This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json) Hash identifier: P+4eE/UWMJD1qiUZrIJQNal5BVJ6wM6jMnfXGqSwwfU= Subject key identifier: AF:9F:E2:C8:EA:07:E2:72:94:47:06:85:DA:E1:75:F2:A9:5B:56:3B Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Certificate serial: 019B34C55A6A1E645A8BD68D3E68D461166E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft Manifest number: 066D Signing time: Fri 19 Dec 2025 04:01:47 +0000 Manifest this update: Fri 19 Dec 2025 04:01:47 +0000 Manifest next update: Sat 20 Dec 2025 04:01:47 +0000 Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=) 2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: AhIBxCJvsXaUdu4rfNnGqgTQDvEpWR8DBI6Wzha/DBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:5a:6a:1e:64:5a:8b:d6:8d:3e:68:d4:61:16:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Validity Not Before: Dec 19 04:01:47 2025 GMT Not After : Dec 20 04:01:47 2025 GMT Subject: CN=af9fe2c8ea07e27294470685dae175f2a95b563b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:25:73:1c:5e:11:72:99:da:95:12:6f:b1: e5:70:bc:71:3a:9e:df:89:12:78:89:58:ae:e0:06: 62:d2:08:5f:1b:d2:25:38:d0:e5:75:13:f1:e5:9b: 3e:20:8d:86:15:5e:da:80:c7:30:72:fd:ba:1d:ed: 4c:cf:0b:20:5c:bf:0f:73:b8:1d:ee:81:d9:4a:75: a3:cb:46:37:ae:c9:a3:46:fa:be:b7:17:78:f8:cf: 2d:69:22:c7:a8:ed:84:da:a4:eb:2b:cf:9b:6f:36: 41:ab:70:8b:c1:37:9a:8f:0f:78:f3:dc:14:8f:07: 67:72:b9:a6:b0:d1:e3:51:68:61:77:ec:3d:7b:1d: 9d:b8:f0:6d:40:8d:0a:ef:8d:68:78:4c:7b:03:ea: 86:c4:c7:c7:90:31:36:31:4d:31:cc:59:f2:e2:25: 90:4f:64:e0:c8:0c:2a:6e:d4:d6:0e:08:3a:71:8f: 6d:71:60:d5:09:ab:2c:e7:d0:65:ea:62:93:bb:60: bc:62:f3:19:14:1f:39:28:13:f0:a4:c7:37:99:86: d0:d6:89:a8:68:b7:01:a2:f6:fb:59:71:bc:0d:32: ed:e6:62:28:46:f0:e7:9b:8f:92:c3:a8:68:1c:d3: f2:28:cf:46:0f:28:3b:e8:d1:05:d3:08:c4:70:94: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9F:E2:C8:EA:07:E2:72:94:47:06:85:DA:E1:75:F2:A9:5B:56:3B X509v3 Authority Key Identifier: keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bd:aa:45:6f:6e:fc:dc:3d:df:eb:6d:dd:43:f6:19:2a:fb: a8:24:b7:f8:a2:5f:de:c1:b7:24:ab:2c:14:b6:9d:e2:30:19: 74:a6:ca:4c:62:03:2c:5e:6a:10:97:e8:27:d7:75:b1:e5:38: c9:32:d1:f0:1d:1b:4d:2f:23:17:08:33:97:55:77:0a:f4:37: eb:f2:f4:e3:58:62:2c:51:09:d3:99:3f:2f:02:3d:93:0f:65: d2:b7:6a:4c:6a:de:10:dc:07:1c:20:12:4a:af:03:b3:24:1c: 9d:e1:45:06:14:13:5d:29:50:aa:62:b8:a9:53:2e:d6:ea:cb: ff:43:7c:5c:e8:17:e9:36:5a:54:71:16:b7:0f:fb:6c:22:1c: 06:4e:3e:98:d3:d9:4f:83:77:5e:a6:92:e0:45:59:d3:7a:96: 16:55:38:ee:44:ae:97:5f:6b:16:bc:55:fb:89:1b:33:dc:78: ed:93:6c:3b:cf:9b:5c:30:84:39:49:07:bb:ee:38:b6:6e:4e: 0e:0f:31:92:1d:10:a5:cd:74:5f:01:8e:00:b7:bc:a2:9f:7f: f3:43:b1:b5:43:13:c0:86:bd:9f:10:4a:f1:14:56:e1:74:7e: e9:1d:27:b0:0f:4d:c7:f3:c9:92:da:ec:c5:aa:bc:9a:e9:61: 4d:1d:30:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xVpqHmRai9aNPmjUYRZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjBiYTc1ZmNlNTU3MjFjMzA2Mzc1ODliZTNkMzRmYTI1 OWMyYjUwHhcNMjUxMjE5MDQwMTQ3WhcNMjUxMjIwMDQwMTQ3WjAzMTEwLwYDVQQD EyhhZjlmZTJjOGVhMDdlMjcyOTQ0NzA2ODVkYWUxNzVmMmE5NWI1NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiMlcxxeEXKZ2pUSb7HlcLxxOp7f iRJ4iViu4AZi0ghfG9IlONDldRPx5Zs+II2GFV7agMcwcv26He1MzwsgXL8Pc7gd 7oHZSnWjy0Y3rsmjRvq+txd4+M8taSLHqO2E2qTrK8+bbzZBq3CLwTeajw9489wU jwdncrmmsNHjUWhhd+w9ex2duPBtQI0K741oeEx7A+qGxMfHkDE2MU0xzFny4iWQ T2TgyAwqbtTWDgg6cY9tcWDVCass59Bl6mKTu2C8YvMZFB85KBPwpMc3mYbQ1omo aLcBovb7WXG8DTLt5mIoRvDnm4+Sw6hoHNPyKM9GDyg76NEF0wjEcJQ+DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+f4sjqB+JylEcGhdrhdfKpW1Y7MB8GA1UdIwQY MBaAFGiwunX85VchwwY3WJvj00+iWcK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQt NDk5ZWYxNmUyMDgyLzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQtNDk5ZWYxNmUyMDgy LzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb2qRW9u /Nw93+tt3UP2GSr7qCS3+KJf3sG3JKssFLad4jAZdKbKTGIDLF5qEJfoJ9d1seU4 yTLR8B0bTS8jFwgzl1V3CvQ36/L041hiLFEJ05k/LwI9kw9l0rdqTGreENwHHCAS Sq8DsyQcneFFBhQTXSlQqmK4qVMu1urL/0N8XOgX6TZaVHEWtw/7bCIcBk4+mNPZ T4N3XqaS4EVZ03qWFlU47kSul19rFrxV+4kbM9x47ZNsO8+bXDCEOUkHu+44tm5O Dg8xkh0Qpc10XwGOALe8op9/80OxtUMTwIa9nxBK8RRW4XR+6R0nsA9Nx/PJktrs xaq8mulhTR0wvw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:15:02 2025 by rpki-client