This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json) Hash identifier: z9ZaNCmbitDynuKdZoheACZS7EL0alzogWIKXT252po= Subject key identifier: 98:B9:F5:24:0B:BB:7D:93:AE:CB:06:D5:64:91:F2:0B:67:BF:9B:5C Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3 Certificate serial: 019AF1D1BDF98B0FC96F3FAE0D7AE9D16D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=) 2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: FtJ5P+0RkczBI+UqROok5TECD8MYafB/EPXWqSH5PKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bd:f9:8b:0f:c9:6f:3f:ae:0d:7a:e9:d1:6d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=98b9f5240bbb7d93aecb06d56491f20b67bf9b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:7b:49:91:80:c9:27:0d:88:a8:58:9f:b3: 64:15:7f:58:25:2d:af:8d:23:7a:b8:f5:ec:86:ca: ad:fc:15:c4:75:0b:c0:38:67:90:58:fd:f2:50:35: 4f:d3:89:1f:1a:0f:6e:0b:bc:97:04:a6:1c:18:82: c9:6a:58:00:71:75:d6:aa:d5:9d:62:38:fa:c2:56: d9:24:96:a3:f9:90:4c:58:0e:cd:1b:01:c6:ae:ed: e4:4f:c9:52:01:84:53:4a:31:6b:a6:ef:b8:76:fc: 0c:ad:b8:61:1b:df:d8:e2:28:63:6e:54:8c:63:8d: da:80:b8:50:0e:ad:cf:f8:39:04:92:b3:ad:80:9f: 3b:1c:87:a5:93:7f:5b:fc:5d:44:b9:d8:e8:8d:78: 6b:28:61:93:4c:47:8a:1b:92:16:a6:ee:1b:31:65: 58:ab:60:02:a0:b5:fd:de:d2:54:e0:ba:e3:9d:b4: 8b:33:cf:1b:b8:43:9b:e7:50:66:e0:28:0e:9f:c4: 9c:f6:9f:07:9f:cf:94:9f:f7:ec:d5:4f:be:57:81: d9:5a:e1:62:46:76:2a:25:23:01:cc:a9:ae:59:1f: fd:95:d5:ca:fb:6c:57:7e:09:1a:49:03:db:42:51: 81:00:55:6b:de:97:38:d3:37:cd:22:76:aa:54:26: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B9:F5:24:0B:BB:7D:93:AE:CB:06:D5:64:91:F2:0B:67:BF:9B:5C X509v3 Authority Key Identifier: keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e8:df:c0:60:2b:71:4d:4b:e4:19:ba:74:7e:b3:52:08:e9: db:37:3c:4c:a7:4b:cf:a6:78:9a:8d:8a:56:a9:3e:a2:72:00: 52:c9:63:4d:a2:d4:10:51:ae:7e:00:19:60:dd:ba:f2:6b:5d: 6c:8f:1a:bc:51:eb:3d:d1:7a:37:eb:63:ab:fe:3e:58:bf:7f: 89:c2:b1:46:ee:ef:6f:49:99:82:80:c4:8c:e0:f4:4a:c6:c6: d7:75:ed:05:1c:fd:9d:97:37:ba:68:4d:5e:18:23:1e:ec:74: c8:3b:c9:cf:8f:f0:4d:66:6f:63:b2:a1:e6:f0:75:67:49:94: 87:fa:76:7f:07:6d:10:c3:25:ed:da:b7:4d:06:8f:fe:2f:db: 9d:25:92:b2:f1:c5:ed:4b:92:c2:f3:6b:b2:04:85:d5:20:c2: 0d:8b:1f:cd:34:d9:63:8e:7f:a8:05:8d:ad:81:e5:d5:b0:56: 4f:c3:47:e1:e4:44:df:83:6d:67:4d:a3:20:2a:9a:50:b3:10: f3:29:08:02:75:d6:15:5b:90:08:32:61:b2:95:32:d5:fe:10: 75:8c:7a:bc:58:98:f5:30:54:1c:0b:65:11:a6:8d:bc:d3:41: 96:fa:c9:bd:1b:82:07:b2:75:7a:4e:18:b8:2d:3d:87:ec:71: f2:d2:90:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b35iw/Jbz+uDXrp0W2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTIxMjVlM2Q1M2NjNDgxMzM2MTA1NDgzZmNmZjcwMWZk YTFiYjMwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD Eyg5OGI5ZjUyNDBiYmI3ZDkzYWVjYjA2ZDU2NDkxZjIwYjY3YmY5YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ol7SZGAyScNiKhYn7NkFX9YJS2v jSN6uPXshsqt/BXEdQvAOGeQWP3yUDVP04kfGg9uC7yXBKYcGILJalgAcXXWqtWd Yjj6wlbZJJaj+ZBMWA7NGwHGru3kT8lSAYRTSjFrpu+4dvwMrbhhG9/Y4ihjblSM Y43agLhQDq3P+DkEkrOtgJ87HIelk39b/F1EudjojXhrKGGTTEeKG5IWpu4bMWVY q2ACoLX93tJU4LrjnbSLM88buEOb51Bm4CgOn8Sc9p8Hn8+Un/fs1U++V4HZWuFi RnYqJSMBzKmuWR/9ldXK+2xXfgkaSQPbQlGBAFVr3pc40zfNInaqVCY2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi59SQLu32TrssG1WSR8gtnv5tcMB8GA1UdIwQY MBaAFGmSEl49U8xIEzYQVIP8/3Af2huzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUt ODM3YzVlMTJiZDA0LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUtODM3YzVlMTJiZDA0 LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOjfwGAr cU1L5Bm6dH6zUgjp2zc8TKdLz6Z4mo2KVqk+onIAUsljTaLUEFGufgAZYN268mtd bI8avFHrPdF6N+tjq/4+WL9/icKxRu7vb0mZgoDEjOD0SsbG13XtBRz9nZc3umhN XhgjHux0yDvJz4/wTWZvY7Kh5vB1Z0mUh/p2fwdtEMMl7dq3TQaP/i/bnSWSsvHF 7UuSwvNrsgSF1SDCDYsfzTTZY45/qAWNrYHl1bBWT8NH4eRE34NtZ02jICqaULMQ 8ykIAnXWFVuQCDJhspUy1f4QdYx6vFiY9TBUHAtlEaaNvNNBlvrJvRuCB7J1ek4Y uC09h+xx8tKQ+g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:59 2025 by rpki-client