This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json) Hash identifier: 7fKURTGP1g6pd/iHua4hQ7/VFZShHKquJ4Db5qIihKQ= Subject key identifier: 9E:A7:10:32:BE:E5:27:1B:D2:6F:5F:74:13:6B:CF:C5:EC:72:C8:23 Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f Certificate serial: 019B1014AC0749EE4BF3F88946DD6DAD6982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 01:02:28 +0000 Manifest this update: Fri 12 Dec 2025 01:02:28 +0000 Manifest next update: Sat 13 Dec 2025 01:02:28 +0000 Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=) 2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: GrHc7S8qcrbLpQ6Hj7RkbT3lfOysIXxHp+p7hp4C2Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:ac:07:49:ee:4b:f3:f8:89:46:dd:6d:ad:69:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f Validity Not Before: Dec 12 01:02:28 2025 GMT Not After : Dec 13 01:02:28 2025 GMT Subject: CN=9ea71032bee5271bd26f5f74136bcfc5ec72c823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:51:da:c4:85:3e:31:74:77:82:55:14:e2: b3:40:a2:89:50:7a:69:e5:cf:bc:bb:53:c8:55:4b: 10:26:3e:a8:cb:46:a3:0f:7b:54:d1:b3:09:51:e8: 9e:cb:f5:68:79:ae:ec:8d:48:f4:23:d6:df:fd:57: 59:92:e5:97:36:58:be:26:53:c9:da:13:2c:60:de: f9:12:a3:40:bb:32:41:4d:72:3e:d5:7a:c6:80:11: 5d:c2:79:84:6e:df:ef:39:87:e7:db:27:85:ac:72: 96:fa:3b:cf:65:0b:41:0b:88:bc:4b:c4:ef:91:e6: 1a:2f:82:1d:eb:ca:1e:e7:49:26:74:04:d5:8a:d7: 1d:90:27:32:39:b8:1c:f9:85:b6:e5:99:6c:0d:d5: 52:a7:c6:01:f5:80:a5:cc:77:6d:ee:fe:11:d7:69: 8c:01:eb:ac:4d:92:8e:5a:0c:45:24:60:5f:a4:a1: c8:36:38:0f:68:3c:71:8b:a8:b9:e5:7a:99:b6:81: be:53:aa:a4:49:c9:a7:b2:1f:3d:d3:2e:3a:20:12: 92:6f:db:2f:6e:d3:11:9e:ba:0b:32:08:85:80:77: a3:66:44:35:7f:b6:a5:68:31:94:08:ed:6a:b9:26: c5:fc:18:2e:6e:01:64:24:99:6c:65:44:68:89:b8: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A7:10:32:BE:E5:27:1B:D2:6F:5F:74:13:6B:CF:C5:EC:72:C8:23 X509v3 Authority Key Identifier: keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2e:7f:99:08:1a:c2:65:e3:f9:14:fe:41:eb:0e:95:a6:5b: 40:a3:89:ed:3b:bd:0b:18:2a:ff:c9:57:2d:56:0d:07:88:31: 4a:6e:2c:ba:29:a2:b5:20:c9:10:3e:a1:d2:ad:c7:fe:d6:2e: b7:b5:de:2b:ef:b2:ca:68:e6:b5:5c:39:45:a6:c4:0b:94:59: ab:a3:8d:f9:9a:14:94:74:7c:08:ba:65:46:31:17:23:66:80: 43:c4:2d:2b:32:48:de:69:d2:06:6b:36:97:8b:cf:8b:8d:68: a1:d1:4c:aa:0b:8c:4c:14:e8:34:9f:12:a1:ea:92:24:6f:82: 79:5f:e7:25:25:e1:b1:53:30:b2:54:8b:8c:6b:71:e1:3b:c2: af:85:9a:70:74:07:3a:1b:89:82:fc:e1:42:27:49:2f:4a:81: 84:2f:b5:01:7e:d0:b5:fd:6a:da:67:99:9e:42:78:54:1b:8b: 26:f8:8a:17:f9:49:43:cc:0d:d3:d3:32:fb:f9:6f:ee:a0:f1: 73:b0:e6:b2:cc:37:42:bc:8f:f7:25:27:c8:aa:c5:2c:41:5a: c1:87:d6:60:a0:f5:2a:b4:d9:a9:be:7f:b7:29:b0:bb:04:00: 5d:d0:eb:fb:0c:ef:49:57:c2:e5:9c:76:2f:f1:43:ba:c3:f1: 50:07:9c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFKwHSe5L8/iJRt1trWmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZWM1MGNiMzNhZTE4NjBkNGNjNWZiNjdlNDNkMzkzMDQy MjRiNGYwHhcNMjUxMjEyMDEwMjI4WhcNMjUxMjEzMDEwMjI4WjAzMTEwLwYDVQQD Eyg5ZWE3MTAzMmJlZTUyNzFiZDI2ZjVmNzQxMzZiY2ZjNWVjNzJjODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsytR2sSFPjF0d4JVFOKzQKKJUHpp 5c+8u1PIVUsQJj6oy0ajD3tU0bMJUeiey/Voea7sjUj0I9bf/VdZkuWXNli+JlPJ 2hMsYN75EqNAuzJBTXI+1XrGgBFdwnmEbt/vOYfn2yeFrHKW+jvPZQtBC4i8S8Tv keYaL4Id68oe50kmdATVitcdkCcyObgc+YW25ZlsDdVSp8YB9YClzHdt7v4R12mM AeusTZKOWgxFJGBfpKHINjgPaDxxi6i55XqZtoG+U6qkScmnsh890y46IBKSb9sv btMRnroLMgiFgHejZkQ1f7alaDGUCO1quSbF/BgubgFkJJlsZURoibhApQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6nEDK+5Scb0m9fdBNrz8XscsgjMB8GA1UdIwQY MBaAFAHsUMszrhhg1Mxftn5D05MEIktPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQt MTMwNjk4YTU5NTljLzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQtMTMwNjk4YTU5NTlj LzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmS5/mQga wmXj+RT+QesOlaZbQKOJ7Tu9Cxgq/8lXLVYNB4gxSm4suimitSDJED6h0q3H/tYu t7XeK++yymjmtVw5RabEC5RZq6ON+ZoUlHR8CLplRjEXI2aAQ8QtKzJI3mnSBms2 l4vPi41oodFMqguMTBToNJ8SoeqSJG+CeV/nJSXhsVMwslSLjGtx4TvCr4WacHQH OhuJgvzhQidJL0qBhC+1AX7Qtf1q2meZnkJ4VBuLJviKF/lJQ8wN09My+/lv7qDx c7Dmssw3QryP9yUnyKrFLEFawYfWYKD1KrTZqb5/tymwuwQAXdDr+wzvSVfC5Zx2 L/FDusPxUAec6g== -----END CERTIFICATE-----Generated at Fri Dec 12 09:48:20 2025 by rpki-client