This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json) Hash identifier: FYpkKzAHHHJODxdJviTf5UjezFeW81BR0lJ/xI9mk+U= Subject key identifier: 20:B1:EF:37:60:89:FD:AF:E7:28:AC:23:07:12:6E:82:B1:62:FD:07 Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36 Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736 Certificate serial: 019B59762665E7E8A5616536DB463B8DC6DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft Manifest number: 1728 Signing time: Fri 26 Dec 2025 07:01:13 +0000 Manifest this update: Fri 26 Dec 2025 07:01:13 +0000 Manifest next update: Sat 27 Dec 2025 07:01:13 +0000 Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=) 2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=) 3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: vKt4E8XLVnjJWaYDfF3fcTt7nZeKFp/cIBwTZD5RxG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:26:65:e7:e8:a5:61:65:36:db:46:3b:8d:c6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736 Validity Not Before: Dec 26 07:01:13 2025 GMT Not After : Dec 27 07:01:13 2025 GMT Subject: CN=20b1ef376089fdafe728ac2307126e82b162fd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:34:f3:01:ba:f5:46:60:d5:e4:6c:ae:14: 4a:95:60:f4:13:49:a3:77:7b:c4:6f:8c:62:6a:b5: fb:17:51:4a:4f:55:a3:06:82:64:19:aa:4d:d1:3a: 9f:d3:3d:44:99:56:0c:7e:ac:53:8c:cd:bb:18:50: d1:1d:c9:6e:66:67:ff:09:8b:51:87:dd:05:89:77: ae:5d:b8:88:8f:98:ea:d6:07:9d:13:28:38:4d:95: 19:f3:3c:4f:93:7b:38:25:a0:52:35:89:4e:2e:df: 65:96:b7:2d:22:2a:27:b5:ae:35:03:f7:62:33:f8: 28:71:df:91:ec:ff:dc:83:0d:c9:85:bf:cc:b2:30: 05:fe:38:b3:af:34:65:39:fd:99:a8:b9:52:ac:5a: 70:85:db:a2:86:2e:4a:11:6e:c7:5e:09:79:cb:ae: 67:08:a6:0f:af:08:e6:5c:79:57:a4:92:8f:a1:d3: 84:da:a8:98:a5:92:7e:ab:36:4d:76:a0:d1:84:b4: 76:6e:6e:b7:06:27:32:79:8a:0c:77:18:e4:80:42: 08:f9:41:5d:49:3f:df:fb:2c:4a:5f:4c:59:93:76: c0:49:0e:c2:b8:4b:9a:e9:9d:13:fe:28:da:5b:0b: 0c:fe:27:78:e5:0d:80:bd:d7:c9:b8:79:94:55:b7: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B1:EF:37:60:89:FD:AF:E7:28:AC:23:07:12:6E:82:B1:62:FD:07 X509v3 Authority Key Identifier: keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4d:5b:0b:08:3f:5b:6f:d9:48:ba:e0:6c:7b:fe:5d:bf:a3: 3e:3d:5d:58:ba:25:ca:81:38:c0:92:e9:27:c9:8e:a9:68:90: c8:fa:38:f0:c0:8a:e2:d6:ba:3c:4d:28:4c:fa:53:39:e4:4a: c6:75:f0:c5:d5:cd:ea:80:03:a0:b7:af:fe:94:5b:46:75:6b: 32:00:1d:4c:53:f5:56:f0:35:ea:6c:ef:41:e2:19:18:1f:c7: 16:bc:2a:cd:d3:a7:f3:8a:36:85:88:1e:4e:02:42:48:27:67: a2:0b:c6:75:25:ad:0a:a9:9e:77:54:89:0b:9a:42:36:4f:f8: 55:4b:c3:dd:56:e6:d9:97:15:25:78:fa:74:e1:06:93:5d:fb: d2:e2:75:27:1c:e6:b0:39:32:fc:c5:3a:5f:e6:21:db:cb:03: 79:2c:0c:06:a6:da:1a:5c:6a:6f:a4:61:d6:f2:df:5e:2c:95: f6:70:50:fa:c6:1e:6c:a6:24:83:4a:86:9d:14:ad:74:73:63: 0a:4f:5c:5e:4e:77:3d:e3:84:bf:9b:eb:8c:a9:a1:9f:13:cd: fa:8b:60:7f:ab:44:ad:c9:93:b6:b3:f3:13:fe:9f:3a:27:c8: 00:73:7f:9a:95:b4:db:d0:18:26:8f:82:dc:03:59:7b:e9:83: 59:73:25:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdiZl5+ilYWU220Y7jcbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNmNjNzkwNjk1YjcxOWI5MjNjNzRkMjBmYWI3ZTYzYzE4 YmM3MzYwHhcNMjUxMjI2MDcwMTEzWhcNMjUxMjI3MDcwMTEzWjAzMTEwLwYDVQQD EygyMGIxZWYzNzYwODlmZGFmZTcyOGFjMjMwNzEyNmU4MmIxNjJmZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C808wG69UZg1eRsrhRKlWD0E0mj d3vEb4xiarX7F1FKT1WjBoJkGapN0Tqf0z1EmVYMfqxTjM27GFDRHcluZmf/CYtR h90FiXeuXbiIj5jq1gedEyg4TZUZ8zxPk3s4JaBSNYlOLt9llrctIionta41A/di M/gocd+R7P/cgw3Jhb/MsjAF/jizrzRlOf2ZqLlSrFpwhduihi5KEW7HXgl5y65n CKYPrwjmXHlXpJKPodOE2qiYpZJ+qzZNdqDRhLR2bm63BicyeYoMdxjkgEII+UFd ST/f+yxKX0xZk3bASQ7CuEua6Z0T/ijaWwsM/id45Q2AvdfJuHmUVbcaZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCx7zdgif2v5yisIwcSboKxYv0HMB8GA1UdIwQY MBaAFGtsx5BpW3Gbkjx00g+rfmPBi8c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTkt NTdkNWY0MDFiNTY0LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTktNTdkNWY0MDFiNTY0 LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE1bCwg/ W2/ZSLrgbHv+Xb+jPj1dWLolyoE4wJLpJ8mOqWiQyPo48MCK4ta6PE0oTPpTOeRK xnXwxdXN6oADoLev/pRbRnVrMgAdTFP1VvA16mzvQeIZGB/HFrwqzdOn84o2hYge TgJCSCdnogvGdSWtCqmed1SJC5pCNk/4VUvD3Vbm2ZcVJXj6dOEGk1370uJ1Jxzm sDky/MU6X+Yh28sDeSwMBqbaGlxqb6Rh1vLfXiyV9nBQ+sYebKYkg0qGnRStdHNj Ck9cXk53PeOEv5vrjKmhnxPN+otgf6tErcmTtrPzE/6fOifIAHN/mpW029AYJo+C 3ANZe+mDWXMl1w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:59 2025 by rpki-client