This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json) Hash identifier: ns6r59cbqE3zFXYlfi/AsX6twvk+Rvre5+Ig8RJEl5E= Subject key identifier: F5:C1:8E:D5:E9:32:F2:27:5B:97:30:DB:A5:4D:86:D0:49:74:68:81 Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f Certificate serial: 019AF16409729BD29DF97452928522550B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft Manifest number: 165F Signing time: Sat 06 Dec 2025 02:00:56 +0000 Manifest this update: Sat 06 Dec 2025 02:00:56 +0000 Manifest next update: Sun 07 Dec 2025 02:00:56 +0000 Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: AEcoV29yw8NupO30VA19goeg+kbbJUEDkfoHyStThik=) 2: cMnqdtCxCnyUSWOfUxTVBWPspak.roa (hash: OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:09:72:9b:d2:9d:f9:74:52:92:85:22:55:0b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f Validity Not Before: Dec 6 02:00:56 2025 GMT Not After : Dec 7 02:00:56 2025 GMT Subject: CN=f5c18ed5e932f2275b9730dba54d86d049746881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:2c:6e:94:b3:27:a7:4f:9c:d7:9a:f3:61: ab:41:f6:41:ad:c4:d9:ab:91:92:0e:ec:c5:fd:0a: 94:f3:c6:2e:9c:3d:1a:09:21:c4:d1:d3:80:72:ff: 3f:5f:5f:00:da:9d:03:7f:b2:69:45:b2:70:61:07: 8c:f2:5d:71:d9:70:0e:f7:af:78:6f:41:47:ab:4c: a5:7f:16:5f:27:b5:0f:68:32:10:ef:57:eb:15:3e: db:60:8e:98:3b:49:8d:df:c1:5c:22:79:1f:8c:64: b8:74:f9:8b:fc:31:0d:f6:a5:5c:51:72:8a:fa:20: 86:a5:04:ea:85:a6:98:47:29:48:54:ce:5a:7f:18: ef:ff:a7:48:43:a6:9b:d8:3a:f6:05:fe:6e:a2:fb: 25:a5:42:ff:c7:9c:89:98:aa:29:4b:6d:1d:5e:e1: 49:48:ac:3e:63:8c:a7:5c:87:b0:31:de:68:c7:ac: b5:e6:6e:24:dc:4d:07:c8:73:31:72:91:fa:17:b4: 19:a8:35:3f:86:62:b5:5a:fc:5f:7d:da:92:55:a3: 94:44:c6:60:92:77:15:c3:a3:1b:28:90:a7:f0:33: 9d:2f:ae:09:49:31:6c:1f:d7:1b:06:99:eb:6c:0b: 3a:74:c9:ed:73:cb:1a:be:29:1f:c2:fd:f8:ea:7d: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C1:8E:D5:E9:32:F2:27:5B:97:30:DB:A5:4D:86:D0:49:74:68:81 X509v3 Authority Key Identifier: keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8a:c5:12:61:bc:e3:ca:ab:13:b3:5f:36:1a:b3:0b:f6:7a: 14:6e:db:1c:54:b2:9f:d4:fe:c1:e2:f8:f8:cd:5d:7f:82:f7: 89:48:be:ef:a9:c4:3a:17:38:37:f1:80:7e:f7:5c:8a:a4:c8: 0a:71:4f:da:cd:4a:ed:22:a7:01:aa:df:57:81:8a:6a:9d:cf: 91:e1:d4:eb:b4:ce:a9:8e:2a:26:0f:51:3f:29:d8:48:65:3f: 05:b9:5a:2b:fe:98:ec:a0:95:a8:00:08:00:b8:84:fe:7c:38: 92:cc:52:84:90:39:26:14:6d:11:8b:71:42:34:3b:ab:c8:84: d2:44:fa:62:8a:7e:f5:d4:9b:ba:44:7d:22:ef:b7:c3:6b:ad: ed:1e:40:69:b9:5a:41:65:14:83:bd:c2:30:12:91:e5:b2:91: e1:2a:c9:ff:04:82:96:13:ce:62:37:f4:74:b3:30:76:ce:ea: d6:24:24:7a:16:30:2b:c7:bc:0d:95:cf:b9:5f:cb:87:31:96: f6:6b:0a:28:ec:64:ab:06:52:7c:3e:36:09:fe:63:c9:c7:ce: fa:b6:49:66:73:88:49:c9:db:3d:00:6c:2d:1a:55:33:bd:73: 5d:f5:d1:7c:f3:2b:5d:44:85:7f:39:84:c9:02:74:ed:d2:5b: c9:af:a3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAlym9Kd+XRSkoUiVQsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjA2M2VkMmUwYTI2NzRiYzQ3MTAxMDE4OWZjNzdhZGIz MWMxN2YwHhcNMjUxMjA2MDIwMDU2WhcNMjUxMjA3MDIwMDU2WjAzMTEwLwYDVQQD EyhmNWMxOGVkNWU5MzJmMjI3NWI5NzMwZGJhNTRkODZkMDQ5NzQ2ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/MsbpSzJ6dPnNea82GrQfZBrcTZ q5GSDuzF/QqU88YunD0aCSHE0dOAcv8/X18A2p0Df7JpRbJwYQeM8l1x2XAO9694 b0FHq0ylfxZfJ7UPaDIQ71frFT7bYI6YO0mN38FcInkfjGS4dPmL/DEN9qVcUXKK +iCGpQTqhaaYRylIVM5afxjv/6dIQ6ab2Dr2Bf5uovslpUL/x5yJmKopS20dXuFJ SKw+Y4ynXIewMd5ox6y15m4k3E0HyHMxcpH6F7QZqDU/hmK1WvxffdqSVaOURMZg kncVw6MbKJCn8DOdL64JSTFsH9cbBpnrbAs6dMntc8savikfwv346n22WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXBjtXpMvInW5cw26VNhtBJdGiBMB8GA1UdIwQY MBaAFGjwY+0uCiZ0vEcQEBifx3rbMcF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMt OTQ2ZmRhZmUyZWM2LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMtOTQ2ZmRhZmUyZWM2 LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4rFEmG8 48qrE7NfNhqzC/Z6FG7bHFSyn9T+weL4+M1df4L3iUi+76nEOhc4N/GAfvdciqTI CnFP2s1K7SKnAarfV4GKap3PkeHU67TOqY4qJg9RPynYSGU/BblaK/6Y7KCVqAAI ALiE/nw4ksxShJA5JhRtEYtxQjQ7q8iE0kT6Yop+9dSbukR9Iu+3w2ut7R5Aabla QWUUg73CMBKR5bKR4SrJ/wSClhPOYjf0dLMwds7q1iQkehYwK8e8DZXPuV/LhzGW 9msKKOxkqwZSfD42Cf5jycfO+rZJZnOIScnbPQBsLRpVM71zXfXRfPMrXUSFfzmE yQJ07dJbya+jmA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:27 2025 by rpki-client