This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json) Hash identifier: vAC6cc2f3m0S3iGT5uTW1Mr7Y3Me9BjmPnVvApBv4D8= Subject key identifier: 26:37:FF:BB:50:4D:53:D5:30:66:4F:A0:A4:F9:A1:DD:3A:10:C5:3F Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db Certificate serial: 019AF68A9C2C8C14AF66DDDC0D1421CAA505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft Manifest number: 0584 Signing time: Sun 07 Dec 2025 02:01:10 +0000 Manifest this update: Sun 07 Dec 2025 02:01:10 +0000 Manifest next update: Mon 08 Dec 2025 02:01:10 +0000 Files and hashes: 1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: YVqmUo/4KtU9nSYR4O1/2IHI353d+HNWfpcfAt2yhrY=) 2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:9c:2c:8c:14:af:66:dd:dc:0d:14:21:ca:a5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db Validity Not Before: Dec 7 02:01:10 2025 GMT Not After : Dec 8 02:01:10 2025 GMT Subject: CN=2637ffbb504d53d530664fa0a4f9a1dd3a10c53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:cc:6c:11:a7:f2:f8:39:00:57:cb:14:c3: 35:0c:d4:f4:fb:7a:6b:98:90:e2:99:db:e8:d8:15: 6b:58:31:5e:01:46:28:36:a0:58:62:ec:4f:5e:8a: e4:8e:cd:15:b0:5d:15:66:fe:87:08:fd:ec:4e:95: 28:7f:8b:a5:5b:cc:ee:5b:5d:58:da:df:29:d7:f5: 27:78:bf:8c:be:82:d6:25:77:36:73:2c:1d:2c:22: 38:53:5f:71:f0:f7:40:ce:d1:7a:53:e4:b6:ab:84: b9:fc:92:41:69:f3:0f:48:2d:5c:0a:1c:93:d5:26: 01:73:b5:6d:9a:9e:b1:f7:56:25:4f:7b:ac:9a:c8: 84:de:3c:c8:5c:d1:73:96:a5:c8:97:cf:45:ef:15: 82:7c:bf:86:0a:1d:a9:29:4d:3e:ab:d7:d7:ee:52: f5:9e:df:3b:fe:60:ea:f1:cf:9e:23:f6:0f:5e:d7: b9:89:5b:d6:23:36:bb:07:94:73:5f:51:c1:27:d8: 72:30:08:58:32:b9:16:a1:3d:5f:b7:f1:32:1e:eb: 4b:d0:91:7d:f1:54:af:1d:89:cc:72:e7:f6:91:85: 5c:22:e9:70:b9:19:26:76:e6:13:36:3d:e0:33:37: 2e:3d:77:c5:70:ff:8f:00:83:6f:6c:3a:eb:b0:90: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:37:FF:BB:50:4D:53:D5:30:66:4F:A0:A4:F9:A1:DD:3A:10:C5:3F X509v3 Authority Key Identifier: keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:69:2f:30:07:bd:4b:b6:f4:89:9c:c1:f8:34:54:cd:8c:53: f6:73:0c:6f:d2:4f:21:25:b2:99:70:8e:89:5b:25:9d:b3:45: 6f:aa:c3:44:2d:49:bc:3a:b7:fb:03:3c:c5:b9:f3:a7:13:60: 59:d6:d2:06:45:b4:7f:3b:ae:39:9f:1e:48:00:75:d0:5e:cc: 41:52:1b:ab:13:97:47:fd:86:13:58:3c:ed:03:19:29:36:6a: 43:25:c4:22:1c:2c:7f:b4:00:33:49:5c:14:b3:c7:8b:dd:a4: 8e:01:6b:69:09:1a:76:08:54:15:4d:b8:60:0e:c5:d5:37:11: a1:28:5d:bb:58:f9:59:dd:27:08:d0:a5:99:ad:1f:08:26:49: e5:e1:a0:3b:c8:14:8d:1a:14:5c:8f:c8:d8:c8:23:96:30:63: 14:b6:b0:93:d0:c6:d4:63:18:da:28:f0:2f:a4:e1:18:6f:88: 96:fe:d5:80:d5:52:9b:62:72:33:62:c8:fd:21:44:a0:b1:10: ed:39:e0:6a:5d:70:39:0c:93:84:1c:e2:a5:be:a3:c3:bf:d7: a9:59:99:97:87:0f:60:c7:1b:3b:fa:9a:c8:1b:bd:78:11:cc: d7:b3:a3:a2:83:b2:5f:02:5d:71:d8:b1:c2:35:e6:53:01:ba: 49:a1:51:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ipwsjBSvZt3cDRQhyqUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhY2NkYjZjOThkNzIyYjMyZGM5MDBlZTFkZDY2ZTUxYzRm NDI4ZGIwHhcNMjUxMjA3MDIwMTEwWhcNMjUxMjA4MDIwMTEwWjAzMTEwLwYDVQQD EygyNjM3ZmZiYjUwNGQ1M2Q1MzA2NjRmYTBhNGY5YTFkZDNhMTBjNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn57MbBGn8vg5AFfLFMM1DNT0+3pr mJDimdvo2BVrWDFeAUYoNqBYYuxPXorkjs0VsF0VZv6HCP3sTpUof4ulW8zuW11Y 2t8p1/UneL+MvoLWJXc2cywdLCI4U19x8PdAztF6U+S2q4S5/JJBafMPSC1cChyT 1SYBc7Vtmp6x91YlT3usmsiE3jzIXNFzlqXIl89F7xWCfL+GCh2pKU0+q9fX7lL1 nt87/mDq8c+eI/YPXte5iVvWIza7B5RzX1HBJ9hyMAhYMrkWoT1ft/EyHutL0JF9 8VSvHYnMcuf2kYVcIulwuRkmduYTNj3gMzcuPXfFcP+PAINvbDrrsJA+5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY3/7tQTVPVMGZPoKT5od06EMU/MB8GA1UdIwQY MBaAFGrM22yY1yKzLckA7h3WblHE9CjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4Yjgt MmZlOTMyZTdhYjQ0LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4YjgtMmZlOTMyZTdhYjQ0 LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmkvMAe9 S7b0iZzB+DRUzYxT9nMMb9JPISWymXCOiVslnbNFb6rDRC1JvDq3+wM8xbnzpxNg WdbSBkW0fzuuOZ8eSAB10F7MQVIbqxOXR/2GE1g87QMZKTZqQyXEIhwsf7QAM0lc FLPHi92kjgFraQkadghUFU24YA7F1TcRoShdu1j5Wd0nCNClma0fCCZJ5eGgO8gU jRoUXI/I2MgjljBjFLawk9DG1GMY2ijwL6ThGG+Ilv7VgNVSm2JyM2LI/SFEoLEQ 7Tngal1wOQyThBzipb6jw7/XqVmZl4cPYMcbO/qayBu9eBHM17OjooOyXwJdcdix wjXmUwG6SaFROg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:24 2025 by rpki-client