This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft File: aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json) Hash identifier: 63cViI3JVKa8tU01jHhjVeDPY/GJo8OnibfydtHTJyw= Subject key identifier: 4E:B3:4F:9E:59:E2:3D:96:E2:E9:7A:C9:A0:EB:2D:B7:54:A8:A5:53 Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62 Certificate issuer: /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62 Certificate serial: 019B38335D01D1F0CE0AB62A82F35E2EE181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft Manifest number: 0360 Signing time: Fri 19 Dec 2025 20:00:48 +0000 Manifest this update: Fri 19 Dec 2025 20:00:48 +0000 Manifest next update: Sat 20 Dec 2025 20:00:48 +0000 Files and hashes: 1: _EbNwpReLUVNd1YP_0CwE7ZjiIE.roa (hash: h2xnKbmoWDr+VElZXTIO8MYVw2Dx5IJspYhOYFMtbaw=) 2: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: pxHU6m4GNlU+8ikBqFXaaX7x2dq8zmzDLc7jWf++HRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:5d:01:d1:f0:ce:0a:b6:2a:82:f3:5e:2e:e1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62 Validity Not Before: Dec 19 20:00:48 2025 GMT Not After : Dec 20 20:00:48 2025 GMT Subject: CN=4eb34f9e59e23d96e2e97ac9a0eb2db754a8a553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:84:c2:f0:fc:48:5a:02:14:60:a2:42:70: cf:ea:e2:75:82:56:e7:33:b5:01:33:11:02:09:c8: cb:39:6b:0a:d1:83:2a:78:bb:2e:f3:b4:47:eb:28: 22:9c:6e:10:34:72:4d:b4:ba:26:cc:05:34:e6:e0: a7:cd:18:95:31:1c:c3:0b:97:24:0b:ff:52:74:2f: 62:8e:45:53:09:a2:8e:d6:ee:55:56:10:7a:be:f2: 78:c9:e0:98:19:69:de:0f:74:fc:66:ee:95:3a:d3: 2a:77:25:c7:9e:a7:7f:6d:7f:7e:85:a4:a3:d0:84: 78:58:c1:da:19:ed:33:32:4a:c1:0b:aa:4b:4b:7f: cf:38:54:61:97:c7:03:60:d1:2a:f9:c2:27:1a:36: 15:43:39:a9:32:3c:ce:42:61:3c:2e:62:83:5f:e6: 1d:4c:f3:27:9f:43:71:a8:79:85:2c:fb:39:62:26: 0b:0d:21:63:3b:c9:84:11:7b:54:4f:cb:70:a7:75: 41:5f:2c:72:2d:36:80:54:12:c8:e7:76:93:73:f0: a9:97:b4:17:d7:e0:9b:68:fd:f7:e0:9a:4e:4d:9c: d5:20:90:0a:ce:58:35:06:94:4a:1b:9a:6a:60:41: f2:aa:66:18:62:f4:56:96:82:57:a3:90:38:24:92: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B3:4F:9E:59:E2:3D:96:E2:E9:7A:C9:A0:EB:2D:B7:54:A8:A5:53 X509v3 Authority Key Identifier: keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:4a:2c:af:c9:8e:cc:05:ee:22:eb:5f:25:8c:ae:d3:af:8c: b5:8d:20:d1:47:9d:74:20:2d:ad:de:dc:9a:a8:f5:a4:84:e7: e1:c1:23:ba:6f:dd:b1:96:98:4b:4b:49:74:7b:c8:75:de:ab: 4d:63:54:28:d2:79:16:fd:b9:f4:4b:54:8c:0c:8f:aa:b6:e6: 46:62:04:a4:07:c2:25:40:24:36:ed:c7:9f:24:b6:65:b8:4f: 63:5f:1c:30:24:36:31:a8:f4:1e:0b:64:bb:62:63:b2:ca:4d: fd:5f:ad:e9:45:fc:1a:be:9f:e5:90:1e:15:13:b7:32:a9:11: 01:b3:f6:98:4f:f8:2b:b4:f9:08:04:73:c6:a3:8c:25:8f:bd: 99:f3:f8:ff:d2:6a:97:ee:07:ef:0d:04:4b:6a:5c:57:4f:82: 5b:8f:37:61:b8:78:14:1c:6f:b6:a9:9b:8b:33:3d:22:e7:da: 10:f6:5c:05:f8:a5:bd:f8:cf:eb:dd:53:f6:bf:4e:af:b0:78: fd:d0:f3:a5:a1:81:61:bb:cc:b1:8e:50:67:1c:82:e6:50:4d: 21:a1:4b:a7:61:e1:06:38:8c:51:7a:3d:40:5b:7f:66:fc:63: 9a:84:92:b7:19:3b:95:fc:86:94:ed:b9:91:00:51:3a:ad:85: 70:17:ad:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M10B0fDOCrYqgvNeLuGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWIxYzFkNDkzMGJmYmZlMjVlYTdmMGE0NWQ3ZDBiNjEx ZTdmNjIwHhcNMjUxMjE5MjAwMDQ4WhcNMjUxMjIwMjAwMDQ4WjAzMTEwLwYDVQQD Eyg0ZWIzNGY5ZTU5ZTIzZDk2ZTJlOTdhYzlhMGViMmRiNzU0YThhNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylWEwvD8SFoCFGCiQnDP6uJ1glbn M7UBMxECCcjLOWsK0YMqeLsu87RH6yginG4QNHJNtLomzAU05uCnzRiVMRzDC5ck C/9SdC9ijkVTCaKO1u5VVhB6vvJ4yeCYGWneD3T8Zu6VOtMqdyXHnqd/bX9+haSj 0IR4WMHaGe0zMkrBC6pLS3/POFRhl8cDYNEq+cInGjYVQzmpMjzOQmE8LmKDX+Yd TPMnn0NxqHmFLPs5YiYLDSFjO8mEEXtUT8twp3VBXyxyLTaAVBLI53aTc/Cpl7QX 1+CbaP334JpOTZzVIJAKzlg1BpRKG5pqYEHyqmYYYvRWloJXo5A4JJK8vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6zT55Z4j2W4ul6yaDrLbdUqKVTMB8GA1UdIwQY MBaAFGnrHB1JML+/4l6n8KRdfQthHn9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQt ZTk5YWIyNjA1YTkwLzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQtZTk5YWIyNjA1YTkw LzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkosr8mO zAXuIutfJYyu06+MtY0g0UeddCAtrd7cmqj1pITn4cEjum/dsZaYS0tJdHvIdd6r TWNUKNJ5Fv259EtUjAyPqrbmRmIEpAfCJUAkNu3HnyS2ZbhPY18cMCQ2Maj0Hgtk u2JjsspN/V+t6UX8Gr6f5ZAeFRO3MqkRAbP2mE/4K7T5CARzxqOMJY+9mfP4/9Jq l+4H7w0ES2pcV0+CW483Ybh4FBxvtqmbizM9IufaEPZcBfilvfjP691T9r9Or7B4 /dDzpaGBYbvMsY5QZxyC5lBNIaFLp2HhBjiMUXo9QFt/ZvxjmoSStxk7lfyGlO25 kQBROq2FcBetIw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:48:21 2025 by rpki-client