This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json) Hash identifier: 3Ea6ML6Q/v3mBIwHR8p5wOiUUDFXW3R4J/0NDVvqjXc= Subject key identifier: E6:B0:B2:48:66:64:AA:2B:60:6B:4E:6C:B5:1D:1C:22:4F:01:7E:D3 Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db Certificate serial: 019AF49C2D283B9DC6E6861151C71785E506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft Manifest number: 0583 Signing time: Sat 06 Dec 2025 17:01:06 +0000 Manifest this update: Sat 06 Dec 2025 17:01:06 +0000 Manifest next update: Sun 07 Dec 2025 17:01:06 +0000 Files and hashes: 1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: eENzMQm+uSC69FL6Qj+d9apxK8INGFDFoQa6mHlm63g=) 2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2d:28:3b:9d:c6:e6:86:11:51:c7:17:85:e5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db Validity Not Before: Dec 6 17:01:06 2025 GMT Not After : Dec 7 17:01:06 2025 GMT Subject: CN=e6b0b2486664aa2b606b4e6cb51d1c224f017ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:da:e5:90:ee:de:23:4a:e4:a0:56:2b:c0:d9: 50:6b:aa:c7:cd:63:a8:86:1b:83:02:c1:62:fa:5c: 69:16:ec:4f:a1:05:e1:6f:d0:94:3a:0d:15:a9:1c: 97:f4:71:1c:fc:e1:3f:3f:bb:8b:b1:81:e3:36:08: f8:50:9a:6f:ed:d1:d3:af:40:4f:e0:a6:a5:0a:b1: 15:9d:6b:eb:b0:00:15:64:a4:48:e6:ef:c1:76:5b: 89:18:25:6b:ac:e8:bd:70:81:4e:0a:83:aa:ee:d5: 6c:4b:c7:e0:56:3c:a0:f0:f3:ca:6d:6f:d7:71:7f: c1:23:27:4d:39:b4:54:cf:05:89:e1:a7:cd:cf:76: b9:d9:03:e7:b2:c5:13:d1:04:50:57:bc:06:3f:4a: 95:74:13:21:5a:d0:c4:05:c5:13:25:20:54:09:27: cc:e9:f7:fe:6c:4d:2e:eb:a9:a6:c6:e1:ae:90:ac: 2a:4f:4d:a4:68:d1:78:70:48:af:dc:71:85:61:f5: db:c7:a7:fb:6e:8c:3f:09:06:98:1f:d1:89:b0:33: 19:6f:c5:af:d8:34:60:c3:f4:8b:dd:53:a6:23:6e: b2:44:57:62:11:88:79:ed:a0:91:f4:84:c5:47:ca: 91:c8:88:6b:a8:31:8c:b9:ea:6e:2c:d5:c9:7f:dd: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B0:B2:48:66:64:AA:2B:60:6B:4E:6C:B5:1D:1C:22:4F:01:7E:D3 X509v3 Authority Key Identifier: keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8e:8e:81:14:8b:03:1a:91:09:d1:74:57:8d:fe:da:18:26: a2:8a:ac:08:a5:37:13:4f:6f:49:00:5c:ad:17:78:e2:62:f4: a6:61:09:64:f5:c6:cb:d5:cc:43:a4:ce:68:b4:65:29:4d:c3: 4f:e0:b5:44:df:a2:0f:cf:9c:9c:fa:2f:99:b1:f9:85:42:67: ec:df:fe:e9:0c:3b:d6:55:1e:fd:1f:86:96:65:8b:b2:86:fa: 01:9b:a9:2b:d9:9f:f6:90:8e:e1:17:60:e0:af:fd:5b:31:4d: d6:2a:eb:12:f7:2a:3b:70:10:aa:8e:80:6f:e3:fb:32:46:f0: 0b:9b:23:26:82:ca:02:da:71:05:3b:24:1b:83:f9:93:8b:27: 18:56:cf:ed:80:df:a4:f1:97:f7:96:fc:ef:53:b0:64:4d:bd: d1:a8:84:2e:ae:f4:8f:d5:9c:c1:b4:9d:b0:d7:63:2b:95:96: 1a:80:11:eb:33:ce:43:c8:49:bd:b8:c7:b4:38:99:21:1b:bf: 15:bd:90:01:17:2e:97:d6:fd:b1:94:59:58:f5:91:8d:e4:36: ea:29:9d:d4:8f:99:b8:bc:56:e8:35:59:ba:20:13:4c:fa:ca: 89:90:18:ce:db:d6:bc:75:75:01:d0:dd:1f:b2:ad:b4:b3:be: 17:79:4e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nC0oO53G5oYRUccXheUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhY2NkYjZjOThkNzIyYjMyZGM5MDBlZTFkZDY2ZTUxYzRm NDI4ZGIwHhcNMjUxMjA2MTcwMTA2WhcNMjUxMjA3MTcwMTA2WjAzMTEwLwYDVQQD EyhlNmIwYjI0ODY2NjRhYTJiNjA2YjRlNmNiNTFkMWMyMjRmMDE3ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5trlkO7eI0rkoFYrwNlQa6rHzWOo hhuDAsFi+lxpFuxPoQXhb9CUOg0VqRyX9HEc/OE/P7uLsYHjNgj4UJpv7dHTr0BP 4KalCrEVnWvrsAAVZKRI5u/BdluJGCVrrOi9cIFOCoOq7tVsS8fgVjyg8PPKbW/X cX/BIydNObRUzwWJ4afNz3a52QPnssUT0QRQV7wGP0qVdBMhWtDEBcUTJSBUCSfM 6ff+bE0u66mmxuGukKwqT02kaNF4cEiv3HGFYfXbx6f7bow/CQaYH9GJsDMZb8Wv 2DRgw/SL3VOmI26yRFdiEYh57aCR9ITFR8qRyIhrqDGMuepuLNXJf92DmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOawskhmZKorYGtObLUdHCJPAX7TMB8GA1UdIwQY MBaAFGrM22yY1yKzLckA7h3WblHE9CjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4Yjgt MmZlOTMyZTdhYjQ0LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4YjgtMmZlOTMyZTdhYjQ0 LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANY6OgRSL AxqRCdF0V43+2hgmooqsCKU3E09vSQBcrRd44mL0pmEJZPXGy9XMQ6TOaLRlKU3D T+C1RN+iD8+cnPovmbH5hUJn7N/+6Qw71lUe/R+GlmWLsob6AZupK9mf9pCO4Rdg 4K/9WzFN1irrEvcqO3AQqo6Ab+P7MkbwC5sjJoLKAtpxBTskG4P5k4snGFbP7YDf pPGX95b871OwZE290aiELq70j9WcwbSdsNdjK5WWGoAR6zPOQ8hJvbjHtDiZIRu/ Fb2QARcul9b9sZRZWPWRjeQ26imd1I+ZuLxW6DVZuiATTPrKiZAYztvWvHV1AdDd H7KttLO+F3lOPg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:27 2025 by rpki-client