This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json) Hash identifier: rnlJAq+oHwCvDDZnz6ZEf86KZIsckl2WncPwOYcpkfE= Subject key identifier: E2:58:3B:AF:E2:16:EA:E7:45:1F:83:CB:33:FE:DB:AC:B0:BA:04:E8 Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3 Certificate serial: 019B378F50E986AB98E19375EB0BFAB1BBC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft Manifest number: 03D9 Signing time: Fri 19 Dec 2025 17:01:37 +0000 Manifest this update: Fri 19 Dec 2025 17:01:37 +0000 Manifest next update: Sat 20 Dec 2025 17:01:37 +0000 Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=) 2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=) 3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: P0pK/JH1M+/1M0a4iqSdsSToxgzYxt/FN91noOzq0d4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:50:e9:86:ab:98:e1:93:75:eb:0b:fa:b1:bb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3 Validity Not Before: Dec 19 17:01:37 2025 GMT Not After : Dec 20 17:01:37 2025 GMT Subject: CN=e2583bafe216eae7451f83cb33fedbacb0ba04e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:ce:35:6a:a8:50:d3:73:a4:e8:17:a7:51: f7:0a:36:2f:10:44:0e:80:fc:e4:39:59:d5:6a:cb: 23:69:9a:d5:da:87:11:3b:bd:19:9d:fb:86:83:27: 0e:66:ef:5a:fd:60:7c:d0:73:4d:85:23:84:4a:50: f7:a5:1f:68:93:2c:c3:1b:dd:24:35:81:68:b6:57: 99:b5:c6:cd:c6:91:ef:cc:43:5e:e7:d0:7b:95:78: 01:7e:6a:41:ec:d1:ff:07:a2:e9:d0:ee:60:ea:16: a7:93:4b:07:6e:03:05:06:93:9a:b5:5d:dc:c0:c9: 18:90:a0:ea:cb:4c:4f:1d:e0:de:00:9d:3d:86:17: a2:9f:c0:4d:30:2d:7c:ec:0e:ea:9d:96:ab:5a:ac: 90:45:bc:0e:94:30:1d:cd:4a:13:7b:7a:3f:06:35: 0a:99:ec:b2:30:99:f6:68:be:f8:8a:94:37:c8:90: 14:bd:16:bd:a8:aa:99:fe:5b:3b:55:bc:11:a9:b6: 87:96:69:20:07:e8:86:76:38:42:36:8b:86:2c:93: 4a:b7:da:bf:53:df:2a:74:27:c4:13:ef:11:10:08: 04:a3:61:6d:b6:87:62:b9:f8:ae:de:e2:9a:ad:67: 04:54:66:61:85:ce:fb:1b:7f:be:74:b2:b1:3a:f7: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:58:3B:AF:E2:16:EA:E7:45:1F:83:CB:33:FE:DB:AC:B0:BA:04:E8 X509v3 Authority Key Identifier: keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b6:61:d0:31:cb:aa:8b:a4:ba:03:9e:2f:7d:b5:81:37:d2: 0c:5f:76:05:20:77:42:6d:31:b0:91:e0:99:7c:20:14:4e:d7: 04:e6:f6:ec:c0:64:6e:1f:eb:62:fa:b2:82:dd:f9:c4:fb:93: cd:7e:20:25:9f:18:cb:71:b4:d9:8b:c9:bc:1a:aa:85:00:2f: 9b:e3:7e:72:28:13:fc:c8:5e:94:99:85:80:32:5f:fb:88:8c: 55:8d:7e:99:d6:b9:35:94:b2:6e:da:33:7e:1a:69:ac:a1:ad: da:55:a2:0b:d8:58:10:7e:63:71:68:6a:f8:75:a9:f4:30:63: 51:9c:8c:71:89:dc:ae:24:3d:a7:e6:bb:3f:8f:2d:37:1a:16: 75:66:3b:a6:c9:2b:b8:17:7a:43:e4:be:35:c7:74:12:c2:01: 83:d8:2d:7c:59:39:1c:16:ee:2a:49:40:23:0a:23:9e:2a:00: 75:b9:70:f6:c0:3f:da:d8:91:98:40:d0:b9:09:b3:80:06:ad: ca:29:6c:f2:cf:41:d4:75:33:10:d4:bb:38:88:b5:ec:ed:2f: 1e:9d:44:d6:a4:34:fc:47:44:b2:5b:a5:37:09:02:b2:3a:86: 88:b6:94:f7:7d:6d:d4:b1:81:db:4e:ce:cd:b5:d3:df:6a:1e: 41:15:67:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3j1DphquY4ZN16wv6sbvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl NjQ4YzMwHhcNMjUxMjE5MTcwMTM3WhcNMjUxMjIwMTcwMTM3WjAzMTEwLwYDVQQD EyhlMjU4M2JhZmUyMTZlYWU3NDUxZjgzY2IzM2ZlZGJhY2IwYmEwNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDfONWqoUNNzpOgXp1H3CjYvEEQO gPzkOVnVassjaZrV2ocRO70ZnfuGgycOZu9a/WB80HNNhSOESlD3pR9okyzDG90k NYFotleZtcbNxpHvzENe59B7lXgBfmpB7NH/B6Lp0O5g6hank0sHbgMFBpOatV3c wMkYkKDqy0xPHeDeAJ09hhein8BNMC187A7qnZarWqyQRbwOlDAdzUoTe3o/BjUK meyyMJn2aL74ipQ3yJAUvRa9qKqZ/ls7VbwRqbaHlmkgB+iGdjhCNouGLJNKt9q/ U98qdCfEE+8REAgEo2Fttodiufiu3uKarWcEVGZhhc77G3++dLKxOvekmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJYO6/iFurnRR+DyzP+26ywugToMB8GA1UdIwQY MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt N2NjMjk0NWYyY2E2LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2 LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7Zh0DHL qoukugOeL321gTfSDF92BSB3Qm0xsJHgmXwgFE7XBOb27MBkbh/rYvqygt35xPuT zX4gJZ8Yy3G02YvJvBqqhQAvm+N+cigT/MhelJmFgDJf+4iMVY1+mda5NZSybtoz fhpprKGt2lWiC9hYEH5jcWhq+HWp9DBjUZyMcYncriQ9p+a7P48tNxoWdWY7pskr uBd6Q+S+Ncd0EsIBg9gtfFk5HBbuKklAIwojnioAdblw9sA/2tiRmEDQuQmzgAat yils8s9B1HUzENS7OIi17O0vHp1E1qQ0/EdEslulNwkCsjqGiLaU931t1LGB207O zbXT32oeQRVnfg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:39:19 2025 by rpki-client