This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json) Hash identifier: pyQMs+yZ0pdUFuNThgsVfk3T8PNTqBQFOSvznY5Mico= Subject key identifier: 7B:5E:0A:09:E3:68:0D:82:CE:23:5E:DF:35:9A:F4:03:37:7F:64:9B Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Certificate serial: 019B4701FDCB75E03EBE465481B46100749C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft Manifest number: 1217 Signing time: Mon 22 Dec 2025 17:01:11 +0000 Manifest this update: Mon 22 Dec 2025 17:01:11 +0000 Manifest next update: Tue 23 Dec 2025 17:01:11 +0000 Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=) 2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: Pic2G4NcEjLUS6teu7nRDTd4L6oPSFEk9DtoM2yz+eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:fd:cb:75:e0:3e:be:46:54:81:b4:61:00:74:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Validity Not Before: Dec 22 17:01:11 2025 GMT Not After : Dec 23 17:01:11 2025 GMT Subject: CN=7b5e0a09e3680d82ce235edf359af403377f649b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:98:87:6a:0a:ea:8b:13:ef:cd:2a:78:34: ea:e6:1d:14:91:16:78:8c:62:29:87:5c:7e:97:1c: f9:3c:39:12:e9:eb:fd:b7:97:33:40:a3:5a:70:b2: eb:60:96:df:41:7e:3c:ab:1d:e1:f8:2d:7c:26:06: 9f:c3:13:72:be:f6:d0:8f:e8:d3:4e:24:1d:64:9b: 94:02:78:d1:9a:e3:dd:4b:c1:75:8d:3f:e2:10:f5: 61:54:ca:56:99:53:2a:3f:00:4f:6e:10:44:b1:74: 5b:dd:59:58:e3:35:29:40:c1:60:c4:17:8e:bc:9f: 58:77:75:03:27:ab:69:2d:dd:c6:47:7b:52:ed:7d: 93:c3:2a:90:33:fe:f6:0e:7d:21:25:6d:a9:8f:d2: 18:51:99:70:86:cc:53:45:6e:4d:58:cc:b7:69:bb: a1:85:04:bd:1e:cf:46:4d:73:45:87:d3:9f:ac:51: 31:b1:80:36:68:28:0c:7a:bf:b9:08:dd:7e:b8:d0: 75:7a:79:cd:38:23:ae:2c:c3:7b:5f:ad:80:51:71: 6f:bf:89:e9:83:1c:2c:85:dd:98:05:4d:af:bd:8c: 11:15:78:59:e0:ad:55:4f:be:a0:1e:f3:40:5e:b4: 00:da:0a:da:61:d1:18:93:e2:9e:c1:cb:6f:35:6e: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5E:0A:09:E3:68:0D:82:CE:23:5E:DF:35:9A:F4:03:37:7F:64:9B X509v3 Authority Key Identifier: keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:31:88:0c:f1:47:fd:53:1e:9a:a3:01:9e:6c:6e:64:c1:c2: 21:83:43:9f:52:11:44:61:9d:c1:17:37:06:e2:7b:e2:db:22: 84:01:d1:47:38:66:1b:11:17:df:26:cd:d5:05:14:49:cd:77: fa:9f:08:82:fe:f8:b8:9a:a9:50:36:c0:67:b3:50:45:b0:a5: 17:6f:d3:40:ee:57:81:ea:6d:7e:d7:7e:c4:54:07:c6:6f:ce: e4:db:84:8a:fb:d3:6b:13:81:e1:3b:84:f1:aa:2c:59:62:22: d0:0c:9f:e8:f0:b9:72:65:a9:7a:43:10:21:d1:ba:31:31:1e: 80:e1:a8:f2:3a:da:ee:7c:48:06:ff:67:a3:76:8b:85:c7:4f: d7:84:98:8a:bf:f1:9e:15:f0:7f:fb:aa:72:bd:e6:1d:6f:44: da:a3:65:1c:9a:8d:e9:e6:34:85:8e:d8:86:58:01:61:bc:81: 71:24:47:06:91:4d:86:2c:41:fb:5f:3a:3e:de:a0:4a:33:3a: 8d:1b:26:6c:4f:59:01:76:fd:d7:40:5a:c9:49:1a:6d:0c:64: 60:7b:2c:e6:56:05:a8:84:ec:fb:77:d9:01:50:b1:fc:f7:15: 8d:8a:55:c5:09:e4:73:b0:f7:54:84:8c:aa:65:0a:7e:c3:ab: 99:d0:75:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAf3LdeA+vkZUgbRhAHScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz Y2VlMWMwHhcNMjUxMjIyMTcwMTExWhcNMjUxMjIzMTcwMTExWjAzMTEwLwYDVQQD Eyg3YjVlMGEwOWUzNjgwZDgyY2UyMzVlZGYzNTlhZjQwMzM3N2Y2NDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBOYh2oK6osT780qeDTq5h0UkRZ4 jGIph1x+lxz5PDkS6ev9t5czQKNacLLrYJbfQX48qx3h+C18JgafwxNyvvbQj+jT TiQdZJuUAnjRmuPdS8F1jT/iEPVhVMpWmVMqPwBPbhBEsXRb3VlY4zUpQMFgxBeO vJ9Yd3UDJ6tpLd3GR3tS7X2TwyqQM/72Dn0hJW2pj9IYUZlwhsxTRW5NWMy3abuh hQS9Hs9GTXNFh9OfrFExsYA2aCgMer+5CN1+uNB1ennNOCOuLMN7X62AUXFvv4np gxwshd2YBU2vvYwRFXhZ4K1VT76gHvNAXrQA2graYdEYk+KewctvNW7NHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHteCgnjaA2CziNe3zWa9AM3f2SbMB8GA1UdIwQY MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2 LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzGIDPFH /VMemqMBnmxuZMHCIYNDn1IRRGGdwRc3BuJ74tsihAHRRzhmGxEX3ybN1QUUSc13 +p8Igv74uJqpUDbAZ7NQRbClF2/TQO5Xgeptftd+xFQHxm/O5NuEivvTaxOB4TuE 8aosWWIi0Ayf6PC5cmWpekMQIdG6MTEegOGo8jra7nxIBv9no3aLhcdP14SYir/x nhXwf/uqcr3mHW9E2qNlHJqN6eY0hY7YhlgBYbyBcSRHBpFNhixB+186Pt6gSjM6 jRsmbE9ZAXb910BayUkabQxkYHss5lYFqITs+3fZAVCx/PcVjYpVxQnkc7D3VISM qmUKfsOrmdB1Pg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:42:47 2025 by rpki-client