This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json) Hash identifier: Hibogv+OZz56B7OxuuAkNPfCgsELFcuOXR1ZaXurJbE= Subject key identifier: 17:31:93:A6:F0:6F:A8:89:B5:A0:60:3B:FC:B4:66:ED:D5:19:86:BA Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Certificate serial: 019AF163E43AB73F03844F6674AB1295D698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft Manifest number: 03B2 Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=) 2: SOOUfYeqqZHuoh2Gony2KLPyjUg.roa (hash: 3qFCFMkMfnTPWsf6Qhr45sO5P402Ny67zVPmMEC99q8=) 3: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: w20ZKuMeGX8VS4s2UW6OHCQc+JmxfpEcfVEvWZ0JRu8=) 4: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=) 5: y6CjvWQerUp0Mv77KMhz5spMEWA.roa (hash: BRh0sxRN6LJqe+S+C32b8EMbRfEqAVHqJDsn1Jnu7HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e4:3a:b7:3f:03:84:4f:66:74:ab:12:95:d6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=173193a6f06fa889b5a0603bfcb466edd51986ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:6d:98:f3:60:5b:02:7e:92:64:0d:ca:2c: eb:b3:28:f3:5d:66:f6:47:81:8b:8f:cc:c4:2c:0a: ce:43:f5:8f:e0:e0:71:e5:a6:98:85:ac:fe:87:a0: 91:8f:19:b4:f6:93:af:73:48:46:17:62:35:73:99: 14:3b:27:bc:ab:04:3e:92:d4:fb:c2:4b:08:fa:cd: 5d:8b:45:39:03:ce:e0:17:33:47:37:e3:21:96:62: 75:53:54:d2:7f:5b:24:33:42:84:49:a1:ca:6f:6a: bf:49:c0:96:e1:6e:1e:3f:db:c6:b4:cc:7f:cf:0b: 7b:c7:fa:32:62:29:af:7e:c2:5d:db:9c:70:c5:4a: 46:cd:24:56:55:7a:81:ac:3c:bf:a5:49:9a:7b:99: 92:4a:70:06:1b:7e:ac:ef:6b:7a:a0:bf:16:b4:71: 7c:3e:d1:5a:06:fb:15:98:39:a6:88:3f:91:58:79: 9a:b0:e6:1b:e5:97:6c:2d:41:64:87:39:fd:d3:34: 8b:ab:d9:36:c2:6b:1d:0f:73:be:05:3d:c1:83:f8: 02:8d:84:f9:43:de:30:56:cc:20:f8:d3:43:8d:9a: 15:b2:92:8b:2b:82:f8:29:66:5a:e5:f5:e9:6d:5c: a8:9e:84:4b:98:d3:75:cf:48:94:15:7c:d3:2c:3c: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:31:93:A6:F0:6F:A8:89:B5:A0:60:3B:FC:B4:66:ED:D5:19:86:BA X509v3 Authority Key Identifier: keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:53:ed:d0:ea:e3:26:6e:c6:41:ee:88:d6:13:65:59:bd:75: a5:d7:42:9a:1a:02:ea:75:52:0e:8a:e3:32:9b:45:ab:d2:b9: 88:3d:34:08:d0:fd:3b:1f:79:75:ec:4a:b3:80:33:0b:39:7c: 17:8d:4f:fe:97:a2:6f:04:5c:0e:14:40:a3:b6:c7:d2:b3:9e: 6b:e7:fa:21:a3:4c:99:98:23:19:4d:0c:58:5a:a8:60:5c:30: 7a:08:4d:25:b9:e7:ef:fa:23:a1:9e:6a:a6:ac:be:fe:99:60: 19:c8:81:2a:b9:ea:bc:85:48:b6:c7:e8:39:04:a6:44:ec:36: 0a:e3:88:43:09:16:84:75:8a:3d:e8:b2:b8:b4:2b:9b:38:67: 7c:72:16:7a:30:97:23:5e:32:32:71:18:89:bc:9d:88:48:65: a6:74:83:c0:67:fe:b1:88:4d:69:d8:da:dc:07:02:b8:8a:c3: c8:a7:5b:66:73:cb:e3:58:df:c6:d2:6c:12:55:99:a1:0d:68: 00:e8:67:9f:e6:ff:05:b8:32:9f:15:18:19:26:a1:36:d2:c3: 5d:28:94:66:f7:2f:45:89:6b:0c:c3:e3:ac:06:f0:b2:11:9a: 4d:08:28:e9:7b:9d:68:66:73:2e:5c:57:66:e4:41:a4:26:72: 8b:24:ed:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+Q6tz8DhE9mdKsSldaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5 ZmYzMjQwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD EygxNzMxOTNhNmYwNmZhODg5YjVhMDYwM2JmY2I0NjZlZGQ1MTk4NmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRptmPNgWwJ+kmQNyizrsyjzXWb2 R4GLj8zELArOQ/WP4OBx5aaYhaz+h6CRjxm09pOvc0hGF2I1c5kUOye8qwQ+ktT7 wksI+s1di0U5A87gFzNHN+MhlmJ1U1TSf1skM0KESaHKb2q/ScCW4W4eP9vGtMx/ zwt7x/oyYimvfsJd25xwxUpGzSRWVXqBrDy/pUmae5mSSnAGG36s72t6oL8WtHF8 PtFaBvsVmDmmiD+RWHmasOYb5ZdsLUFkhzn90zSLq9k2wmsdD3O+BT3Bg/gCjYT5 Q94wVswg+NNDjZoVspKLK4L4KWZa5fXpbVyonoRLmNN1z0iUFXzTLDx/VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcxk6bwb6iJtaBgO/y0Zu3VGYa6MB8GA1UdIwQY MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt ZjRiN2IzOThjNjM0LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0 LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVPt0Orj Jm7GQe6I1hNlWb11pddCmhoC6nVSDorjMptFq9K5iD00CND9Ox95dexKs4AzCzl8 F41P/peibwRcDhRAo7bH0rOea+f6IaNMmZgjGU0MWFqoYFwweghNJbnn7/ojoZ5q pqy+/plgGciBKrnqvIVItsfoOQSmROw2CuOIQwkWhHWKPeiyuLQrmzhnfHIWejCX I14yMnEYibydiEhlpnSDwGf+sYhNadja3AcCuIrDyKdbZnPL41jfxtJsElWZoQ1o AOhnn+b/BbgynxUYGSahNtLDXSiUZvcvRYlrDMPjrAbwshGaTQgo6XudaGZzLlxX ZuRBpCZyiyTtoA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:14 2025 by rpki-client