This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft File: anNsvQAR2jHSmwYeX_TWOELaKko.mft (raw, json) Hash identifier: nn9gLM9+9ut5rzRhHEOrz8CteTg3PYwxJ+fg/EZKWS0= Subject key identifier: C7:EA:E0:60:06:B7:D2:65:21:DE:73:6C:71:F8:B1:51:30:B9:6D:99 Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A Certificate issuer: /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a Certificate serial: 019AF19AABAE8BB36774BDAADDD6FEB3B3A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: anNsvQAR2jHSmwYeX_TWOELaKko.crl (hash: 9VM244kbXu0mzwe0TwxIUqO9x6VHum50C2qz5bOvsRw=) 2: xe6f0-R3uUZBnoLs0S7n6Iepim8.roa (hash: HOV8Vg5bEFKecupNdQdTB6clHVPzjq+LxD7iw25nWc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ab:ae:8b:b3:67:74:bd:aa:dd:d6:fe:b3:b3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=c7eae06006b7d26521de736c71f8b15130b96d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:be:67:5d:dd:ad:5d:18:07:08:0e:f6:1b: 50:aa:f5:8f:b1:75:33:30:be:24:67:ea:1a:c3:35: b6:67:9c:37:ec:ac:57:6a:a4:ac:91:0d:48:fd:58: 85:ef:6b:b5:2e:d6:f3:81:64:c8:ee:3c:60:26:11: ee:a6:1e:de:f9:4c:09:b6:a2:4b:7b:97:fb:cb:04: be:8d:3a:fa:9f:0a:c1:70:ff:ce:a2:e9:47:e2:1a: ee:f1:c5:c5:44:b6:9f:83:50:cd:e6:d8:82:11:aa: e0:8d:57:c1:15:02:1d:e6:76:b7:7d:a1:9e:fe:50: be:ef:8f:22:ea:58:67:4a:6a:16:dc:de:84:d1:ac: 2a:72:5d:90:1e:b5:be:3e:28:ab:bc:85:4c:3f:d5: f6:11:ad:cb:44:c1:55:cd:74:ec:79:ef:8c:51:35: a4:45:f3:cd:f7:fe:1f:2e:67:c2:dc:86:b3:14:a7: 02:8a:c8:51:13:e6:c0:e5:96:29:64:a0:82:84:dd: 01:bf:ad:10:ad:19:0f:0e:46:67:50:e5:04:be:4e: 63:1b:35:ad:8b:ac:84:86:c5:c9:db:56:45:1e:d1: 08:90:bb:82:bd:88:e2:4b:dd:40:76:ed:e6:93:6a: 09:66:1e:4d:74:29:3c:2a:ec:24:c8:de:e2:14:3a: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:E0:60:06:B7:D2:65:21:DE:73:6C:71:F8:B1:51:30:B9:6D:99 X509v3 Authority Key Identifier: keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:fd:06:f8:38:b1:bf:98:68:bb:56:cd:b3:57:27:be:a9:73: 46:2c:7b:a3:a4:4b:cd:89:c9:b9:84:d4:c5:8a:69:32:a2:2a: 51:c2:8c:f3:bb:2d:cd:f5:0f:b4:b4:c3:c6:b2:68:63:cf:07: 2d:27:44:52:ac:db:1c:d1:1d:20:6b:0a:d7:aa:b7:85:26:e0: 9e:8a:c2:d4:cf:39:b6:f0:a0:92:da:50:85:1f:4c:d2:07:de: 3e:c4:d9:5f:c2:f4:e3:8c:d3:f4:28:85:ac:02:40:5e:8c:0b: 56:50:c1:ed:d6:6e:e6:ee:a0:ce:f6:a2:dc:ed:39:cd:45:0c: 09:db:0b:26:c5:8c:9e:4a:c4:e4:0c:34:d4:2b:1d:a7:23:eb: a2:40:f2:40:06:00:7c:42:48:28:f3:e3:e2:c4:77:6f:d4:29: f1:7e:1b:80:11:d8:91:98:fd:e1:30:21:8f:2a:9c:ef:08:a1: ae:a7:b6:f3:d0:83:41:0a:f9:68:01:f8:5a:59:38:be:59:28: ff:bf:54:89:8e:19:ea:aa:7c:c2:e9:cf:01:ef:af:ab:65:24: c0:da:08:b3:b2:35:72:19:ea:f7:df:96:df:9a:28:5d:bb:8e: d5:1a:e3:2e:40:20:06:c9:7f:a6:df:86:e1:98:56:94:45:de: 77:dc:6f:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmquui7NndL2q3db+s7OkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzM2Y2JkMDAxMWRhMzFkMjliMDYxZTVmZjRkNjM4NDJk YTJhNGEwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD EyhjN2VhZTA2MDA2YjdkMjY1MjFkZTczNmM3MWY4YjE1MTMwYjk2ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTK+Z13drV0YBwgO9htQqvWPsXUz ML4kZ+oawzW2Z5w37KxXaqSskQ1I/ViF72u1LtbzgWTI7jxgJhHuph7e+UwJtqJL e5f7ywS+jTr6nwrBcP/OoulH4hru8cXFRLafg1DN5tiCEargjVfBFQId5na3faGe /lC+748i6lhnSmoW3N6E0awqcl2QHrW+PiirvIVMP9X2Ea3LRMFVzXTsee+MUTWk RfPN9/4fLmfC3IazFKcCishRE+bA5ZYpZKCChN0Bv60QrRkPDkZnUOUEvk5jGzWt i6yEhsXJ21ZFHtEIkLuCvYjiS91Adu3mk2oJZh5NdCk8KuwkyN7iFDopGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfq4GAGt9JlId5zbHH4sVEwuW2ZMB8GA1UdIwQY MBaAFGpzbL0AEdox0psGHl/01jhC2ipKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYt NGVhMTI1MTNjYzZmLzEvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYtNGVhMTI1MTNjYzZm LzEvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf0G+Dix v5hou1bNs1cnvqlzRix7o6RLzYnJuYTUxYppMqIqUcKM87stzfUPtLTDxrJoY88H LSdEUqzbHNEdIGsK16q3hSbgnorC1M85tvCgktpQhR9M0gfePsTZX8L044zT9CiF rAJAXowLVlDB7dZu5u6gzvai3O05zUUMCdsLJsWMnkrE5Aw01CsdpyProkDyQAYA fEJIKPPj4sR3b9Qp8X4bgBHYkZj94TAhjyqc7wihrqe289CDQQr5aAH4Wlk4vlko /79UiY4Z6qp8wunPAe+vq2UkwNoIs7I1chnq99+W35ooXbuO1RrjLkAgBsl/pt+G 4ZhWlEXed9xv9g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:25 2025 by rpki-client