This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json) Hash identifier: tFprkbzKKg9GF6bEPtYZNio8DvdqKZGjLb/B7OkJbnY= Subject key identifier: E9:09:EC:BF:5B:7B:41:C9:D0:3A:A2:54:C7:D1:DA:7F:A8:AC:C9:8B Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d Certificate serial: 019B5977085D92AD395CC31A9854FF33462F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:02:11 +0000 Manifest this update: Fri 26 Dec 2025 07:02:11 +0000 Manifest next update: Sat 27 Dec 2025 07:02:11 +0000 Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=) 2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: 44F4ry8vdRM7848sidNtJxgLzPuvl+CElhBMn4auiUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:08:5d:92:ad:39:5c:c3:1a:98:54:ff:33:46:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d Validity Not Before: Dec 26 07:02:11 2025 GMT Not After : Dec 27 07:02:11 2025 GMT Subject: CN=e909ecbf5b7b41c9d03aa254c7d1da7fa8acc98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:a7:5d:d8:f6:a0:66:0b:fb:e2:5b:4e:0c: e3:47:32:e2:13:03:da:58:16:00:39:f6:af:96:7c: e7:19:e8:38:33:3e:34:14:9f:8e:f8:96:02:cb:8d: 66:61:4b:8c:04:e0:26:2d:5d:1c:14:e3:02:44:dc: 82:8d:ff:c9:4d:02:61:e3:a1:3f:d6:e7:1a:11:69: 6c:42:8e:87:8b:f0:5f:2f:4b:8c:98:ac:39:c6:70: 70:5a:41:f5:14:e0:1b:f8:6c:ef:f6:f1:1b:e6:5e: 59:82:5d:23:db:b1:21:77:af:a1:74:8d:1a:8b:75: b8:3f:be:2d:de:36:f5:fe:b7:07:4f:43:92:04:3d: 28:46:ae:91:99:11:32:50:8d:d3:ce:e9:08:6b:08: c5:37:56:0f:16:b2:c6:4c:6f:05:95:85:42:3b:75: 0d:c4:42:bd:ce:ed:d1:a3:7e:0a:23:d9:ad:d7:71: 0a:ab:a8:47:58:23:7f:b5:06:73:68:18:22:6e:fb: 19:b4:b6:cf:bc:9f:14:d5:45:b2:00:c8:d3:9b:82: ac:03:63:81:d1:c1:c1:6f:ce:17:95:ee:01:5a:1a: c7:ad:7c:3f:20:6b:a8:ba:14:be:09:af:46:10:9d: e0:01:17:35:e5:74:ee:3c:47:6d:78:69:f0:06:bf: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:09:EC:BF:5B:7B:41:C9:D0:3A:A2:54:C7:D1:DA:7F:A8:AC:C9:8B X509v3 Authority Key Identifier: keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:96:9b:9a:0e:0e:23:a2:52:52:7a:88:08:e1:b0:2a:d1: 44:82:e1:03:7b:a3:ed:82:26:eb:9e:88:65:16:6b:32:f1:d8: 28:ae:fd:3d:0e:5d:48:2b:0f:55:b6:f6:47:3b:af:04:e3:c4: 14:12:67:2f:99:85:5a:09:eb:2a:84:23:7f:0a:cf:89:bd:49: cc:ff:d9:c4:4a:d1:b5:54:8b:af:c3:fb:60:28:0e:b9:b4:dc: 0d:4a:33:3f:50:4e:64:a1:73:82:39:27:6f:48:5f:b9:02:b7: e2:24:4d:df:b8:8a:17:1b:a1:1f:07:9a:09:20:03:b8:7e:bd: 32:ba:73:c3:2a:97:8e:6a:fd:b3:c3:28:5c:08:d6:92:e3:5a: 3c:7f:d6:9b:3e:4f:b7:44:68:06:5d:75:6b:ca:10:91:62:c5: d6:ca:97:6f:09:f7:7b:1d:b2:56:9c:4f:59:ab:2b:4d:03:30: 08:c5:12:7d:cb:6f:e3:58:4f:18:64:1c:1d:67:cd:c8:6b:60: 5d:46:6b:96:20:57:37:e0:f2:3b:5e:b3:60:16:4e:e0:49:51: 3d:10:4a:c5:0d:4f:50:db:86:98:c9:e2:f4:b8:56:f6:a4:6f: d5:7d:b8:9f:1a:bf:76:d3:8f:5f:4a:f3:47:a2:cf:e4:a9:11: 48:7b:d7:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdwhdkq05XMMamFT/M0YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5N2VhNjBhY2EwZGRhZTVlZGRmYmMyNjBjYjdkYTI2MTYy NGU5MWQwHhcNMjUxMjI2MDcwMjExWhcNMjUxMjI3MDcwMjExWjAzMTEwLwYDVQQD EyhlOTA5ZWNiZjViN2I0MWM5ZDAzYWEyNTRjN2QxZGE3ZmE4YWNjOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLqnXdj2oGYL++JbTgzjRzLiEwPa WBYAOfavlnznGeg4Mz40FJ+O+JYCy41mYUuMBOAmLV0cFOMCRNyCjf/JTQJh46E/ 1ucaEWlsQo6Hi/BfL0uMmKw5xnBwWkH1FOAb+Gzv9vEb5l5Zgl0j27Ehd6+hdI0a i3W4P74t3jb1/rcHT0OSBD0oRq6RmREyUI3TzukIawjFN1YPFrLGTG8FlYVCO3UN xEK9zu3Ro34KI9mt13EKq6hHWCN/tQZzaBgibvsZtLbPvJ8U1UWyAMjTm4KsA2OB 0cHBb84Xle4BWhrHrXw/IGuouhS+Ca9GEJ3gARc15XTuPEdteGnwBr81MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkJ7L9be0HJ0DqiVMfR2n+orMmLMB8GA1UdIwQY MBaAFGl+pgrKDdrl7d+8Jgy32iYWJOkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTct ZWVhZDNiOGJjY2I5LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTctZWVhZDNiOGJjY2I5 LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoGWm5oO DiOiUlJ6iAjhsCrRRILhA3uj7YIm656IZRZrMvHYKK79PQ5dSCsPVbb2RzuvBOPE FBJnL5mFWgnrKoQjfwrPib1JzP/ZxErRtVSLr8P7YCgOubTcDUozP1BOZKFzgjkn b0hfuQK34iRN37iKFxuhHweaCSADuH69MrpzwyqXjmr9s8MoXAjWkuNaPH/Wmz5P t0RoBl11a8oQkWLF1sqXbwn3ex2yVpxPWasrTQMwCMUSfctv41hPGGQcHWfNyGtg XUZrliBXN+DyO16zYBZO4ElRPRBKxQ1PUNuGmMni9LhW9qRv1X24nxq/dtOPX0rz R6LP5KkRSHvXAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:21 2025 by rpki-client