This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft File: aEdQ3w66d01LTWROyOM1CPj1OP4.mft (raw, json) Hash identifier: /uB/0rQZNcrLc7McRp8tg1Zf+vPWd1P3OEMjkipaw6A= Subject key identifier: 87:7D:9A:23:B8:8C:44:4A:C4:00:AD:DB:18:57:4B:B3:7B:73:96:F2 Authority key identifier: 68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE Certificate issuer: /CN=684750df0eba774d4b4d644ec8e33508f8f538fe Certificate serial: 019AF3C047F07549002A8E8B60011E5EBED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft Manifest number: 080B Signing time: Sat 06 Dec 2025 13:00:56 +0000 Manifest this update: Sat 06 Dec 2025 13:00:56 +0000 Manifest next update: Sun 07 Dec 2025 13:00:56 +0000 Files and hashes: 1: aEdQ3w66d01LTWROyOM1CPj1OP4.crl (hash: AYVhiB2JWF3obgvPPl32TH83Qk2G/kFggK6EkJPMh/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:47:f0:75:49:00:2a:8e:8b:60:01:1e:5e:be:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684750df0eba774d4b4d644ec8e33508f8f538fe Validity Not Before: Dec 6 13:00:56 2025 GMT Not After : Dec 7 13:00:56 2025 GMT Subject: CN=877d9a23b88c444ac400addb18574bb37b7396f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:72:f4:5c:87:b9:db:12:c8:d2:22:57:de: 3e:08:49:9a:ee:3d:6b:a0:95:af:e0:60:59:87:4e: cc:2e:01:c5:98:c3:ee:0b:08:71:0e:11:f7:67:1e: d1:2b:40:ee:c1:d5:70:58:fd:52:29:ef:02:68:4b: 33:2f:07:72:d5:13:84:96:a2:9e:e6:25:f0:8a:31: ea:3b:22:82:8d:84:6d:25:4b:50:37:15:99:3a:52: 6d:31:3a:24:60:f8:28:0f:b3:6f:37:58:82:57:72: 1b:74:e3:b2:f1:dd:96:4b:13:ad:5c:3d:05:65:8f: 19:f6:f0:71:83:93:e0:c8:92:f3:9e:28:5f:fd:c7: da:ce:51:e9:6d:0b:0f:cf:f2:96:04:c4:41:c2:69: 8e:a4:62:1f:da:a6:6f:34:bc:14:f8:ec:62:e7:96: b1:28:6f:73:9b:cd:74:b8:4e:24:02:54:1d:7a:78: 4f:c1:b9:dc:20:51:82:3c:f5:da:1f:03:e7:ec:92: 1a:59:2b:37:92:bd:2d:b8:77:4d:53:a8:03:0b:52: c6:9a:e5:c3:0e:79:68:c4:2f:e9:7e:69:95:ea:60: b5:c1:ec:5c:84:27:1c:54:d7:52:69:95:ac:50:24: ba:f4:12:96:e8:d1:9b:56:9a:43:2d:fa:7c:ed:aa: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:9A:23:B8:8C:44:4A:C4:00:AD:DB:18:57:4B:B3:7B:73:96:F2 X509v3 Authority Key Identifier: keyid:68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:87:df:87:95:81:c6:91:ab:73:66:c8:8d:54:c2:6d:28:ba: 63:dc:d8:57:6d:26:b3:53:88:13:c2:cd:80:c4:f5:35:34:18: fe:af:1f:e2:d6:81:26:70:d2:b2:74:ae:88:4b:ef:e6:33:95: 63:91:d0:5d:65:62:f4:a8:ae:96:ae:4f:ef:33:b8:f1:22:26: 13:e4:ef:72:c0:71:81:63:9a:8b:5b:de:06:86:2e:a8:63:9d: 8f:53:1c:87:57:c0:c3:1b:d3:51:88:ea:dc:60:a3:ad:cc:8f: 2d:fb:e9:94:e9:e5:c8:be:b5:3f:a3:85:8e:70:f7:4a:30:60: 3a:32:2a:9a:bb:ac:e6:13:d4:4c:7d:a5:e9:7b:58:60:ee:af: 46:bf:12:85:b8:83:6f:d9:8e:8f:8e:57:77:4a:a9:5a:20:9e: d8:e1:49:f5:95:6b:a0:f7:39:49:a3:14:f9:91:b4:ca:80:b0: 7b:d7:3e:e2:c7:a6:3e:ec:ab:46:84:c8:81:03:3f:6b:d7:ab: 63:7c:a5:9c:86:0b:3d:42:74:ba:e4:92:5a:8a:8d:bb:ac:ff: eb:53:06:01:07:e9:9c:e9:0b:4d:47:1c:39:77:e1:e4:bf:c1: 58:f7:02:32:df:7f:0d:38:e3:a6:00:bf:98:fb:99:ae:3f:eb: 3f:c6:fe:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEfwdUkAKo6LYAEeXr7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDc1MGRmMGViYTc3NGQ0YjRkNjQ0ZWM4ZTMzNTA4Zjhm NTM4ZmUwHhcNMjUxMjA2MTMwMDU2WhcNMjUxMjA3MTMwMDU2WjAzMTEwLwYDVQQD Eyg4NzdkOWEyM2I4OGM0NDRhYzQwMGFkZGIxODU3NGJiMzdiNzM5NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq5y9FyHudsSyNIiV94+CEma7j1r oJWv4GBZh07MLgHFmMPuCwhxDhH3Zx7RK0DuwdVwWP1SKe8CaEszLwdy1ROElqKe 5iXwijHqOyKCjYRtJUtQNxWZOlJtMTokYPgoD7NvN1iCV3IbdOOy8d2WSxOtXD0F ZY8Z9vBxg5PgyJLznihf/cfazlHpbQsPz/KWBMRBwmmOpGIf2qZvNLwU+Oxi55ax KG9zm810uE4kAlQdenhPwbncIFGCPPXaHwPn7JIaWSs3kr0tuHdNU6gDC1LGmuXD DnloxC/pfmmV6mC1wexchCccVNdSaZWsUCS69BKW6NGbVppDLfp87apjYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId9miO4jERKxACt2xhXS7N7c5byMB8GA1UdIwQY MBaAFGhHUN8OundNS01kTsjjNQj49Tj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTAxZmUtNTJjMS00ZDViLTllMGYt ZDMyNWY2ODYzMzQzLzEvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85OTAxZmUtNTJjMS00ZDViLTllMGYtZDMyNWY2ODYzMzQz LzEvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIffh5WB xpGrc2bIjVTCbSi6Y9zYV20ms1OIE8LNgMT1NTQY/q8f4taBJnDSsnSuiEvv5jOV Y5HQXWVi9Kiulq5P7zO48SImE+TvcsBxgWOai1veBoYuqGOdj1Mch1fAwxvTUYjq 3GCjrcyPLfvplOnlyL61P6OFjnD3SjBgOjIqmrus5hPUTH2l6XtYYO6vRr8ShbiD b9mOj45Xd0qpWiCe2OFJ9ZVroPc5SaMU+ZG0yoCwe9c+4semPuyrRoTIgQM/a9er Y3ylnIYLPUJ0uuSSWoqNu6z/61MGAQfpnOkLTUccOXfh5L/BWPcCMt9/DTjjpgC/ mPuZrj/rP8b+Dg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:15:04 2025 by rpki-client