This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json) Hash identifier: Lax/sEzh/52LPWa7nI7ASMrN1v2RwhBynz9Pc+32ZNI= Subject key identifier: 09:92:29:FA:9B:10:F9:D3:9C:9F:29:A9:B5:A7:EA:80:A0:02:AD:AF Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85 Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85 Certificate serial: 019B5976CEEF6F653C32B664177DCB6B61FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 07:01:56 +0000 Manifest this update: Fri 26 Dec 2025 07:01:56 +0000 Manifest next update: Sat 27 Dec 2025 07:01:56 +0000 Files and hashes: 1: 1-RRFLFYvpdDCB0gIWM3HeWx7I8g.roa (hash: pD8ORJEMQZjbq/pqQVUKzZDauGOud+2TyXVh5uPBOWk=) 2: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: /szvuWA9CLsGwp0HRK24f/kr9e8LOGc226TpAR4FjdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ce:ef:6f:65:3c:32:b6:64:17:7d:cb:6b:61:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85 Validity Not Before: Dec 26 07:01:56 2025 GMT Not After : Dec 27 07:01:56 2025 GMT Subject: CN=099229fa9b10f9d39c9f29a9b5a7ea80a002adaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:7d:63:16:6d:2c:c8:2b:5a:7b:76:98:4a: 2d:20:99:e1:dc:b8:5c:28:10:c4:de:f2:be:bd:39: 9a:11:7c:34:43:a3:99:6c:1f:3d:ba:36:90:2a:82: 35:72:d9:a7:89:e2:2a:75:21:ec:6e:b6:c1:2a:d0: 5c:2e:1e:a1:5a:0c:af:19:b4:3e:21:99:b7:20:56: e4:18:d8:bd:8e:e1:d5:df:54:fe:f4:57:d3:69:3c: 7f:f1:e0:4c:cc:dc:a7:bd:9c:e0:cf:c0:d5:c3:a2: c4:8e:aa:b5:64:8e:37:2d:4b:0e:ce:0e:42:ba:39: d3:53:71:3f:62:4a:70:c2:84:33:fa:53:51:4a:b9: 5c:a5:70:d6:cd:55:6f:dd:ea:5e:c6:c4:e2:f7:87: 5a:93:7d:49:3e:6e:7b:6c:6d:e5:1a:9e:da:ec:3d: 4f:31:7d:47:27:47:84:a8:2e:aa:11:9b:48:67:c1: 6d:f0:d5:65:f6:08:97:ad:45:1a:e2:7a:1f:80:15: 48:50:2d:ca:52:e0:9d:91:65:7a:0b:be:ca:e3:52: e8:90:b9:77:66:fd:6b:b9:9d:39:f4:98:7d:fa:68: a1:77:10:fc:81:82:2f:4f:2a:99:71:f2:c0:d9:4d: 95:45:f1:cd:88:13:2b:53:b4:fb:86:a4:fe:5d:e8: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:92:29:FA:9B:10:F9:D3:9C:9F:29:A9:B5:A7:EA:80:A0:02:AD:AF X509v3 Authority Key Identifier: keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:46:f8:6b:a0:cb:3f:a3:d5:19:c3:76:41:1d:28:6f:4d:83: 31:6d:cb:a7:27:7c:42:cd:cc:05:b8:ce:6f:77:79:d5:49:e0: 0e:90:bb:78:4c:30:4a:25:19:50:2b:ee:10:c3:e2:d1:1d:27: 22:8b:3c:d9:a8:57:87:10:b3:8a:c9:b3:e8:07:63:f6:10:70: e6:bf:41:22:88:de:54:28:ed:3c:95:77:20:63:5e:84:12:76: 66:52:b6:2d:ce:49:41:9f:07:60:fd:d3:e4:e3:db:62:23:1e: bd:64:f9:87:1b:0d:6e:f8:41:b2:82:80:07:62:2a:51:a8:b4: 26:fe:86:fd:6a:57:4d:46:7f:04:25:1b:ef:db:09:c4:2e:2f: 5e:f9:06:d0:f7:f4:83:b1:f8:04:d1:95:90:e1:19:12:5b:2f: a7:33:eb:85:73:66:43:9f:84:2c:d2:ba:cc:df:e0:c1:3a:cd: 02:e9:ae:66:41:b1:92:95:08:36:f0:a3:23:e6:81:e9:68:40: 6b:1f:30:a1:c1:43:b8:2e:67:6c:0d:e7:9e:7d:20:f4:33:23: a8:da:16:c4:6b:2d:d5:15:7d:b1:2a:d3:5d:13:13:60:54:42: e9:5d:2f:1f:e3:5a:fd:c3:64:10:bd:c3:24:b9:96:d9:31:70: da:6b:f2:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZds7vb2U8MrZkF33La2H6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGFmZDYzNjA2MzZhNjMyNzc0N2EwNzA4MGY3ZjJlNWUz MmNlODUwHhcNMjUxMjI2MDcwMTU2WhcNMjUxMjI3MDcwMTU2WjAzMTEwLwYDVQQD EygwOTkyMjlmYTliMTBmOWQzOWM5ZjI5YTliNWE3ZWE4MGEwMDJhZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXV9YxZtLMgrWnt2mEotIJnh3Lhc KBDE3vK+vTmaEXw0Q6OZbB89ujaQKoI1ctmnieIqdSHsbrbBKtBcLh6hWgyvGbQ+ IZm3IFbkGNi9juHV31T+9FfTaTx/8eBMzNynvZzgz8DVw6LEjqq1ZI43LUsOzg5C ujnTU3E/YkpwwoQz+lNRSrlcpXDWzVVv3epexsTi94dak31JPm57bG3lGp7a7D1P MX1HJ0eEqC6qEZtIZ8Ft8NVl9giXrUUa4nofgBVIUC3KUuCdkWV6C77K41LokLl3 Zv1ruZ059Jh9+mihdxD8gYIvTyqZcfLA2U2VRfHNiBMrU7T7hqT+XeiiJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmSKfqbEPnTnJ8pqbWn6oCgAq2vMB8GA1UdIwQY MBaAFGja/WNgY2pjJ3R6BwgPfy5eMs6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDkt MmJiMjM3N2U1YTFjLzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi82MDEzNjAtYWRiOS00Y2I1LTg2ZDktMmJiMjM3N2U1YTFj LzEvYU5yOVkyQmphbU1uZEhvSENBOV9MbDR5em9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUb4a6DL P6PVGcN2QR0ob02DMW3Lpyd8Qs3MBbjOb3d51UngDpC7eEwwSiUZUCvuEMPi0R0n Ios82ahXhxCzismz6Adj9hBw5r9BIojeVCjtPJV3IGNehBJ2ZlK2Lc5JQZ8HYP3T 5OPbYiMevWT5hxsNbvhBsoKAB2IqUai0Jv6G/WpXTUZ/BCUb79sJxC4vXvkG0Pf0 g7H4BNGVkOEZElsvpzPrhXNmQ5+ELNK6zN/gwTrNAumuZkGxkpUINvCjI+aB6WhA ax8wocFDuC5nbA3nnn0g9DMjqNoWxGst1RV9sSrTXRMTYFRC6V0vH+Na/cNkEL3D JLmW2TFw2mvyxA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:53 2025 by rpki-client