This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json) Hash identifier: BuL8twfjsslDlPN7MATgLs7FZRj/YTsPJoVtfO6tAKk= Subject key identifier: 1D:ED:D1:65:67:AA:F8:21:8E:48:47:DA:33:BA:00:40:0F:D0:C0:BF Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd Certificate serial: 019B1B3B8713A04F20D2A4F7E4B15FA61A0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft Manifest number: 14BA Signing time: Sun 14 Dec 2025 05:00:44 +0000 Manifest this update: Sun 14 Dec 2025 05:00:44 +0000 Manifest next update: Mon 15 Dec 2025 05:00:44 +0000 Files and hashes: 1: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=) 2: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: YGRtzz8Ch883aOnyegP46PJ9YdfU9eyqGBmw9040b7k=) 3: lqHZHTtSjRTsulRT9uODOQE8lxE.roa (hash: ps3jNh8IrB0LkmVcReSQZ1oXuY/U8lzEpr6J8ijs+08=) 4: xE9IyAhq0aHlL6_ym_xgvZ2_5uk.roa (hash: 1YgjglAtdi0WFBDpDXQ7veTTeatE49sPF4fCDK08QO0=) 5: z6mBzW6H29uI5KxETsJqR2soNbo.roa (hash: UhKW2I+drpoL0LurJwnMOqRysLzBC/O6KKhMC7EQlLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:87:13:a0:4f:20:d2:a4:f7:e4:b1:5f:a6:1a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd Validity Not Before: Dec 14 05:00:44 2025 GMT Not After : Dec 15 05:00:44 2025 GMT Subject: CN=1dedd16567aaf8218e4847da33ba00400fd0c0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:b0:d2:91:36:d2:43:fc:02:c2:a3:04:f3: bc:7a:7b:af:d3:65:7a:56:a8:3a:1a:33:28:50:7a: 8e:dc:1e:07:d1:ab:d0:f5:8c:ea:2e:e8:47:69:b4: 2b:02:fe:10:a0:83:7a:9f:e8:a2:62:5d:5b:99:17: d1:65:bb:6d:fb:dc:e0:f5:99:9e:78:30:ef:d7:e0: 10:63:4e:4f:eb:3a:36:68:60:8c:a0:8a:de:9e:dd: 9a:5a:86:26:52:5a:00:a2:94:a5:13:fe:6b:58:96: 2f:f2:9c:da:b1:fd:5f:85:a0:b8:cf:65:9c:3e:56: 2b:ca:81:ce:3d:67:05:b8:dd:05:b5:18:3d:04:3a: bb:cc:21:e1:13:93:93:67:71:23:ff:0c:4b:a5:f0: a3:f4:c7:ba:25:2f:bf:bc:82:79:48:c5:fe:1d:ea: b3:26:b6:d0:4c:3f:d8:ed:d6:d0:a8:ea:26:4c:38: 96:42:65:41:15:ce:61:9c:ae:04:e2:15:4d:61:a8: 4a:87:53:2f:92:f4:3d:17:92:28:9e:e6:d0:88:33: 8f:e3:32:8f:02:04:4f:57:1e:cb:a4:86:34:8d:c4: ab:f3:f0:fc:81:1a:7e:a6:1e:3b:dd:6a:b2:cb:1b: a7:7f:fd:6e:72:88:a6:41:d6:a3:4d:7f:ab:01:c4: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:ED:D1:65:67:AA:F8:21:8E:48:47:DA:33:BA:00:40:0F:D0:C0:BF X509v3 Authority Key Identifier: keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c9:c0:46:1f:4b:eb:2a:f4:65:5f:ff:8e:aa:93:a5:a5:3d: e0:80:f8:8f:b7:87:aa:33:cf:82:9d:bf:7b:44:d7:43:f3:49: 2b:9f:20:17:a9:b3:3a:54:d9:2f:77:4f:7d:37:fd:ed:f0:47: 73:23:4d:30:dd:e4:a3:09:f8:8c:ba:37:cd:32:01:cd:5a:55: a1:65:35:19:c8:bd:de:8f:05:a9:09:3e:12:60:db:e6:5a:d2: 63:96:80:29:50:dd:44:df:da:48:8f:d3:d6:79:86:16:8f:13: b2:2d:00:44:2a:b7:61:2d:fb:b9:4a:c7:d3:c8:c0:0a:b0:04: fb:0d:5c:47:02:cd:ee:95:c4:ef:27:b4:b9:ce:1b:ca:bb:15: cd:9a:d8:b6:36:78:26:78:3e:27:51:57:c8:f9:2c:19:92:26: 2e:58:90:0b:f4:5b:c1:96:26:cc:d4:ab:4a:41:56:f3:55:38: bb:23:ee:8e:77:db:3c:17:fa:bf:bc:f7:59:e1:d0:01:20:88: 31:fa:29:5c:54:16:31:bc:74:77:f5:82:79:33:d2:94:9e:ca: c9:ff:37:b5:04:2d:13:4a:f3:86:6a:3b:88:e5:16:dc:32:35: 25:d4:7f:be:6a:bc:32:08:76:c6:24:5a:49:4e:bc:1f:f5:d3: 36:92:13:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO4cToE8g0qT35LFfphoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1 NTBlYmQwHhcNMjUxMjE0MDUwMDQ0WhcNMjUxMjE1MDUwMDQ0WjAzMTEwLwYDVQQD EygxZGVkZDE2NTY3YWFmODIxOGU0ODQ3ZGEzM2JhMDA0MDBmZDBjMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S6w0pE20kP8AsKjBPO8enuv02V6 Vqg6GjMoUHqO3B4H0avQ9YzqLuhHabQrAv4QoIN6n+iiYl1bmRfRZbtt+9zg9Zme eDDv1+AQY05P6zo2aGCMoIrent2aWoYmUloAopSlE/5rWJYv8pzasf1fhaC4z2Wc PlYryoHOPWcFuN0FtRg9BDq7zCHhE5OTZ3Ej/wxLpfCj9Me6JS+/vIJ5SMX+Heqz JrbQTD/Y7dbQqOomTDiWQmVBFc5hnK4E4hVNYahKh1MvkvQ9F5IonubQiDOP4zKP AgRPVx7LpIY0jcSr8/D8gRp+ph473Wqyyxunf/1ucoimQdajTX+rAcR+BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3t0WVnqvghjkhH2jO6AEAP0MC/MB8GA1UdIwQY MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt MzE5NzExMDA5N2M5LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5 LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsnARh9L 6yr0ZV//jqqTpaU94ID4j7eHqjPPgp2/e0TXQ/NJK58gF6mzOlTZL3dPfTf97fBH cyNNMN3kown4jLo3zTIBzVpVoWU1Gci93o8FqQk+EmDb5lrSY5aAKVDdRN/aSI/T 1nmGFo8Tsi0ARCq3YS37uUrH08jACrAE+w1cRwLN7pXE7ye0uc4byrsVzZrYtjZ4 Jng+J1FXyPksGZImLliQC/RbwZYmzNSrSkFW81U4uyPujnfbPBf6v7z3WeHQASCI MfopXFQWMbx0d/WCeTPSlJ7Kyf83tQQtE0rzhmo7iOUW3DI1JdR/vmq8Mgh2xiRa SU68H/XTNpITJQ== -----END CERTIFICATE-----Generated at Sun Dec 14 12:03:31 2025 by rpki-client