This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json) Hash identifier: +3kEv21LtKC5/SE5jDwZ92AgZTuds+ZY7XhrkQYvS6E= Subject key identifier: E8:E0:80:CE:24:CD:4F:57:80:C9:BA:4D:89:23:86:FC:27:91:4C:E2 Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92 Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392 Certificate serial: 019B1014ABA661BB89F632D4478A8AF8BBD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft Manifest number: 1704 Signing time: Fri 12 Dec 2025 01:02:28 +0000 Manifest this update: Fri 12 Dec 2025 01:02:28 +0000 Manifest next update: Sat 13 Dec 2025 01:02:28 +0000 Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: MIeTNdKDTWe4eURWNrn5ge1EPFfhcJ8UeGNrMign9TA=) 2: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (hash: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:ab:a6:61:bb:89:f6:32:d4:47:8a:8a:f8:bb:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392 Validity Not Before: Dec 12 01:02:28 2025 GMT Not After : Dec 13 01:02:28 2025 GMT Subject: CN=e8e080ce24cd4f5780c9ba4d892386fc27914ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:c2:59:b6:cd:aa:63:01:0f:05:46:c4:05: 15:6f:ae:d8:97:8e:6f:d9:e1:17:a7:86:8d:cc:88: ec:23:e2:4b:1e:b1:f6:39:45:72:f5:12:00:28:2e: 85:92:a1:bf:01:ee:ee:3d:3e:dc:d3:49:59:6a:cb: d5:8b:8b:21:03:66:18:f1:28:6e:42:83:7a:da:2c: e7:c0:ad:4c:2d:09:74:17:fd:39:ad:82:9f:0e:fb: 22:90:ef:b3:0d:9e:7b:27:77:43:ba:55:95:14:8b: f2:45:b0:76:79:98:44:47:e1:c3:23:5e:d2:4f:02: bf:bb:5a:93:d5:17:90:3a:7b:e6:f9:f1:2f:35:c7: 36:04:8f:53:71:e0:94:2c:41:b3:24:e6:ac:56:da: 8d:57:24:a7:4c:06:d2:08:e9:46:e9:12:9d:be:5f: c2:5f:76:cb:21:7a:1e:2b:79:a3:80:f9:bc:72:9b: 5b:cf:5b:85:67:17:68:3e:ea:4e:a4:46:6a:c8:90: aa:50:d0:57:d8:3b:fa:eb:67:6a:dd:75:f5:50:46: c9:fd:6a:3b:7a:d5:1f:7f:c9:77:29:d4:b3:e4:a9: 5e:f3:c9:b4:54:4a:51:69:da:89:6d:ca:ee:72:fb: a3:3f:86:3f:a7:80:3e:23:91:9a:fa:38:ac:3d:b6: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E0:80:CE:24:CD:4F:57:80:C9:BA:4D:89:23:86:FC:27:91:4C:E2 X509v3 Authority Key Identifier: keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:90:e5:52:cb:69:c0:e7:69:ed:92:24:e2:ea:73:94:eb:9d: e4:a4:6c:a4:5c:0f:e7:4e:c3:ac:0f:00:69:d9:a1:36:c2:7d: 71:3c:7a:41:39:56:d7:56:fd:6d:37:51:22:fb:5f:66:36:10: 2a:e0:ff:c6:ab:db:fa:69:f3:04:06:7c:68:05:2c:5b:56:c8: 15:79:04:30:ed:0a:7b:d5:ca:15:d3:c6:cc:07:0e:4c:70:38: 53:23:11:52:f3:26:3d:78:c6:35:f2:65:51:5b:0a:39:6c:a2: e5:e1:f7:03:01:49:08:ed:ef:85:64:68:9f:a4:0a:e2:4a:33: 8b:1f:8b:05:f1:97:30:4c:73:5b:2a:9e:4e:a0:25:32:93:5b: 7b:84:16:51:3e:6b:fd:e0:e7:a2:69:57:cf:81:b8:cc:94:1e: d7:c6:d1:dd:67:03:84:43:77:ee:ea:c0:6d:34:14:07:5f:9a: f6:38:b3:3e:ce:4f:68:37:ee:8b:57:0d:59:d6:10:f2:45:36: f0:59:c1:79:2b:0d:48:12:ec:c6:70:84:97:de:a0:0e:21:d7: f2:0a:38:e3:d9:2b:11:00:b1:6d:1f:9c:cd:ab:81:55:f3:4e: 30:59:79:4d:2c:ed:9b:0f:7f:90:32:7f:0b:34:a2:c0:c1:ca: 57:1f:3f:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFKumYbuJ9jLUR4qK+LvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm YTYzOTIwHhcNMjUxMjEyMDEwMjI4WhcNMjUxMjEzMDEwMjI4WjAzMTEwLwYDVQQD EyhlOGUwODBjZTI0Y2Q0ZjU3ODBjOWJhNGQ4OTIzODZmYzI3OTE0Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzTCWbbNqmMBDwVGxAUVb67Yl45v 2eEXp4aNzIjsI+JLHrH2OUVy9RIAKC6FkqG/Ae7uPT7c00lZasvVi4shA2YY8Shu QoN62iznwK1MLQl0F/05rYKfDvsikO+zDZ57J3dDulWVFIvyRbB2eZhER+HDI17S TwK/u1qT1ReQOnvm+fEvNcc2BI9TceCULEGzJOasVtqNVySnTAbSCOlG6RKdvl/C X3bLIXoeK3mjgPm8cptbz1uFZxdoPupOpEZqyJCqUNBX2Dv662dq3XX1UEbJ/Wo7 etUff8l3KdSz5Kle88m0VEpRadqJbcrucvujP4Y/p4A+I5Ga+jisPbaa4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjggM4kzU9XgMm6TYkjhvwnkUziMB8GA1UdIwQY MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt Yzg4NDBmYTg1MTQxLzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpDlUstp wOdp7ZIk4upzlOud5KRspFwP507DrA8AadmhNsJ9cTx6QTlW11b9bTdRIvtfZjYQ KuD/xqvb+mnzBAZ8aAUsW1bIFXkEMO0Ke9XKFdPGzAcOTHA4UyMRUvMmPXjGNfJl UVsKOWyi5eH3AwFJCO3vhWRon6QK4kozix+LBfGXMExzWyqeTqAlMpNbe4QWUT5r /eDnomlXz4G4zJQe18bR3WcDhEN37urAbTQUB1+a9jizPs5PaDfui1cNWdYQ8kU2 8FnBeSsNSBLsxnCEl96gDiHX8go449krEQCxbR+czauBVfNOMFl5TSztmw9/kDJ/ CzSiwMHKVx8/AQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:09:53 2025 by rpki-client