This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json) Hash identifier: DLCsxGyRKVEJCEeLLPgfpIrnmv/o+FC7Q2sGdkUWWvM= Subject key identifier: B6:BD:98:2A:12:C6:9E:9F:B6:6A:A6:0A:A3:52:12:6E:DA:97:D2:08 Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97 Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97 Certificate serial: 019AF087F21EADE7681206577F5CDA476030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft Manifest number: 06CB Signing time: Fri 05 Dec 2025 22:00:32 +0000 Manifest this update: Fri 05 Dec 2025 22:00:32 +0000 Manifest next update: Sat 06 Dec 2025 22:00:32 +0000 Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=) 2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: q9q3VpBzSViSfWj79LdO5fdlKcrm+Y5tZZLMF8vVYIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f2:1e:ad:e7:68:12:06:57:7f:5c:da:47:60:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97 Validity Not Before: Dec 5 22:00:32 2025 GMT Not After : Dec 6 22:00:32 2025 GMT Subject: CN=b6bd982a12c69e9fb66aa60aa352126eda97d208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:f9:51:c5:b2:57:fa:d3:62:d3:44:af:41: 29:c2:83:cb:da:92:0a:be:90:ec:e6:4b:87:6a:f8: 37:8c:c7:8c:1f:e9:f7:d8:80:66:c9:94:25:18:ce: ce:fc:43:26:87:61:69:d5:fa:b7:52:d6:ad:a7:a9: f7:1e:35:a8:b1:3d:08:fe:3c:f2:1d:5d:ac:3a:5a: 69:c4:8e:d0:f4:4d:c4:fb:14:7f:db:8f:5a:e5:3d: bb:ab:16:c3:b8:69:bb:23:f9:b0:29:7c:95:e5:2f: 93:0e:d4:db:bb:32:24:bd:0a:a7:7f:41:61:f0:22: 0f:81:6e:d9:65:0b:6e:e5:0d:1c:3d:b4:98:d5:5a: 5f:46:6e:6b:0f:f8:82:e1:d2:e2:8e:81:ff:99:d6: 2b:c8:41:46:9c:22:9e:a8:fa:9a:f1:61:49:bd:66: c0:93:dd:dd:58:85:ac:de:ab:e5:88:12:d4:bd:06: 06:6d:ac:00:8c:58:72:e3:73:5b:e9:4c:92:74:99: 8a:52:86:9d:dc:9e:86:3b:7e:9c:de:0f:47:d1:78: 16:82:d8:b4:50:79:96:91:85:ef:61:e5:d8:80:12: be:14:94:d1:23:4e:ba:41:a6:aa:5b:0e:72:c4:4b: 3b:20:f1:b4:06:27:1c:04:8b:86:37:c2:b1:92:7a: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BD:98:2A:12:C6:9E:9F:B6:6A:A6:0A:A3:52:12:6E:DA:97:D2:08 X509v3 Authority Key Identifier: keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cf:df:6e:60:f9:ef:25:b4:5a:97:d2:cc:86:e0:5f:82:62: 80:f8:30:ce:c4:24:94:43:58:96:c4:2f:9b:49:43:f8:a2:18: ff:b8:d8:09:bc:39:2c:45:a3:86:dc:5f:25:a6:0e:ca:87:84: 1f:c1:4b:b1:03:5a:7c:9f:08:4e:cd:59:18:54:75:fd:4a:27: 10:5c:56:25:7e:19:49:f8:93:be:3f:5d:62:5f:63:c3:73:c4: 96:43:69:9c:dd:6e:c3:8c:99:84:31:cc:f9:f2:9a:40:98:a6: 5e:96:de:53:43:84:00:87:d4:27:1a:33:6c:f3:e3:ab:b3:78: 83:82:26:93:6a:30:a6:ee:63:5b:bf:ab:9b:fa:31:a3:8a:67: 4a:0e:41:d9:a1:53:8b:6f:83:65:04:51:a8:d6:62:aa:ed:29: c9:f8:c1:2e:ce:76:f6:ab:70:2b:87:9d:a8:fc:8d:e7:5a:13: ef:c3:a9:a0:8a:a2:e4:8d:bc:42:91:5c:a4:87:53:38:a4:a4: 15:a7:bf:9b:1c:f5:9c:61:09:68:43:32:1f:07:66:83:0e:f1: 9c:0b:41:be:53:b2:ba:9f:23:a3:49:30:b9:41:63:74:f1:6f: b0:3c:06:8d:69:7e:03:57:24:1d:24:d5:40:c3:66:9f:95:ba: 19:cd:a4:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/IeredoEgZXf1zaR2AwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4N2I5MWVkYTE2YjZmMWIxZmEwMTc1ZDY3Yzc5OTRmNjkx ZDhlOTcwHhcNMjUxMjA1MjIwMDMyWhcNMjUxMjA2MjIwMDMyWjAzMTEwLwYDVQQD EyhiNmJkOTgyYTEyYzY5ZTlmYjY2YWE2MGFhMzUyMTI2ZWRhOTdkMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlP5UcWyV/rTYtNEr0EpwoPL2pIK vpDs5kuHavg3jMeMH+n32IBmyZQlGM7O/EMmh2Fp1fq3Utatp6n3HjWosT0I/jzy HV2sOlppxI7Q9E3E+xR/249a5T27qxbDuGm7I/mwKXyV5S+TDtTbuzIkvQqnf0Fh 8CIPgW7ZZQtu5Q0cPbSY1VpfRm5rD/iC4dLijoH/mdYryEFGnCKeqPqa8WFJvWbA k93dWIWs3qvliBLUvQYGbawAjFhy43Nb6UySdJmKUoad3J6GO36c3g9H0XgWgti0 UHmWkYXvYeXYgBK+FJTRI066QaaqWw5yxEs7IPG0BiccBIuGN8KxknrCQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa9mCoSxp6ftmqmCqNSEm7al9IIMB8GA1UdIwQY MBaAFGh7ke2ha28bH6AXXWfHmU9pHY6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWIt ZGZmZTU5MDIzZTg5LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWItZGZmZTU5MDIzZTg5 LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM/fbmD5 7yW0WpfSzIbgX4JigPgwzsQklENYlsQvm0lD+KIY/7jYCbw5LEWjhtxfJaYOyoeE H8FLsQNafJ8ITs1ZGFR1/UonEFxWJX4ZSfiTvj9dYl9jw3PElkNpnN1uw4yZhDHM +fKaQJimXpbeU0OEAIfUJxozbPPjq7N4g4Imk2owpu5jW7+rm/oxo4pnSg5B2aFT i2+DZQRRqNZiqu0pyfjBLs529qtwK4edqPyN51oT78OpoIqi5I28QpFcpIdTOKSk Fae/mxz1nGEJaEMyHwdmgw7xnAtBvlOyup8jo0kwuUFjdPFvsDwGjWl+A1ckHSTV QMNmn5W6Gc2koQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:17 2025 by rpki-client