This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json) Hash identifier: oViAAA6qZAfc9Yx4gJSdNGvcF96Ue/Iv/fwTyKJQXB8= Subject key identifier: 11:A6:03:83:77:D2:9F:B7:AF:26:1E:34:31:C5:53:6D:C7:B8:B9:A7 Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef Certificate serial: 019AF50B41AA19C5EC4033B556713841F297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:02:26 +0000 Manifest this update: Sat 06 Dec 2025 19:02:26 +0000 Manifest next update: Sun 07 Dec 2025 19:02:26 +0000 Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=) 2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: Hr//4hNKNHO1qL+ou34DCX5v7sy0w9GRVHzxLa0UAP8=) 3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:41:aa:19:c5:ec:40:33:b5:56:71:38:41:f2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6954e90899ff25644520724cde8c211613600bef Validity Not Before: Dec 6 19:02:26 2025 GMT Not After : Dec 7 19:02:26 2025 GMT Subject: CN=11a6038377d29fb7af261e3431c5536dc7b8b9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:48:1f:18:71:de:90:a8:fe:cf:1a:9f:47: 63:aa:f4:14:8f:28:4b:58:d1:b8:fd:ba:b2:36:7f: 14:78:d5:db:1e:a6:cb:dc:9f:d4:03:22:53:2d:d1: d1:04:fd:f0:7d:39:ef:83:89:75:33:d3:77:a4:84: bb:ab:02:7d:9d:98:b7:df:01:51:9e:23:cc:78:6c: b1:0b:65:b6:ce:0e:8a:a4:59:f0:ab:b2:1d:0b:bc: 21:b7:7f:fa:07:ff:30:e3:75:47:0f:b1:29:40:45: 9a:f6:36:f4:22:05:7d:78:23:5a:84:a2:86:0f:ea: 44:23:cb:88:1c:00:9e:ac:dd:3c:e8:63:02:86:20: fb:3d:1e:9a:bf:66:27:9b:77:04:52:40:fe:3a:58: 69:96:8c:f9:a0:d9:43:c6:a4:c5:1c:64:ce:6b:7e: 3e:5b:7a:2a:14:a5:e3:c7:59:87:a7:01:a2:fc:66: 24:92:59:78:7f:01:58:04:f9:0b:9d:a6:67:4b:12: 8a:79:2d:18:22:9c:e6:72:ea:85:c7:f8:19:77:ef: dd:f8:70:dd:e9:c4:d8:e1:81:c1:a7:ba:43:61:15: ed:96:e7:db:b1:a8:02:25:95:55:4e:6d:02:cd:74: 96:25:47:6f:8a:35:51:1e:95:a8:1c:d5:66:3d:3a: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A6:03:83:77:D2:9F:B7:AF:26:1E:34:31:C5:53:6D:C7:B8:B9:A7 X509v3 Authority Key Identifier: keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:31:ab:90:97:18:2a:40:6b:54:2c:bf:9b:8e:ee:99:f8:88: 36:6c:77:21:77:a2:d9:97:3d:67:13:24:e9:78:1e:be:24:50: 92:3e:d9:10:fc:e2:07:7a:4a:7d:ee:27:49:27:77:12:07:bf: 8b:35:e3:c7:f2:9e:ce:f7:ba:66:3f:3e:c4:bd:76:b4:57:e4: 9d:82:8a:15:9e:90:0e:41:e6:2c:0f:11:d8:ee:cd:16:5a:c0: 44:f4:c6:f4:20:f5:47:9f:29:c7:87:5b:e5:f4:50:7e:5b:bd: a3:ae:a1:a1:d3:ef:14:02:3b:62:13:bf:5b:48:74:91:94:79: 1d:15:c1:e8:78:b0:f4:32:05:7c:37:20:61:c0:c3:e0:93:ff: 71:72:c8:9c:bc:04:6a:35:31:f5:2a:71:29:e6:58:d1:e7:39: 15:0e:69:38:27:f0:d6:1f:cc:28:e2:6b:a4:93:18:f1:ae:35: 0b:28:1c:b5:44:75:e5:e7:cc:32:65:1c:f7:34:46:cf:3a:38: 9a:98:9d:82:41:88:4f:2f:92:c6:c4:b2:c6:45:99:4a:46:88: 06:c3:1f:48:b5:65:49:0b:07:77:9c:37:d5:05:55:7f:c8:61: 66:5d:df:b2:7e:02:f1:62:c2:83:cf:ee:90:e7:7a:4b:68:0e: 9c:0b:fa:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0GqGcXsQDO1VnE4QfKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2 MDBiZWYwHhcNMjUxMjA2MTkwMjI2WhcNMjUxMjA3MTkwMjI2WjAzMTEwLwYDVQQD EygxMWE2MDM4Mzc3ZDI5ZmI3YWYyNjFlMzQzMWM1NTM2ZGM3YjhiOWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq9IHxhx3pCo/s8an0djqvQUjyhL WNG4/bqyNn8UeNXbHqbL3J/UAyJTLdHRBP3wfTnvg4l1M9N3pIS7qwJ9nZi33wFR niPMeGyxC2W2zg6KpFnwq7IdC7wht3/6B/8w43VHD7EpQEWa9jb0IgV9eCNahKKG D+pEI8uIHACerN086GMChiD7PR6av2Ynm3cEUkD+Olhploz5oNlDxqTFHGTOa34+ W3oqFKXjx1mHpwGi/GYkkll4fwFYBPkLnaZnSxKKeS0YIpzmcuqFx/gZd+/d+HDd 6cTY4YHBp7pDYRXtlufbsagCJZVVTm0CzXSWJUdvijVRHpWoHNVmPTogRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGmA4N30p+3ryYeNDHFU23HuLmnMB8GA1UdIwQY MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt M2Y2ZWU3MDU5MTViLzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzGrkJcY KkBrVCy/m47umfiINmx3IXei2Zc9ZxMk6XgeviRQkj7ZEPziB3pKfe4nSSd3Ege/ izXjx/Kezve6Zj8+xL12tFfknYKKFZ6QDkHmLA8R2O7NFlrARPTG9CD1R58px4db 5fRQflu9o66hodPvFAI7YhO/W0h0kZR5HRXB6Hiw9DIFfDcgYcDD4JP/cXLInLwE ajUx9SpxKeZY0ec5FQ5pOCfw1h/MKOJrpJMY8a41CygctUR15efMMmUc9zRGzzo4 mpidgkGITy+SxsSyxkWZSkaIBsMfSLVlSQsHd5w31QVVf8hhZl3fsn4C8WLCg8/u kOd6S2gOnAv6hA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:54:49 2025 by rpki-client