This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json) Hash identifier: Q0u2P5iPhkB9RLzIclIP/IWz2DGnyZWiLpdRRZS0hLw= Subject key identifier: F4:38:10:53:EA:CE:30:D6:09:BE:0F:DE:B1:38:23:A4:14:65:5A:FA Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03 Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03 Certificate serial: 019AF19B04DD8CF421A47DB755515C7A7549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: olb33EYCl1BGP8AzjwLKFCmXCm2Ogg2bQYMx+Xw+ynM=) 2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:04:dd:8c:f4:21:a4:7d:b7:55:51:5c:7a:75:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=f4381053eace30d609be0fdeb13823a414655afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:c8:a7:f4:a6:da:46:5b:a5:06:21:2c:5d: de:5f:f4:3f:3c:ac:b2:f7:b0:62:e7:48:55:4e:be: 53:03:27:6b:f4:82:f3:15:31:b7:61:51:a9:de:e2: 45:25:91:ce:f2:48:8a:93:47:0e:a9:fa:f1:49:ba: 42:10:36:38:3d:b7:8e:7f:b9:6a:49:85:cc:d4:c7: fb:14:31:60:d6:0a:47:75:51:e9:64:ba:73:6e:8e: ff:ba:f1:be:a7:d0:40:cd:1a:7d:75:66:29:93:41: 45:d0:ad:2a:2a:83:95:05:8a:12:fd:ff:37:41:82: 84:a1:3f:7d:92:b4:36:ff:6c:67:79:be:dc:85:e8: 83:2f:ea:41:7e:c1:ed:9c:85:97:e7:a4:67:cf:d4: 4c:3e:e9:61:4f:61:1b:84:e3:d7:31:16:49:d5:48: f7:68:6a:55:ab:23:5a:ff:f1:7e:3f:ee:fb:8d:7e: 91:5f:05:5d:8b:b1:ce:df:77:28:7d:f2:1e:96:f3: 77:a0:9e:e9:c1:cc:14:5c:58:03:07:80:c4:d1:7c: 5c:31:e3:4c:40:77:f7:c1:2a:fa:06:cc:f8:8e:cd: 40:f3:50:da:b4:84:9e:2e:2b:99:19:e3:5b:5e:7d: fb:30:c0:56:54:33:c4:41:e5:4a:ae:93:ee:e9:ab: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:38:10:53:EA:CE:30:D6:09:BE:0F:DE:B1:38:23:A4:14:65:5A:FA X509v3 Authority Key Identifier: keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e5:60:6c:09:78:01:69:b1:6a:ca:ea:ba:0f:99:3b:39:ed: cc:f2:bf:a2:a4:e8:39:ba:b8:35:75:1b:bf:a4:62:4b:b0:38: a6:9c:ef:b0:75:4f:1c:fe:56:9f:92:37:bf:02:a1:bd:b9:d0: 00:91:80:b4:27:72:52:ce:13:83:46:52:4a:f4:60:a3:42:44: f2:22:26:61:54:36:8f:c0:62:0e:31:65:43:90:8f:36:cf:80: be:80:bf:f7:6c:ef:83:95:9a:ba:c7:f2:b1:62:71:ab:c9:f1: af:ea:b5:85:b4:f6:55:6f:dc:9c:33:18:6f:88:2f:60:a1:30: 14:bf:a6:2b:ab:02:b2:2d:38:10:1e:aa:62:c5:5d:b2:f3:9a: d8:03:6e:19:47:8d:89:c3:1b:36:08:3e:be:3b:5d:7c:1b:5c: ef:f0:72:4f:7d:69:30:a7:38:16:1d:d4:8c:3d:e9:65:a9:20: 5d:37:68:0b:23:7d:b4:3b:7e:fc:63:28:3e:aa:7b:9d:89:5b: 4b:29:39:32:87:30:46:39:36:e4:fa:b3:9b:a5:d1:59:24:2d: fb:eb:5b:c4:27:25:7e:6e:12:f4:d1:68:07:23:5e:d0:cf:07: 97:c0:15:b1:1e:21:59:e0:41:4b:ab:a5:d3:20:80:da:2b:be: 8c:40:49:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwTdjPQhpH23VVFcenVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4 YjdhMDMwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD EyhmNDM4MTA1M2VhY2UzMGQ2MDliZTBmZGViMTM4MjNhNDE0NjU1YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1vIp/Sm2kZbpQYhLF3eX/Q/PKyy 97Bi50hVTr5TAydr9ILzFTG3YVGp3uJFJZHO8kiKk0cOqfrxSbpCEDY4PbeOf7lq SYXM1Mf7FDFg1gpHdVHpZLpzbo7/uvG+p9BAzRp9dWYpk0FF0K0qKoOVBYoS/f83 QYKEoT99krQ2/2xneb7cheiDL+pBfsHtnIWX56Rnz9RMPulhT2EbhOPXMRZJ1Uj3 aGpVqyNa//F+P+77jX6RXwVdi7HO33coffIelvN3oJ7pwcwUXFgDB4DE0XxcMeNM QHf3wSr6Bsz4js1A81DatISeLiuZGeNbXn37MMBWVDPEQeVKrpPu6ashFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ4EFPqzjDWCb4P3rE4I6QUZVr6MB8GA1UdIwQY MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt Njk1ZjRhOTI3NjEwLzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeVgbAl4 AWmxasrqug+ZOzntzPK/oqToObq4NXUbv6RiS7A4ppzvsHVPHP5Wn5I3vwKhvbnQ AJGAtCdyUs4Tg0ZSSvRgo0JE8iImYVQ2j8BiDjFlQ5CPNs+AvoC/92zvg5Wausfy sWJxq8nxr+q1hbT2VW/cnDMYb4gvYKEwFL+mK6sCsi04EB6qYsVdsvOa2ANuGUeN icMbNgg+vjtdfBtc7/ByT31pMKc4Fh3UjD3pZakgXTdoCyN9tDt+/GMoPqp7nYlb Syk5MocwRjk25Pqzm6XRWSQt++tbxCclfm4S9NFoByNe0M8Hl8AVsR4hWeBBS6ul 0yCA2iu+jEBJFA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:11 2025 by rpki-client