This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft File: aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json) Hash identifier: ykTzxBT3CJY4eSNrUc0VoGCajKuXXuGT2yBX3sN46HI= Subject key identifier: 74:55:BE:E3:8F:76:ED:A9:E6:09:D8:13:D1:3E:A9:CC:00:B2:01:4F Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B Certificate issuer: /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b Certificate serial: 019B34C4B6773933BCFA84A6C971C6418E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 04:01:05 +0000 Manifest this update: Fri 19 Dec 2025 04:01:05 +0000 Manifest next update: Sat 20 Dec 2025 04:01:05 +0000 Files and hashes: 1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: /nlrmc0k4HCmBlgDygjLesZD1brFG/bZp9HzAKDao18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:b6:77:39:33:bc:fa:84:a6:c9:71:c6:41:8e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b Validity Not Before: Dec 19 04:01:05 2025 GMT Not After : Dec 20 04:01:05 2025 GMT Subject: CN=7455bee38f76eda9e609d813d13ea9cc00b2014f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:4f:ed:c8:6a:6c:8f:0f:c4:89:55:eb:ae: 5a:7f:3e:f1:77:5f:b7:4e:80:c6:9f:6e:20:c5:39: 18:e6:7c:19:29:e2:15:71:ba:bd:d6:a2:34:57:c1: c7:8a:dc:0d:ae:c9:c7:05:f8:84:02:1c:e0:01:9e: 98:44:d9:0b:fe:16:6f:09:e2:22:a3:d6:6a:de:90: 6e:03:2f:86:bc:47:8a:9c:3c:c1:32:4e:85:85:45: 9e:d2:a3:54:e9:3f:67:a3:e0:49:c4:5d:ea:f0:94: ce:39:2a:33:8b:24:05:87:c0:fd:f4:61:45:25:a1: 78:21:36:b8:83:a6:b6:d2:c3:89:9f:83:3d:98:a1: ab:3f:65:3c:fc:71:51:9c:21:9e:4d:05:c6:a5:e7: 94:00:89:a7:0e:4e:2e:8d:68:3d:48:50:77:d8:89: 18:d2:00:9b:1e:bc:00:91:5a:79:2d:d8:1f:ad:6f: 0b:e1:c9:c2:13:04:29:d7:48:72:d7:d1:79:2c:36: 91:e7:6e:2d:b9:10:69:51:5c:27:6b:ce:45:b2:2b: 4e:a4:48:ae:5d:db:6b:ed:44:80:9f:5f:e2:4a:a6: 2c:c3:ab:e7:2b:69:0c:1a:a7:b3:26:49:b7:e5:db: 97:eb:61:ac:45:41:ec:17:f7:b4:42:a9:42:84:ee: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:55:BE:E3:8F:76:ED:A9:E6:09:D8:13:D1:3E:A9:CC:00:B2:01:4F X509v3 Authority Key Identifier: keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7c:61:45:2a:61:9b:cf:9b:48:a4:02:f3:35:02:ec:63:00: f1:8e:17:d5:3b:20:63:00:07:79:a0:90:fe:a5:d9:03:79:d3: d1:8f:18:78:7a:63:ba:57:0f:bd:56:45:4e:b2:38:35:84:d5: be:d2:67:e1:15:7b:cb:a9:ba:bb:0b:62:b6:d7:5c:e9:eb:15: 52:1a:2e:d3:02:11:35:06:da:aa:b7:2a:7a:69:d1:e5:1b:d9: 6b:b7:2d:23:5d:d6:81:92:b0:ac:b4:66:f0:07:c6:4f:25:1f: d5:37:a9:97:a0:66:4f:e3:ac:a2:16:ce:c3:85:1a:8a:69:c5: 71:3f:d2:c6:60:1e:ad:6e:84:a7:c3:aa:8f:bf:fa:da:b4:96: 01:d2:bb:8a:7d:95:ed:a5:33:d5:b3:b5:1c:53:8d:ec:c9:6d: d6:82:37:68:2f:bc:f9:4a:98:7b:e8:69:8e:16:52:e8:19:b7: 24:10:db:26:ce:ca:1f:bf:08:01:36:71:50:ae:e4:dc:a2:46: 81:c4:19:fd:42:99:bd:d1:a0:de:a4:bf:04:4f:ee:b8:60:f4: 41:37:36:bd:d9:70:f6:9b:91:71:08:39:dc:d2:f0:6f:06:4d: fd:8f:5c:71:5d:bf:c5:8c:d4:46:96:fb:e4:ae:b6:02:ea:f5: 2b:3d:e7:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xLZ3OTO8+oSmyXHGQY5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MjlhNTg4NmYyZjRlOTdkYmRkNWYwOWU4ODk2NjBjM2I2 ZTEzM2IwHhcNMjUxMjE5MDQwMTA1WhcNMjUxMjIwMDQwMTA1WjAzMTEwLwYDVQQD Eyg3NDU1YmVlMzhmNzZlZGE5ZTYwOWQ4MTNkMTNlYTljYzAwYjIwMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aFP7chqbI8PxIlV665afz7xd1+3 ToDGn24gxTkY5nwZKeIVcbq91qI0V8HHitwNrsnHBfiEAhzgAZ6YRNkL/hZvCeIi o9Zq3pBuAy+GvEeKnDzBMk6FhUWe0qNU6T9no+BJxF3q8JTOOSoziyQFh8D99GFF JaF4ITa4g6a20sOJn4M9mKGrP2U8/HFRnCGeTQXGpeeUAImnDk4ujWg9SFB32IkY 0gCbHrwAkVp5LdgfrW8L4cnCEwQp10hy19F5LDaR524tuRBpUVwna85FsitOpEiu Xdtr7USAn1/iSqYsw6vnK2kMGqezJkm35duX62GsRUHsF/e0QqlChO4kRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRVvuOPdu2p5gnYE9E+qcwAsgFPMB8GA1UdIwQY MBaAFGkppYhvL06X291fCeiJZgw7bhM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVNtbGlHOHZUcGZiM1Y4SjZJbG1ERHR1RXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82ZGNjMDctZDJhMy00ZTk0LTg0NmEt MjYxZmJiYzkzMDY2LzEvYVNtbGlHOHZUcGZiM1Y4SjZJbG1ERHR1RXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82ZGNjMDctZDJhMy00ZTk0LTg0NmEtMjYxZmJiYzkzMDY2 LzEvYVNtbGlHOHZUcGZiM1Y4SjZJbG1ERHR1RXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnxhRSph m8+bSKQC8zUC7GMA8Y4X1TsgYwAHeaCQ/qXZA3nT0Y8YeHpjulcPvVZFTrI4NYTV vtJn4RV7y6m6uwtittdc6esVUhou0wIRNQbaqrcqemnR5RvZa7ctI13WgZKwrLRm 8AfGTyUf1Tepl6BmT+OsohbOw4UaimnFcT/SxmAerW6Ep8Oqj7/62rSWAdK7in2V 7aUz1bO1HFON7Mlt1oI3aC+8+UqYe+hpjhZS6Bm3JBDbJs7KH78IATZxUK7k3KJG gcQZ/UKZvdGg3qS/BE/uuGD0QTc2vdlw9puRcQg53NLwbwZN/Y9ccV2/xYzURpb7 5K62Aur1Kz3nRA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:58 2025 by rpki-client