This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json) Hash identifier: tt70oM7KB2Sp+SCq9CTH5oWDRYR9O0dbr2NMneaEGV8= Subject key identifier: 72:A5:93:11:3D:C7:C0:3D:AF:13:23:43:F7:51:AA:D9:F5:7A:24:07 Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77 Certificate serial: 019AF1642E0970A22B12A7CF9BE5F0241894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: EQP/drTBYnz5yTBbIBOWE94Kk2hJlHTtwzw2tirexSY=) 2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2e:09:70:a2:2b:12:a7:cf:9b:e5:f0:24:18:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=72a593113dc7c03daf132343f751aad9f57a2407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:9b:3d:1d:ae:d4:cd:6c:b4:e6:ab:94:9a: f1:25:4d:12:8f:7b:5b:d2:57:49:d1:01:c2:d9:80: d6:2c:98:7e:4e:c3:86:ed:9f:32:f6:3a:07:4d:eb: ec:28:c3:d5:06:32:71:22:0f:61:6a:f0:42:1b:8a: 08:81:e5:3a:1e:94:59:e4:1c:89:ff:15:a3:f4:b7: 34:af:59:1c:c9:4d:6e:68:d5:96:e2:67:e1:31:21: 73:42:2e:4f:89:b1:32:42:07:05:01:81:f0:20:7e: 39:04:9a:6e:b7:78:61:a2:3f:86:e9:6a:bb:35:91: a8:e5:9e:43:76:ba:93:90:47:d3:be:00:28:43:9e: 64:03:e8:5d:ac:66:fc:d0:d4:70:82:8f:ce:bc:80: ea:98:83:a7:04:5a:f1:4e:05:28:51:5e:18:56:45: c3:bd:c0:31:e3:44:4e:14:70:49:0b:0b:6a:82:a2: 8e:05:d3:b2:fc:6c:1b:fc:28:e0:b9:81:b3:e8:e9: f5:8f:5a:be:ae:57:7e:b7:f4:fe:8e:6a:a1:ea:ba: b0:17:4b:6b:de:7c:cc:6f:28:92:15:ed:b7:e1:cc: 19:a6:92:be:1b:5b:89:85:32:70:45:59:21:e3:a0: 31:cf:8c:d0:46:76:0c:15:66:66:2d:59:31:24:91: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:93:11:3D:C7:C0:3D:AF:13:23:43:F7:51:AA:D9:F5:7A:24:07 X509v3 Authority Key Identifier: keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:46:c8:3d:74:67:3f:b9:93:24:ac:d9:65:6c:bf:47:78:19: f6:3b:94:2c:11:5e:a9:49:66:ae:40:4a:67:65:ed:64:5a:37: 18:a1:c2:b5:53:dd:bd:ef:cc:77:87:9e:9d:ed:60:11:c4:81: 81:7e:34:84:f3:44:e4:fd:89:b3:b8:55:b7:4a:24:d4:99:5a: 2b:bd:c9:ec:14:67:57:0d:d0:44:2e:cc:b9:2f:32:e5:84:a7: a8:9c:23:8c:94:56:b1:1e:df:92:97:11:2a:86:15:46:5a:de: 73:39:d1:ba:48:dd:50:1b:0d:08:c8:6a:30:45:a5:0d:b0:dd: b7:ef:a9:83:c4:a4:7d:05:4b:cc:88:d1:1b:79:ce:ea:8b:ea: f9:57:84:3b:a0:1d:90:89:a9:e3:5b:c3:40:d1:d3:06:56:17: 4c:0a:70:b8:01:83:b3:b9:8d:32:ef:db:38:4e:2d:3c:15:01: 4c:00:38:5b:2c:ef:b7:39:a8:eb:0a:31:31:b3:77:e0:6b:c8: 90:b1:6c:7f:ba:d1:f8:91:35:58:38:94:1e:b5:3a:1d:1c:4d: a9:4d:12:75:f7:b9:00:f8:5c:3f:f6:87:90:b7:1e:c6:a8:19: fa:c8:5f:44:98:44:55:4c:b1:a6:3b:41:98:3c:79:02:f2:db: 63:7b:40:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC4JcKIrEqfPm+XwJBiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy MDNmNzcwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD Eyg3MmE1OTMxMTNkYzdjMDNkYWYxMzIzNDNmNzUxYWFkOWY1N2EyNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWObPR2u1M1stOarlJrxJU0Sj3tb 0ldJ0QHC2YDWLJh+TsOG7Z8y9joHTevsKMPVBjJxIg9havBCG4oIgeU6HpRZ5ByJ /xWj9Lc0r1kcyU1uaNWW4mfhMSFzQi5PibEyQgcFAYHwIH45BJput3hhoj+G6Wq7 NZGo5Z5DdrqTkEfTvgAoQ55kA+hdrGb80NRwgo/OvIDqmIOnBFrxTgUoUV4YVkXD vcAx40ROFHBJCwtqgqKOBdOy/Gwb/CjguYGz6On1j1q+rld+t/T+jmqh6rqwF0tr 3nzMbyiSFe234cwZppK+G1uJhTJwRVkh46Axz4zQRnYMFWZmLVkxJJFARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKlkxE9x8A9rxMjQ/dRqtn1eiQHMB8GA1UdIwQY MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5 LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0bIPXRn P7mTJKzZZWy/R3gZ9juULBFeqUlmrkBKZ2XtZFo3GKHCtVPdve/Md4eene1gEcSB gX40hPNE5P2Js7hVt0ok1JlaK73J7BRnVw3QRC7MuS8y5YSnqJwjjJRWsR7fkpcR KoYVRlrecznRukjdUBsNCMhqMEWlDbDdt++pg8SkfQVLzIjRG3nO6ovq+VeEO6Ad kImp41vDQNHTBlYXTApwuAGDs7mNMu/bOE4tPBUBTAA4Wyzvtzmo6woxMbN34GvI kLFsf7rR+JE1WDiUHrU6HRxNqU0Sdfe5APhcP/aHkLcexqgZ+shfRJhEVUyxpjtB mDx5AvLbY3tAWw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:59 2025 by rpki-client