This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft File: AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json) Hash identifier: XxtmoJGMShTvcnWZMQmI8iZjjIuTuB1SQexusI/y9YE= Subject key identifier: A7:D6:0A:0A:D2:AC:C5:6E:23:DD:92:ED:E1:52:7C:2D:A8:25:34:E6 Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86 Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86 Certificate serial: 019AF19B0CED61A0C386E7A8BC35F1704958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft Manifest number: 0C8F Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (hash: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=) 2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: zlEvd2hpz+81BewKHWfsbpHiob4Jwvng5w6gJT23q8g=) 3: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (hash: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=) 4: KlGeCuL83ckpFDxEzckjMn7_6RE.roa (hash: sQSDNJGP0PRAc42NznmCEsFt8+XssPeUkQMlKcFGyeg=) 5: cI0Z3sLe1xjrCwyg19NbzVWgf58.roa (hash: RgqBJJ2OAbbh0xonFH0+36oQyNXiwKW4rTJMbCMMDzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0c:ed:61:a0:c3:86:e7:a8:bc:35:f1:70:49:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86 Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=a7d60a0ad2acc56e23dd92ede1527c2da82534e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:fd:bd:37:7a:fd:93:3f:f8:67:da:2d:55: 6d:44:98:94:35:5c:4c:55:49:4f:95:95:47:b5:f0: ac:4a:6c:a5:06:e4:1e:1a:48:c5:38:4a:84:74:7b: 0d:58:f9:6c:f8:b0:17:aa:30:ad:8e:c4:9e:27:0f: 30:3b:28:df:1b:84:da:13:1e:66:9f:ea:90:db:bc: 27:e8:ac:f9:cc:01:a8:bc:05:7b:5e:97:81:5c:6f: 7d:8f:79:25:10:28:97:43:c2:04:51:09:6c:5e:f4: a3:75:05:23:22:d1:8a:c4:99:99:06:0b:01:55:37: ab:1b:3c:08:2a:6b:6f:fc:65:73:62:ac:85:30:64: 67:5a:bd:a8:63:5c:83:1d:1f:26:ea:77:c0:5b:42: 5d:51:bd:f3:b6:8f:9a:56:f7:f0:1e:9b:21:b8:4d: bc:8d:2f:f3:c1:36:dc:63:8d:54:cf:52:14:9f:f0: 0d:b2:67:8a:57:bb:a8:1c:ef:39:52:d2:30:89:e6: a4:c2:d7:4b:cb:d7:ae:15:03:ec:32:7f:bf:cb:93: e7:7d:cd:eb:92:2e:3b:92:0b:63:20:a9:21:23:bf: f2:21:a1:0d:70:18:05:64:64:62:1c:b2:1e:ed:f5: 6d:7b:7f:1f:bf:7b:59:1e:bf:73:8e:b2:50:25:13: b5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:0A:0A:D2:AC:C5:6E:23:DD:92:ED:E1:52:7C:2D:A8:25:34:E6 X509v3 Authority Key Identifier: keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:9d:23:3b:c5:ce:de:7d:b9:cc:8c:04:30:1a:53:3b:b3:3c: 06:47:ff:c3:6c:e0:ec:f6:f4:c9:17:12:4c:84:0a:2c:74:32: ef:71:fe:9c:12:01:56:c0:fd:fa:db:b2:cd:33:6f:c1:dc:16: 94:d1:7d:1d:5b:ed:dd:d0:5f:ad:06:25:0d:be:9f:91:54:28: 68:bc:4f:83:f6:55:37:16:7a:12:a8:c5:cb:eb:8a:6c:38:e6: 68:6a:c9:6c:7c:a7:96:87:c5:db:b4:5f:3e:3b:ea:69:84:ad: 06:ea:13:1c:44:83:b5:59:08:8a:ce:04:2e:56:65:d2:74:a5: 31:41:75:f1:da:6b:f3:22:ac:24:ef:55:61:43:49:3f:19:95: d8:43:00:cf:51:ca:38:db:0a:0a:6e:a7:6f:86:d3:1f:c4:34: a8:43:85:d5:05:e2:92:fd:85:0b:21:78:7d:a5:ea:35:b5:2c: 64:92:66:ff:ec:4f:ff:47:30:49:3c:e5:c6:2f:92:e7:1d:42: 15:d3:32:f8:eb:f5:dc:d9:c5:a5:2c:e1:41:4a:e5:46:27:74: 29:8b:b8:30:ca:02:73:9e:52:48:6c:54:9d:e8:d5:de:6e:a1: d9:2d:fa:00:e4:0c:25:8c:87:f1:8a:d0:4e:5d:5f:10:c9:d7: 52:5e:4a:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwztYaDDhueovDXxcElYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl NWZlODYwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD EyhhN2Q2MGEwYWQyYWNjNTZlMjNkZDkyZWRlMTUyN2MyZGE4MjUzNGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31T9vTd6/ZM/+GfaLVVtRJiUNVxM VUlPlZVHtfCsSmylBuQeGkjFOEqEdHsNWPls+LAXqjCtjsSeJw8wOyjfG4TaEx5m n+qQ27wn6Kz5zAGovAV7XpeBXG99j3klECiXQ8IEUQlsXvSjdQUjItGKxJmZBgsB VTerGzwIKmtv/GVzYqyFMGRnWr2oY1yDHR8m6nfAW0JdUb3zto+aVvfwHpshuE28 jS/zwTbcY41Uz1IUn/ANsmeKV7uoHO85UtIwieakwtdLy9euFQPsMn+/y5Pnfc3r ki47kgtjIKkhI7/yIaENcBgFZGRiHLIe7fVte38fv3tZHr9zjrJQJRO1hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfWCgrSrMVuI92S7eFSfC2oJTTmMB8GA1UdIwQY MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt NmQxYzliMTUzY2YwLzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZ0jO8XO 3n25zIwEMBpTO7M8Bkf/w2zg7Pb0yRcSTIQKLHQy73H+nBIBVsD9+tuyzTNvwdwW lNF9HVvt3dBfrQYlDb6fkVQoaLxPg/ZVNxZ6EqjFy+uKbDjmaGrJbHynlofF27Rf PjvqaYStBuoTHESDtVkIis4ELlZl0nSlMUF18dpr8yKsJO9VYUNJPxmV2EMAz1HK ONsKCm6nb4bTH8Q0qEOF1QXikv2FCyF4faXqNbUsZJJm/+xP/0cwSTzlxi+S5x1C FdMy+Ov13NnFpSzhQUrlRid0KYu4MMoCc55SSGxUnejV3m6h2S36AOQMJYyH8YrQ Tl1fEMnXUl5KLw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:20 2025 by rpki-client