This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json) Hash identifier: VWNtrp63qFk0v3t+n4Z5pzYsZ2pnoMy2WD1PMuR5Oj4= Subject key identifier: 18:CE:52:AD:31:55:AA:55:54:CE:CD:DF:79:5D:71:55:58:AB:4E:5A Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Certificate serial: 019AF12CBB65FD0244A289AF9C4375BA1B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft Manifest number: 13A7 Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: RLYdgFJvn-SCdRlbujqXRDojg9w.roa (hash: YgjAw3s158Hv/sBNq0Uj9//CRqxP6bn0sO/g49znFhw=) 2: _mq-Iedkuxj7G2-f6lHJz5Cp1pY.roa (hash: iMmq6hmw4oHjx4r8r/0Qs7tCaSPdyiDBIM5hIG283pc=) 3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: /qPQl3aWmua8AVz+xLK4Nv9OmEGwwdrdZ8/2AyDd+jY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bb:65:fd:02:44:a2:89:af:9c:43:75:ba:1b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=18ce52ad3155aa5554cecddf795d715558ab4e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:f5:61:2e:a3:8f:bd:8f:3d:ed:9e:ad:70: ec:71:17:c7:93:66:2a:8b:59:ea:fd:b8:24:98:47: 2e:1d:84:14:c4:ec:ad:89:55:76:1f:ed:16:5b:1b: 93:2d:7f:17:08:e9:41:2b:80:2c:28:00:7c:d0:a2: ff:39:06:89:09:97:07:f7:c3:50:53:95:f1:4e:0c: 64:5a:cc:f5:10:c2:54:6b:f1:82:05:f7:4c:45:0b: ca:42:3d:3f:4d:bc:8f:9e:d9:b8:48:df:be:37:db: d0:e0:02:45:ca:dc:03:07:f9:68:7f:e1:0e:76:20: 44:bf:45:4d:0a:44:69:8a:fb:35:5a:de:27:56:45: 74:80:06:eb:18:4a:0b:6d:d1:5e:83:da:29:73:fe: da:a4:79:11:18:48:f7:6e:0a:46:3a:92:4f:b6:54: 24:bf:28:5e:4f:e1:55:8f:c7:2f:d1:83:e9:91:8e: be:f9:16:5f:a6:a5:3c:33:08:71:04:5f:56:52:4e: 04:f5:13:de:7a:85:f4:fa:22:57:6b:1e:b8:f1:d4: 13:e4:62:2e:b1:6c:a2:f4:8b:95:e9:0e:c8:44:70: f4:6f:41:0e:85:ad:7a:ce:d3:81:31:83:a4:67:6a: c7:ce:42:8a:86:24:66:26:cf:8a:83:e0:8d:29:94: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CE:52:AD:31:55:AA:55:54:CE:CD:DF:79:5D:71:55:58:AB:4E:5A X509v3 Authority Key Identifier: keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:27:da:41:88:b5:d2:b0:10:bb:49:55:d0:5d:e2:44:20:2e: dc:8c:86:be:6e:3b:6f:d3:a4:22:09:0a:4e:07:4a:a7:16:07: 44:a9:ed:fe:4b:b7:cc:e9:6a:c2:dd:06:1e:e4:9b:47:82:6b: ea:e2:7c:e2:e4:af:14:73:0e:80:cd:95:1f:26:ff:65:c7:2f: 61:48:f8:4c:b4:23:77:53:b7:42:42:ce:07:02:18:24:88:4d: eb:15:50:d0:8e:bd:41:c1:af:f0:95:73:29:fc:3f:d0:46:45: 1d:e5:6a:2b:af:93:5b:3c:eb:b6:46:8e:ba:32:f1:e9:bc:b1: ca:4f:d6:c5:64:5c:d5:29:ce:de:cb:f7:62:3a:7b:04:4f:05: 5d:42:09:cc:34:f9:81:82:94:38:9e:b8:5c:f1:ad:31:35:90: fc:1d:d5:68:0c:80:d9:f6:72:2b:c3:97:21:bd:20:c5:cb:9e: 0a:b5:47:29:f2:d6:81:80:49:3c:24:84:30:67:b7:f5:6e:02: d1:ad:51:54:7c:a0:98:57:16:2e:a7:6d:cd:9a:39:84:c8:17: 38:a9:e2:94:5a:13:1f:f3:9c:14:b0:51:0f:0e:b1:7b:0a:8d: 2c:92:af:d8:01:59:7f:86:49:e7:23:12:5a:68:6b:67:bf:fe: 85:3b:1d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLtl/QJEoomvnEN1uhuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDRkYWY4NThiN2IwMGI1MWNiYjk0YWZiMjhmMDNlYTIx ZTQxMWQwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EygxOGNlNTJhZDMxNTVhYTU1NTRjZWNkZGY3OTVkNzE1NTU4YWI0ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mf1YS6jj72PPe2erXDscRfHk2Yq i1nq/bgkmEcuHYQUxOytiVV2H+0WWxuTLX8XCOlBK4AsKAB80KL/OQaJCZcH98NQ U5XxTgxkWsz1EMJUa/GCBfdMRQvKQj0/TbyPntm4SN++N9vQ4AJFytwDB/lof+EO diBEv0VNCkRpivs1Wt4nVkV0gAbrGEoLbdFeg9opc/7apHkRGEj3bgpGOpJPtlQk vyheT+FVj8cv0YPpkY6++RZfpqU8MwhxBF9WUk4E9RPeeoX0+iJXax648dQT5GIu sWyi9IuV6Q7IRHD0b0EOha16ztOBMYOkZ2rHzkKKhiRmJs+Kg+CNKZQDHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjOUq0xVapVVM7N33ldcVVYq05aMB8GA1UdIwQY MBaAFGkE2vhYt7ALUcu5Svso8D6iHkEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQt OGFkMWQwZjgwMjE3LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQtOGFkMWQwZjgwMjE3 LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCfaQYi1 0rAQu0lV0F3iRCAu3IyGvm47b9OkIgkKTgdKpxYHRKnt/ku3zOlqwt0GHuSbR4Jr 6uJ84uSvFHMOgM2VHyb/ZccvYUj4TLQjd1O3QkLOBwIYJIhN6xVQ0I69QcGv8JVz Kfw/0EZFHeVqK6+TWzzrtkaOujLx6byxyk/WxWRc1SnO3sv3Yjp7BE8FXUIJzDT5 gYKUOJ64XPGtMTWQ/B3VaAyA2fZyK8OXIb0gxcueCrVHKfLWgYBJPCSEMGe39W4C 0a1RVHygmFcWLqdtzZo5hMgXOKnilFoTH/OcFLBRDw6xewqNLJKv2AFZf4ZJ5yMS WmhrZ7/+hTsdbA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:54 2025 by rpki-client