This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json) Hash identifier: OwUDIsOnbrUsOTILVEF7wsCvSyHh3ZWkehleCdoFqw0= Subject key identifier: 30:B4:F4:A5:78:A2:8A:32:12:7F:E1:84:C7:82:3E:94:4F:DF:35:8B Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3 Certificate serial: 019B2FD4F1307FE51D8C83F00CCFC4564B10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft Manifest number: 1714 Signing time: Thu 18 Dec 2025 05:00:43 +0000 Manifest this update: Thu 18 Dec 2025 05:00:43 +0000 Manifest next update: Fri 19 Dec 2025 05:00:43 +0000 Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: 52SjVTqPromIOCb0sNqNT1oBxndO6TR+5LhVsl+vrO8=) 2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:f1:30:7f:e5:1d:8c:83:f0:0c:cf:c4:56:4b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3 Validity Not Before: Dec 18 05:00:43 2025 GMT Not After : Dec 19 05:00:43 2025 GMT Subject: CN=30b4f4a578a28a32127fe184c7823e944fdf358b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:84:da:1a:23:dd:d0:68:57:1b:6e:eb:be: 0b:bc:25:11:08:bb:7f:13:0c:3a:95:b7:91:d4:85: ae:d6:ef:00:e2:42:a1:94:1f:d8:fa:83:52:0c:dc: eb:ad:fc:15:38:f6:f9:f6:16:9f:42:09:04:92:6e: d8:24:dc:99:db:0d:f7:78:95:e8:00:7c:eb:a3:4c: e5:80:50:6d:3c:4a:3b:4d:25:d0:ae:6e:d3:2d:fb: a8:1d:c5:95:15:29:9e:1a:1f:5a:8d:47:d8:58:56: 78:8e:fa:e9:23:5f:94:fe:77:54:2c:ef:c2:05:1a: d1:f1:44:13:83:74:70:4b:97:00:e8:72:02:01:12: 33:cc:f6:50:bf:e9:44:5b:0d:85:e6:c0:fb:dc:62: fd:26:49:e0:80:7e:22:91:66:a0:bd:dc:c4:7d:40: c5:bb:d1:ca:e9:cb:2c:cb:93:4d:80:68:b5:12:20: 6c:2c:69:f0:88:56:bb:59:d0:da:0c:ad:d4:24:ad: 49:f8:d6:f4:10:cb:14:51:60:c3:93:ed:e6:62:b2: 49:45:22:ee:78:2d:04:5f:86:10:c4:a3:6c:ea:f8: 74:e0:7b:06:f9:f2:94:b3:6a:89:0e:ca:fb:3c:d1: 56:48:fc:54:01:a2:4e:ba:e5:45:f1:a9:2a:34:8b: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B4:F4:A5:78:A2:8A:32:12:7F:E1:84:C7:82:3E:94:4F:DF:35:8B X509v3 Authority Key Identifier: keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:23:f5:a6:63:48:25:52:4b:d4:7b:de:96:67:7e:34:b5:46: 6a:c6:4a:c1:b5:d9:1e:7c:0b:64:a3:d7:19:2f:f2:d2:eb:b6: 30:8a:f8:a2:36:08:cb:3d:7c:9e:33:e4:ff:8a:76:48:18:1c: ce:6f:43:a3:b9:11:bb:06:54:46:65:56:6f:93:d7:96:51:25: e2:fd:3e:1c:41:00:c6:44:2a:61:d7:ef:d7:aa:47:c8:64:34: 08:8d:15:e5:2b:4a:9b:07:00:4a:c1:27:49:eb:eb:ea:20:80: 6c:fa:57:8c:6d:e1:19:79:bf:74:e0:71:b6:91:0a:28:f5:aa: fe:02:01:62:a0:a6:40:fc:c8:8d:cc:48:23:4d:4f:4a:d4:7d: f4:5b:0e:48:32:43:fe:b4:e7:ad:16:e0:17:8e:7b:99:b9:ba: 91:8d:fd:b1:85:f0:c8:3a:68:8f:d1:0a:a4:07:c6:cb:27:47: 5d:12:6d:cf:12:52:85:4d:5e:28:c5:d4:b5:15:7b:b3:ce:40: 54:5e:59:96:25:ba:79:55:17:b4:6e:21:78:94:43:4a:5d:5c: c0:e6:6c:f0:c9:01:43:9b:89:f7:85:2f:c0:0c:ff:64:51:f2: 41:d7:a8:73:bc:c0:a1:c8:64:34:21:66:63:ae:1b:36:ea:01: 53:1a:1a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1PEwf+UdjIPwDM/EVksQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm Njg3YTMwHhcNMjUxMjE4MDUwMDQzWhcNMjUxMjE5MDUwMDQzWjAzMTEwLwYDVQQD EygzMGI0ZjRhNTc4YTI4YTMyMTI3ZmUxODRjNzgyM2U5NDRmZGYzNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGqE2hoj3dBoVxtu674LvCURCLt/ Eww6lbeR1IWu1u8A4kKhlB/Y+oNSDNzrrfwVOPb59hafQgkEkm7YJNyZ2w33eJXo AHzro0zlgFBtPEo7TSXQrm7TLfuoHcWVFSmeGh9ajUfYWFZ4jvrpI1+U/ndULO/C BRrR8UQTg3RwS5cA6HICARIzzPZQv+lEWw2F5sD73GL9JknggH4ikWagvdzEfUDF u9HK6cssy5NNgGi1EiBsLGnwiFa7WdDaDK3UJK1J+Nb0EMsUUWDDk+3mYrJJRSLu eC0EX4YQxKNs6vh04HsG+fKUs2qJDsr7PNFWSPxUAaJOuuVF8akqNIvtLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDC09KV4oooyEn/hhMeCPpRP3zWLMB8GA1UdIwQY MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3 LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCP1pmNI JVJL1Hvelmd+NLVGasZKwbXZHnwLZKPXGS/y0uu2MIr4ojYIyz18njPk/4p2SBgc zm9Do7kRuwZURmVWb5PXllEl4v0+HEEAxkQqYdfv16pHyGQ0CI0V5StKmwcASsEn Sevr6iCAbPpXjG3hGXm/dOBxtpEKKPWq/gIBYqCmQPzIjcxII01PStR99FsOSDJD /rTnrRbgF457mbm6kY39sYXwyDpoj9EKpAfGyydHXRJtzxJShU1eKMXUtRV7s85A VF5ZliW6eVUXtG4heJRDSl1cwOZs8MkBQ5uJ94UvwAz/ZFHyQdeoc7zAochkNCFm Y64bNuoBUxoa2g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:20 2025 by rpki-client