This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json) Hash identifier: ub8kgkLUDd3xnXehySbmmDVp8axY/wznPnsMtnpoJhQ= Subject key identifier: 7F:82:0A:18:1B:59:2C:B5:6F:35:D6:50:7B:81:0E:C4:F9:D7:62:22 Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b Certificate serial: 019AF19AC751A482731CAE10768E8D6499E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: b4dqa9+V9aCOMv4NSE2adY3Syf4Rj7AnVF+isrZEb94=) 2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c7:51:a4:82:73:1c:ae:10:76:8e:8d:64:99:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=7f820a181b592cb56f35d6507b810ec4f9d76222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:1d:9d:de:f5:32:2f:f6:17:f4:07:72:ef: 65:66:73:fe:99:3a:07:25:b1:2c:46:a6:d6:f0:0f: 5c:70:d1:12:17:75:c1:0e:2d:b8:e0:79:2c:87:6f: af:d5:68:c1:94:ae:23:49:d8:94:36:ce:96:79:8f: 7f:1d:f8:23:0d:bb:ff:d3:c1:55:ed:12:74:b1:9f: 29:5b:16:04:ad:b1:e6:cf:42:f9:de:e1:dd:f3:e8: 99:bd:a1:52:e5:ee:03:73:4d:71:7e:d5:1e:4a:2c: a6:de:7f:7d:59:75:8b:26:87:37:82:01:57:e8:ba: 3f:18:18:11:33:84:88:85:31:1e:d3:fa:63:a9:47: 1b:cc:f8:a8:fc:8b:b4:75:2e:c6:60:e9:16:9b:84: 87:b1:21:fa:77:9d:b0:52:5d:73:3c:c1:6e:90:9f: b1:6d:3d:69:ba:60:ae:87:e7:8e:82:55:7e:4d:33: 53:7a:76:7e:65:bb:c3:97:16:17:cb:79:38:21:08: 80:f7:53:5b:fb:d9:9c:8a:01:1a:30:ae:1f:d3:31: 6e:0b:69:4e:61:69:5a:44:4c:f9:1f:6b:e2:5d:57: bb:df:b2:b1:fa:db:73:3c:a6:ac:55:d2:04:16:ef: cf:0b:a2:5b:de:01:c1:ce:47:e6:95:ba:46:da:c3: 38:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:0A:18:1B:59:2C:B5:6F:35:D6:50:7B:81:0E:C4:F9:D7:62:22 X509v3 Authority Key Identifier: keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c8:d1:a7:d9:29:2b:c6:2e:d3:16:7f:7b:b9:86:ce:0f:2e: d7:8f:28:cd:64:2f:61:ae:15:f1:86:6d:65:5b:9d:fa:9a:5e: 4a:d4:9e:31:1b:7d:c0:d8:12:98:cc:1c:bf:bd:61:0a:be:36: 48:3e:cd:3f:cd:b5:a9:f3:a6:23:22:19:9c:a9:0d:e3:35:87: 3c:96:a3:27:13:63:cf:31:40:fc:22:f7:41:97:4f:8e:af:ce: ea:95:98:a4:7d:31:95:2f:6e:e3:29:c7:18:0f:57:0d:04:c8: 0e:e2:81:78:ab:2a:94:4b:a7:e6:4b:f0:ec:8b:27:c5:26:3b: 46:81:0f:28:f6:de:38:c7:be:a4:21:24:7c:70:a7:d1:9b:31: 17:bc:f7:7b:11:ce:97:c9:56:9d:17:36:e9:e9:cd:e8:ca:03: b2:88:55:45:1e:0d:bd:70:ca:cd:c0:02:18:7a:52:e5:a6:97: 40:b3:08:de:45:e4:06:a0:f7:79:64:84:66:2e:67:92:79:29: f5:20:bd:25:1f:4c:85:5d:56:9c:06:86:d7:e7:43:60:72:23: 06:f3:eb:55:a3:9f:05:ba:0a:fd:10:be:2b:2b:f8:7c:9c:95: 6b:52:33:f1:47:6e:5c:f7:c5:d0:07:20:98:e7:50:7c:9a:97: 35:9e:2a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsdRpIJzHK4Qdo6NZJnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMjExNjQzMTg3ZWY5MjU4YTEzMjVjZGZjMWQxYmY3Mzgz YmU4NWIwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD Eyg3ZjgyMGExODFiNTkyY2I1NmYzNWQ2NTA3YjgxMGVjNGY5ZDc2MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqwdnd71Mi/2F/QHcu9lZnP+mToH JbEsRqbW8A9ccNESF3XBDi244Hksh2+v1WjBlK4jSdiUNs6WeY9/HfgjDbv/08FV 7RJ0sZ8pWxYErbHmz0L53uHd8+iZvaFS5e4Dc01xftUeSiym3n99WXWLJoc3ggFX 6Lo/GBgRM4SIhTEe0/pjqUcbzPio/Iu0dS7GYOkWm4SHsSH6d52wUl1zPMFukJ+x bT1pumCuh+eOglV+TTNTenZ+ZbvDlxYXy3k4IQiA91Nb+9mcigEaMK4f0zFuC2lO YWlaREz5H2viXVe737Kx+ttzPKasVdIEFu/PC6Jb3gHBzkfmlbpG2sM4BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+CChgbWSy1bzXWUHuBDsT512IiMB8GA1UdIwQY MBaAFGohFkMYfvklihMlzfwdG/c4O+hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYt ZjA2ZmM0OGM4ZTRjLzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYtZjA2ZmM0OGM4ZTRj LzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsjRp9kp K8Yu0xZ/e7mGzg8u148ozWQvYa4V8YZtZVud+ppeStSeMRt9wNgSmMwcv71hCr42 SD7NP821qfOmIyIZnKkN4zWHPJajJxNjzzFA/CL3QZdPjq/O6pWYpH0xlS9u4ynH GA9XDQTIDuKBeKsqlEun5kvw7IsnxSY7RoEPKPbeOMe+pCEkfHCn0ZsxF7z3exHO l8lWnRc26enN6MoDsohVRR4NvXDKzcACGHpS5aaXQLMI3kXkBqD3eWSEZi5nknkp 9SC9JR9MhV1WnAaG1+dDYHIjBvPrVaOfBboK/RC+Kyv4fJyVa1Iz8UduXPfF0Acg mOdQfJqXNZ4qFw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:22 2025 by rpki-client