This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json) Hash identifier: 7PdTIJC9k9Z+9xKhM/h0q3sXspmW+td17R45xT1scj4= Subject key identifier: 9A:69:9D:F1:BB:86:D9:52:76:39:65:2E:F6:CF:00:89:C9:20:66:87 Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Certificate serial: 019B25515E6A73C320B91F29877FF29746C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft Manifest number: 0CA7 Signing time: Tue 16 Dec 2025 04:00:48 +0000 Manifest this update: Tue 16 Dec 2025 04:00:48 +0000 Manifest next update: Wed 17 Dec 2025 04:00:48 +0000 Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=) 2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: h1+NpjpZ7AQMUyJLKG5nBuOArFcjoM8gIISOlDXOO9k=) 3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:5e:6a:73:c3:20:b9:1f:29:87:7f:f2:97:46:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Validity Not Before: Dec 16 04:00:48 2025 GMT Not After : Dec 17 04:00:48 2025 GMT Subject: CN=9a699df1bb86d9527639652ef6cf0089c9206687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:c4:9e:c2:a1:25:f8:fd:ae:97:0c:da:db: 8f:24:20:23:ea:31:f0:d2:a6:a5:97:c6:88:39:ff: 10:48:e7:f9:d9:28:e1:50:90:77:e9:0c:4e:8d:ae: fa:11:aa:e6:e0:f8:10:9c:f3:29:28:18:73:c8:72: 75:50:d0:ac:e6:5b:06:26:bc:38:82:f8:76:73:c6: 16:b1:c9:ff:42:16:ea:ac:51:d9:db:f5:7a:9e:cf: 36:ac:a0:6a:62:47:ea:27:b9:8c:40:fd:06:34:59: cc:6a:35:59:ad:eb:8f:4b:11:33:b9:a1:46:fe:1f: d2:c1:2a:c1:ed:63:7f:94:86:91:32:d9:58:c9:ec: 0a:5d:dc:07:29:e5:50:b7:bd:f1:99:62:0e:3b:00: f2:38:ad:67:4e:b6:d8:2d:e2:39:63:70:1e:fd:1e: ec:f2:34:ea:06:28:34:11:22:8f:ee:ac:47:40:34: fc:e1:d0:93:b6:29:58:6b:cb:e7:22:97:88:12:fe: ee:f3:a7:27:c4:71:ae:3f:7e:51:9f:2e:e7:e2:3d: 34:a1:b4:71:cd:99:c8:1d:6f:86:2b:eb:3f:8f:cb: 72:31:36:fd:23:a6:a7:b9:b4:8b:3b:cc:3f:16:04: aa:7b:f8:dc:f3:2f:2c:f0:8e:96:c9:54:de:12:77: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:9D:F1:BB:86:D9:52:76:39:65:2E:F6:CF:00:89:C9:20:66:87 X509v3 Authority Key Identifier: keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a9:20:5b:cc:04:65:6f:1a:86:e4:08:02:d3:2a:4b:a6:4e: 65:05:12:40:cf:3f:13:4e:a5:93:1c:fa:f9:bd:ac:09:81:ab: 57:7b:31:4d:82:09:1c:3b:61:e6:90:ef:e3:4f:75:f3:bf:0e: 81:73:34:31:64:6d:f1:60:cd:2a:79:ae:8a:99:f2:74:7f:63: b8:69:2b:e6:c1:80:bd:c1:56:14:ac:7e:9d:89:10:ee:60:56: 63:3d:76:c7:b1:d1:71:21:5b:e1:6e:6f:6e:78:b7:bd:a9:ed: 24:4d:3b:fd:6a:43:c3:5f:fa:a7:f0:5c:07:c9:dc:d1:78:a7: df:36:a2:61:9d:d1:b1:57:93:cb:07:b8:29:52:97:40:09:95: ed:16:b4:07:13:52:76:91:98:3e:98:06:4f:20:bd:f0:64:c0: 76:e5:1b:a0:46:53:a8:16:61:c8:5d:30:0f:98:5b:64:54:27: 6b:6f:cf:10:bf:e2:e2:34:f2:f2:21:de:5e:ed:ef:00:d8:8b: f1:29:b0:a2:14:fe:ef:59:a7:0b:ca:ff:bb:51:38:06:12:54: 5c:9f:be:36:b0:e9:1f:16:c7:ae:b0:f1:50:b2:90:c0:7a:03: 36:c4:40:c8:48:34:68:ab:f6:4f:9c:ca:b9:ed:4a:73:4b:b3: 8f:7b:a3:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUV5qc8MguR8ph3/yl0bFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi YTQ2MWEwHhcNMjUxMjE2MDQwMDQ4WhcNMjUxMjE3MDQwMDQ4WjAzMTEwLwYDVQQD Eyg5YTY5OWRmMWJiODZkOTUyNzYzOTY1MmVmNmNmMDA4OWM5MjA2Njg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgHEnsKhJfj9rpcM2tuPJCAj6jHw 0qall8aIOf8QSOf52SjhUJB36QxOja76Earm4PgQnPMpKBhzyHJ1UNCs5lsGJrw4 gvh2c8YWscn/QhbqrFHZ2/V6ns82rKBqYkfqJ7mMQP0GNFnMajVZreuPSxEzuaFG /h/SwSrB7WN/lIaRMtlYyewKXdwHKeVQt73xmWIOOwDyOK1nTrbYLeI5Y3Ae/R7s 8jTqBig0ESKP7qxHQDT84dCTtilYa8vnIpeIEv7u86cnxHGuP35Rny7n4j00obRx zZnIHW+GK+s/j8tyMTb9I6anubSLO8w/FgSqe/jc8y8s8I6WyVTeEnesCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJppnfG7htlSdjllLvbPAInJIGaHMB8GA1UdIwQY MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqkgW8wE ZW8ahuQIAtMqS6ZOZQUSQM8/E06lkxz6+b2sCYGrV3sxTYIJHDth5pDv4091878O gXM0MWRt8WDNKnmuipnydH9juGkr5sGAvcFWFKx+nYkQ7mBWYz12x7HRcSFb4W5v bni3vantJE07/WpDw1/6p/BcB8nc0Xin3zaiYZ3RsVeTywe4KVKXQAmV7Ra0BxNS dpGYPpgGTyC98GTAduUboEZTqBZhyF0wD5hbZFQna2/PEL/i4jTy8iHeXu3vANiL 8SmwohT+71mnC8r/u1E4BhJUXJ++NrDpHxbHrrDxULKQwHoDNsRAyEg0aKv2T5zK ue1Kc0uzj3uj6A== -----END CERTIFICATE-----Generated at Tue Dec 16 07:07:12 2025 by rpki-client