This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json) Hash identifier: AORFOhI7QlmnMQBpNJX23nXhZNIBdZ31wD0aJGsEwHw= Subject key identifier: 74:CF:A1:42:0A:41:AA:42:C5:BF:B6:24:FC:47:DC:5C:49:CD:AA:CC Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91 Certificate serial: 019AF2ADCF0A0C59E4B87F3769ACCDE41360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft Manifest number: 6B Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: 3Gh8OdXmWQdIZ4mk5HiPN4TPVh4.roa (hash: Cp0uJqQCCfVS+mC0KewqKWaLegack3UYWeQPqXDJvvI=) 2: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: KU7M8axJs+tU5fDdbXhqIbPckGqq5CUfZUtcifo+byA=) 3: sChO2wUfE9hSdmv4khdrkrYtnMk.roa (hash: /INpfWnZY160HpcHDvzWJGinUo9LuDU7A4NCloJUW/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cf:0a:0c:59:e4:b8:7f:37:69:ac:cd:e4:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91 Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=74cfa1420a41aa42c5bfb624fc47dc5c49cdaacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:58:30:a6:cc:c0:ad:cb:dd:34:ad:19:b5: 60:14:64:16:46:00:04:6f:e1:57:21:e3:d1:ab:c0: 07:f7:ea:9c:98:cb:c2:4b:e6:47:89:6f:fd:a6:76: cd:49:f3:1b:f6:5d:e4:ed:c2:0b:69:de:81:f6:d6: e1:01:06:5d:31:da:b3:a2:b9:5c:e6:57:54:7b:7d: bd:df:45:ea:79:1b:b6:30:9d:90:1e:22:75:62:fb: d9:34:b1:cc:72:3d:10:51:af:18:7f:84:1d:55:9f: 37:5c:56:df:9c:67:ec:20:b5:88:f7:3a:5e:f7:17: 76:39:1a:ed:57:43:eb:3a:25:3b:ee:4e:80:65:5d: da:4b:65:fa:03:7b:9a:47:66:40:7f:13:4b:a4:ad: d6:19:e6:58:66:61:e4:35:65:6d:2b:cf:cf:24:18: f3:db:19:1b:6d:e6:2b:f5:8d:b3:0d:c0:08:4e:f2: db:8f:43:96:7f:29:d9:43:a9:34:f3:65:e5:4c:a5: fb:cd:d4:05:37:af:3a:1d:ff:a3:42:23:66:32:8c: ed:c2:87:c0:ea:29:a8:53:a1:ae:7f:2a:f2:a5:5c: db:d6:ed:17:e2:d7:69:b4:4c:7e:66:4c:89:08:38: 9b:02:5f:90:55:b7:28:ae:4e:7a:69:93:d5:d6:85: 53:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CF:A1:42:0A:41:AA:42:C5:BF:B6:24:FC:47:DC:5C:49:CD:AA:CC X509v3 Authority Key Identifier: keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:aa:eb:6f:e9:7b:99:e7:c2:28:11:0a:8b:7d:2b:c5:16:b0: eb:59:4b:5f:cb:c1:7b:ad:09:f2:9c:58:08:39:9b:87:9c:13: 50:d1:21:d5:e0:72:08:f9:e4:2a:76:67:53:ea:32:ee:26:40: bf:7d:12:68:71:9d:02:65:c4:7f:47:8b:38:a2:70:42:f4:d8: 96:0f:d6:d9:1a:13:92:96:a0:40:d9:62:1c:f7:d0:f2:5d:9d: b6:da:24:30:b0:c8:fd:2b:b3:77:84:02:f7:7e:d1:89:e0:f3: 21:24:fc:45:68:df:70:78:bb:6c:d2:e5:d0:e8:b9:d8:c9:63: 4f:7a:b5:e3:71:7b:11:10:1f:78:50:f5:8e:c6:d5:18:f0:99: e1:ab:51:1c:93:ca:1a:38:1c:b2:b7:ec:c9:96:54:8e:c1:6e: 9a:04:a8:7b:36:9f:32:3c:0c:38:3e:6f:25:00:82:97:16:28: 39:26:df:c6:c1:d7:af:32:6b:65:ea:e6:ac:33:53:fd:dd:70: 4d:77:71:91:e2:00:39:8b:e6:7b:62:ea:0b:4e:89:3b:e7:86: a7:1b:55:c7:fa:e8:18:23:1c:c6:8a:a7:db:a4:fe:bc:b4:d7: fd:b1:bd:be:d3:4f:d6:0f:12:79:c4:51:78:ba:0f:0f:ab:af: ef:2f:02:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc8KDFnkuH83aazN5BNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDQ2YjQzNDUyNmJmMjgzNmUyNzQ5Y2UwZTM2ZTA4NDQz ZDZiOTEwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD Eyg3NGNmYTE0MjBhNDFhYTQyYzViZmI2MjRmYzQ3ZGM1YzQ5Y2RhYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJxYMKbMwK3L3TStGbVgFGQWRgAE b+FXIePRq8AH9+qcmMvCS+ZHiW/9pnbNSfMb9l3k7cILad6B9tbhAQZdMdqzorlc 5ldUe32930XqeRu2MJ2QHiJ1YvvZNLHMcj0QUa8Yf4QdVZ83XFbfnGfsILWI9zpe 9xd2ORrtV0PrOiU77k6AZV3aS2X6A3uaR2ZAfxNLpK3WGeZYZmHkNWVtK8/PJBjz 2xkbbeYr9Y2zDcAITvLbj0OWfynZQ6k082XlTKX7zdQFN686Hf+jQiNmMoztwofA 6imoU6GufyrypVzb1u0X4tdptEx+ZkyJCDibAl+QVbcork56aZPV1oVTLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTPoUIKQapCxb+2JPxH3FxJzarMMB8GA1UdIwQY MBaAFAAEa0NFJr8oNuJ0nODjbghEPWuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYt ZWNkNjcxMjgyYzFmLzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYtZWNkNjcxMjgyYzFm LzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Krrb+l7 mefCKBEKi30rxRaw61lLX8vBe60J8pxYCDmbh5wTUNEh1eByCPnkKnZnU+oy7iZA v30SaHGdAmXEf0eLOKJwQvTYlg/W2RoTkpagQNliHPfQ8l2dttokMLDI/Suzd4QC 937RieDzIST8RWjfcHi7bNLl0Oi52MljT3q143F7ERAfeFD1jsbVGPCZ4atRHJPK GjgcsrfsyZZUjsFumgSoezafMjwMOD5vJQCClxYoOSbfxsHXrzJrZermrDNT/d1w TXdxkeIAOYvme2LqC06JO+eGpxtVx/roGCMcxoqn26T+vLTX/bG9vtNP1g8SecRR eLoPD6uv7y8CNA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:43 2025 by rpki-client