This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json) Hash identifier: SoFdjVRL99g/lNW1XWFev174K65n7iVki1HPxDxLVpw= Subject key identifier: 8A:58:46:AF:DF:5F:D4:22:EA:63:48:C7:BA:F9:C3:D5:18:CE:AB:DC Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1 Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1 Certificate serial: 019AF465324BD26661121E2B9F30F67E6849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft Manifest number: 1154 Signing time: Sat 06 Dec 2025 16:01:03 +0000 Manifest this update: Sat 06 Dec 2025 16:01:03 +0000 Manifest next update: Sun 07 Dec 2025 16:01:03 +0000 Files and hashes: 1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: R99cysUCYxS1O1ZE7idBH1QAc6qNR5mLovCyNya/v6E=) 2: njKb2eruHX8H9g3wi8a7hMHrArw.roa (hash: 6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:32:4b:d2:66:61:12:1e:2b:9f:30:f6:7e:68:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1 Validity Not Before: Dec 6 16:01:03 2025 GMT Not After : Dec 7 16:01:03 2025 GMT Subject: CN=8a5846afdf5fd422ea6348c7baf9c3d518ceabdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:98:26:46:80:2f:0f:2e:85:e4:ee:5c:7b: c4:3f:d7:0c:0b:61:72:28:98:1e:9c:08:34:ef:5e: 65:8f:ec:6b:08:68:0f:07:25:ae:a7:a1:b2:83:c8: f4:9e:ab:c3:f0:d2:25:50:e6:c0:90:d2:26:21:3e: fd:48:b8:47:08:f5:72:2a:5e:2b:be:fa:3b:68:e7: 55:09:9f:14:ab:db:63:eb:72:09:d6:05:cb:96:00: 82:e2:73:f3:40:8e:30:16:45:67:75:73:7f:36:34: 44:98:2e:03:35:1c:43:21:c5:50:3e:0a:36:aa:4a: ba:d8:33:e3:1c:43:1c:77:19:95:36:c3:d8:e3:4a: 1b:14:35:eb:6c:ed:a4:c6:88:23:6e:b7:80:ad:3e: 02:2e:73:78:59:1b:05:be:3f:bd:d8:69:61:9e:c2: 55:e5:87:59:db:4c:c9:11:c2:b2:5e:c4:2e:76:44: 32:a7:55:ff:05:53:5b:de:47:db:e2:b0:b3:e6:bb: 90:ec:81:f3:86:7a:60:c5:5a:9f:7a:64:97:d7:c5: 4b:d5:22:5c:3c:c2:d2:98:ba:8c:d2:a6:ca:d6:ae: d7:42:12:84:48:f7:b5:d4:a6:9d:f0:d6:4d:a5:d3: da:f6:7e:27:3b:8f:bb:18:f0:40:31:7e:7b:e9:78: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:58:46:AF:DF:5F:D4:22:EA:63:48:C7:BA:F9:C3:D5:18:CE:AB:DC X509v3 Authority Key Identifier: keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b4:16:ed:ae:60:6e:a4:be:f2:f5:75:11:9c:c0:8d:b2:e7: f2:f2:9f:28:d9:a9:b6:3b:a3:27:e6:ac:18:75:2b:57:4e:a1: 77:89:a4:a9:6f:58:2b:c6:ce:13:d5:1a:ca:19:1c:c7:86:06: f6:94:15:94:f6:dc:93:aa:6e:92:ef:9f:de:05:fe:75:eb:7f: 8a:a5:24:90:c4:4b:e8:12:b9:c8:5e:79:be:18:ab:6a:82:85: 8d:85:44:74:20:62:e5:8e:b6:76:f3:93:29:93:ea:66:0d:fe: 3e:f3:25:52:f1:c7:33:3f:9e:78:f7:cf:9a:fe:52:5b:dc:77: b6:0b:a5:f3:29:c6:e1:63:e8:a2:b8:5d:c6:55:70:36:ae:e3: 66:0d:b5:41:b3:a0:66:d6:9b:46:7b:79:e3:4d:cb:cd:95:cc: da:8c:7c:98:12:40:a2:f8:28:0a:12:a7:9b:36:e4:dc:67:e9: 9d:04:0c:30:b4:dd:0d:0f:6d:c1:34:86:05:85:03:b7:4d:18: bf:28:d4:bf:98:8b:a3:09:6c:16:8c:a2:3b:a9:80:1f:13:6c: 83:b3:e7:80:b6:1b:6c:a5:83:50:c6:80:5d:8f:ba:5d:ce:b0: 55:06:bc:b5:68:73:41:a5:e1:1e:05:23:90:5f:ff:1c:ff:92: 22:39:e8:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTJL0mZhEh4rnzD2fmhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhY2E3MWYyZDlmZTJiNDljNjc2MmYzZDlhMGU4YmYzMzJk ZmRlZDEwHhcNMjUxMjA2MTYwMTAzWhcNMjUxMjA3MTYwMTAzWjAzMTEwLwYDVQQD Eyg4YTU4NDZhZmRmNWZkNDIyZWE2MzQ4YzdiYWY5YzNkNTE4Y2VhYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokWYJkaALw8uheTuXHvEP9cMC2Fy KJgenAg0715lj+xrCGgPByWup6Gyg8j0nqvD8NIlUObAkNImIT79SLhHCPVyKl4r vvo7aOdVCZ8Uq9tj63IJ1gXLlgCC4nPzQI4wFkVndXN/NjREmC4DNRxDIcVQPgo2 qkq62DPjHEMcdxmVNsPY40obFDXrbO2kxogjbreArT4CLnN4WRsFvj+92GlhnsJV 5YdZ20zJEcKyXsQudkQyp1X/BVNb3kfb4rCz5ruQ7IHzhnpgxVqfemSX18VL1SJc PMLSmLqM0qbK1q7XQhKESPe11Kad8NZNpdPa9n4nO4+7GPBAMX576XhiRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpYRq/fX9Qi6mNIx7r5w9UYzqvcMB8GA1UdIwQY MBaAFGrKcfLZ/itJxnYvPZoOi/My397RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODkt OWE4ZDJiZjAwMzIwLzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODktOWE4ZDJiZjAwMzIw LzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbQW7a5g bqS+8vV1EZzAjbLn8vKfKNmptjujJ+asGHUrV06hd4mkqW9YK8bOE9Uayhkcx4YG 9pQVlPbck6puku+f3gX+det/iqUkkMRL6BK5yF55vhiraoKFjYVEdCBi5Y62dvOT KZPqZg3+PvMlUvHHMz+eePfPmv5SW9x3tgul8ynG4WPoorhdxlVwNq7jZg21QbOg ZtabRnt5403LzZXM2ox8mBJAovgoChKnmzbk3GfpnQQMMLTdDQ9twTSGBYUDt00Y vyjUv5iLowlsFoyiO6mAHxNsg7PngLYbbKWDUMaAXY+6Xc6wVQa8tWhzQaXhHgUj kF//HP+SIjnoVg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:17 2025 by rpki-client