This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json) Hash identifier: UdmX3nZ9nji5kY7LFJPe+8kGpgwDE6W2P+FNZzqRegE= Subject key identifier: DC:1A:41:59:8E:23:4C:0F:7C:A5:CB:6B:29:E9:0E:81:C8:C1:64:E9 Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3 Certificate serial: 019B33B1FC4A7788B6E6180B77A2F1586093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft Manifest number: 03D7 Signing time: Thu 18 Dec 2025 23:01:00 +0000 Manifest this update: Thu 18 Dec 2025 23:01:00 +0000 Manifest next update: Fri 19 Dec 2025 23:01:00 +0000 Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=) 2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=) 3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: OCu4i+nlv/OSzgjWHR1JgD/oKylv+v2W2DtL+ktbR6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:fc:4a:77:88:b6:e6:18:0b:77:a2:f1:58:60:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3 Validity Not Before: Dec 18 23:01:00 2025 GMT Not After : Dec 19 23:01:00 2025 GMT Subject: CN=dc1a41598e234c0f7ca5cb6b29e90e81c8c164e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:2f:9d:0f:56:97:ed:3d:bd:09:ed:46:8b: dd:b8:ae:6e:bc:ac:85:24:a2:f8:67:86:13:65:75: cb:78:a5:b3:dd:9f:9f:b1:ce:67:0e:88:0e:02:25: cd:85:69:8b:91:5d:99:cd:de:4c:7f:28:27:49:83: db:b8:b2:b7:7f:9e:0b:9a:63:2b:39:c3:6d:42:ad: 4f:d9:02:ad:9c:82:79:a2:0f:df:f5:98:41:9b:05: ca:11:a9:19:b1:1d:d8:88:cc:88:d5:50:25:ad:37: 3d:a5:fa:85:8f:de:3a:0e:ef:5a:b5:9e:8e:1c:a1: 8e:7d:14:45:0c:c5:03:b0:ab:57:4e:ab:c0:e0:c4: 2f:b1:03:6f:d4:1e:d9:86:fb:b6:b2:2a:a6:12:96: d8:55:6c:6a:c3:ae:7b:6b:9f:de:a5:81:d0:ce:40: b0:ed:83:67:ec:67:63:ef:b1:9a:2d:bb:c3:6a:73: 36:65:76:e5:b1:11:53:ba:0d:11:c4:2a:96:4f:21: 4c:52:65:22:95:97:af:ce:90:17:3d:9a:cd:b7:f8: 35:63:9d:34:88:8c:f7:3a:00:c3:95:9f:2d:38:79: 28:ac:1e:cb:b8:8d:bb:05:5f:e8:af:0b:98:6b:89: b5:f6:1d:c1:1d:29:ca:51:7c:99:28:38:4b:67:e1: 5c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1A:41:59:8E:23:4C:0F:7C:A5:CB:6B:29:E9:0E:81:C8:C1:64:E9 X509v3 Authority Key Identifier: keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7f:2b:4a:d5:5e:66:c6:19:9c:d4:24:2b:7e:4f:b7:e5:b3: 38:1b:86:78:9c:c3:23:b6:a5:ee:68:2c:f5:2c:b8:23:28:fb: b6:73:e7:56:b1:76:13:c7:b8:69:9a:be:ca:d2:73:d0:ee:4e: 2a:68:5d:56:be:e4:c7:c6:cf:6c:fe:9a:d9:54:d0:f8:73:36: 55:3b:5e:ce:25:38:4b:79:a3:19:c7:4f:b8:c3:45:79:0e:b7: 4a:f3:00:7e:36:b4:53:3c:01:e0:cf:ee:1e:4b:fe:60:fb:27: 74:65:42:5d:3f:9d:b2:99:89:21:9f:db:b2:bc:23:8c:dd:01: 5e:ec:0f:03:0c:22:05:60:4c:de:78:f2:07:fa:ec:e4:6f:10: f5:04:27:ea:c6:f8:ec:fe:fe:2a:31:50:91:f3:67:77:bd:ab: bd:79:19:31:6d:d4:90:ed:7d:54:b7:62:5d:35:12:db:8a:b6: 0a:af:76:b9:71:b9:b0:18:18:d1:d1:8d:c5:3c:ae:bb:8f:af: 27:5f:a3:05:b5:af:ce:6c:71:ca:fb:4d:4a:41:6e:be:92:ae: c7:5f:a8:73:d8:10:83:4b:bb:65:43:34:4b:43:d1:db:78:c0: 45:7b:b2:d7:fc:f8:a0:ca:db:0a:64:69:85:2f:7b:b4:7f:6e: 74:0d:9d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsfxKd4i25hgLd6LxWGCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl NjQ4YzMwHhcNMjUxMjE4MjMwMTAwWhcNMjUxMjE5MjMwMTAwWjAzMTEwLwYDVQQD EyhkYzFhNDE1OThlMjM0YzBmN2NhNWNiNmIyOWU5MGU4MWM4YzE2NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswMvnQ9Wl+09vQntRovduK5uvKyF JKL4Z4YTZXXLeKWz3Z+fsc5nDogOAiXNhWmLkV2Zzd5MfygnSYPbuLK3f54LmmMr OcNtQq1P2QKtnIJ5og/f9ZhBmwXKEakZsR3YiMyI1VAlrTc9pfqFj946Du9atZ6O HKGOfRRFDMUDsKtXTqvA4MQvsQNv1B7Zhvu2siqmEpbYVWxqw657a5/epYHQzkCw 7YNn7Gdj77GaLbvDanM2ZXblsRFTug0RxCqWTyFMUmUilZevzpAXPZrNt/g1Y500 iIz3OgDDlZ8tOHkorB7LuI27BV/orwuYa4m19h3BHSnKUXyZKDhLZ+FcqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwaQVmOI0wPfKXLaynpDoHIwWTpMB8GA1UdIwQY MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt N2NjMjk0NWYyY2E2LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2 LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf38rStVe ZsYZnNQkK35Pt+WzOBuGeJzDI7al7mgs9Sy4Iyj7tnPnVrF2E8e4aZq+ytJz0O5O KmhdVr7kx8bPbP6a2VTQ+HM2VTteziU4S3mjGcdPuMNFeQ63SvMAfja0UzwB4M/u Hkv+YPsndGVCXT+dspmJIZ/bsrwjjN0BXuwPAwwiBWBM3njyB/rs5G8Q9QQn6sb4 7P7+KjFQkfNnd72rvXkZMW3UkO19VLdiXTUS24q2Cq92uXG5sBgY0dGNxTyuu4+v J1+jBbWvzmxxyvtNSkFuvpKux1+oc9gQg0u7ZUM0S0PR23jARXuy1/z4oMrbCmRp hS97tH9udA2dEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:48:45 2025 by rpki-client