This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json) Hash identifier: 6QNml9RmQ0h4YNcDuubzWRb2JhgFVEeikk/tsQ1Zo58= Subject key identifier: A8:58:4E:A3:B1:A3:42:89:5A:18:DE:D8:72:90:C9:47:AD:D0:75:4F Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249 Certificate serial: 019B59AC7701DA15DA55EE791009460E2441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft Manifest number: 017F Signing time: Fri 26 Dec 2025 08:00:33 +0000 Manifest this update: Fri 26 Dec 2025 08:00:33 +0000 Manifest next update: Sat 27 Dec 2025 08:00:33 +0000 Files and hashes: 1: Ft7Frn9ocyQeuHjXMeEeGoh_tdk.roa (hash: +hbGdiT9EB+gQ7hEwq4X6SV+6RnEdb4t2Cal6rg6Zcw=) 2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: BJO98WJII9aCyBWJJHjWOtCntYjk0uJ6e7OQqnW+nNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:77:01:da:15:da:55:ee:79:10:09:46:0e:24:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249 Validity Not Before: Dec 26 08:00:33 2025 GMT Not After : Dec 27 08:00:33 2025 GMT Subject: CN=a8584ea3b1a342895a18ded87290c947add0754f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:0a:7a:57:0a:f8:2d:d7:6c:90:09:d9:e1: 05:d5:ce:33:95:c1:9e:19:09:1b:61:a1:53:c0:ca: f2:c6:f2:b1:66:8e:5d:b4:65:f9:8c:fe:b9:cd:90: 01:27:40:c9:6d:0f:ec:11:ea:95:3e:c6:b3:22:6a: 26:4f:fd:6e:09:13:05:ce:20:8b:8c:ff:bb:6e:e1: d6:19:d9:49:f5:8c:a9:4b:c2:be:82:f6:7b:e1:fb: 00:e8:5c:6f:78:1d:5d:dc:dc:6c:07:aa:45:b8:c0: 07:0e:21:36:5b:fc:be:3e:9b:a1:f4:b9:8e:12:9f: bb:e9:ce:61:59:1d:5c:ee:ea:a4:46:4d:fc:ad:93: c7:ed:b3:6a:15:14:26:cd:cf:b0:09:8d:f9:7d:ee: 83:12:d7:84:90:f5:41:21:bd:14:ae:25:38:d1:4b: 11:2d:cf:43:28:9b:5a:60:3c:a8:7c:a7:3d:6a:a7: da:38:39:eb:a2:6b:6f:c0:ad:bf:70:47:8a:ec:6a: a4:5e:79:14:0a:c6:09:ee:76:54:22:37:5a:48:2f: 5a:fe:b5:96:87:5d:84:7f:d4:ad:0b:43:5e:db:85: e2:f2:f9:05:da:80:85:0c:c9:79:1e:f1:c9:f5:45: 57:d7:67:54:b1:13:1e:99:a0:73:a8:8d:b1:51:0c: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:58:4E:A3:B1:A3:42:89:5A:18:DE:D8:72:90:C9:47:AD:D0:75:4F X509v3 Authority Key Identifier: keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:e2:bf:ec:c4:73:58:dd:4f:32:8b:a1:92:3b:cf:00:ec:57: d4:27:df:e6:1f:a4:f8:db:c9:a4:1c:29:a4:ac:8c:bf:6d:bb: 68:bb:37:aa:5c:a7:b6:6f:aa:35:74:01:2f:49:d6:7a:68:73: 35:20:1b:3d:b0:b3:e7:e1:75:ea:16:77:ab:9d:bb:4c:8f:0d: 6b:e8:39:0e:fc:e6:ed:f6:73:e8:7f:9e:11:e4:6b:d6:79:c7: 3f:dc:2c:c9:a2:f7:70:b5:ad:0d:7a:a3:e0:0d:72:fc:cb:0f: fc:5e:46:1f:0a:dd:52:f6:0e:54:f5:f6:e0:55:d6:cb:9c:2d: e8:cf:e1:3b:d5:ef:2d:54:41:36:a7:a4:1d:00:19:77:15:4c: 3e:69:f4:85:bc:b0:a9:52:17:e4:13:8e:2c:01:ff:d5:3e:68: 90:fd:b5:fa:33:b4:76:8b:63:a9:5c:e5:2e:8e:05:23:db:6c: b7:5c:20:51:2a:08:11:ca:fc:09:27:cd:f1:09:b6:c4:22:23: af:b6:e8:69:d6:7e:dc:ed:75:81:bc:6a:29:c8:32:8f:02:50: d6:4f:59:cd:e7:a7:16:95:8b:b2:2f:65:99:74:74:9f:66:78: 9f:3b:85:22:46:d4:aa:0b:c2:80:59:e2:eb:66:0e:53:90:1e: 28:2c:04:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrHcB2hXaVe55EAlGDiRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MGFlMTc1ZmJlNjNiMGU5MzA0NjkwOTdjOTQ5MmQ0MmVk NzkyNDkwHhcNMjUxMjI2MDgwMDMzWhcNMjUxMjI3MDgwMDMzWjAzMTEwLwYDVQQD EyhhODU4NGVhM2IxYTM0Mjg5NWExOGRlZDg3MjkwYzk0N2FkZDA3NTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZYKelcK+C3XbJAJ2eEF1c4zlcGe GQkbYaFTwMryxvKxZo5dtGX5jP65zZABJ0DJbQ/sEeqVPsazImomT/1uCRMFziCL jP+7buHWGdlJ9YypS8K+gvZ74fsA6FxveB1d3NxsB6pFuMAHDiE2W/y+Ppuh9LmO Ep+76c5hWR1c7uqkRk38rZPH7bNqFRQmzc+wCY35fe6DEteEkPVBIb0UriU40UsR Lc9DKJtaYDyofKc9aqfaODnromtvwK2/cEeK7GqkXnkUCsYJ7nZUIjdaSC9a/rWW h12Ef9StC0Ne24Xi8vkF2oCFDMl5HvHJ9UVX12dUsRMemaBzqI2xUQx0HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhYTqOxo0KJWhje2HKQyUet0HVPMB8GA1UdIwQY MBaAFGkK4XX75jsOkwRpCXyUktQu15JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgt OGEwODZlYTk0YmU1LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgtOGEwODZlYTk0YmU1 LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2eK/7MRz WN1PMouhkjvPAOxX1Cff5h+k+NvJpBwppKyMv227aLs3qlyntm+qNXQBL0nWemhz NSAbPbCz5+F16hZ3q527TI8Na+g5Dvzm7fZz6H+eEeRr1nnHP9wsyaL3cLWtDXqj 4A1y/MsP/F5GHwrdUvYOVPX24FXWy5wt6M/hO9XvLVRBNqekHQAZdxVMPmn0hbyw qVIX5BOOLAH/1T5okP21+jO0dotjqVzlLo4FI9tst1wgUSoIEcr8CSfN8Qm2xCIj r7boadZ+3O11gbxqKcgyjwJQ1k9ZzeenFpWLsi9lmXR0n2Z4nzuFIkbUqgvCgFni 62YOU5AeKCwEQw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:21 2025 by rpki-client