This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json) Hash identifier: eyLhoVxeKEgUfPFzpo+lIAT/eHZgh/BIyrlU7Ypke6Y= Subject key identifier: 43:79:9C:91:35:03:FD:26:8C:7F:B3:52:07:5F:56:F2:F0:83:5E:60 Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Certificate serial: 019AF50B9585B23E974C1A57345E4BF6EAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft Manifest number: 156F Signing time: Sat 06 Dec 2025 19:02:48 +0000 Manifest this update: Sat 06 Dec 2025 19:02:48 +0000 Manifest next update: Sun 07 Dec 2025 19:02:48 +0000 Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=) 2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: zEnPQO4iZaF1xF7DrrQPgb8RwDvCOprvMXU9yp4Qt7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:95:85:b2:3e:97:4c:1a:57:34:5e:4b:f6:ea:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89 Validity Not Before: Dec 6 19:02:48 2025 GMT Not After : Dec 7 19:02:48 2025 GMT Subject: CN=43799c913503fd268c7fb352075f56f2f0835e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:19:37:56:9c:7d:65:be:9c:03:3e:76:ef: 54:e9:cb:65:c0:38:db:8b:0b:b8:d2:a2:bc:a3:77: f3:7e:d6:7b:17:b8:61:c2:9a:16:df:44:ef:7f:95: 1f:dc:d9:e2:d6:fe:71:31:45:32:35:0c:6f:35:cf: 33:60:ec:72:f2:e3:d7:be:d7:77:f3:06:f1:d1:81: 16:e7:26:5f:34:de:b9:e1:df:25:88:6a:e7:06:b4: 60:90:d7:75:1b:9a:19:6f:4d:53:17:d9:bd:77:37: 8e:bd:9d:aa:6f:2a:76:bb:ad:93:0b:a2:9a:e2:f8: 8f:ba:6e:0c:86:7c:b9:32:49:ab:ed:51:0f:93:f8: 4f:6a:11:2f:11:05:5c:1c:be:78:44:1d:a2:a9:61: 1c:7e:bc:5a:a8:96:15:a9:26:25:d1:a4:94:fe:ab: f1:32:dc:66:96:bd:c4:ec:fe:8a:f3:88:da:2d:3c: 1a:c3:a9:ad:83:38:97:19:68:f9:60:6c:03:e1:70: c8:46:8c:6d:c3:32:e5:65:05:b3:77:17:ff:53:bb: 31:f3:a6:ae:a8:1c:fa:51:0b:ba:8a:00:b4:88:60: 16:bb:86:c1:fd:16:7a:1e:65:9b:fd:07:09:89:4c: c4:f1:58:a4:2c:c2:3f:f4:f7:81:cd:e6:96:d2:f8: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:79:9C:91:35:03:FD:26:8C:7F:B3:52:07:5F:56:F2:F0:83:5E:60 X509v3 Authority Key Identifier: keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a0:d9:b4:4b:40:42:fe:e9:d1:c0:2d:da:2b:d4:13:83:ac: c5:0d:52:f9:98:8c:30:66:40:74:c4:11:9f:04:32:07:55:bc: cb:61:66:4b:b4:08:df:9f:60:64:4b:eb:6e:9c:c6:ed:20:c9: a1:18:d3:16:20:9e:da:62:93:be:f1:fb:b5:b4:44:c4:1d:5d: 2b:31:fa:8b:97:43:2e:ca:22:db:cc:ea:00:aa:5f:e0:fd:eb: d2:cf:d4:34:23:7b:b0:40:db:e5:90:0b:82:13:01:0a:97:89: 30:7d:6a:f4:ca:ae:54:05:62:36:cc:26:05:a8:a1:53:6e:0c: 14:a0:3f:38:7f:24:0b:62:09:74:d1:44:19:9f:68:01:88:e7: 98:0c:0b:35:e9:9d:01:23:6f:3a:fd:05:53:55:2e:30:f2:43: 75:51:3c:a5:cb:e0:95:a2:90:18:39:11:56:28:7f:11:30:27: f0:7b:f7:2c:79:0b:72:ca:cf:37:8f:56:57:ed:3e:b6:4a:10: 6e:bb:ce:32:7c:28:0a:1c:cf:88:fa:44:c2:a7:f7:f8:50:cf: 69:c9:93:24:53:bb:d5:7d:83:c6:99:fe:4b:e4:34:ff:12:07: ef:07:71:c7:f4:cc:13:f3:d4:e0:09:37:b5:69:b9:db:b5:64: 78:e4:60:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5WFsj6XTBpXNF5L9uqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi NWJiODkwHhcNMjUxMjA2MTkwMjQ4WhcNMjUxMjA3MTkwMjQ4WjAzMTEwLwYDVQQD Eyg0Mzc5OWM5MTM1MDNmZDI2OGM3ZmIzNTIwNzVmNTZmMmYwODM1ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXoZN1acfWW+nAM+du9U6ctlwDjb iwu40qK8o3fzftZ7F7hhwpoW30Tvf5Uf3Nni1v5xMUUyNQxvNc8zYOxy8uPXvtd3 8wbx0YEW5yZfNN654d8liGrnBrRgkNd1G5oZb01TF9m9dzeOvZ2qbyp2u62TC6Ka 4viPum4Mhny5Mkmr7VEPk/hPahEvEQVcHL54RB2iqWEcfrxaqJYVqSYl0aSU/qvx Mtxmlr3E7P6K84jaLTwaw6mtgziXGWj5YGwD4XDIRoxtwzLlZQWzdxf/U7sx86au qBz6UQu6igC0iGAWu4bB/RZ6HmWb/QcJiUzE8VikLMI/9PeBzeaW0vjc2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN5nJE1A/0mjH+zUgdfVvLwg15gMB8GA1UdIwQY MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt M2E4YTYxMDA2YTRmLzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6DZtEtA Qv7p0cAt2ivUE4OsxQ1S+ZiMMGZAdMQRnwQyB1W8y2FmS7QI359gZEvrbpzG7SDJ oRjTFiCe2mKTvvH7tbRExB1dKzH6i5dDLsoi28zqAKpf4P3r0s/UNCN7sEDb5ZAL ghMBCpeJMH1q9MquVAViNswmBaihU24MFKA/OH8kC2IJdNFEGZ9oAYjnmAwLNemd ASNvOv0FU1UuMPJDdVE8pcvglaKQGDkRVih/ETAn8Hv3LHkLcsrPN49WV+0+tkoQ brvOMnwoChzPiPpEwqf3+FDPacmTJFO71X2Dxpn+S+Q0/xIH7wdxx/TME/PU4Ak3 tWm527VkeORgig== -----END CERTIFICATE-----Generated at Sat Dec 6 21:15:51 2025 by rpki-client