This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json) Hash identifier: MsN9nUbMrYNOAKR0FFKC/+bGHrA2Hxd+OSJb5h6mYNo= Subject key identifier: C2:99:30:92:68:5B:03:97:83:F5:66:D4:CD:67:C3:0E:16:D9:9F:5E Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019B5297F4BD592799BF1070602424291028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft Manifest number: 17B7 Signing time: Wed 24 Dec 2025 23:00:48 +0000 Manifest this update: Wed 24 Dec 2025 23:00:48 +0000 Manifest next update: Thu 25 Dec 2025 23:00:48 +0000 Files and hashes: 1: 1OWaJkh3xMG85_hCH7EG9MsKPnE.roa (hash: 7Qj+nAZULs6II5SyfVpkBsSwcikp23VZRDpTVixA+q4=) 2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: iDp636GNPq40NVgkGfvijOqRZ/Cmk56qj6HlHqlWgwg=) 3: a2fnNZYaC7tSvST6yxN7zVnr8rk.roa (hash: B9FNmdbIQmgv4vbLGVGZQBmqWpabl1hGlyBuKo/Sams=) 4: pptDZSTJBY4CiFtORILN4Ah7Tb4.roa (hash: EhbQD/elQMKXl9c0iSPew66fQcn0JspYn5ZlKsy/Sr8=) 5: sHN1qzO_OIoxdAcN_RCzbhJa90s.roa (hash: qhwmu8ARFOgzSiZv0c+zEHvcvL9Gl+V4SXpkAfgsV6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:97:f4:bd:59:27:99:bf:10:70:60:24:24:29:10:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Dec 24 23:00:48 2025 GMT Not After : Dec 25 23:00:48 2025 GMT Subject: CN=c2993092685b039783f566d4cd67c30e16d99f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:61:f2:b2:2e:d2:26:1b:17:b3:df:af:6c: a8:11:b9:45:5e:b3:89:a1:7f:aa:e8:72:ee:5f:1c: 59:d2:2a:4a:11:23:dd:b9:14:cc:a4:87:ce:fb:0a: e0:c5:15:52:b9:44:7e:7a:79:9d:20:d3:ad:a5:56: 7a:55:ae:cd:85:b9:60:18:47:c3:da:84:ff:e8:3a: aa:f3:8d:d1:86:55:e6:5e:c0:a9:6c:78:fe:d4:48: e3:3e:fe:a3:b3:81:3c:7c:8f:0c:25:b6:2d:ba:f4: c3:5b:6c:42:e3:ec:2a:5e:22:74:43:10:bb:7c:69: 21:e4:a8:dc:e0:a3:f4:59:c2:19:7d:90:8a:36:aa: 09:05:52:1f:a3:c4:38:ad:a4:cd:6e:32:f0:29:ba: d8:8b:bd:4e:46:2b:7e:bc:8b:72:7d:0b:44:66:4b: b5:f9:89:64:12:22:94:7a:28:45:ed:64:69:95:e3: 61:be:9c:5f:8e:88:11:33:d0:47:ad:6b:87:66:da: be:52:48:2f:66:6c:28:c8:e6:fe:31:48:e0:de:62: 7e:0d:81:2a:67:6e:55:52:07:9c:8d:6f:8e:c3:59: f3:ec:ac:9d:f3:97:bd:0d:c7:38:d9:fc:97:3a:ba: 0b:5a:59:7e:0f:f1:cb:25:c9:41:3a:38:32:84:89: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:99:30:92:68:5B:03:97:83:F5:66:D4:CD:67:C3:0E:16:D9:9F:5E X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3f:c4:9d:b3:0d:b2:fd:cf:d2:9a:a8:b8:30:ba:ab:8d:96: be:6a:84:c8:6a:cd:01:1b:87:c3:2d:85:30:6c:97:af:bd:54: 6c:fa:bb:e7:92:66:be:f1:9a:97:16:05:e1:77:8b:77:b4:ea: b1:ef:ce:e3:e1:f3:a3:5e:bd:24:9f:84:02:5c:ea:54:be:c2: 3c:05:ac:3e:dc:40:02:f7:5f:a7:dd:8c:0c:4d:05:26:62:1f: 8a:a7:89:f2:ee:9d:c3:f8:dc:ac:4a:04:37:47:6c:d9:76:06: 2c:db:53:03:a0:fc:4e:7c:46:3a:d9:e4:33:ff:cc:1a:4e:43: 01:b0:c5:fb:e9:0c:83:b4:fd:1a:8b:60:cc:d3:fa:77:7d:40: 18:c5:a6:8c:a7:01:43:c9:7f:e8:14:fe:7e:b4:8d:11:c3:5c: af:66:87:36:7c:80:2e:4f:23:1e:5f:bf:44:f3:60:3a:e0:dd: a9:10:60:75:73:82:86:ca:91:d5:6f:9c:10:90:2b:dd:43:a0: a9:19:d0:69:68:be:db:a1:ba:fc:a0:3d:d5:1d:16:7c:50:3a: 99:b2:86:b3:ab:a2:38:fe:fe:41:a7:c2:58:6d:f8:67:ae:b9: c5:be:db:5e:65:55:b2:ff:91:af:6a:81:52:e6:24:ce:88:ed: 5a:6b:e8:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSl/S9WSeZvxBwYCQkKRAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjUxMjI0MjMwMDQ4WhcNMjUxMjI1MjMwMDQ4WjAzMTEwLwYDVQQD EyhjMjk5MzA5MjY4NWIwMzk3ODNmNTY2ZDRjZDY3YzMwZTE2ZDk5ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD1h8rIu0iYbF7Pfr2yoEblFXrOJ oX+q6HLuXxxZ0ipKESPduRTMpIfO+wrgxRVSuUR+enmdINOtpVZ6Va7NhblgGEfD 2oT/6Dqq843RhlXmXsCpbHj+1EjjPv6js4E8fI8MJbYtuvTDW2xC4+wqXiJ0QxC7 fGkh5Kjc4KP0WcIZfZCKNqoJBVIfo8Q4raTNbjLwKbrYi71ORit+vItyfQtEZku1 +YlkEiKUeihF7WRpleNhvpxfjogRM9BHrWuHZtq+UkgvZmwoyOb+MUjg3mJ+DYEq Z25VUgecjW+Ow1nz7Kyd85e9Dcc42fyXOroLWll+D/HLJclBOjgyhIlvgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKZMJJoWwOXg/Vm1M1nww4W2Z9eMB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJT/EnbMN sv3P0pqouDC6q42WvmqEyGrNARuHwy2FMGyXr71UbPq755JmvvGalxYF4XeLd7Tq se/O4+Hzo169JJ+EAlzqVL7CPAWsPtxAAvdfp92MDE0FJmIfiqeJ8u6dw/jcrEoE N0ds2XYGLNtTA6D8TnxGOtnkM//MGk5DAbDF++kMg7T9GotgzNP6d31AGMWmjKcB Q8l/6BT+frSNEcNcr2aHNnyALk8jHl+/RPNgOuDdqRBgdXOChsqR1W+cEJAr3UOg qRnQaWi+26G6/KA91R0WfFA6mbKGs6uiOP7+QafCWG34Z665xb7bXmVVsv+Rr2qB UuYkzojtWmvoUg== -----END CERTIFICATE-----Generated at Thu Dec 25 02:25:53 2025 by rpki-client