 LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZRnB9T5 VS9ihJp1VK51eZlQQBPhLBvYTvUWPxrEw62sycyRE/UxthW62yRsR24cKY7CLAUY 2x/KtQ7sXUtgTj6OYx1pGA6+c4EDlzmfmkgA8QZ18Oy5PZhAgRO1t7HNmQI6TK/P NaFB60nlYF/OXKstMXPRTfCVv9zaH0Vx9H9NFXs6Q/cg8bmiT83ZcVZEtO4PXko6 w+vJzkhacY99sKSBgJ5WzS6F6OEEHXAcRnnVvV7YCfE231No4rwBRcFl+wksCD1y RSPPW8oAIx3GPSYu88aLJLJA0T/cEeCuyPw7V5nrejIaFfIu3366j7RsfwXG7iAn QuJWMqTp2DWjLA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:19 2025 by rpki-client