This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json) Hash identifier: QNV9Z1zKuKVlUR+gKfAlfyfDnss42I6uT/J67VhVObg= Subject key identifier: 13:81:3D:11:F3:E6:B1:CA:B4:21:08:E7:6E:CD:0C:5C:02:3F:98:95 Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3 Certificate serial: 019AF208DBF257ED60A71B504A16E3EDF956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: 8S2aPV09n/G8x+OHbEOfowHVBG9WE+HY0dHi5IsJurw=) 2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:db:f2:57:ed:60:a7:1b:50:4a:16:e3:ed:f9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=13813d11f3e6b1cab42108e76ecd0c5c023f9895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:0b:9a:9d:e9:17:23:2a:b9:8a:cd:3e:f1: ba:ce:68:00:cd:2d:11:6b:3f:ba:13:3a:46:3c:81: cc:cd:34:00:dd:73:de:4f:00:3d:f1:e3:0b:1f:f7: af:06:d6:a3:33:fd:11:3f:ac:83:8d:59:b9:77:f5: 5a:a5:a2:a8:ae:13:24:0d:f8:6e:7c:c8:2c:cb:f3: 0a:bd:f3:ab:bd:49:fc:d6:a8:22:30:2a:6d:9b:7e: c2:2b:9e:db:83:fb:ea:46:37:9d:b1:c6:17:f2:b5: 1c:f1:54:64:f7:b0:49:55:07:ba:1c:4f:fa:9b:8b: ed:c8:51:53:cc:e1:74:cb:ed:4b:e3:cf:b1:0f:9c: 3f:e8:58:df:b6:a5:a9:bf:54:f5:45:73:ed:2e:c3: 06:53:55:18:5c:71:5d:a2:a7:68:2b:13:08:6a:10: 78:c3:a6:f3:56:67:69:d2:3f:35:d1:49:dc:19:6f: 15:05:5a:a3:a2:fd:c3:e7:a7:96:97:6f:44:44:ce: 94:49:e6:94:c5:85:36:07:0d:ba:24:5e:32:08:0a: b5:08:15:84:49:c0:0e:aa:34:68:89:e4:96:8d:d1: 5f:0b:ed:03:78:6c:c8:9d:5d:2d:11:ab:8e:b1:0b: 92:66:16:0e:89:f1:88:91:db:f7:71:ae:ab:f2:0f: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:3D:11:F3:E6:B1:CA:B4:21:08:E7:6E:CD:0C:5C:02:3F:98:95 X509v3 Authority Key Identifier: keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a0:2e:33:07:0c:63:7c:e0:de:ae:97:a0:c1:ae:a8:27:8a: 63:df:bd:10:b9:c0:a7:0d:09:1c:3b:a5:c0:7c:e8:6c:cc:c9: 11:01:de:01:fb:7d:fd:8b:e4:ed:14:b1:52:90:11:93:55:bf: 59:8e:d3:b2:80:40:23:06:46:5e:e6:4e:aa:3e:f0:1f:03:9a: 7f:6f:61:ee:20:92:84:4f:40:df:49:f0:7c:b3:1c:ca:f6:af: bf:9d:9d:6a:1f:08:98:5f:81:5f:96:bf:16:de:f9:22:77:bf: e8:3d:be:03:87:3e:eb:09:a1:5f:c6:34:6d:62:60:55:55:b8: 23:45:38:a3:0f:aa:81:78:f2:c3:b3:96:6d:1e:4c:83:f5:1a: 28:98:f0:7d:17:7f:12:b3:04:74:6d:ae:8e:25:f3:0c:63:eb: 7c:2a:27:a2:b5:0b:e8:c0:c7:e0:6a:de:0d:31:59:20:a2:3d: 92:de:45:93:d2:c9:f4:e9:9e:c0:df:79:32:a6:df:92:b3:13: ba:a4:53:5f:92:c0:d9:ec:6f:37:76:2c:64:4b:fd:0c:3b:82: 28:f6:8b:e9:08:0e:04:88:9e:6f:b8:07:49:13:13:3b:f0:b5: 98:b3:7a:f9:7e:df:e2:ca:a8:54:b3:3f:f1:da:52:6e:01:84: 4b:89:8a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNvyV+1gpxtQShbj7flWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm Njg3YTMwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EygxMzgxM2QxMWYzZTZiMWNhYjQyMTA4ZTc2ZWNkMGM1YzAyM2Y5ODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5gLmp3pFyMquYrNPvG6zmgAzS0R az+6EzpGPIHMzTQA3XPeTwA98eMLH/evBtajM/0RP6yDjVm5d/VapaKorhMkDfhu fMgsy/MKvfOrvUn81qgiMCptm37CK57bg/vqRjedscYX8rUc8VRk97BJVQe6HE/6 m4vtyFFTzOF0y+1L48+xD5w/6FjftqWpv1T1RXPtLsMGU1UYXHFdoqdoKxMIahB4 w6bzVmdp0j810UncGW8VBVqjov3D56eWl29ERM6USeaUxYU2Bw26JF4yCAq1CBWE ScAOqjRoieSWjdFfC+0DeGzInV0tEauOsQuSZhYOifGIkdv3ca6r8g/1LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOBPRHz5rHKtCEI527NDFwCP5iVMB8GA1UdIwQY MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3 LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKAuMwcM Y3zg3q6XoMGuqCeKY9+9ELnApw0JHDulwHzobMzJEQHeAft9/Yvk7RSxUpARk1W/ WY7TsoBAIwZGXuZOqj7wHwOaf29h7iCShE9A30nwfLMcyvavv52dah8ImF+BX5a/ Ft75Ine/6D2+A4c+6wmhX8Y0bWJgVVW4I0U4ow+qgXjyw7OWbR5Mg/UaKJjwfRd/ ErMEdG2ujiXzDGPrfConorUL6MDH4GreDTFZIKI9kt5Fk9LJ9OmewN95MqbfkrMT uqRTX5LA2exvN3YsZEv9DDuCKPaL6QgOBIieb7gHSRMTO/C1mLN6+X7f4sqoVLM/ 8dpSbgGES4mKKw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:55 2025 by rpki-client