This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json) Hash identifier: ZqqH6Di3fnEZkOf2BFiiAInuoMHgGgs50G8gVb2nbic= Subject key identifier: F2:78:4C:83:88:30:20:F9:E0:A0:9F:3A:5D:6C:FB:03:00:53:F7:C6 Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e Certificate serial: 019B3CEBD90BC50C38A2D6A791B70584EC1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 18:00:47 +0000 Manifest this update: Sat 20 Dec 2025 18:00:47 +0000 Manifest next update: Sun 21 Dec 2025 18:00:47 +0000 Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=) 2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: idBbaJRW+BT0P2mcVlkBC7uVCobGQ3WTYwkGtxlsvFU=) 3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d9:0b:c5:0c:38:a2:d6:a7:91:b7:05:84:ec:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e Validity Not Before: Dec 20 18:00:47 2025 GMT Not After : Dec 21 18:00:47 2025 GMT Subject: CN=f2784c83883020f9e0a09f3a5d6cfb030053f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:27:f5:2e:85:09:44:ba:fb:bd:fa:25:1c: 4e:dd:5c:a4:1e:58:34:d7:4b:8b:04:7f:dc:25:11: d1:62:1a:60:78:f8:dd:d7:6c:ba:66:c0:fa:f1:eb: 80:14:e5:af:97:38:2e:6f:50:c4:77:de:83:40:ff: 88:f1:72:1c:29:fe:70:bd:08:de:cf:47:93:b4:6b: a2:ce:2f:80:92:72:42:bc:61:a7:bf:ce:a5:bb:70: 41:fe:13:86:62:69:b4:10:7a:ef:36:13:87:88:9d: 24:d9:72:7a:7f:75:63:c4:8c:40:91:19:38:cd:4c: 71:ad:7d:08:3e:2f:71:01:9f:f4:11:4b:f8:21:2c: dc:f7:6f:b9:be:6f:55:ee:93:95:79:1c:69:10:a7: 38:61:5e:19:b7:75:4a:06:a2:4e:6a:5a:29:42:90: e9:c6:4b:c2:a3:9a:58:54:fc:35:48:86:5c:ca:e0: e7:63:d5:19:85:9d:7a:80:9b:57:22:72:7f:80:51: bb:09:41:7b:6a:19:ba:d4:55:1d:af:af:9c:43:5e: c1:fe:39:4c:98:68:32:50:b7:92:50:82:2b:7d:d4: 10:63:2f:04:7e:d6:06:75:e5:90:30:cd:15:e0:25: 9a:df:06:52:b7:d9:90:b8:f0:7c:32:bb:95:96:c6: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:78:4C:83:88:30:20:F9:E0:A0:9F:3A:5D:6C:FB:03:00:53:F7:C6 X509v3 Authority Key Identifier: keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ba:56:81:f5:ae:7a:c1:e7:07:25:47:cc:40:5f:0f:2a:61: c7:bf:de:99:8b:69:3a:c6:b9:bf:22:cb:80:2b:34:bc:80:bd: a0:4f:a1:00:9d:87:10:3e:32:c1:70:ff:46:f6:ab:83:29:8a: 60:dc:12:61:34:ab:a0:2c:4f:42:23:9e:67:bf:67:72:0b:95: 42:0d:b4:1f:f2:ba:28:eb:22:25:12:cd:9e:7c:a5:d9:55:72: ee:5a:e8:92:c6:dc:d8:15:79:21:24:63:71:29:95:0c:1b:f0: 67:7a:8a:84:f6:f0:20:df:f2:15:06:26:ba:b4:c1:8f:48:6a: 79:d9:15:88:8d:df:7b:e9:66:25:3b:2d:02:66:69:a5:18:5b: 62:c1:2d:71:68:97:f5:7c:86:9d:49:78:4a:67:a9:92:a7:54: cc:01:34:e6:43:3e:22:b1:8b:21:f1:24:db:4f:80:43:39:92: 57:65:a9:b8:b1:48:a3:80:98:c2:fa:50:0b:24:89:68:f0:5f: e5:42:fa:82:31:a1:c4:bc:c5:2e:fe:7e:41:e8:44:6c:e0:68: f9:52:4c:30:23:d5:aa:eb:b5:0f:d2:44:9e:9f:7f:80:eb:54: 50:64:5a:b7:44:cd:4e:42:88:e1:20:85:a8:a8:3f:9b:c7:ed: ef:fe:0a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869kLxQw4otankbcFhOweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk YTgwMWUwHhcNMjUxMjIwMTgwMDQ3WhcNMjUxMjIxMTgwMDQ3WjAzMTEwLwYDVQQD EyhmMjc4NGM4Mzg4MzAyMGY5ZTBhMDlmM2E1ZDZjZmIwMzAwNTNmN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19on9S6FCUS6+736JRxO3VykHlg0 10uLBH/cJRHRYhpgePjd12y6ZsD68euAFOWvlzgub1DEd96DQP+I8XIcKf5wvQje z0eTtGuizi+AknJCvGGnv86lu3BB/hOGYmm0EHrvNhOHiJ0k2XJ6f3VjxIxAkRk4 zUxxrX0IPi9xAZ/0EUv4ISzc92+5vm9V7pOVeRxpEKc4YV4Zt3VKBqJOalopQpDp xkvCo5pYVPw1SIZcyuDnY9UZhZ16gJtXInJ/gFG7CUF7ahm61FUdr6+cQ17B/jlM mGgyULeSUIIrfdQQYy8EftYGdeWQMM0V4CWa3wZSt9mQuPB8MruVlsarPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJ4TIOIMCD54KCfOl1s+wMAU/fGMB8GA1UdIwQY MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbpWgfWu esHnByVHzEBfDyphx7/emYtpOsa5vyLLgCs0vIC9oE+hAJ2HED4ywXD/RvargymK YNwSYTSroCxPQiOeZ79ncguVQg20H/K6KOsiJRLNnnyl2VVy7lroksbc2BV5ISRj cSmVDBvwZ3qKhPbwIN/yFQYmurTBj0hqedkViI3fe+lmJTstAmZppRhbYsEtcWiX 9XyGnUl4SmepkqdUzAE05kM+IrGLIfEk20+AQzmSV2WpuLFIo4CYwvpQCySJaPBf 5UL6gjGhxLzFLv5+QehEbOBo+VJMMCPVquu1D9JEnp9/gOtUUGRat0TNTkKI4SCF qKg/m8ft7/4K1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:44 2025 by rpki-client