This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json) Hash identifier: +0DNnM0kYksMC+gfI7do10lYVieBqDVVH0Otbrkx+U8= Subject key identifier: D3:12:A8:5C:70:0E:14:77:0D:F7:E3:3D:C3:4B:52:86:0F:07:B7:83 Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Certificate serial: 019B1B045EC7B91E342A0F9477C1ACB8E9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 04:00:29 +0000 Manifest this update: Sun 14 Dec 2025 04:00:29 +0000 Manifest next update: Mon 15 Dec 2025 04:00:29 +0000 Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=) 2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: ouaMVPKK7Ih2M/H2HM9pm2LS7SUkVUhGGiJxmlr3+Ww=) 3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:5e:c7:b9:1e:34:2a:0f:94:77:c1:ac:b8:e9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Validity Not Before: Dec 14 04:00:29 2025 GMT Not After : Dec 15 04:00:29 2025 GMT Subject: CN=d312a85c700e14770df7e33dc34b52860f07b783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:96:a2:a0:ea:7e:d2:76:f5:fb:59:fa:fa: 5a:35:fa:5b:7a:b7:03:65:46:a0:71:24:19:7b:27: ef:a9:c9:28:3a:28:7c:73:34:61:6c:08:aa:20:e9: da:e2:55:99:c3:93:18:eb:67:48:71:1e:7c:12:43: c2:d4:40:73:a1:19:14:c6:02:89:fc:69:84:0c:cf: ad:a5:1c:5c:2f:5e:2b:7f:cf:fb:02:6e:b0:46:cf: 04:f9:b3:a5:06:28:93:11:14:bc:ab:10:30:14:1c: 42:2c:87:99:cb:9f:fd:88:df:32:9b:e0:fd:66:e3: ae:ef:90:0f:9d:74:0c:62:bd:2a:7c:8d:5c:10:ec: ed:33:15:41:d8:2d:69:46:cd:37:c2:1d:22:3d:27: 5b:58:76:05:96:76:6f:ce:3a:7b:b7:cb:6a:d0:56: c0:28:53:ee:e2:ac:6a:83:39:6b:b6:ee:56:b3:5c: f9:4c:82:d6:2c:e0:b4:bd:bb:b0:86:9b:c1:6d:2a: 03:a5:e5:07:1a:72:28:f8:6d:a7:f2:38:af:c8:ac: ba:4c:1a:6d:fa:20:2d:13:16:0d:32:21:c7:33:56: 20:0c:8d:e4:64:be:b4:ed:a6:e3:f9:27:7a:10:a6: 37:d3:96:64:89:8d:c3:d6:76:0b:7b:7e:27:87:49: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:12:A8:5C:70:0E:14:77:0D:F7:E3:3D:C3:4B:52:86:0F:07:B7:83 X509v3 Authority Key Identifier: keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:70:4e:ae:2f:15:03:e3:45:fe:d9:a1:60:7d:b0:1c:fc: 3c:f1:36:1b:a3:d0:48:49:91:e1:74:30:75:e3:48:0d:a7:db: 97:e7:15:46:a8:9c:01:2b:83:c5:7c:a2:64:e3:37:2b:60:fe: b5:3f:fa:c5:aa:88:78:a3:aa:a9:16:ef:35:19:88:88:37:ea: a0:42:d4:25:35:42:37:87:60:b1:38:4e:8d:c7:05:4d:8a:78: b2:0b:56:4f:6c:17:dd:02:cf:bf:ad:97:f9:30:50:6b:37:4a: 5e:39:c8:c7:d9:c3:5c:3b:31:64:0d:bb:af:7d:22:b8:19:be: 5e:67:4f:a1:fd:c1:2c:5a:ba:f0:68:9c:b7:15:c3:7d:5d:8c: e5:75:ba:69:07:58:83:51:5c:8b:6e:1b:8b:6d:be:d4:d2:a2: ea:e7:d8:34:23:40:cb:cd:05:f0:d3:d8:13:f0:ee:cd:93:a4: 2d:e0:8c:ed:c4:c4:7c:b1:88:38:7a:3a:f4:6a:6d:e0:4c:77: 38:ae:6d:41:77:ef:27:95:2c:8d:35:f2:ab:cb:ac:aa:cc:45: 93:9b:b0:92:26:80:7c:9e:d2:3f:b8:ca:6d:22:af:6e:10:16: a1:58:3f:80:0b:63:28:78:84:3a:2f:d5:cf:c0:96:d9:c5:34: a7:d6:0d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBF7HuR40Kg+Ud8GsuOnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm YjEyMDkwHhcNMjUxMjE0MDQwMDI5WhcNMjUxMjE1MDQwMDI5WjAzMTEwLwYDVQQD EyhkMzEyYTg1YzcwMGUxNDc3MGRmN2UzM2RjMzRiNTI4NjBmMDdiNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoACWoqDqftJ29ftZ+vpaNfpbercD ZUagcSQZeyfvqckoOih8czRhbAiqIOna4lWZw5MY62dIcR58EkPC1EBzoRkUxgKJ /GmEDM+tpRxcL14rf8/7Am6wRs8E+bOlBiiTERS8qxAwFBxCLIeZy5/9iN8ym+D9 ZuOu75APnXQMYr0qfI1cEOztMxVB2C1pRs03wh0iPSdbWHYFlnZvzjp7t8tq0FbA KFPu4qxqgzlrtu5Ws1z5TILWLOC0vbuwhpvBbSoDpeUHGnIo+G2n8jivyKy6TBpt +iAtExYNMiHHM1YgDI3kZL607abj+Sd6EKY305ZkiY3D1nYLe34nh0kZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMSqFxwDhR3DffjPcNLUoYPB7eDMB8GA1UdIwQY MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUlwTq4v FQPjRf7ZoWB9sBz8PPE2G6PQSEmR4XQwdeNIDafbl+cVRqicASuDxXyiZOM3K2D+ tT/6xaqIeKOqqRbvNRmIiDfqoELUJTVCN4dgsThOjccFTYp4sgtWT2wX3QLPv62X +TBQazdKXjnIx9nDXDsxZA27r30iuBm+XmdPof3BLFq68GictxXDfV2M5XW6aQdY g1Fci24bi22+1NKi6ufYNCNAy80F8NPYE/DuzZOkLeCM7cTEfLGIOHo69Gpt4Ex3 OK5tQXfvJ5UsjTXyq8usqsxFk5uwkiaAfJ7SP7jKbSKvbhAWoVg/gAtjKHiEOi/V z8CW2cU0p9YNJA== -----END CERTIFICATE-----Generated at Sun Dec 14 06:21:39 2025 by rpki-client