This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json) Hash identifier: V3YciYrrr+nO0PxyeFje01MXv1eEAgEnPK3qVSKXjoI= Subject key identifier: 92:9B:FA:69:AD:B3:35:C0:DF:50:4C:F3:65:E2:6E:DA:8B:86:11:9B Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Certificate serial: 019AF19B91ABF6E2572F6AC3357551E4DD89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft Manifest number: 119B Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: 3s+2yH0zG5XmqQiicQI8gvF0NE3ba8rUeDVs59oJC50=) 2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:91:ab:f6:e2:57:2f:6a:c3:35:75:51:e4:dd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=929bfa69adb335c0df504cf365e26eda8b86119b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:cc:57:f6:a6:50:cb:a0:b6:12:59:32:a5: 87:82:8b:fc:1b:52:f0:fd:68:4c:1e:cb:49:c3:d0: 7b:85:5a:7a:90:a5:92:75:22:63:19:6d:87:b4:0a: 9e:81:c2:dd:91:ff:5e:c0:69:11:69:90:01:c0:ca: b6:db:b1:ac:c9:a9:97:b9:29:2f:ca:55:7b:47:eb: 65:73:46:4c:63:22:90:58:a5:a1:82:f4:02:73:02: 20:9c:5b:62:33:60:ab:a3:e4:a9:99:f8:4d:b6:0f: da:27:18:7a:8f:65:4a:d2:0c:3c:f6:ee:7d:80:d9: 0c:5f:59:0f:a7:41:14:78:30:63:57:87:69:43:38: d9:5f:2b:fb:bb:a2:d5:d7:65:6e:49:99:6f:6b:83: 9a:91:7b:85:1e:3a:c2:1f:ee:11:15:ec:c8:f4:af: 8f:f8:29:e2:77:93:30:0f:15:1d:8b:73:db:27:35: d2:1b:cb:47:6e:a6:8d:f3:72:98:e0:a6:43:b4:56: 74:f5:93:78:eb:87:a2:56:19:3b:b0:f6:0a:95:3d: 09:9a:5b:84:1f:5a:7a:51:df:3a:cf:29:c3:33:ae: 3e:2d:4f:b7:8e:1f:48:c6:a6:cb:14:92:71:ce:e0: 96:3e:d9:f6:fa:b3:a7:00:9d:96:a4:50:80:4b:a3: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9B:FA:69:AD:B3:35:C0:DF:50:4C:F3:65:E2:6E:DA:8B:86:11:9B X509v3 Authority Key Identifier: keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8e:7d:61:7c:44:ea:5d:b6:93:1d:e9:7a:6d:1b:c5:e2:83: 8c:5d:df:f4:af:90:19:74:fb:bb:89:35:92:ec:8b:0a:bf:be: 48:57:8c:e6:39:60:b0:83:fd:44:19:17:90:59:a4:40:41:8f: 30:94:7e:21:60:de:5b:dc:61:81:33:53:28:b9:2e:3d:c3:32: 55:4f:b4:14:97:f5:c4:a8:70:f2:11:bc:11:18:30:dc:e2:47: af:ca:15:58:a8:1b:56:01:dd:00:80:d4:6c:3e:0c:9f:1d:58: d2:23:8f:4c:cb:bc:37:6f:2a:7a:81:4a:4e:ab:96:a6:e6:4f: 8b:b1:5c:f0:aa:74:0c:b1:9f:76:c1:70:5a:d1:64:2d:c0:50: 8b:6d:ac:af:f3:23:d5:93:b8:1d:f3:c8:a2:e4:c7:56:5a:24: 94:68:46:41:7b:5d:df:37:4d:65:0e:f2:49:17:78:4a:5c:dc: 99:dc:c2:3e:19:8c:5d:5b:87:09:8f:ae:a8:08:b3:b4:bc:8c: 39:77:31:30:5c:a6:09:29:e5:51:47:3c:73:b8:7e:7a:19:e5: d1:2d:e3:f0:37:6a:62:6c:9e:6d:93:6c:e8:e4:c8:97:6a:ef: a8:a4:4c:86:a5:87:e0:ff:6b:df:61:6a:19:45:58:6e:0c:13: 0d:83:5c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5Gr9uJXL2rDNXVR5N2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk Y2Y5OTYwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD Eyg5MjliZmE2OWFkYjMzNWMwZGY1MDRjZjM2NWUyNmVkYThiODYxMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzfMV/amUMugthJZMqWHgov8G1Lw /WhMHstJw9B7hVp6kKWSdSJjGW2HtAqegcLdkf9ewGkRaZABwMq227GsyamXuSkv ylV7R+tlc0ZMYyKQWKWhgvQCcwIgnFtiM2Cro+SpmfhNtg/aJxh6j2VK0gw89u59 gNkMX1kPp0EUeDBjV4dpQzjZXyv7u6LV12VuSZlva4OakXuFHjrCH+4RFezI9K+P +Cnid5MwDxUdi3PbJzXSG8tHbqaN83KY4KZDtFZ09ZN464eiVhk7sPYKlT0JmluE H1p6Ud86zynDM64+LU+3jh9IxqbLFJJxzuCWPtn2+rOnAJ2WpFCAS6NjuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKb+mmtszXA31BM82XibtqLhhGbMB8GA1UdIwQY MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5 LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJI59YXxE 6l22kx3pem0bxeKDjF3f9K+QGXT7u4k1kuyLCr++SFeM5jlgsIP9RBkXkFmkQEGP MJR+IWDeW9xhgTNTKLkuPcMyVU+0FJf1xKhw8hG8ERgw3OJHr8oVWKgbVgHdAIDU bD4Mnx1Y0iOPTMu8N28qeoFKTquWpuZPi7Fc8Kp0DLGfdsFwWtFkLcBQi22sr/Mj 1ZO4HfPIouTHVloklGhGQXtd3zdNZQ7ySRd4SlzcmdzCPhmMXVuHCY+uqAiztLyM OXcxMFymCSnlUUc8c7h+ehnl0S3j8DdqYmyebZNs6OTIl2rvqKRMhqWH4P9r32Fq GUVYbgwTDYNcRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:38 2025 by rpki-client