This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json) Hash identifier: hOD3RRqily5hcHqhjJ3+kTHv8FBzuYQvOTnO3osBXwU= Subject key identifier: D4:25:5F:01:53:85:A4:B9:55:45:FF:98:49:73:18:B0:AC:3E:4C:CC Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39 Certificate serial: 019AF23FFBBBB6EBBA3B7F835E5342D0FF84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft Manifest number: 08E1 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: Nlo7f1wvu2cgTn3WYl5YrtvPVcmMJw+huq/05sY/aWE=) 2: Jj1HHZ3M2IWqEVr2BMPp4ypDwcI.roa (hash: cgzJBvOGYHM0ug0D/FFBZa1jcNvWqnCErJy8L2Lko1U=) 3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fb:bb:b6:eb:ba:3b:7f:83:5e:53:42:d0:ff:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7401e0249418b357547268824f6244925d8db39 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=d4255f015385a4b95545ff98497318b0ac3e4ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:57:97:d2:e5:6f:a8:86:38:c5:06:81:f7:c0: b9:fb:15:24:dc:10:a1:e3:34:ed:b2:48:ea:87:6f: 27:d9:37:2c:42:2a:e2:60:81:4c:29:e4:2a:22:fa: a3:c8:40:42:62:ba:16:a2:88:27:47:84:e4:3c:e6: 80:ea:3c:af:7a:c8:12:b0:28:44:b1:1e:21:75:02: 48:38:33:00:b0:4f:ee:ac:3c:f8:7a:81:28:29:f4: b3:16:05:a8:77:f7:d7:6b:86:cf:2a:2d:6e:6d:e7: 8c:05:55:2a:f4:37:6e:4a:e7:06:82:20:58:55:4a: 3f:73:18:8a:ba:d0:2c:85:27:0c:0d:c6:77:f4:3d: 5c:99:17:5f:0a:78:40:68:a3:70:1b:d9:38:0f:43: b3:94:fd:a3:81:83:34:a9:c9:eb:0f:9c:a1:27:bf: a0:9c:44:ae:97:81:b5:08:69:96:50:24:88:3c:56: f0:60:07:67:35:aa:0a:17:65:ca:25:23:29:dd:42: a9:76:82:ee:ff:03:2b:cb:c9:9f:05:06:08:0d:1d: 7b:dc:83:1b:92:27:e4:aa:c4:41:08:56:c4:f0:5d: fb:ea:8f:39:d9:8c:7c:ef:3f:25:30:94:be:e0:96: 31:cb:1f:f3:38:52:60:fa:fe:3c:be:d2:9e:a2:8e: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:25:5F:01:53:85:A4:B9:55:45:FF:98:49:73:18:B0:AC:3E:4C:CC X509v3 Authority Key Identifier: keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f3:82:33:3a:81:cb:63:b5:9e:19:8a:da:83:62:41:92:85: f6:da:c8:b2:5d:8e:39:bb:38:19:9f:95:de:5e:cf:b5:03:43: 64:2b:1f:fb:98:a9:cb:eb:7b:00:9a:c1:12:e7:c8:11:60:4b: d8:fe:d8:f2:22:1b:7d:5a:f7:44:01:1f:b0:e5:37:ee:ff:5f: 65:6e:e3:95:a9:7c:72:91:db:20:5e:40:27:7e:8a:fc:2b:1a: f8:35:8a:46:c3:61:c4:c6:6b:ce:61:df:76:a9:5d:fd:d3:d1: f4:6a:bc:f7:3d:6b:24:83:9f:e7:d4:5e:46:4d:3b:8a:ae:89: 6e:1b:b9:9c:f2:22:59:57:b1:a8:7a:2a:34:c0:df:fa:1e:d3: 28:72:9e:22:23:16:a0:47:42:9e:bb:65:00:44:41:fc:df:e8: 90:29:24:26:8f:b8:d0:54:d4:27:73:73:4d:49:2f:b9:19:78: ae:27:e7:88:63:30:84:94:d0:04:7e:fa:b7:80:1d:d9:70:71: 65:88:c6:e7:3a:19:88:d1:67:74:e4:a7:bd:12:eb:a2:15:b1: 1c:41:61:73:66:b3:1b:99:4b:24:01:6f:af:be:d4:4e:f7:83: 24:be:f1:3a:2b:ce:60:22:34:57:ee:43:67:ae:9a:de:fe:1f: 2c:8c:98:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/u7tuu6O3+DXlNC0P+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDAxZTAyNDk0MThiMzU3NTQ3MjY4ODI0ZjYyNDQ5MjVk OGRiMzkwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EyhkNDI1NWYwMTUzODVhNGI5NTU0NWZmOTg0OTczMThiMGFjM2U0Y2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FeX0uVvqIY4xQaB98C5+xUk3BCh 4zTtskjqh28n2TcsQiriYIFMKeQqIvqjyEBCYroWoognR4TkPOaA6jyvesgSsChE sR4hdQJIODMAsE/urDz4eoEoKfSzFgWod/fXa4bPKi1ubeeMBVUq9DduSucGgiBY VUo/cxiKutAshScMDcZ39D1cmRdfCnhAaKNwG9k4D0OzlP2jgYM0qcnrD5yhJ7+g nESul4G1CGmWUCSIPFbwYAdnNaoKF2XKJSMp3UKpdoLu/wMry8mfBQYIDR173IMb kifkqsRBCFbE8F376o852Yx87z8lMJS+4JYxyx/zOFJg+v48vtKeoo4WjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQlXwFThaS5VUX/mElzGLCsPkzMMB8GA1UdIwQY MBaAFNdAHgJJQYs1dUcmiCT2JEkl2Ns5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjIt NTA3ODkxMzk1NDE3LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjItNTA3ODkxMzk1NDE3 LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvOCMzqB y2O1nhmK2oNiQZKF9trIsl2OObs4GZ+V3l7PtQNDZCsf+5ipy+t7AJrBEufIEWBL 2P7Y8iIbfVr3RAEfsOU37v9fZW7jlal8cpHbIF5AJ36K/Csa+DWKRsNhxMZrzmHf dqld/dPR9Gq89z1rJIOf59ReRk07iq6Jbhu5nPIiWVexqHoqNMDf+h7TKHKeIiMW oEdCnrtlAERB/N/okCkkJo+40FTUJ3NzTUkvuRl4rifniGMwhJTQBH76t4Ad2XBx ZYjG5zoZiNFndOSnvRLrohWxHEFhc2azG5lLJAFvr77UTveDJL7xOivOYCI0V+5D Z66a3v4fLIyYcA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:12 2025 by rpki-client