This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json) Hash identifier: FiGh1LsKTbwoAwf48Nx6eZ1ckNEZPdOmQ52ac6aQzoY= Subject key identifier: C9:D2:15:DA:58:4C:C1:5E:74:7D:F8:11:6D:FB:45:BC:B2:58:D7:86 Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba Certificate serial: 019B3721334E986154CB1CA2330F7EAC74A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 15:01:21 +0000 Manifest this update: Fri 19 Dec 2025 15:01:21 +0000 Manifest next update: Sat 20 Dec 2025 15:01:21 +0000 Files and hashes: 1: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (hash: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=) 2: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: c+FdFFqsCE80RBKxyd79IVfolQTSuqdb55EevX+/z2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:33:4e:98:61:54:cb:1c:a2:33:0f:7e:ac:74:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba Validity Not Before: Dec 19 15:01:21 2025 GMT Not After : Dec 20 15:01:21 2025 GMT Subject: CN=c9d215da584cc15e747df8116dfb45bcb258d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:88:47:2b:cd:4f:16:d4:bc:91:4d:45:e6:e6: b1:c8:50:33:3e:02:f3:46:bc:8d:35:d5:cd:47:00: 9d:54:ae:cf:fc:b9:4c:7f:f3:4d:f5:58:04:f1:e8: 46:bf:11:c4:f6:16:fb:6d:50:d1:65:af:21:70:a5: a0:05:2d:5f:a0:6b:f1:f6:10:cc:5c:3e:e6:b9:9e: 93:89:b5:c3:e3:4b:32:30:9e:13:97:ce:cf:28:4d: 9b:76:ab:7f:65:12:b3:5c:9d:95:84:ee:86:f8:9b: 8a:ec:3a:b3:38:f3:02:17:91:bb:bf:3d:08:31:c7: e9:ae:1a:ef:e9:51:d8:49:66:08:9c:1e:fc:e4:5d: af:ec:d9:84:bb:8f:ec:9f:37:fd:8d:5c:fd:48:6f: 9d:20:d5:a2:22:93:0f:64:7c:79:a3:0d:de:06:d5: dd:77:ff:ce:3c:25:54:86:db:96:96:e4:af:58:ba: 0b:94:6e:78:9e:3b:07:96:4e:32:31:83:07:12:b9: bc:a3:d0:58:f5:91:2b:24:9c:42:37:2d:8a:56:23: b3:c0:b0:ff:38:19:03:10:42:c5:63:03:6f:9c:5e: cd:8a:84:ca:7e:94:e4:3a:78:f3:19:1c:9c:d8:de: 23:00:4a:0f:17:16:85:34:ae:80:24:5a:2e:76:f8: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:15:DA:58:4C:C1:5E:74:7D:F8:11:6D:FB:45:BC:B2:58:D7:86 X509v3 Authority Key Identifier: keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5c:8e:ba:83:3e:83:2f:6c:15:9f:57:5e:8b:89:15:87:d8: ee:ab:21:e3:76:9b:2e:7a:57:18:b5:22:cc:9b:56:1e:aa:c2: 88:23:86:bb:5a:23:4c:f8:52:f7:b5:0c:e7:95:5b:9d:16:9d: 36:10:71:80:c7:c1:d1:20:0a:f7:1d:d8:cf:ec:ab:18:a8:2a: 66:1e:6d:1f:23:8d:da:6d:2e:13:62:ce:db:b0:05:b6:62:2b: 60:b0:38:8b:94:7b:f4:9b:3a:af:a0:7f:e7:58:9f:83:6d:32: 04:f3:a5:bb:5f:b3:2c:fe:fc:d9:15:9b:17:3c:d5:d6:2d:32: 5a:40:6d:b7:d1:21:1a:cd:08:81:e0:d1:4b:ea:db:f2:c8:85: a5:dc:2f:2f:c4:19:85:51:f0:3f:6b:30:8b:e2:51:f3:9c:fc: ad:08:a7:2b:52:b6:bd:d5:99:9e:ed:56:04:a4:eb:f4:99:a8: 7f:c1:9e:93:f4:a6:06:79:5f:49:10:a1:af:f6:4b:dc:36:97: 30:c9:68:d7:8a:39:54:01:72:78:fe:a0:07:c4:1e:10:20:34: 4e:ab:a9:15:f5:37:e8:39:4e:22:6b:d8:4a:30:8d:98:3b:45: 32:14:98:d3:67:a6:aa:98:16:8e:d0:4f:9f:97:c1:da:74:dc: fa:b6:c0:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ITNOmGFUyxyiMw9+rHShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Nzk5Yjc3MmI1NTFkYjc4NGVlYmE4YjBlMTE1YTBjNDMz Y2QzYmEwHhcNMjUxMjE5MTUwMTIxWhcNMjUxMjIwMTUwMTIxWjAzMTEwLwYDVQQD EyhjOWQyMTVkYTU4NGNjMTVlNzQ3ZGY4MTE2ZGZiNDViY2IyNThkNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YhHK81PFtS8kU1F5uaxyFAzPgLz RryNNdXNRwCdVK7P/LlMf/NN9VgE8ehGvxHE9hb7bVDRZa8hcKWgBS1foGvx9hDM XD7muZ6TibXD40syMJ4Tl87PKE2bdqt/ZRKzXJ2VhO6G+JuK7DqzOPMCF5G7vz0I Mcfprhrv6VHYSWYInB785F2v7NmEu4/snzf9jVz9SG+dINWiIpMPZHx5ow3eBtXd d//OPCVUhtuWluSvWLoLlG54njsHlk4yMYMHErm8o9BY9ZErJJxCNy2KViOzwLD/ OBkDEELFYwNvnF7NioTKfpTkOnjzGRyc2N4jAEoPFxaFNK6AJFoudvggfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnSFdpYTMFedH34EW37RbyyWNeGMB8GA1UdIwQY MBaAFGh5m3crVR23hO66iw4RWgxDPNO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEt MGM3NmEzMTZiNTJlLzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEtMGM3NmEzMTZiNTJl LzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1yOuoM+ gy9sFZ9XXouJFYfY7qsh43abLnpXGLUizJtWHqrCiCOGu1ojTPhS97UM55VbnRad NhBxgMfB0SAK9x3Yz+yrGKgqZh5tHyON2m0uE2LO27AFtmIrYLA4i5R79Js6r6B/ 51ifg20yBPOlu1+zLP782RWbFzzV1i0yWkBtt9EhGs0IgeDRS+rb8siFpdwvL8QZ hVHwP2swi+JR85z8rQinK1K2vdWZnu1WBKTr9Jmof8Gek/SmBnlfSRChr/ZL3DaX MMlo14o5VAFyeP6gB8QeECA0TqupFfU36DlOImvYSjCNmDtFMhSY02emqpgWjtBP n5fB2nTc+rbA+A== -----END CERTIFICATE-----Generated at Fri Dec 19 16:39:50 2025 by rpki-client