This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json) Hash identifier: 0eIDLEibdkEUH5H9RMtH23C8BnUqXsPh59PNCyzUN6w= Subject key identifier: CF:C1:1D:43:EF:8C:4F:D7:41:8D:40:D5:06:63:62:C4:89:51:02:B3 Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Certificate serial: 019AF50B4B9A6633FBAE1E3B5A871F30C042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft Manifest number: 132C Signing time: Sat 06 Dec 2025 19:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:02:29 +0000 Manifest next update: Sun 07 Dec 2025 19:02:29 +0000 Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=) 2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: pmZwhf3KX+FsSd20mgC+C1ly7MzDXb/ngyDz6HDFpXw=) 3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:4b:9a:66:33:fb:ae:1e:3b:5a:87:1f:30:c0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Validity Not Before: Dec 6 19:02:29 2025 GMT Not After : Dec 7 19:02:29 2025 GMT Subject: CN=cfc11d43ef8c4fd7418d40d5066362c4895102b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:f7:de:2a:6f:4b:ca:5b:ec:e6:b9:44:7e: 42:af:3f:38:48:f5:98:6f:99:fd:20:a0:ea:e4:a5: 93:f1:bb:6d:97:18:b2:d3:11:a7:76:cf:bd:e8:56: e8:3c:8e:9c:8d:b1:87:1f:0c:2a:90:2d:01:03:6f: 61:db:87:13:8b:6b:65:c3:69:48:5c:51:71:1e:9f: d2:02:8c:35:1e:de:20:63:ab:ef:bf:38:a2:ce:82: c4:15:22:51:3c:df:67:9f:53:56:82:74:9f:19:20: 03:e7:88:0d:5c:37:d3:57:a3:3d:7b:fd:a7:c4:ad: ab:e0:63:6d:36:e8:81:89:a7:6f:15:20:29:7d:4b: b8:53:a7:a7:66:4f:5c:84:75:2e:60:69:38:b3:bc: d8:65:63:f7:00:13:76:ff:98:d1:b7:81:92:35:36: 4b:36:d9:ff:f2:c6:b8:74:f2:d8:92:61:b9:0b:dd: 6d:53:68:16:2c:97:35:8f:af:bd:3c:7f:d9:3e:ec: 0b:72:ae:c0:7f:ae:bb:25:a5:1c:10:b9:ef:b2:f2: fa:b2:05:45:20:53:54:32:2d:33:3c:1d:86:50:50: db:21:62:cb:84:7c:31:f1:90:46:58:68:68:34:9f: a7:74:0e:69:a3:18:b4:a4:19:96:d4:81:63:c3:cc: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C1:1D:43:EF:8C:4F:D7:41:8D:40:D5:06:63:62:C4:89:51:02:B3 X509v3 Authority Key Identifier: keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a0:82:da:34:c9:13:4a:6b:c6:5d:b3:e7:b5:aa:24:7c:3a: f7:58:aa:a6:cf:03:b4:a1:4a:50:da:48:26:23:3b:c6:3c:5e: 82:cd:fc:5d:a3:14:0b:a6:12:c5:ae:7a:01:42:8a:c4:25:21: 3e:a3:6c:2d:be:68:af:4e:4b:fb:82:e9:2c:87:9c:42:b4:24: a2:32:4a:ea:da:b9:0c:2d:4a:4e:a0:31:1f:04:aa:fa:7f:68: a3:a3:30:82:d8:e0:77:a5:c4:73:0a:1b:f6:a8:3c:90:a8:5b: 71:d4:d9:b8:50:40:37:31:1c:0f:0e:60:92:c6:4c:ef:50:c4: 64:43:0f:79:62:af:00:c2:6c:6f:bf:58:cc:1b:19:e3:27:37: 39:3b:1f:93:0b:f2:ba:03:1a:70:8e:0e:cf:c6:9a:1d:43:f3: 63:da:e0:04:6a:b0:2f:67:5e:16:db:30:eb:7b:a5:f7:23:7b: 84:b5:7d:1e:2d:f6:1b:98:61:05:a1:13:6d:d9:f8:f4:10:28: 67:b7:cd:ab:34:68:45:3b:34:9e:3d:b3:26:ad:aa:46:1a:94: 11:01:83:1f:f4:30:34:d7:61:fc:cd:36:20:d9:c5:1a:0a:79: 4e:1f:c7:41:2d:23:65:86:28:89:a2:de:8c:0d:aa:cb:3b:d9: f7:37:ed:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0uaZjP7rh47WocfMMBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz N2IwMTUwHhcNMjUxMjA2MTkwMjI5WhcNMjUxMjA3MTkwMjI5WjAzMTEwLwYDVQQD EyhjZmMxMWQ0M2VmOGM0ZmQ3NDE4ZDQwZDUwNjYzNjJjNDg5NTEwMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIv33ipvS8pb7Oa5RH5Crz84SPWY b5n9IKDq5KWT8bttlxiy0xGnds+96FboPI6cjbGHHwwqkC0BA29h24cTi2tlw2lI XFFxHp/SAow1Ht4gY6vvvziizoLEFSJRPN9nn1NWgnSfGSAD54gNXDfTV6M9e/2n xK2r4GNtNuiBiadvFSApfUu4U6enZk9chHUuYGk4s7zYZWP3ABN2/5jRt4GSNTZL Ntn/8sa4dPLYkmG5C91tU2gWLJc1j6+9PH/ZPuwLcq7Af667JaUcELnvsvL6sgVF IFNUMi0zPB2GUFDbIWLLhHwx8ZBGWGhoNJ+ndA5poxi0pBmW1IFjw8ympwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/BHUPvjE/XQY1A1QZjYsSJUQKzMB8GA1UdIwQY MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6CC2jTJ E0prxl2z57WqJHw691iqps8DtKFKUNpIJiM7xjxegs38XaMUC6YSxa56AUKKxCUh PqNsLb5or05L+4LpLIecQrQkojJK6tq5DC1KTqAxHwSq+n9oo6Mwgtjgd6XEcwob 9qg8kKhbcdTZuFBANzEcDw5gksZM71DEZEMPeWKvAMJsb79YzBsZ4yc3OTsfkwvy ugMacI4Oz8aaHUPzY9rgBGqwL2deFtsw63ul9yN7hLV9Hi32G5hhBaETbdn49BAo Z7fNqzRoRTs0nj2zJq2qRhqUEQGDH/QwNNdh/M02INnFGgp5Th/HQS0jZYYoiaLe jA2qyzvZ9zftJA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:24 2025 by rpki-client