This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json) Hash identifier: S6Fn2K6vgj9pfuXmrFOOzALYqPSo4XlJ8RcHdDWSUkc= Subject key identifier: DA:4E:F0:C5:01:E1:EC:7C:7F:93:A6:EC:25:49:57:A9:12:5F:53:8C Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Certificate serial: 019AF4655D67A81D6E7A534C3FB7874960D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft Manifest number: 0489 Signing time: Sat 06 Dec 2025 16:01:14 +0000 Manifest this update: Sat 06 Dec 2025 16:01:14 +0000 Manifest next update: Sun 07 Dec 2025 16:01:14 +0000 Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: KxupCLikrLmno2750lGiCvkfRi2+LIQHsRthhQ4KBSw=) 2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:5d:67:a8:1d:6e:7a:53:4c:3f:b7:87:49:60:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Validity Not Before: Dec 6 16:01:14 2025 GMT Not After : Dec 7 16:01:14 2025 GMT Subject: CN=da4ef0c501e1ec7c7f93a6ec254957a9125f538c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:49:a8:1b:42:fe:4a:ee:f5:fb:b1:e6:46: 71:53:7c:c7:28:52:54:dc:04:46:71:2d:3b:0a:33: 9b:ae:cc:e0:b1:64:a7:d7:a1:0b:bd:fc:8b:41:bf: 76:34:19:ce:6f:d8:86:ed:b7:44:87:37:d4:e1:d3: f7:c2:8b:eb:5e:f7:ea:4f:2b:b0:76:4f:a4:ac:17: 75:bc:9e:d1:5c:13:be:b5:dd:b9:bf:b9:0a:d1:da: 58:7f:55:bd:cb:42:43:55:b8:e4:a4:74:f4:ab:01: 54:99:c8:e9:76:60:d8:39:b2:ca:21:84:54:14:6c: d7:bd:6c:15:f2:f0:2d:98:ed:dd:22:67:df:5e:45: 31:86:01:ee:5a:d8:46:53:b2:f9:f3:65:19:89:02: da:77:61:30:e3:c0:ec:59:b7:fd:5a:03:a6:7c:07: f0:ff:16:3d:89:52:5d:99:1c:ba:ff:a9:62:0d:fc: 74:4f:fe:8e:f0:9e:ad:5c:ea:ec:0b:cc:7c:a9:8a: 52:d0:01:5a:eb:da:d4:e3:a6:50:f0:f5:42:d2:94: f0:72:cf:75:2e:ab:a8:f7:88:e8:a7:99:c2:20:e1: 66:f0:2d:01:87:8e:a7:99:5a:35:60:57:57:0e:59: 12:51:ce:e4:68:86:8c:d6:69:f4:b1:f1:c5:61:49: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4E:F0:C5:01:E1:EC:7C:7F:93:A6:EC:25:49:57:A9:12:5F:53:8C X509v3 Authority Key Identifier: keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:98:8f:e6:23:8b:a0:eb:4d:51:80:f9:b3:c1:bc:21:80:54: d3:03:2b:fd:4e:50:18:16:ec:2d:6c:63:f5:d4:cd:09:e1:14: 8a:b5:e0:61:16:49:2c:2e:31:60:ad:57:4c:d7:a3:66:3b:6b: 9e:11:26:9c:ae:2d:8c:b0:18:e5:69:84:34:68:fc:b3:dc:4d: b2:0d:f2:f4:15:44:d1:b7:31:f0:ca:e7:65:ad:3d:c3:81:c1: 14:9b:ec:2f:78:ab:bf:ac:3b:4f:0b:e5:49:b1:ac:4d:b4:c5: a9:9c:e0:5c:8e:85:b3:38:32:cf:00:c6:dd:a9:c1:9c:19:26: c3:0b:48:f6:19:58:5a:d4:be:3b:8e:98:da:d2:99:d7:db:6b: 07:5e:e1:14:70:c6:29:e4:2d:3d:d7:66:7c:ce:23:25:75:76: 13:20:55:d4:b8:d1:32:82:8c:bf:51:89:6e:2b:5b:1e:c6:fa: ef:13:a7:8b:ee:bb:54:bf:6d:3a:53:a0:f7:5a:f7:64:a4:1a: 19:a7:01:4c:74:94:f3:f7:72:a0:93:58:c1:3e:35:91:be:8d: f5:b8:4a:c2:61:da:94:e8:eb:25:e1:63:a0:76:f0:10:01:60: d5:7c:27:6f:f1:75:b1:96:49:af:92:89:be:c1:b5:68:d4:a2: 7b:4d:3e:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZV1nqB1uelNMP7eHSWDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTJkMDRhYjBjMzdhNDczYjFmYzgxYTM2OWZjOWFkNWQ5 ZmZkNDQwHhcNMjUxMjA2MTYwMTE0WhcNMjUxMjA3MTYwMTE0WjAzMTEwLwYDVQQD EyhkYTRlZjBjNTAxZTFlYzdjN2Y5M2E2ZWMyNTQ5NTdhOTEyNWY1MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlxJqBtC/kru9fux5kZxU3zHKFJU 3ARGcS07CjObrszgsWSn16ELvfyLQb92NBnOb9iG7bdEhzfU4dP3wovrXvfqTyuw dk+krBd1vJ7RXBO+td25v7kK0dpYf1W9y0JDVbjkpHT0qwFUmcjpdmDYObLKIYRU FGzXvWwV8vAtmO3dImffXkUxhgHuWthGU7L582UZiQLad2Ew48DsWbf9WgOmfAfw /xY9iVJdmRy6/6liDfx0T/6O8J6tXOrsC8x8qYpS0AFa69rU46ZQ8PVC0pTwcs91 Lquo94jop5nCIOFm8C0Bh46nmVo1YFdXDlkSUc7kaIaM1mn0sfHFYUnTGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpO8MUB4ex8f5Om7CVJV6kSX1OMMB8GA1UdIwQY MBaAFGkS0Eqww3pHOx/IGjafya1dn/1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQt ZjIxYjRmMTFmYWYwLzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQtZjIxYjRmMTFmYWYw LzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5iP5iOL oOtNUYD5s8G8IYBU0wMr/U5QGBbsLWxj9dTNCeEUirXgYRZJLC4xYK1XTNejZjtr nhEmnK4tjLAY5WmENGj8s9xNsg3y9BVE0bcx8MrnZa09w4HBFJvsL3irv6w7Twvl SbGsTbTFqZzgXI6FszgyzwDG3anBnBkmwwtI9hlYWtS+O46Y2tKZ19trB17hFHDG KeQtPddmfM4jJXV2EyBV1LjRMoKMv1GJbitbHsb67xOni+67VL9tOlOg91r3ZKQa GacBTHSU8/dyoJNYwT41kb6N9bhKwmHalOjrJeFjoHbwEAFg1Xwnb/F1sZZJr5KJ vsG1aNSie00+Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:38:12 2025 by rpki-client