This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json) Hash identifier: k2Fk+gQKeY31AKUrCLG3RATFpSljUDb3drFh/cBkKbo= Subject key identifier: D7:48:0E:DF:43:C1:B0:42:D4:BC:E6:E8:F0:E5:96:42:68:A5:F6:FB Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Certificate serial: 019B0E26B3FA78D3714573D942FA64701ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 16:02:55 +0000 Manifest this update: Thu 11 Dec 2025 16:02:55 +0000 Manifest next update: Fri 12 Dec 2025 16:02:55 +0000 Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=) 2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=) 3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: Kn9m54ujh80M4mu/F5+IlTzF2KnQLSkyaV/8Zj7BMwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:b3:fa:78:d3:71:45:73:d9:42:fa:64:70:1a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Validity Not Before: Dec 11 16:02:55 2025 GMT Not After : Dec 12 16:02:55 2025 GMT Subject: CN=d7480edf43c1b042d4bce6e8f0e5964268a5f6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:47:2b:4c:69:1d:42:c6:62:b6:d8:95:54: fd:48:35:18:32:1a:c6:9b:90:5c:b2:60:93:fc:58: b8:f7:d3:cc:ad:40:1f:3c:ed:cc:a9:6d:d9:20:35: a5:68:f9:90:e5:57:ab:14:c7:bf:df:dc:2a:43:40: 6c:88:95:fd:b4:68:c6:65:c4:84:d7:e0:f0:65:89: 83:73:84:ad:d5:5c:de:a0:92:8e:7d:45:00:50:2f: 83:c8:ef:22:3b:0f:fc:63:a1:2f:8f:ae:f6:e2:84: b5:7f:e3:b2:b6:6c:79:ff:c2:41:73:a6:33:0d:48: 5c:f1:8c:5e:53:9a:e1:24:52:ad:b9:86:b7:23:c2: ba:4d:85:52:55:b4:ea:cb:0a:28:65:b2:16:3c:f7: df:89:c4:7d:72:ea:76:a0:ac:e2:0d:ab:f9:ff:f3: a0:a9:26:98:46:39:11:fa:91:31:5a:99:f0:0c:a8: 2f:28:7b:43:b5:ad:fa:8c:81:e6:3f:ac:cf:6a:7f: 7c:28:d1:1c:8c:a2:c3:ae:13:b2:a2:d4:06:22:c9: 5c:49:76:49:12:4e:f1:3a:93:dc:f2:93:6b:fd:b1: c7:cf:9a:a9:58:ba:e0:d7:d5:6c:34:44:81:8e:e3: 16:76:e3:65:2e:ba:a1:f9:f2:4b:46:33:ec:51:c0: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:48:0E:DF:43:C1:B0:42:D4:BC:E6:E8:F0:E5:96:42:68:A5:F6:FB X509v3 Authority Key Identifier: keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:57:9a:b0:75:58:48:c5:3e:8d:db:c2:73:fe:6c:c9:d1:7a: 96:1f:29:b8:10:2d:a2:4e:fb:05:a9:d4:e0:2d:ae:fd:66:e7: c1:3e:a2:15:78:cc:f6:9a:9c:6f:31:30:f1:37:5d:0d:bc:19: 9a:cc:14:d1:83:f7:0f:3a:80:17:4a:8c:28:94:d1:05:68:ff: c3:41:61:33:3b:5c:6b:4d:da:91:82:69:6b:a3:a3:27:b0:44: de:9d:bb:06:11:48:a8:e2:85:3a:e6:c9:9f:28:4c:80:0d:c7: 0c:fc:f4:4a:76:89:ff:8b:a2:df:e6:35:f8:7c:c3:67:20:33: 22:f1:ab:01:d1:78:3f:e5:b4:0e:fc:0e:33:08:f1:0c:79:39: 59:4d:c7:6d:3f:38:a8:71:93:17:12:db:04:14:2e:4a:ae:be: 3c:ac:25:ff:83:5d:5d:91:a3:fc:13:ff:e9:ab:18:ae:b9:a2: 9c:85:77:c9:40:36:1e:6f:7e:cb:ad:46:46:5e:1a:bb:b3:91: 0b:eb:e9:05:b3:4f:09:ac:3f:93:6f:8e:69:ae:fd:87:93:18: e5:1e:79:a1:05:18:b2:1d:a3:33:42:ab:cb:9a:57:e6:1b:65: 83:bb:10:7c:cd:e5:e3:6a:6d:64:db:5e:4f:91:39:35:a9:50: 48:66:26:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJrP6eNNxRXPZQvpkcBrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx YTYwNDUwHhcNMjUxMjExMTYwMjU1WhcNMjUxMjEyMTYwMjU1WjAzMTEwLwYDVQQD EyhkNzQ4MGVkZjQzYzFiMDQyZDRiY2U2ZThmMGU1OTY0MjY4YTVmNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKdHK0xpHULGYrbYlVT9SDUYMhrG m5BcsmCT/Fi499PMrUAfPO3MqW3ZIDWlaPmQ5VerFMe/39wqQ0BsiJX9tGjGZcSE 1+DwZYmDc4St1VzeoJKOfUUAUC+DyO8iOw/8Y6Evj6724oS1f+Oytmx5/8JBc6Yz DUhc8YxeU5rhJFKtuYa3I8K6TYVSVbTqywooZbIWPPfficR9cup2oKziDav5//Og qSaYRjkR+pExWpnwDKgvKHtDta36jIHmP6zPan98KNEcjKLDrhOyotQGIslcSXZJ Ek7xOpPc8pNr/bHHz5qpWLrg19VsNESBjuMWduNlLrqh+fJLRjPsUcCcSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdIDt9DwbBC1Lzm6PDllkJopfb7MB8GA1UdIwQY MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4 LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQleasHVY SMU+jdvCc/5sydF6lh8puBAtok77BanU4C2u/WbnwT6iFXjM9pqcbzEw8TddDbwZ mswU0YP3DzqAF0qMKJTRBWj/w0FhMztca03akYJpa6OjJ7BE3p27BhFIqOKFOubJ nyhMgA3HDPz0SnaJ/4ui3+Y1+HzDZyAzIvGrAdF4P+W0DvwOMwjxDHk5WU3HbT84 qHGTFxLbBBQuSq6+PKwl/4NdXZGj/BP/6asYrrminIV3yUA2Hm9+y61GRl4au7OR C+vpBbNPCaw/k2+Oaa79h5MY5R55oQUYsh2jM0Kry5pX5htlg7sQfM3l42ptZNte T5E5NalQSGYmig== -----END CERTIFICATE-----Generated at Fri Dec 12 00:21:41 2025 by rpki-client