This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json) Hash identifier: 4CQLb/ujbOO+tGTtDoS+SvDSysAP+phcVtVUR4rrfmo= Subject key identifier: 2B:10:9A:32:72:F1:59:F9:FC:CB:81:8C:22:59:24:FC:91:FD:2D:2E Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b Certificate serial: 019B2B1CFB022D54FE001049423A313A776C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft Manifest number: 177B Signing time: Wed 17 Dec 2025 07:01:18 +0000 Manifest this update: Wed 17 Dec 2025 07:01:18 +0000 Manifest next update: Thu 18 Dec 2025 07:01:18 +0000 Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: k5WSpiWgvTp6paVfjR1gw7hAd6mSQCHja+qYQWVlUjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:fb:02:2d:54:fe:00:10:49:42:3a:31:3a:77:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b Validity Not Before: Dec 17 07:01:18 2025 GMT Not After : Dec 18 07:01:18 2025 GMT Subject: CN=2b109a3272f159f9fccb818c225924fc91fd2d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:57:23:05:7a:35:11:09:75:a6:62:11:78: de:e1:d4:d1:91:2c:3c:a0:6d:9d:74:1c:0d:a2:d0: ea:95:a2:18:de:47:cf:06:21:40:21:04:b8:da:25: 82:83:9c:e6:39:a4:9e:e4:c8:2e:18:e8:47:25:38: 02:cf:4d:5a:89:20:08:98:b6:da:20:64:69:f5:8f: 1a:99:bb:11:46:e8:c6:54:ff:a7:9e:6c:f1:8b:29: ee:3d:78:33:37:fa:7f:f4:7c:fc:58:13:c2:a9:9c: 2f:04:6c:ae:e7:e2:79:05:6b:23:c0:b0:cf:a3:f2: 61:ab:1b:be:94:f7:a6:51:b9:3f:12:73:a7:2d:bd: bf:5d:77:26:64:ff:43:a0:0f:fa:d8:8a:f9:9e:45: 72:f0:93:48:05:c9:b9:2f:4f:40:54:bc:c4:28:b1: dc:09:3a:2c:04:ce:52:0e:64:88:a9:ac:c4:29:d6: 2e:8e:46:9b:f3:24:07:8a:ef:ac:84:1a:6e:30:9c: e7:9b:79:64:9d:63:b0:31:24:0b:68:67:1b:46:cb: 19:8f:d1:22:dc:04:b2:fc:29:0d:3b:23:97:05:f6: f7:2d:07:43:2f:99:57:64:f9:8e:4b:f6:e3:4c:23: 1b:78:39:c0:42:28:cb:c8:11:95:0a:f1:cc:86:c1: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:9A:32:72:F1:59:F9:FC:CB:81:8C:22:59:24:FC:91:FD:2D:2E X509v3 Authority Key Identifier: keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:ff:d0:1b:f2:1e:d8:c6:fd:46:90:37:b6:58:25:c7:34: 56:51:fd:61:7d:9b:cb:1d:92:e4:6f:22:88:a9:29:a4:08:a3: 9c:50:85:6b:51:b3:8f:d9:af:ae:ef:f4:51:a0:72:07:17:90: f7:84:bc:64:f7:ec:67:1e:41:62:d2:a2:8a:f2:58:10:7b:d9: ed:d6:91:fc:ed:f3:69:47:30:ee:2e:c8:0f:1b:5d:9e:dc:03: af:77:51:6b:72:c2:7e:a0:24:5e:ab:32:0b:31:c6:79:1b:47: e9:b8:ec:bd:2c:a8:42:53:fe:41:56:0d:97:e3:91:d2:f0:02: 15:2d:78:30:52:3e:a4:a2:d2:d6:fc:20:7d:3a:38:1b:92:ea: 67:4a:05:63:ae:f9:67:47:44:99:e1:55:1c:93:69:10:e0:a9: 4d:5d:46:c0:79:22:8d:db:52:42:0f:68:21:8b:a0:32:0a:c0: 6e:e7:5c:b4:ca:4e:70:83:0b:18:d7:80:3c:bb:d8:58:f6:2c: b0:74:98:0b:30:b6:61:6c:0e:b3:e8:f3:ce:36:c5:e3:cd:c0: 98:6f:27:19:9c:06:10:dc:b0:8d:fe:22:66:2a:49:19:2a:1d: bb:bf:45:1a:17:0e:b7:fd:6f:14:6f:62:16:a6:c3:4f:0e:e5: 03:df:0f:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHPsCLVT+ABBJQjoxOndsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTk1Y2UxODViNjBlNzg2MDQ5ZGY1NWYxNWM5ZDJlYzA1 ZDRmNmIwHhcNMjUxMjE3MDcwMTE4WhcNMjUxMjE4MDcwMTE4WjAzMTEwLwYDVQQD EygyYjEwOWEzMjcyZjE1OWY5ZmNjYjgxOGMyMjU5MjRmYzkxZmQyZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnhXIwV6NREJdaZiEXje4dTRkSw8 oG2ddBwNotDqlaIY3kfPBiFAIQS42iWCg5zmOaSe5MguGOhHJTgCz01aiSAImLba IGRp9Y8ambsRRujGVP+nnmzxiynuPXgzN/p/9Hz8WBPCqZwvBGyu5+J5BWsjwLDP o/Jhqxu+lPemUbk/EnOnLb2/XXcmZP9DoA/62Ir5nkVy8JNIBcm5L09AVLzEKLHc CTosBM5SDmSIqazEKdYujkab8yQHiu+shBpuMJznm3lknWOwMSQLaGcbRssZj9Ei 3ASy/CkNOyOXBfb3LQdDL5lXZPmOS/bjTCMbeDnAQijLyBGVCvHMhsEVoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsQmjJy8Vn5/MuBjCJZJPyR/S0uMB8GA1UdIwQY MBaAFGmZXOGFtg54YEnfVfFcnS7AXU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZmRiNjUtYzQ1ZC00ZGU2LWJmYjEt YjdjOTllYjE4ODM0LzEvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZmRiNjUtYzQ1ZC00ZGU2LWJmYjEtYjdjOTllYjE4ODM0 LzEvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV//0Bvy HtjG/UaQN7ZYJcc0VlH9YX2byx2S5G8iiKkppAijnFCFa1Gzj9mvru/0UaByBxeQ 94S8ZPfsZx5BYtKiivJYEHvZ7daR/O3zaUcw7i7IDxtdntwDr3dRa3LCfqAkXqsy CzHGeRtH6bjsvSyoQlP+QVYNl+OR0vACFS14MFI+pKLS1vwgfTo4G5LqZ0oFY675 Z0dEmeFVHJNpEOCpTV1GwHkijdtSQg9oIYugMgrAbudctMpOcIMLGNeAPLvYWPYs sHSYCzC2YWwOs+jzzjbF483AmG8nGZwGENywjf4iZipJGSodu79FGhcOt/1vFG9i FqbDTw7lA98P/Q== -----END CERTIFICATE-----Generated at Wed Dec 17 17:06:47 2025 by rpki-client