This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft File: aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json) Hash identifier: bU1q2Si57H/BHU8hLhYpj4yqPM3PYEY6vTcPrPaU1oM= Subject key identifier: 59:8F:BC:34:26:81:60:9E:03:F1:13:5D:4E:C6:94:68:B2:E5:AE:90 Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2 Certificate issuer: /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2 Certificate serial: 019B34C54CEB327CF15B494A5908D8D20BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft Manifest number: 0C0B Signing time: Fri 19 Dec 2025 04:01:44 +0000 Manifest this update: Fri 19 Dec 2025 04:01:44 +0000 Manifest next update: Sat 20 Dec 2025 04:01:44 +0000 Files and hashes: 1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: uOLU6gjL4jtlU1y5wa8nWIamcNuT8JPygAogD1QVTpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:4c:eb:32:7c:f1:5b:49:4a:59:08:d8:d2:0b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2 Validity Not Before: Dec 19 04:01:44 2025 GMT Not After : Dec 20 04:01:44 2025 GMT Subject: CN=598fbc342681609e03f1135d4ec69468b2e5ae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:b0:5e:6f:cf:7d:4a:4c:b0:85:cf:b8:d1: 18:12:17:c1:53:b8:7d:e9:79:19:9e:c9:7c:eb:c5: 41:48:a2:52:7b:b9:98:ae:92:67:4f:21:e0:46:10: cf:d7:94:63:d3:1d:e8:33:ba:23:4a:02:4e:12:eb: a7:ab:86:89:10:1e:e4:cb:35:51:e1:fc:b1:57:63: 70:82:d2:10:2c:fe:29:5c:fc:1a:fd:f4:ce:6c:4d: 98:e3:52:3d:bc:7f:af:e9:67:63:b5:9f:48:62:37: a6:fd:bb:37:34:ec:5b:64:a5:d8:0b:3c:21:70:99: fc:cd:86:ff:71:83:75:37:c4:84:3d:7e:91:b0:cb: f0:60:0c:fe:d9:c1:28:00:25:23:27:56:2d:f3:c0: 71:74:ab:ed:52:2f:68:56:6b:32:26:78:58:20:85: 6f:d3:a5:f3:49:e7:42:58:e2:9c:58:39:ff:65:6b: 38:da:cc:ac:2e:1b:24:d9:ee:06:03:59:e9:b4:67: 45:98:c0:01:87:9d:be:47:8e:93:b6:d3:b3:38:11: f0:05:f1:2d:bc:bf:0f:1a:52:c1:11:e3:12:65:8c: 36:25:1d:bf:e8:36:7c:e4:d0:13:5f:ca:56:35:b3: aa:30:31:f3:1d:29:58:cf:07:63:31:75:91:d2:7b: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8F:BC:34:26:81:60:9E:03:F1:13:5D:4E:C6:94:68:B2:E5:AE:90 X509v3 Authority Key Identifier: keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b5:90:6b:f5:1c:eb:da:f4:19:94:ca:c2:8c:78:f6:77:6c: ed:60:71:7b:18:e2:01:74:87:5c:c5:2f:79:83:01:eb:59:45: 74:91:db:cd:b6:82:65:1a:ba:20:ab:e7:6a:32:32:9a:c6:d5: 9c:f6:35:1e:58:03:88:6a:2b:6d:c2:0d:f1:d1:76:a3:4a:3f: 15:06:d0:88:5c:80:cf:e9:67:40:e7:03:92:1a:b6:78:d1:f4: 90:30:d9:15:60:bc:a1:d6:6b:c9:bd:89:e8:d7:cd:14:9e:a6: 26:9e:90:39:ed:0e:4b:8a:71:c1:1b:56:78:f0:5b:9a:98:09: fb:da:35:f0:c6:8a:5f:dc:3a:42:1f:bc:29:41:d5:27:12:a0: 8d:65:5d:cd:8f:79:65:6f:a5:c5:92:4f:b5:f0:38:83:3b:7c: 9a:07:f8:97:73:ac:ac:74:33:a0:1c:57:28:51:a6:7b:f7:a7: 26:37:58:9d:da:0d:cb:91:3f:ea:84:60:17:bd:93:3c:39:49: 91:a3:ed:fd:25:c2:68:76:a2:87:e6:93:8e:0f:d1:6b:68:97: 9a:3a:71:00:d9:89:fd:6b:92:2a:5d:3f:69:b9:88:a8:52:d1: f4:35:bc:f1:e4:b1:f2:e3:6c:aa:5c:92:a9:30:0e:87:4d:9a: c8:97:67:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUzrMnzxW0lKWQjY0gvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZTNhZDhiMDIyNDUyMWNkMGFlNzQ5MmM2OTRiYzJkNGVl MWZkYjIwHhcNMjUxMjE5MDQwMTQ0WhcNMjUxMjIwMDQwMTQ0WjAzMTEwLwYDVQQD Eyg1OThmYmMzNDI2ODE2MDllMDNmMTEzNWQ0ZWM2OTQ2OGIyZTVhZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkiwXm/PfUpMsIXPuNEYEhfBU7h9 6XkZnsl868VBSKJSe7mYrpJnTyHgRhDP15Rj0x3oM7ojSgJOEuunq4aJEB7kyzVR 4fyxV2NwgtIQLP4pXPwa/fTObE2Y41I9vH+v6WdjtZ9IYjem/bs3NOxbZKXYCzwh cJn8zYb/cYN1N8SEPX6RsMvwYAz+2cEoACUjJ1Yt88BxdKvtUi9oVmsyJnhYIIVv 06XzSedCWOKcWDn/ZWs42sysLhsk2e4GA1nptGdFmMABh52+R46TttOzOBHwBfEt vL8PGlLBEeMSZYw2JR2/6DZ85NATX8pWNbOqMDHzHSlYzwdjMXWR0nt5wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmPvDQmgWCeA/ETXU7GlGiy5a6QMB8GA1UdIwQY MBaAFGnjrYsCJFIc0K50ksaUvC1O4f2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2Qt ZTk3ZDIyNmZiZWVhLzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2QtZTk3ZDIyNmZiZWVh LzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbWQa/Uc 69r0GZTKwox49nds7WBxexjiAXSHXMUveYMB61lFdJHbzbaCZRq6IKvnajIymsbV nPY1HlgDiGorbcIN8dF2o0o/FQbQiFyAz+lnQOcDkhq2eNH0kDDZFWC8odZryb2J 6NfNFJ6mJp6QOe0OS4pxwRtWePBbmpgJ+9o18MaKX9w6Qh+8KUHVJxKgjWVdzY95 ZW+lxZJPtfA4gzt8mgf4l3OsrHQzoBxXKFGme/enJjdYndoNy5E/6oRgF72TPDlJ kaPt/SXCaHaih+aTjg/Ra2iXmjpxANmJ/WuSKl0/abmIqFLR9DW88eSx8uNsqlyS qTAOh02ayJdnrA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:56:32 2025 by rpki-client