This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json) Hash identifier: RngQQ5maOsZtXja8MQSaSM4wai4SkM0+MkjYSTZ/+4c= Subject key identifier: 00:BE:BD:DE:C7:30:2A:9B:37:ED:01:21:9F:D0:95:F0:08:06:10:06 Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95 Certificate serial: 019AF23FD479BBE97148FADFA493F6ED049F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: VNzG3ccHyaf-Ofv5con_nysGgHU.roa (hash: 2VzIYqdKT2jmdmX+vgJ//7c0c5nGJoT0dOFUmm0WlfQ=) 2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: rh3idoEDX3OrwqrODBuUwoD+ehAEHQ5sZbmLaB5iIPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:79:bb:e9:71:48:fa:df:a4:93:f6:ed:04:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=00bebddec7302a9b37ed01219fd095f008061006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:15:5d:b3:ae:03:30:e9:47:60:0a:a1:35: 33:4c:6f:09:3a:aa:a9:a0:51:47:d8:17:09:e7:01: 2b:6c:17:eb:d7:ae:70:4a:47:12:bd:60:e7:c5:ed: ff:8b:22:fe:f3:ac:4d:b7:54:ff:9c:a1:76:cc:51: 88:6d:0b:02:88:17:32:5f:72:b2:40:44:cb:59:86: c0:99:d0:8b:2e:d4:d9:15:ec:97:0b:5c:40:0e:a5: fb:1c:c3:97:8d:96:46:0a:6e:e2:f2:2e:d6:2b:c4: 49:f2:b3:2f:5c:be:22:06:4b:b1:a6:5f:f2:23:50: f7:b5:f7:b9:ea:2a:94:31:d9:84:b0:38:c4:13:a0: b0:e7:08:f3:2d:81:09:2a:e7:59:8f:b5:52:de:9c: dc:d3:dd:7f:71:2e:60:3f:fa:fb:0b:bb:46:79:34: 5d:73:6f:a6:8e:b4:b5:69:fa:94:80:3f:97:25:e2: eb:80:81:b4:cb:4a:96:f6:2c:58:3a:46:06:5f:c0: 12:5b:7e:cf:be:d0:77:2a:29:86:ea:b5:2a:84:13: 71:71:90:c7:e1:24:94:54:ea:d8:6c:df:21:ff:82: ae:8c:85:15:51:d5:d0:86:2f:7d:f0:21:a8:f4:0c: b0:22:99:65:80:98:00:94:85:a2:5d:66:75:cc:1e: 98:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:BD:DE:C7:30:2A:9B:37:ED:01:21:9F:D0:95:F0:08:06:10:06 X509v3 Authority Key Identifier: keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5a:16:76:27:df:e0:90:12:93:7e:91:c0:7e:d5:85:dd:c7: ec:79:03:9b:66:30:f5:53:c0:a4:29:dc:ae:27:5e:93:aa:05: 65:6a:04:d9:09:2e:52:de:de:b8:fa:1b:21:eb:51:f0:81:b3: 55:4a:6c:ef:66:f5:a9:7f:7b:47:60:ef:e0:5f:4d:8a:d0:ba: 74:8e:0d:e2:2e:fb:33:58:8a:4f:ae:e6:ea:df:fc:0f:4a:21: 8d:75:ae:39:fb:97:39:4d:c2:d1:98:3d:e8:29:cd:08:6b:0a: 3e:7d:ca:9e:e4:5d:05:8a:80:85:59:a2:bb:57:b8:38:82:40: 2d:cb:df:c8:d0:79:2a:28:1a:60:80:0f:c0:50:5e:58:72:74: d8:6b:76:17:9d:dd:a1:e4:e2:08:61:32:3e:da:69:55:2f:4c: 4c:78:ca:ed:d5:9c:9b:f3:96:76:ef:e4:51:fd:56:81:1f:04: 61:28:e5:d3:71:e5:54:cb:1f:29:64:d3:3a:52:fa:43:47:e2: da:52:bb:d5:9e:7b:68:b6:13:49:c5:c9:fa:ab:2b:97:74:e3: 0c:65:40:ff:48:30:f1:38:38:51:8a:54:15:76:d9:39:64:4d: 95:93:01:21:ee:49:0d:28:49:f9:72:8c:e7:82:17:a3:d8:00: 4b:11:5f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9R5u+lxSPrfpJP27QSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTAxODI3MTQ0YTMxODhiZWExY2NlZTU4NjU2ZmQ2NDI5 ZDhmOTUwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EygwMGJlYmRkZWM3MzAyYTliMzdlZDAxMjE5ZmQwOTVmMDA4MDYxMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpEVXbOuAzDpR2AKoTUzTG8JOqqp oFFH2BcJ5wErbBfr165wSkcSvWDnxe3/iyL+86xNt1T/nKF2zFGIbQsCiBcyX3Ky QETLWYbAmdCLLtTZFeyXC1xADqX7HMOXjZZGCm7i8i7WK8RJ8rMvXL4iBkuxpl/y I1D3tfe56iqUMdmEsDjEE6Cw5wjzLYEJKudZj7VS3pzc091/cS5gP/r7C7tGeTRd c2+mjrS1afqUgD+XJeLrgIG0y0qW9ixYOkYGX8ASW37PvtB3KimG6rUqhBNxcZDH 4SSUVOrYbN8h/4KujIUVUdXQhi998CGo9AywIpllgJgAlIWiXWZ1zB6YXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC+vd7HMCqbN+0BIZ/QlfAIBhAGMB8GA1UdIwQY MBaAFK5QGCcUSjGIvqHM7lhlb9ZCnY+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODIt MDk4NmQ4YjBjNmQ5LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODItMDk4NmQ4YjBjNmQ5 LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVoWdiff 4JASk36RwH7Vhd3H7HkDm2Yw9VPApCncridek6oFZWoE2QkuUt7euPobIetR8IGz VUps72b1qX97R2Dv4F9NitC6dI4N4i77M1iKT67m6t/8D0ohjXWuOfuXOU3C0Zg9 6CnNCGsKPn3KnuRdBYqAhVmiu1e4OIJALcvfyNB5KigaYIAPwFBeWHJ02Gt2F53d oeTiCGEyPtppVS9MTHjK7dWcm/OWdu/kUf1WgR8EYSjl03HlVMsfKWTTOlL6Q0fi 2lK71Z57aLYTScXJ+qsrl3TjDGVA/0gw8Tg4UYpUFXbZOWRNlZMBIe5JDShJ+XKM 54IXo9gASxFf1w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:08 2025 by rpki-client