This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json) Hash identifier: c+aR4R5QUMFA3+oVLgQmtyyQuQzbkT6HdqUvD3M9Ud4= Subject key identifier: 1F:18:9E:E9:28:77:DE:86:92:B6:C7:84:B2:BD:42:66:22:4E:28:FB Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f Certificate serial: 019B0E92DBB626E5B71C8517564D6AAE9CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft Manifest number: 08CE Signing time: Thu 11 Dec 2025 18:01:04 +0000 Manifest this update: Thu 11 Dec 2025 18:01:04 +0000 Manifest next update: Fri 12 Dec 2025 18:01:04 +0000 Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=) 2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: ZYCfKfKA1q9CniU5ClY6kQm8oOgqaJNDdsLLCNmIogk=) 3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:db:b6:26:e5:b7:1c:85:17:56:4d:6a:ae:9c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f Validity Not Before: Dec 11 18:01:04 2025 GMT Not After : Dec 12 18:01:04 2025 GMT Subject: CN=1f189ee92877de8692b6c784b2bd4266224e28fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:7f:2f:2b:80:fc:93:42:16:17:aa:8e:da: ef:3d:24:66:72:d4:9d:74:ce:f1:d3:ce:e3:ae:27: 9b:e9:7a:0a:04:ca:69:a9:e8:d7:bf:cd:85:88:14: 06:bb:b3:d6:46:47:c9:4b:a3:d8:f6:da:ce:ae:6e: d5:20:89:a8:b5:96:1c:90:6d:6c:eb:60:fb:1e:33: 81:ad:96:d3:be:18:a8:96:96:44:f0:7e:32:9b:40: d0:18:0c:2d:cf:fc:03:41:2f:d9:ab:95:a9:d6:67: 95:ba:e8:8a:47:ee:8a:1b:ab:ff:ab:65:50:cf:5d: 76:ea:a6:b2:0c:58:e2:ae:9c:3c:4e:a0:3f:c1:f0: 46:0f:1d:9c:d7:ec:c7:55:12:47:03:b4:4f:a2:34: 49:36:d3:32:4e:18:35:a6:85:d2:89:88:8b:c5:3e: 8c:10:55:65:80:37:c6:0f:49:90:19:d2:c5:cc:c1: c8:38:39:b4:08:00:77:92:48:03:e8:24:04:76:24: 90:9e:3f:37:1b:69:87:1a:7e:62:45:78:91:d3:5f: 43:b8:8d:8d:e4:8d:de:50:a6:04:50:f3:a7:f0:20: f2:ed:f3:40:f8:fb:33:bb:a7:1e:3a:1d:05:67:61: b6:ea:9c:84:03:1a:d3:b7:f6:9e:d3:a4:b0:20:d6: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:9E:E9:28:77:DE:86:92:B6:C7:84:B2:BD:42:66:22:4E:28:FB X509v3 Authority Key Identifier: keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:58:e7:39:37:5f:89:16:5f:bd:5e:bc:e7:a7:40:ac:30: 84:f7:a5:2f:7e:9e:db:e3:20:d1:12:05:45:bf:f0:3e:b1:a5: 48:67:d9:73:76:c8:3b:47:22:80:c6:45:24:28:d8:24:e3:0b: bc:96:3c:97:c9:58:35:ac:e7:2a:66:0f:6e:69:96:d7:0e:7a: 57:ae:5f:00:30:3d:78:83:9c:d3:0f:a1:18:4b:38:21:78:65: c8:72:08:6e:66:17:a9:24:fb:fd:dd:a4:fd:58:ec:d4:f1:7e: 1e:46:3e:e7:f2:87:b3:d8:8b:2e:85:48:b7:7e:2c:7a:b6:1a: 17:0f:09:16:7a:52:b0:0c:5a:dd:74:74:a9:e7:f1:29:cf:91: 60:01:c7:26:cc:b3:30:d9:2b:77:a6:cd:20:71:01:06:5c:1a: 96:3b:f8:46:d2:46:28:1b:01:b5:78:e5:88:2e:6f:02:17:56: 95:23:72:4a:e7:42:54:08:49:b7:ec:a6:8e:68:8b:3c:f9:78: be:e0:25:ee:10:a8:78:f3:1f:84:de:93:54:49:a2:c0:25:0e: 4d:76:ca:f8:7a:ae:30:f4:6f:72:85:47:a4:26:66:a1:f3:ea: 2e:f8:35:e9:d8:77:75:f6:c6:5f:7c:85:2f:e8:de:d9:9b:4d: 9f:67:dc:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOktu2JuW3HIUXVk1qrpzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz MmZlM2YwHhcNMjUxMjExMTgwMTA0WhcNMjUxMjEyMTgwMTA0WjAzMTEwLwYDVQQD EygxZjE4OWVlOTI4NzdkZTg2OTJiNmM3ODRiMmJkNDI2NjIyNGUyOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrt/LyuA/JNCFheqjtrvPSRmctSd dM7x087jrieb6XoKBMppqejXv82FiBQGu7PWRkfJS6PY9trOrm7VIImotZYckG1s 62D7HjOBrZbTvhiolpZE8H4ym0DQGAwtz/wDQS/Zq5Wp1meVuuiKR+6KG6v/q2VQ z1126qayDFjirpw8TqA/wfBGDx2c1+zHVRJHA7RPojRJNtMyThg1poXSiYiLxT6M EFVlgDfGD0mQGdLFzMHIODm0CAB3kkgD6CQEdiSQnj83G2mHGn5iRXiR019DuI2N 5I3eUKYEUPOn8CDy7fNA+Pszu6ceOh0FZ2G26pyEAxrTt/ae06SwINZoIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8Ynukod96GkrbHhLK9QmYiTij7MB8GA1UdIwQY MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4 LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZNY5zk3 X4kWX71evOenQKwwhPelL36e2+Mg0RIFRb/wPrGlSGfZc3bIO0cigMZFJCjYJOML vJY8l8lYNaznKmYPbmmW1w56V65fADA9eIOc0w+hGEs4IXhlyHIIbmYXqST7/d2k /Vjs1PF+HkY+5/KHs9iLLoVIt34serYaFw8JFnpSsAxa3XR0qefxKc+RYAHHJsyz MNkrd6bNIHEBBlwaljv4RtJGKBsBtXjliC5vAhdWlSNySudCVAhJt+ymjmiLPPl4 vuAl7hCoePMfhN6TVEmiwCUOTXbK+HquMPRvcoVHpCZmofPqLvg16dh3dfbGX3yF L+je2ZtNn2fcjw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:53 2025 by rpki-client