This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json) Hash identifier: 0oGlQqni0aytOiXWIgn09GRgsjjgivDK2XCTiwi/k1c= Subject key identifier: 7D:2F:D8:03:7F:24:69:22:37:33:F3:D3:0B:E2:FC:65:AD:CD:BA:2B Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04 Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704 Certificate serial: 019B3C106258520084E0679845B2AEAC6828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 14:01:05 +0000 Manifest this update: Sat 20 Dec 2025 14:01:05 +0000 Manifest next update: Sun 21 Dec 2025 14:01:05 +0000 Files and hashes: 1: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: o8ySBswQoCWHjtTewnTRKtsXByV8kR0BgE4B/YTWP8A=) 2: haMdABaXVysRqHMnxwzwnxPmy3c.roa (hash: qOyf4cvYsbSBRT8OdzzVWfnIBaN7hD9KoD7F7avNbKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:62:58:52:00:84:e0:67:98:45:b2:ae:ac:68:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704 Validity Not Before: Dec 20 14:01:05 2025 GMT Not After : Dec 21 14:01:05 2025 GMT Subject: CN=7d2fd8037f2469223733f3d30be2fc65adcdba2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:ec:e9:6d:ca:03:6f:6a:d3:7c:1f:84:29: 53:10:59:cb:ea:a6:33:9b:28:37:0d:b1:66:79:79: 1c:85:ae:c4:e0:27:84:56:6d:8f:24:2a:eb:5b:a8: 63:ca:60:ad:bf:f4:5f:d6:b2:5d:46:e1:b6:f8:9d: f4:b4:b2:4c:14:e4:c6:5e:a9:c4:3d:3d:6c:00:7a: 7e:bf:bd:cd:75:fe:b0:40:0f:d4:83:62:0a:34:61: df:5a:d1:ff:02:10:a1:0f:69:a2:19:a7:9c:65:98: fd:56:36:7a:00:66:ff:15:9a:f3:b8:23:4a:8a:02: 20:e5:4b:c5:6a:83:dc:69:b1:1f:62:66:32:85:55: 4d:3c:9f:ac:68:4c:f3:a9:a6:72:46:f0:0a:ed:f6: 45:47:81:f0:a1:0f:50:80:8b:b3:2a:c3:9c:de:a7: e3:e0:e5:2c:0c:42:3c:5a:eb:44:4e:f3:b3:2b:22: f6:a6:a2:d4:6e:be:49:9a:53:a9:8d:5e:a8:8a:a6: b9:3b:33:d7:88:10:96:21:14:65:29:2a:6f:0b:2c: 6b:49:5b:f0:a6:4e:19:4a:ce:52:a6:5b:bc:9b:53: 5c:bc:7b:94:b3:d8:5f:95:a5:e8:32:fe:62:6d:47: cb:91:7c:af:f6:b4:cb:65:11:f2:3b:76:3c:59:f5: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:D8:03:7F:24:69:22:37:33:F3:D3:0B:E2:FC:65:AD:CD:BA:2B X509v3 Authority Key Identifier: keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:db:fa:12:bb:20:e4:1f:5d:15:af:d9:d8:cb:a4:fc:e4:ed: 62:09:6a:91:40:03:a9:a1:7d:74:75:48:50:6d:48:ba:1e:25: 08:1d:1a:bc:69:18:3e:46:6e:4c:35:97:69:0f:7d:a5:e9:ee: 0f:47:57:97:ed:92:f5:0c:dd:19:e7:f9:59:2a:9c:53:6a:e9: b1:da:7c:52:e8:60:25:d5:dd:3a:cb:b5:77:fa:cf:0c:aa:44: 9d:a5:d6:59:88:76:7f:11:6c:1a:34:50:08:29:77:df:c2:14: 00:0d:1a:30:a3:34:6c:4b:0d:44:cb:c8:c8:e9:54:c5:74:c2: 1f:fa:52:e8:30:aa:00:42:b9:0e:b2:49:e0:d3:83:dc:0b:39: 6c:81:ca:24:48:55:09:16:0d:29:bb:5e:94:b3:54:ba:a6:c9: cc:49:87:a8:f1:e4:89:d0:b6:99:28:80:03:36:1b:8b:3c:3c: ad:e6:46:61:3f:90:ac:6d:77:7e:de:92:bb:b5:59:72:9c:21: 0f:f6:54:2c:eb:66:f1:37:75:8f:1a:0e:33:8b:fe:b1:6d:cd: ef:ad:55:f3:01:fd:fe:70:18:62:b2:c0:f1:18:1f:f7:df:86: 61:b5:2b:51:96:5b:ff:98:9f:4a:f9:0b:b2:20:b3:40:9c:92: 0c:63:9b:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGJYUgCE4GeYRbKurGgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MjI2Y2ViNDBjNjcxZjMwYWNmMTFmYTM2YjhkN2QxYzY3 NTQ3MDQwHhcNMjUxMjIwMTQwMTA1WhcNMjUxMjIxMTQwMTA1WjAzMTEwLwYDVQQD Eyg3ZDJmZDgwMzdmMjQ2OTIyMzczM2YzZDMwYmUyZmM2NWFkY2RiYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Ls6W3KA29q03wfhClTEFnL6qYz myg3DbFmeXkcha7E4CeEVm2PJCrrW6hjymCtv/Rf1rJdRuG2+J30tLJMFOTGXqnE PT1sAHp+v73Ndf6wQA/Ug2IKNGHfWtH/AhChD2miGaecZZj9VjZ6AGb/FZrzuCNK igIg5UvFaoPcabEfYmYyhVVNPJ+saEzzqaZyRvAK7fZFR4HwoQ9QgIuzKsOc3qfj 4OUsDEI8WutETvOzKyL2pqLUbr5JmlOpjV6oiqa5OzPXiBCWIRRlKSpvCyxrSVvw pk4ZSs5Splu8m1NcvHuUs9hflaXoMv5ibUfLkXyv9rTLZRHyO3Y8WfWjMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0v2AN/JGkiNzPz0wvi/GWtzborMB8GA1UdIwQY MBaAFGkibOtAxnHzCs8R+ja419HGdUcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWIt YzljOGFiMTg4ODUzLzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWItYzljOGFiMTg4ODUz LzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtv6Ersg 5B9dFa/Z2Muk/OTtYglqkUADqaF9dHVIUG1Iuh4lCB0avGkYPkZuTDWXaQ99penu D0dXl+2S9QzdGef5WSqcU2rpsdp8UuhgJdXdOsu1d/rPDKpEnaXWWYh2fxFsGjRQ CCl338IUAA0aMKM0bEsNRMvIyOlUxXTCH/pS6DCqAEK5DrJJ4NOD3As5bIHKJEhV CRYNKbtelLNUuqbJzEmHqPHkidC2mSiAAzYbizw8reZGYT+QrG13ft6Su7VZcpwh D/ZULOtm8Td1jxoOM4v+sW3N761V8wH9/nAYYrLA8Rgf99+GYbUrUZZb/5ifSvkL siCzQJySDGObDg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:01 2025 by rpki-client