This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json) Hash identifier: LxDXtvQZv/KwPIFeIfZ6npTwh//LguKa/FRmeu+rco4= Subject key identifier: E7:06:7A:2E:3B:6C:4E:5E:54:95:8A:82:69:73:02:93:D6:DD:B5:1E Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30 Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830 Certificate serial: 019B2250B3C1E88938811CAC7E82DE6877C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft Manifest number: 06A6 Signing time: Mon 15 Dec 2025 14:01:12 +0000 Manifest this update: Mon 15 Dec 2025 14:01:12 +0000 Manifest next update: Tue 16 Dec 2025 14:01:12 +0000 Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: us4N6D81DZka8Y+UU5iSdMwcpyvH9t4CcIoni5gSmaw=) 2: H60TtWd0YinCrHFItkOy4Q09gMg.roa (hash: DyKdKi+xe67HQcM0pe0CES2i6G0OdRxtjONYY5E8R+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:b3:c1:e8:89:38:81:1c:ac:7e:82:de:68:77:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830 Validity Not Before: Dec 15 14:01:12 2025 GMT Not After : Dec 16 14:01:12 2025 GMT Subject: CN=e7067a2e3b6c4e5e54958a8269730293d6ddb51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:4b:5a:b4:cd:2b:c0:d0:0f:6b:e3:14:a9: d5:09:2f:f4:b0:d7:bc:32:5f:28:a4:b1:02:fc:3a: ea:59:c4:f3:67:d1:c7:c0:96:fe:20:cd:31:b3:78: 99:9e:53:18:e5:a2:f1:3a:47:e5:d3:2b:a5:4f:11: c8:27:86:f2:62:56:24:69:ec:09:5b:0a:83:3a:51: fa:b9:14:45:d8:6a:cb:e0:3e:f5:ec:43:9a:fc:39: ba:cb:9b:c5:14:55:df:18:0e:4a:89:f6:cd:94:a0: 87:29:c1:d6:9f:a7:b4:07:c8:6b:73:ec:c0:da:15: 66:05:7a:1a:c6:75:65:c3:98:85:7e:ee:48:60:e3: 1b:9f:2d:8d:77:f8:24:56:83:f7:cb:75:73:5b:f2: 08:89:81:7f:84:4d:aa:0f:b5:1a:4c:f8:e3:b9:fb: 17:14:34:08:18:19:5f:3c:39:f8:5c:4d:b6:b8:1e: 0b:20:70:57:f1:5e:83:e0:74:ef:73:43:90:f8:f3: 90:5a:66:7b:d1:7a:59:9a:ca:e3:f8:8d:b1:3c:8c: 1e:46:89:e6:48:aa:33:9f:db:e9:6d:34:81:51:b6: f8:33:4d:5e:7b:0e:01:ab:94:7b:8a:6b:4a:17:08: 7e:91:ca:30:7b:18:bf:49:b1:47:e1:db:1e:b5:df: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:7A:2E:3B:6C:4E:5E:54:95:8A:82:69:73:02:93:D6:DD:B5:1E X509v3 Authority Key Identifier: keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6b:b5:2e:60:9c:a5:81:a1:61:d9:ca:04:b2:b8:1d:32:3c: c7:28:a5:d3:df:f7:e2:8e:b8:12:53:e3:1d:3e:6a:20:d3:73: 79:2f:02:a2:bc:2d:b4:14:96:6d:ac:54:02:59:c9:d2:4d:5c: 46:ec:6b:7c:15:54:75:62:7a:9e:2a:4d:df:ca:d6:89:d9:de: e4:28:19:6c:31:b4:bc:35:09:48:47:a0:b0:96:03:02:73:50: f1:df:7e:e0:25:25:74:d4:84:4a:28:1c:a5:8b:40:c7:17:ba: 98:45:3c:46:1b:e3:9f:fe:ee:56:9c:e9:21:6b:75:55:14:85: f3:6e:f9:77:9e:ec:8b:ab:13:2f:4f:37:c4:8b:0b:5d:6b:bd: 3d:9e:68:9b:38:79:ee:3a:2a:27:ad:bc:0c:96:91:69:83:94: 0d:ce:2d:30:c8:a4:9b:c0:97:e3:89:8b:d9:cf:bc:e3:97:2d: 97:5f:52:6a:eb:e1:97:9d:f6:92:26:a2:dd:70:51:46:60:fa: d0:49:11:3e:fe:10:d1:cb:7a:b9:45:90:52:b1:d9:63:3b:8c: 22:89:ed:0f:9c:fb:43:e4:61:2e:3d:0e:05:f0:d6:41:2c:4d: 1e:95:ea:dc:f4:86:bb:5e:18:c3:1b:86:76:3d:fa:54:8f:3b: a8:5a:8e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiULPB6Ik4gRysfoLeaHfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2 MTg4MzAwHhcNMjUxMjE1MTQwMTEyWhcNMjUxMjE2MTQwMTEyWjAzMTEwLwYDVQQD EyhlNzA2N2EyZTNiNmM0ZTVlNTQ5NThhODI2OTczMDI5M2Q2ZGRiNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fRLWrTNK8DQD2vjFKnVCS/0sNe8 Ml8opLEC/DrqWcTzZ9HHwJb+IM0xs3iZnlMY5aLxOkfl0yulTxHIJ4byYlYkaewJ WwqDOlH6uRRF2GrL4D717EOa/Dm6y5vFFFXfGA5KifbNlKCHKcHWn6e0B8hrc+zA 2hVmBXoaxnVlw5iFfu5IYOMbny2Nd/gkVoP3y3VzW/IIiYF/hE2qD7UaTPjjufsX FDQIGBlfPDn4XE22uB4LIHBX8V6D4HTvc0OQ+POQWmZ70XpZmsrj+I2xPIweRonm SKozn9vpbTSBUbb4M01eew4Bq5R7imtKFwh+kcowexi/SbFH4dsetd98uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcGei47bE5eVJWKgmlzApPW3bUeMB8GA1UdIwQY MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5 LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2u1LmCc pYGhYdnKBLK4HTI8xyil09/34o64ElPjHT5qINNzeS8CorwttBSWbaxUAlnJ0k1c RuxrfBVUdWJ6nipN38rWidne5CgZbDG0vDUJSEegsJYDAnNQ8d9+4CUldNSESigc pYtAxxe6mEU8Rhvjn/7uVpzpIWt1VRSF8275d57si6sTL083xIsLXWu9PZ5omzh5 7joqJ628DJaRaYOUDc4tMMikm8CX44mL2c+845ctl19Sauvhl532kiai3XBRRmD6 0EkRPv4Q0ct6uUWQUrHZYzuMIontD5z7Q+RhLj0OBfDWQSxNHpXq3PSGu14YwxuG dj36VI87qFqO6g== -----END CERTIFICATE-----Generated at Mon Dec 15 16:48:29 2025 by rpki-client