This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json) Hash identifier: 8QBsGil/KBGgFRWthTL+gNPXpKcigavIp6/PKLuFWdc= Subject key identifier: 02:6F:C6:74:CF:62:92:B4:E9:56:DF:F5:C2:94:BD:96:41:F9:02:C3 Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87 Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87 Certificate serial: 019B360E5A85226BFCDDB3D78A59ABC4BC3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 10:01:08 +0000 Manifest this update: Fri 19 Dec 2025 10:01:08 +0000 Manifest next update: Sat 20 Dec 2025 10:01:08 +0000 Files and hashes: 1: 1-wEZKS5ROln113VYj-rYIVv3HMw.roa (hash: zd3NK5lHmlo7IZCKvHCkj4ue/ewdTG041qEpUCwPhSg=) 2: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: PjgWz/S8rsuayoPV5IqxuCnsTFo8yUKJe8P1gay2fNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:5a:85:22:6b:fc:dd:b3:d7:8a:59:ab:c4:bc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87 Validity Not Before: Dec 19 10:01:08 2025 GMT Not After : Dec 20 10:01:08 2025 GMT Subject: CN=026fc674cf6292b4e956dff5c294bd9641f902c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:87:f8:1e:02:d0:14:a9:d5:dc:08:29:3e: cf:9d:38:98:67:30:b2:27:c7:35:24:73:bc:d2:03: 3d:10:06:c0:07:75:a8:4f:5a:b5:58:ab:9b:ee:28: 2e:71:59:ff:e8:4f:b6:da:08:1d:8f:80:09:d5:9f: cb:d4:b5:82:dd:6e:1f:60:89:7d:d4:e5:19:6d:27: 87:54:9d:e8:de:1a:94:69:4f:0a:41:42:d3:cd:6d: d9:6f:a1:72:c1:f6:4c:cd:4b:66:15:49:6e:cb:d7: 0c:1b:6f:40:10:5a:ed:c1:f2:1f:20:6f:e8:64:a3: 6e:3c:ff:25:d8:05:e1:1c:19:b2:b0:33:e0:d8:d2: 6f:17:89:9c:04:71:b2:d2:f1:b9:dd:e6:42:2f:d4: 25:6e:7e:c1:35:1f:0c:d3:b6:9e:00:50:43:48:51: 82:51:25:a6:94:9b:16:82:5b:5e:8e:01:09:ad:5d: 08:f4:02:8a:c3:92:de:c2:32:23:d5:04:23:98:99: d2:b4:29:4e:f4:c8:a4:62:26:74:09:f0:3f:d3:bd: 99:e7:1b:cc:a5:96:77:35:b5:0e:58:fe:41:90:f6: 2f:f3:d3:d5:f9:7d:9a:b4:80:9c:17:db:e2:5d:f8: 14:34:2c:d4:b1:00:62:9e:b3:d3:d1:5f:cf:a6:1b: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6F:C6:74:CF:62:92:B4:E9:56:DF:F5:C2:94:BD:96:41:F9:02:C3 X509v3 Authority Key Identifier: keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:81:a7:4e:2b:16:e4:a8:c4:b0:e9:ec:bf:06:e1:b0:46:9a: 46:49:a5:dc:36:5f:82:89:ac:fa:00:4c:06:83:58:08:2c:fe: 96:e7:76:e0:08:11:0e:de:cd:77:a7:84:17:b6:5c:c9:73:8a: e5:fe:1d:07:c9:30:93:94:62:58:81:f7:ee:08:0a:d1:c8:46: c3:f2:a8:74:7a:5a:81:23:54:47:7a:62:39:4f:5b:38:e2:1c: 4e:64:0e:50:e6:58:31:d7:c3:c6:d4:45:a1:b8:7d:69:2e:f8: 50:06:c6:2c:1c:3f:cb:e3:9f:a7:3c:37:29:20:24:c8:33:2e: 44:f4:38:ea:6e:9e:75:a1:03:1c:53:12:bf:02:8b:83:89:81: 8f:5a:ad:e1:94:aa:79:0f:1e:a4:d0:f4:e7:a0:04:6e:e1:5a: 14:08:0e:50:bd:84:22:10:92:2c:b9:ea:d3:b9:5c:a9:ff:a3: 06:6c:0f:aa:9c:07:50:7d:60:9b:8a:1b:4d:87:7c:a7:9a:6c: 8f:8f:c5:1a:e1:1a:6f:bb:20:7f:ab:07:12:26:3d:15:d9:f6: d2:ee:8a:78:eb:fb:e9:de:2b:24:b9:80:86:14:56:73:a6:21: 99:f3:eb:38:fc:66:06:8d:2a:95:93:f8:82:08:c6:c5:07:41: c8:7f:83:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlqFImv83bPXilmrxLw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjdmODE3YWI1MTQxYjVlMTM4MjgwY2RmNjE5MDE2NmJi OWNiODcwHhcNMjUxMjE5MTAwMTA4WhcNMjUxMjIwMTAwMTA4WjAzMTEwLwYDVQQD EygwMjZmYzY3NGNmNjI5MmI0ZTk1NmRmZjVjMjk0YmQ5NjQxZjkwMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQuH+B4C0BSp1dwIKT7PnTiYZzCy J8c1JHO80gM9EAbAB3WoT1q1WKub7igucVn/6E+22ggdj4AJ1Z/L1LWC3W4fYIl9 1OUZbSeHVJ3o3hqUaU8KQULTzW3Zb6FywfZMzUtmFUluy9cMG29AEFrtwfIfIG/o ZKNuPP8l2AXhHBmysDPg2NJvF4mcBHGy0vG53eZCL9Qlbn7BNR8M07aeAFBDSFGC USWmlJsWgltejgEJrV0I9AKKw5LewjIj1QQjmJnStClO9MikYiZ0CfA/072Z5xvM pZZ3NbUOWP5BkPYv89PV+X2atICcF9viXfgUNCzUsQBinrPT0V/PphswpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJvxnTPYpK06Vbf9cKUvZZB+QLDMB8GA1UdIwQY MBaAFGi3+BerUUG14TgoDN9hkBZrucuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMt MTY1MTcxMjZjMTMyLzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMtMTY1MTcxMjZjMTMy LzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYGnTisW 5KjEsOnsvwbhsEaaRkml3DZfgoms+gBMBoNYCCz+lud24AgRDt7Nd6eEF7ZcyXOK 5f4dB8kwk5RiWIH37ggK0chGw/KodHpagSNUR3piOU9bOOIcTmQOUOZYMdfDxtRF obh9aS74UAbGLBw/y+Ofpzw3KSAkyDMuRPQ46m6edaEDHFMSvwKLg4mBj1qt4ZSq eQ8epND056AEbuFaFAgOUL2EIhCSLLnq07lcqf+jBmwPqpwHUH1gm4obTYd8p5ps j4/FGuEab7sgf6sHEiY9Fdn20u6KeOv76d4rJLmAhhRWc6YhmfPrOPxmBo0qlZP4 ggjGxQdByH+DcA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:26:47 2025 by rpki-client