This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json) Hash identifier: HnXth5KVU5odMCogzNNwRD9yWwyl8zqtwZ3nLCdY0n0= Subject key identifier: 86:7E:9F:84:4B:AA:95:24:6C:19:2A:D1:52:CC:8A:60:0E:91:90:A6 Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97 Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997 Certificate serial: 019B2D0B0424D205E15A226561641691A70F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft Manifest number: 09DF Signing time: Wed 17 Dec 2025 16:00:55 +0000 Manifest this update: Wed 17 Dec 2025 16:00:55 +0000 Manifest next update: Thu 18 Dec 2025 16:00:55 +0000 Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=) 2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: 68OdM0Oc0WfHL3MvME1rkFo+KVhd1N1LnwhduWZWCx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:04:24:d2:05:e1:5a:22:65:61:64:16:91:a7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690a263249847cf97344742213644f929beaa997 Validity Not Before: Dec 17 16:00:55 2025 GMT Not After : Dec 18 16:00:55 2025 GMT Subject: CN=867e9f844baa95246c192ad152cc8a600e9190a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:7b:82:bb:e0:46:ef:8a:36:f9:74:c9:be: 9c:67:c7:bb:73:20:13:f4:b6:96:06:8c:df:78:47: ee:06:a9:3e:fd:3b:53:9b:f7:41:dd:2b:7f:d5:50: c2:02:9e:43:15:cb:90:d2:6d:ed:37:87:dc:5e:07: f7:e6:4b:c2:4d:72:7e:f3:6e:43:c1:3a:f0:88:a5: cb:17:5b:05:c5:5e:4a:66:1d:1f:4b:b7:62:95:b8: c1:48:d2:00:18:75:94:60:a5:f3:cc:60:dc:df:5d: da:38:57:4c:ab:11:0e:4c:5c:d3:f3:88:fa:82:ea: 12:22:6a:f5:88:5a:0b:a7:69:43:f9:51:ba:8c:5f: c6:6e:fa:28:9a:a3:28:82:54:14:69:57:c9:e8:e9: b2:ae:99:a1:ff:b6:f6:7b:5a:38:fb:dc:1f:f5:f0: 05:91:42:89:e0:1d:e5:e7:2a:bb:15:c0:58:6b:1c: f4:5d:7c:0b:d1:ed:a5:8c:39:8d:7b:3f:14:32:96: ec:da:12:c0:be:10:17:76:85:d1:7d:a1:22:90:94: c9:0e:a4:b1:07:77:17:34:d4:f4:5e:b4:bf:6d:5c: 82:5d:be:d1:fd:d6:12:5f:e0:6b:d0:e4:c0:04:02: 63:42:78:e1:f9:22:f0:c4:e8:b3:fc:89:15:24:ac: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7E:9F:84:4B:AA:95:24:6C:19:2A:D1:52:CC:8A:60:0E:91:90:A6 X509v3 Authority Key Identifier: keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7c:bb:c9:08:a9:88:c9:1a:ea:7e:e5:20:23:35:6b:bc:14: e4:50:32:a0:04:03:f9:e5:ac:2d:14:df:35:54:3f:3f:17:33: 06:e1:6a:4a:49:47:5a:32:d6:c8:3a:d8:d9:05:d0:de:63:a5: b7:a1:2c:e6:61:1e:28:df:d5:47:12:6d:04:70:5d:d2:de:47: a7:05:4c:77:a2:39:b4:80:b3:08:f3:2e:fa:32:9a:ae:0c:1a: 6f:66:83:71:27:ce:f1:2e:b8:22:cd:32:de:22:27:9a:75:4c: 75:0c:4a:ec:0e:06:cd:f6:6d:f9:34:f8:b5:c1:ce:f8:c4:ff: d1:d1:4e:c4:d1:5b:8f:f4:9d:43:b1:00:84:f8:50:9e:69:12: a4:79:f0:8d:0a:59:87:5c:5e:07:ad:ba:d0:89:9d:95:7b:b7: 52:eb:c7:e8:2b:ed:78:64:b8:83:59:3b:a0:05:ba:a0:78:67: 67:99:cb:c1:b4:bb:11:d6:0a:c0:1a:d7:6e:38:7a:34:63:c3: 83:9b:5b:d7:05:94:da:8c:8e:3a:97:bf:e7:76:32:1c:0f:ab: 9a:7d:53:a3:ef:27:a3:59:e9:88:e9:24:94:d0:14:71:9f:28: 72:b2:28:c2:bb:cd:c7:e2:5c:96:90:40:30:ce:8d:57:14:35: c3:88:e2:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCwQk0gXhWiJlYWQWkacPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MGEyNjMyNDk4NDdjZjk3MzQ0NzQyMjEzNjQ0ZjkyOWJl YWE5OTcwHhcNMjUxMjE3MTYwMDU1WhcNMjUxMjE4MTYwMDU1WjAzMTEwLwYDVQQD Eyg4NjdlOWY4NDRiYWE5NTI0NmMxOTJhZDE1MmNjOGE2MDBlOTE5MGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYZ7grvgRu+KNvl0yb6cZ8e7cyAT 9LaWBozfeEfuBqk+/TtTm/dB3St/1VDCAp5DFcuQ0m3tN4fcXgf35kvCTXJ+825D wTrwiKXLF1sFxV5KZh0fS7dilbjBSNIAGHWUYKXzzGDc313aOFdMqxEOTFzT84j6 guoSImr1iFoLp2lD+VG6jF/GbvoomqMoglQUaVfJ6Omyrpmh/7b2e1o4+9wf9fAF kUKJ4B3l5yq7FcBYaxz0XXwL0e2ljDmNez8UMpbs2hLAvhAXdoXRfaEikJTJDqSx B3cXNNT0XrS/bVyCXb7R/dYSX+Br0OTABAJjQnjh+SLwxOiz/IkVJKzaUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZ+n4RLqpUkbBkq0VLMimAOkZCmMB8GA1UdIwQY MBaAFGkKJjJJhHz5c0R0IhNkT5Kb6qmXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAt MzFiMmE2MDdiYTk3LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAtMzFiMmE2MDdiYTk3 LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAny7yQip iMka6n7lICM1a7wU5FAyoAQD+eWsLRTfNVQ/PxczBuFqSklHWjLWyDrY2QXQ3mOl t6Es5mEeKN/VRxJtBHBd0t5HpwVMd6I5tICzCPMu+jKargwab2aDcSfO8S64Is0y 3iInmnVMdQxK7A4GzfZt+TT4tcHO+MT/0dFOxNFbj/SdQ7EAhPhQnmkSpHnwjQpZ h1xeB6260ImdlXu3UuvH6CvteGS4g1k7oAW6oHhnZ5nLwbS7EdYKwBrXbjh6NGPD g5tb1wWU2oyOOpe/53YyHA+rmn1To+8no1npiOkklNAUcZ8ocrIowrvNx+JclpBA MM6NVxQ1w4jiuQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:27:36 2025 by rpki-client