This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json) Hash identifier: /IfWNCyJL1gNvZFCB3GVF7cW/c2vcHUYAnm+vRsGXSw= Subject key identifier: F7:D8:AE:F9:63:59:4D:48:2E:B1:F0:70:99:23:5D:46:4C:55:42:C1 Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Certificate serial: 019B1013CBB857A4E2DBC7D0D4114C2A5FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft Manifest number: 16B6 Signing time: Fri 12 Dec 2025 01:01:31 +0000 Manifest this update: Fri 12 Dec 2025 01:01:31 +0000 Manifest next update: Sat 13 Dec 2025 01:01:31 +0000 Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: BJD5UAWlYRVRyAcpRLiPOsW8MsC+hJqEblsFty/M1JE=) 2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=) 3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:cb:b8:57:a4:e2:db:c7:d0:d4:11:4c:2a:5f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Validity Not Before: Dec 12 01:01:31 2025 GMT Not After : Dec 13 01:01:31 2025 GMT Subject: CN=f7d8aef963594d482eb1f07099235d464c5542c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:b9:64:dc:9a:50:f5:99:af:ea:c9:28:5b: 22:f2:b2:5d:65:2d:c6:30:9d:9c:5d:85:e3:57:9e: 97:15:56:dc:b8:e1:8e:5e:c4:34:ec:2b:10:61:2a: 0b:82:76:85:78:29:5c:2f:11:4b:9c:0d:19:16:3f: d5:0f:4f:29:dc:42:2f:98:54:f8:3c:b8:88:69:f7: 9e:5e:ac:37:fe:48:2f:69:54:30:ad:27:79:39:a9: 4b:33:ca:b9:ea:9a:c4:4f:ab:d6:ba:7e:5e:7f:d8: 04:5c:cd:23:f4:61:98:f5:4a:de:13:9d:75:42:99: 07:cc:45:67:3f:57:63:04:cd:4e:4f:14:66:99:05: 19:dc:7c:1c:f7:64:e8:71:1c:34:a6:bc:5e:17:f5: 07:7e:aa:65:14:32:95:0a:85:96:9e:c9:f6:47:fc: ac:eb:93:2b:0f:6b:19:e7:65:1d:02:ee:af:63:3d: af:c2:d9:76:9d:3b:09:10:ff:da:76:79:dd:ec:71: 03:62:af:af:39:d7:8f:98:1e:da:20:1b:d6:5f:73: 61:8b:80:21:7b:a6:f0:94:c9:e6:21:52:27:d7:d6: 28:ba:21:e7:c8:9c:ac:94:7c:01:54:12:11:81:e1: 8e:5c:78:f3:98:ca:08:68:10:fe:3c:0e:3f:f5:d7: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D8:AE:F9:63:59:4D:48:2E:B1:F0:70:99:23:5D:46:4C:55:42:C1 X509v3 Authority Key Identifier: keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:72:95:dd:7a:e0:3e:f5:89:68:8c:42:31:5f:19:f4:dc:e4: 10:02:79:1a:17:da:27:a9:e7:65:5d:26:15:0b:99:06:89:27: 38:28:28:2a:60:25:0d:ca:21:fb:e6:4b:7f:9f:41:b5:a4:a1: bb:38:c1:c7:58:75:c9:5f:dd:3a:4d:2e:94:4f:5d:a8:aa:3d: d8:c7:3f:5e:d4:49:74:ea:cf:a7:5c:92:7b:56:1c:54:55:3a: 66:21:5d:03:64:b0:4d:67:0a:3f:48:14:94:d7:50:94:87:06: 04:ac:3f:fc:98:6d:69:db:70:78:1e:16:af:d0:9b:6e:66:84: 01:cf:f2:bb:3f:1a:1c:20:e4:28:57:a8:65:a9:5b:b4:7d:03: 59:c2:ae:b2:28:2d:39:d2:c6:fa:c7:0a:23:89:01:e4:02:50: 05:55:75:d9:7a:bf:cb:6c:9f:f3:08:3f:ac:ae:80:6c:e9:40: 2c:fa:61:40:33:ad:2f:57:46:e5:ef:37:5a:24:9a:e4:90:ff: 3d:12:8a:07:55:aa:40:77:03:47:6c:7f:33:d6:29:c5:f0:89: b6:50:ed:a2:2a:80:50:5b:2e:1e:15:b5:b0:ae:9c:d1:28:e4: 2e:b2:e3:95:57:c4:0d:1a:03:5e:93:03:b5:1a:69:9a:6c:59: b1:f2:e1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE8u4V6Ti28fQ1BFMKl/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw NTBlMzQwHhcNMjUxMjEyMDEwMTMxWhcNMjUxMjEzMDEwMTMxWjAzMTEwLwYDVQQD EyhmN2Q4YWVmOTYzNTk0ZDQ4MmViMWYwNzA5OTIzNWQ0NjRjNTU0MmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeS5ZNyaUPWZr+rJKFsi8rJdZS3G MJ2cXYXjV56XFVbcuOGOXsQ07CsQYSoLgnaFeClcLxFLnA0ZFj/VD08p3EIvmFT4 PLiIafeeXqw3/kgvaVQwrSd5OalLM8q56prET6vWun5ef9gEXM0j9GGY9UreE511 QpkHzEVnP1djBM1OTxRmmQUZ3Hwc92TocRw0prxeF/UHfqplFDKVCoWWnsn2R/ys 65MrD2sZ52UdAu6vYz2vwtl2nTsJEP/adnnd7HEDYq+vOdePmB7aIBvWX3Nhi4Ah e6bwlMnmIVIn19YouiHnyJyslHwBVBIRgeGOXHjzmMoIaBD+PA4/9dehvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfYrvljWU1ILrHwcJkjXUZMVULBMB8GA1UdIwQY MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHKV3Xrg PvWJaIxCMV8Z9NzkEAJ5GhfaJ6nnZV0mFQuZBoknOCgoKmAlDcoh++ZLf59BtaSh uzjBx1h1yV/dOk0ulE9dqKo92Mc/XtRJdOrPp1ySe1YcVFU6ZiFdA2SwTWcKP0gU lNdQlIcGBKw//JhtadtweB4Wr9CbbmaEAc/yuz8aHCDkKFeoZalbtH0DWcKusigt OdLG+scKI4kB5AJQBVV12Xq/y2yf8wg/rK6AbOlALPphQDOtL1dG5e83WiSa5JD/ PRKKB1WqQHcDR2x/M9YpxfCJtlDtoiqAUFsuHhW1sK6c0SjkLrLjlVfEDRoDXpMD tRppmmxZsfLhrQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:48:20 2025 by rpki-client