This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json) Hash identifier: PwSrybCosWjtcY1UZ5rETquHD9RcaBrawLMXd49mkFU= Subject key identifier: 4B:4C:1D:54:6A:79:AF:D7:46:91:7A:DE:08:14:76:9C:D8:D4:4D:73 Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Certificate serial: 019B2DE66F819908BBA8F99AC3487160DB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft Manifest number: 120A Signing time: Wed 17 Dec 2025 20:00:35 +0000 Manifest this update: Wed 17 Dec 2025 20:00:35 +0000 Manifest next update: Thu 18 Dec 2025 20:00:35 +0000 Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=) 2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: Pn01cx6cbZ2mTnSscPzZv9lcsz8HBCyl0kSxoj7k+sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:6f:81:99:08:bb:a8:f9:9a:c3:48:71:60:db:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Validity Not Before: Dec 17 20:00:35 2025 GMT Not After : Dec 18 20:00:35 2025 GMT Subject: CN=4b4c1d546a79afd746917ade0814769cd8d44d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:d6:8a:85:2a:02:b8:ad:cf:19:3e:c9:23: 1e:9b:f4:17:a8:7a:5c:3a:d1:3d:13:8a:05:08:f1: a9:b6:28:02:b7:34:ae:f8:c6:b0:37:13:8c:02:2c: 62:a9:af:26:c0:a5:ad:97:6f:eb:10:e8:53:e8:44: 3c:be:75:d8:33:1e:b6:83:40:0b:60:80:b2:0a:84: 12:3c:16:85:96:ab:f4:d7:63:a5:04:67:e2:47:06: eb:70:87:c0:7c:5b:d4:5c:d8:80:38:8a:e0:20:14: ce:37:27:1c:bf:0a:85:9b:ca:23:8d:20:52:cb:6e: 4f:22:ea:00:2b:d4:89:cd:80:e5:4c:1d:39:38:90: f8:87:a9:d0:03:51:b5:9b:e5:32:83:c3:7b:4f:2a: 51:5b:ff:88:28:8d:88:b2:97:00:87:4b:93:da:15: d3:72:8f:5f:6b:78:e0:e7:a4:58:da:aa:d9:9c:cd: 9d:f8:3b:99:7a:7e:cf:87:33:4d:8a:a2:89:d3:fc: f2:f4:b5:7c:4f:b4:8e:5f:0e:db:9f:97:bc:c0:e6: 37:e0:ef:fd:38:31:91:89:ad:77:cd:2b:d7:7f:25: 9f:14:8e:24:af:ca:60:7c:71:ce:0b:e9:68:3f:77: ae:e2:5f:c7:2f:61:21:c0:d0:9f:d8:ba:2e:32:97: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:1D:54:6A:79:AF:D7:46:91:7A:DE:08:14:76:9C:D8:D4:4D:73 X509v3 Authority Key Identifier: keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:df:61:0a:0a:d5:01:54:3e:a2:5f:c6:de:7a:9f:49:fb:4c: ba:d4:0f:35:4d:2b:98:24:37:a8:68:01:b6:73:83:43:d3:3b: 34:a3:b6:67:5c:ae:d8:eb:7e:48:30:cd:f2:e4:53:67:81:7f: 8e:3b:f9:42:01:c5:06:7b:73:1d:3f:c7:c8:a8:fa:39:81:5b: ee:f8:bf:26:65:c0:fb:bf:67:aa:ba:15:f2:67:3f:66:2b:4c: e0:3c:ad:c1:55:76:57:68:6c:25:88:38:ab:a0:00:6d:c7:38: e8:89:2b:a9:25:9c:7d:e9:0b:d9:00:1c:6c:c9:b7:b8:80:7f: 4e:98:46:6f:44:03:0e:4d:a6:64:e5:61:50:20:fd:a0:4f:e7: 78:61:96:29:e7:63:42:c6:ef:03:c5:f7:8a:f7:bf:fc:49:b3: 67:ca:9e:ed:f4:f3:fc:30:28:c9:55:66:d7:5f:06:5b:93:e0: 68:2d:9e:8d:76:92:0a:b8:4e:ae:20:3d:ef:15:46:41:85:20: 3e:3e:1d:d7:36:14:24:9c:ab:26:e7:c2:f1:84:2f:92:14:77: ee:b5:75:b5:13:06:1a:f4:f6:9a:42:b3:85:2a:6b:bb:d2:95: 44:86:e6:30:eb:b4:6d:64:7c:26:fe:36:45:33:5b:e3:98:52: 0c:00:c4:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5m+BmQi7qPmaw0hxYNuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz Y2VlMWMwHhcNMjUxMjE3MjAwMDM1WhcNMjUxMjE4MjAwMDM1WjAzMTEwLwYDVQQD Eyg0YjRjMWQ1NDZhNzlhZmQ3NDY5MTdhZGUwODE0NzY5Y2Q4ZDQ0ZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwnWioUqAritzxk+ySMem/QXqHpc OtE9E4oFCPGptigCtzSu+MawNxOMAixiqa8mwKWtl2/rEOhT6EQ8vnXYMx62g0AL YICyCoQSPBaFlqv012OlBGfiRwbrcIfAfFvUXNiAOIrgIBTONyccvwqFm8ojjSBS y25PIuoAK9SJzYDlTB05OJD4h6nQA1G1m+Uyg8N7TypRW/+IKI2IspcAh0uT2hXT co9fa3jg56RY2qrZnM2d+DuZen7PhzNNiqKJ0/zy9LV8T7SOXw7bn5e8wOY34O/9 ODGRia13zSvXfyWfFI4kr8pgfHHOC+loP3eu4l/HL2EhwNCf2LouMpe0oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtMHVRqea/XRpF63ggUdpzY1E1zMB8GA1UdIwQY MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2 LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh99hCgrV AVQ+ol/G3nqfSftMutQPNU0rmCQ3qGgBtnODQ9M7NKO2Z1yu2Ot+SDDN8uRTZ4F/ jjv5QgHFBntzHT/HyKj6OYFb7vi/JmXA+79nqroV8mc/ZitM4DytwVV2V2hsJYg4 q6AAbcc46IkrqSWcfekL2QAcbMm3uIB/TphGb0QDDk2mZOVhUCD9oE/neGGWKedj QsbvA8X3ive//EmzZ8qe7fTz/DAoyVVm118GW5PgaC2ejXaSCrhOriA97xVGQYUg Pj4d1zYUJJyrJufC8YQvkhR37rV1tRMGGvT2mkKzhSpru9KVRIbmMOu0bWR8Jv42 RTNb45hSDADEIg== -----END CERTIFICATE-----Generated at Thu Dec 18 02:13:16 2025 by rpki-client