This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json) Hash identifier: EmDTiRVAHgSxIUiLWZsIC0HA6FJQVx8d6EDdoNuEmSY= Subject key identifier: 2B:47:08:64:E3:F3:E7:16:44:0C:72:C4:AA:F9:58:C4:FA:DD:EE:0B Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00 Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200 Certificate serial: 019AF31C1945A87C991A821ED5E5C07F4A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:01:35 +0000 Manifest this update: Sat 06 Dec 2025 10:01:35 +0000 Manifest next update: Sun 07 Dec 2025 10:01:35 +0000 Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: bgetzokxX8pKBAQOzkgaIRxZ+nvYsn+kkIB56zM4Jio=) 2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:19:45:a8:7c:99:1a:82:1e:d5:e5:c0:7f:4a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200 Validity Not Before: Dec 6 10:01:35 2025 GMT Not After : Dec 7 10:01:35 2025 GMT Subject: CN=2b470864e3f3e716440c72c4aaf958c4faddee0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:f6:f0:8c:6f:78:ee:ed:69:f8:a3:9a:31: c3:a8:a2:b7:24:44:eb:44:bc:d9:bb:9d:86:c0:20: f8:e5:0d:88:c2:44:c0:65:13:ef:82:58:38:51:b0: bd:81:8d:0b:86:bd:7f:57:d6:6b:9b:3d:d4:e4:c8: 7b:24:a5:b3:c0:9c:e5:a8:38:f4:0a:42:b7:df:c5: e2:e9:49:bf:b8:38:e1:19:50:d6:1b:c7:3b:64:e2: 5f:21:bb:78:6d:ac:05:b7:84:84:63:aa:47:7b:a1: a8:7c:7c:8e:f5:b5:93:f5:7d:53:44:40:50:16:e6: 8f:14:f6:68:dc:03:5f:cc:60:4c:76:78:58:12:bc: 99:79:3d:d9:7b:f7:e6:59:87:48:70:c8:c1:f0:45: 2c:62:df:7a:6d:cf:dd:75:93:6d:99:60:8a:dc:4c: 68:4d:f6:1c:21:55:8f:3a:4a:0a:0f:97:9f:76:97: 57:1b:5d:df:b4:24:d7:5a:6e:59:e2:df:a0:12:d8: cc:43:b7:05:13:86:c3:e1:65:76:d2:00:c3:cf:ec: 25:e9:2f:3e:3f:1f:eb:8e:33:16:2f:e0:da:c3:e5: 47:ab:71:e7:8f:f4:65:44:0d:a9:6a:23:3c:ea:e1: 62:97:02:0b:fa:57:32:5a:d3:4f:ca:a3:75:bd:d8: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:08:64:E3:F3:E7:16:44:0C:72:C4:AA:F9:58:C4:FA:DD:EE:0B X509v3 Authority Key Identifier: keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:15:3b:0a:ed:4b:be:d0:e7:f5:75:0d:20:c1:8d:fb:1c:e6: 65:e5:fa:dc:49:49:b4:d3:8b:52:93:e2:16:15:29:59:63:8a: 24:7f:1c:06:50:a9:44:01:cb:6e:83:63:23:d9:d3:f9:67:03: 2f:26:ab:58:08:92:15:e5:f8:8d:e4:2d:54:15:7a:0a:6c:5d: 01:1c:fe:e2:bf:84:61:14:a6:fa:9c:a2:19:ff:27:e2:5b:9a: f0:2a:33:3b:0d:2a:b5:39:bf:d2:5a:23:6b:83:ab:c1:2e:27: 8c:62:89:60:f7:79:7e:76:f6:9a:ce:fa:83:e0:39:13:30:06: ef:34:98:86:ab:de:85:7b:80:f8:21:dd:a2:da:17:3e:6c:c1: b5:17:97:00:30:4a:96:ba:34:7e:a5:aa:d0:9a:99:da:9f:8f: f5:6c:96:e7:c5:3a:3e:04:ee:9f:b2:a5:3b:60:eb:8e:8a:0c: 99:27:eb:a5:ef:fd:c7:8b:4a:f7:8d:d0:d0:03:78:f8:6b:1c: e9:cd:9a:72:2f:14:ff:ff:b5:b4:6b:90:1b:04:04:92:9c:ff: 1d:5f:b1:ac:63:ca:bf:b9:25:3b:fb:cf:70:29:17:43:b9:01: 03:7e:f9:30:8a:31:f2:1a:ff:42:58:64:6c:38:bf:c2:24:f4: f7:41:cd:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBlFqHyZGoIe1eXAf0psMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTcxMGExNjkzNzEwYWM4MzVmMGI2NzQ1ZjkwZDJkNjgw YTEyMDAwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD EygyYjQ3MDg2NGUzZjNlNzE2NDQwYzcyYzRhYWY5NThjNGZhZGRlZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08v28IxveO7tafijmjHDqKK3JETr RLzZu52GwCD45Q2IwkTAZRPvglg4UbC9gY0Lhr1/V9Zrmz3U5Mh7JKWzwJzlqDj0 CkK338Xi6Um/uDjhGVDWG8c7ZOJfIbt4bawFt4SEY6pHe6GofHyO9bWT9X1TREBQ FuaPFPZo3ANfzGBMdnhYEryZeT3Ze/fmWYdIcMjB8EUsYt96bc/ddZNtmWCK3Exo TfYcIVWPOkoKD5efdpdXG13ftCTXWm5Z4t+gEtjMQ7cFE4bD4WV20gDDz+wl6S8+ Px/rjjMWL+Daw+VHq3Hnj/RlRA2paiM86uFilwIL+lcyWtNPyqN1vdi5iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtHCGTj8+cWRAxyxKr5WMT63e4LMB8GA1UdIwQY MBaAFGmXEKFpNxCsg18LZ0X5DS1oChIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYt MjliOThlY2RmZjEyLzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYtMjliOThlY2RmZjEy LzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphU7Cu1L vtDn9XUNIMGN+xzmZeX63ElJtNOLUpPiFhUpWWOKJH8cBlCpRAHLboNjI9nT+WcD LyarWAiSFeX4jeQtVBV6CmxdARz+4r+EYRSm+pyiGf8n4lua8CozOw0qtTm/0loj a4OrwS4njGKJYPd5fnb2ms76g+A5EzAG7zSYhqvehXuA+CHdotoXPmzBtReXADBK lro0fqWq0JqZ2p+P9WyW58U6PgTun7KlO2DrjooMmSfrpe/9x4tK943Q0AN4+Gsc 6c2aci8U//+1tGuQGwQEkpz/HV+xrGPKv7klO/vPcCkXQ7kBA375MIox8hr/Qlhk bDi/wiT090HNkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:22 2025 by rpki-client