This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json) Hash identifier: PA7S+TJ4IuE6UkNg01g0XeVqZsBviGPoOtUuyBQItT4= Subject key identifier: B0:2B:95:E8:F8:EC:BF:17:99:06:F0:CF:67:3F:BD:E3:C3:1B:5A:59 Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6 Certificate serial: 019B1ACDF8DF40C30807639CD9113E8F4758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft Manifest number: 1040 Signing time: Sun 14 Dec 2025 03:01:04 +0000 Manifest this update: Sun 14 Dec 2025 03:01:04 +0000 Manifest next update: Mon 15 Dec 2025 03:01:04 +0000 Files and hashes: 1: 0XAsS9JxHUdvax1K7_fLGVXaRlc.roa (hash: Og5mtIgEa7Wu+4+Cbt7l5y3X6d9YBgIumgqPXgh/sFY=) 2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: Bu9NxkIxp+sNMU8u68cQLsw+YbpiSFg/zA3wWb2eJ5Y=) 3: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (hash: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:f8:df:40:c3:08:07:63:9c:d9:11:3e:8f:47:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6 Validity Not Before: Dec 14 03:01:04 2025 GMT Not After : Dec 15 03:01:04 2025 GMT Subject: CN=b02b95e8f8ecbf179906f0cf673fbde3c31b5a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:12:8c:20:17:3e:a3:05:c9:4e:dc:e9:57:59: 73:54:fa:96:7e:a7:33:72:28:e6:1e:7f:b7:4c:98: e2:89:68:b6:1b:17:c7:3b:30:1d:cc:8e:ee:32:61: 27:eb:1d:c4:7c:70:9e:e8:12:e9:aa:f1:c7:27:77: 81:51:40:76:37:05:be:96:0e:a9:18:80:32:c6:09: 8e:e6:f9:94:73:8a:96:41:c0:fc:a5:a7:7f:25:a8: d2:a3:9b:1d:8b:62:c7:27:87:13:af:95:d6:24:ec: 53:f2:90:92:6a:09:48:34:00:37:c7:8f:21:92:46: 96:b4:9d:54:89:0b:86:99:9e:ac:3f:0a:3d:9e:7a: 56:53:6a:cb:63:d8:8e:34:e6:bc:54:f2:33:a7:f7: 46:f0:32:99:50:d6:cf:1a:d2:36:cb:10:fb:00:ef: 7b:9e:29:47:92:63:fb:9f:e6:23:b0:07:dd:89:88: 7f:56:3f:c9:da:c2:b0:50:0e:81:5a:8b:d5:80:7b: ef:ed:14:66:50:f4:e3:86:df:fa:cc:f3:ac:5a:8a: f6:43:71:96:37:7c:dc:23:d5:c6:d5:3c:8a:36:48: f9:04:98:ea:18:a9:27:a7:30:b6:b3:ef:66:17:43: d4:f8:35:bc:be:cc:94:43:2f:b0:e9:6a:48:f1:52: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2B:95:E8:F8:EC:BF:17:99:06:F0:CF:67:3F:BD:E3:C3:1B:5A:59 X509v3 Authority Key Identifier: keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:92:ca:04:2c:e5:e3:84:fd:f0:c7:ec:06:17:46:3a:30:39: cb:74:a5:10:99:e7:ac:71:cf:c6:3e:31:6f:62:3b:e1:35:c4: ba:a9:a8:e4:85:39:c9:94:87:19:56:2f:f5:65:81:07:7d:fd: b7:57:12:b3:00:a0:98:74:a8:da:6e:e3:13:00:e8:c5:d8:a6: e8:51:ac:0f:21:19:0f:a2:1b:53:e9:12:b0:be:c4:72:41:61: 54:d2:db:63:88:db:8c:84:3d:ec:ca:55:66:f8:2a:e0:82:52: 7a:7c:8c:b8:c6:f7:f2:1d:48:dd:ae:d3:71:0f:6d:dc:37:b3: 27:a4:3c:d5:dc:05:f4:53:3a:bc:9d:74:65:73:67:52:0b:e5: 9b:3c:56:f5:0b:42:79:33:36:83:d0:11:69:98:e6:4b:4f:45: 3d:c6:ac:ce:8f:a8:0a:cf:f5:9d:6f:c8:0b:69:2e:0d:1c:0f: 0a:93:0f:05:a5:21:04:5f:e5:8a:16:37:60:b1:e8:c9:1f:f0: 0c:73:17:4b:c6:76:68:c7:f6:1b:5e:55:ee:a5:5f:fb:2a:98: 3a:c2:a7:bb:10:b6:48:44:db:d0:24:a7:9e:f5:2e:48:8b:ec: 0b:0c:e1:01:7e:01:30:6d:4d:ad:90:df:ee:cb:42:08:5c:ca: 84:d9:65:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazfjfQMMIB2Oc2RE+j0dYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw ZjczYzYwHhcNMjUxMjE0MDMwMTA0WhcNMjUxMjE1MDMwMTA0WjAzMTEwLwYDVQQD EyhiMDJiOTVlOGY4ZWNiZjE3OTkwNmYwY2Y2NzNmYmRlM2MzMWI1YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hKMIBc+owXJTtzpV1lzVPqWfqcz cijmHn+3TJjiiWi2GxfHOzAdzI7uMmEn6x3EfHCe6BLpqvHHJ3eBUUB2NwW+lg6p GIAyxgmO5vmUc4qWQcD8pad/JajSo5sdi2LHJ4cTr5XWJOxT8pCSaglINAA3x48h kkaWtJ1UiQuGmZ6sPwo9nnpWU2rLY9iONOa8VPIzp/dG8DKZUNbPGtI2yxD7AO97 nilHkmP7n+YjsAfdiYh/Vj/J2sKwUA6BWovVgHvv7RRmUPTjht/6zPOsWor2Q3GW N3zcI9XG1TyKNkj5BJjqGKknpzC2s+9mF0PU+DW8vsyUQy+w6WpI8VLAMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLArlej47L8XmQbwz2c/vePDG1pZMB8GA1UdIwQY MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJLKBCzl 44T98MfsBhdGOjA5y3SlEJnnrHHPxj4xb2I74TXEuqmo5IU5yZSHGVYv9WWBB339 t1cSswCgmHSo2m7jEwDoxdim6FGsDyEZD6IbU+kSsL7EckFhVNLbY4jbjIQ97MpV Zvgq4IJSenyMuMb38h1I3a7TcQ9t3DezJ6Q81dwF9FM6vJ10ZXNnUgvlmzxW9QtC eTM2g9ARaZjmS09FPcaszo+oCs/1nW/IC2kuDRwPCpMPBaUhBF/lihY3YLHoyR/w DHMXS8Z2aMf2G15V7qVf+yqYOsKnuxC2SETb0CSnnvUuSIvsCwzhAX4BMG1NrZDf 7stCCFzKhNllxw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:23 2025 by rpki-client