This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft File: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json) Hash identifier: QBBYKra8SRONEF/zIq8YBsHZjGI7UY9geoNnexYbh4w= Subject key identifier: 9F:51:F7:E7:2F:39:6B:40:5A:DD:8C:C8:53:67:71:39:89:49:2F:88 Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7 Certificate issuer: /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7 Certificate serial: 019AF31D5A4AF84351C7DDBCE1AA20F32FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft Manifest number: 1660 Signing time: Sat 06 Dec 2025 10:02:58 +0000 Manifest this update: Sat 06 Dec 2025 10:02:58 +0000 Manifest next update: Sun 07 Dec 2025 10:02:58 +0000 Files and hashes: 1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=) 2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: xqifFNsA+tIkUuisBm+PLfOPBpPYqSFKyYfqaRCkZHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5a:4a:f8:43:51:c7:dd:bc:e1:aa:20:f3:2f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7 Validity Not Before: Dec 6 10:02:58 2025 GMT Not After : Dec 7 10:02:58 2025 GMT Subject: CN=9f51f7e72f396b405add8cc85367713989492f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:2c:98:a3:34:f3:23:73:08:dd:20:4b:96: bd:54:80:f6:28:8b:7e:cf:a6:fa:84:55:02:72:51: fe:b3:77:a1:22:37:e3:33:07:76:27:c4:28:88:79: a6:77:5b:a1:d5:94:ea:ed:72:15:fd:c1:23:50:9c: 27:db:b1:23:35:d1:a6:5a:67:fa:c8:50:95:c2:b9: f9:05:c6:0f:81:c9:93:e7:c8:5f:8c:a7:6f:ca:32: 12:bc:75:7a:15:c9:7d:0e:06:fa:ae:3b:41:00:a7: 59:ec:24:d3:a8:b2:b6:d6:9a:82:a0:0c:d9:85:4d: a9:25:1f:ab:48:91:67:29:15:d0:be:21:73:96:a2: 01:bb:ed:1b:75:43:9a:10:07:f2:7c:0a:39:ab:24: 93:86:40:2b:a4:53:ce:03:8c:7f:3e:11:3a:70:8b: 7a:ed:cf:ad:7e:32:ab:1a:37:5c:9e:ba:26:1f:76: 70:ee:3b:23:e0:7c:02:01:77:43:79:38:c6:27:c2: c1:f8:ae:d3:3e:5c:fa:1e:48:1e:8b:a1:18:ca:50: ad:76:d6:ba:18:bc:af:40:fb:e8:a9:5f:63:d4:3f: fb:b0:8a:ef:36:ec:1c:04:e6:08:53:25:13:7d:b9: 68:49:8d:8a:b8:d5:31:6f:77:d4:08:42:80:0f:74: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:51:F7:E7:2F:39:6B:40:5A:DD:8C:C8:53:67:71:39:89:49:2F:88 X509v3 Authority Key Identifier: keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:57:2f:2b:62:78:ed:00:31:73:22:1b:57:92:a7:c4:5c:16: dc:f7:9c:b3:18:39:86:6e:d3:d5:69:d7:d0:89:33:88:a2:48: 29:92:ec:36:af:db:cb:07:7e:b0:b6:bf:76:47:5f:d1:b3:83: db:e4:cc:d6:b9:44:61:f8:e0:bb:bf:3f:62:1d:a3:f5:2b:74: 9a:f8:eb:07:78:51:8b:ab:a0:fe:76:01:38:9b:fa:94:d2:e4: 92:f1:53:0c:35:5f:de:ff:7c:e9:ed:39:a6:b8:be:eb:84:1e: 71:b0:88:78:31:33:1f:02:f9:d8:9b:26:82:2a:92:2c:ca:1d: 11:a6:e8:74:f3:7b:38:e6:52:26:2d:af:68:d1:cb:f3:f4:b5: 61:da:10:70:68:94:3e:28:89:91:c0:00:46:48:50:0e:50:39: 1e:94:49:84:29:58:30:ba:06:85:80:f8:c5:4c:82:3a:1a:22: 6e:ed:67:6f:9b:4a:ce:04:76:f9:04:7a:58:47:f6:2b:52:df: de:65:fc:6c:d9:a8:e3:06:76:85:3b:76:f1:47:eb:14:9e:6c: 21:f0:08:f3:e4:ad:7d:0f:ac:b8:af:1e:da:30:8d:1c:ff:a9: 40:64:09:45:5a:cd:02:04:f2:5e:cd:19:2e:85:9e:ea:10:56: c9:fc:ae:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVpK+ENRx9284aog8y/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZTAxY2M4ZjhlNmU1ZWM3NTA5NjBkOWE3MDQ1MTBkZmY5 NTcyZjcwHhcNMjUxMjA2MTAwMjU4WhcNMjUxMjA3MTAwMjU4WjAzMTEwLwYDVQQD Eyg5ZjUxZjdlNzJmMzk2YjQwNWFkZDhjYzg1MzY3NzEzOTg5NDkyZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYssmKM08yNzCN0gS5a9VID2KIt+ z6b6hFUCclH+s3ehIjfjMwd2J8QoiHmmd1uh1ZTq7XIV/cEjUJwn27EjNdGmWmf6 yFCVwrn5BcYPgcmT58hfjKdvyjISvHV6Fcl9Dgb6rjtBAKdZ7CTTqLK21pqCoAzZ hU2pJR+rSJFnKRXQviFzlqIBu+0bdUOaEAfyfAo5qySThkArpFPOA4x/PhE6cIt6 7c+tfjKrGjdcnromH3Zw7jsj4HwCAXdDeTjGJ8LB+K7TPlz6Hkgei6EYylCtdta6 GLyvQPvoqV9j1D/7sIrvNuwcBOYIUyUTfbloSY2KuNUxb3fUCEKAD3QOGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9R9+cvOWtAWt2MyFNncTmJSS+IMB8GA1UdIwQY MBaAFGngHMj45uXsdQlg2acEUQ3/lXL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVBY3lQam01ZXgxQ1dEWnB3UlJEZi1WY3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NDRlZWItZTA2NC00ZmVmLTllOTAt NTY4NmQ0MzEzNTk1LzEvYWVBY3lQam01ZXgxQ1dEWnB3UlJEZi1WY3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NDRlZWItZTA2NC00ZmVmLTllOTAtNTY4NmQ0MzEzNTk1 LzEvYWVBY3lQam01ZXgxQ1dEWnB3UlJEZi1WY3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFcvK2J4 7QAxcyIbV5KnxFwW3Pecsxg5hm7T1WnX0IkziKJIKZLsNq/bywd+sLa/dkdf0bOD 2+TM1rlEYfjgu78/Yh2j9St0mvjrB3hRi6ug/nYBOJv6lNLkkvFTDDVf3v986e05 pri+64QecbCIeDEzHwL52JsmgiqSLModEabodPN7OOZSJi2vaNHL8/S1YdoQcGiU PiiJkcAARkhQDlA5HpRJhClYMLoGhYD4xUyCOhoibu1nb5tKzgR2+QR6WEf2K1Lf 3mX8bNmo4wZ2hTt28UfrFJ5sIfAI8+StfQ+suK8e2jCNHP+pQGQJRVrNAgTyXs0Z LoWe6hBWyfyuNw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:02 2025 by rpki-client