This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft File: aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json) Hash identifier: +/4mvN0Vai4IK4cWxJzP0WVnOK4OCreR33KOzDxT2qg= Subject key identifier: 26:15:2C:1F:EA:22:E2:C8:CA:16:3D:5D:20:82:C0:3E:47:6C:6C:65 Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56 Certificate issuer: /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356 Certificate serial: 019B5A51611A4BB9E3D75076D42FE909D892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft Manifest number: 04E6 Signing time: Fri 26 Dec 2025 11:00:41 +0000 Manifest this update: Fri 26 Dec 2025 11:00:41 +0000 Manifest next update: Sat 27 Dec 2025 11:00:41 +0000 Files and hashes: 1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: sNCGx9Eb1e1DnxPgDu4PvVEIk+R9qz3D0fWfMb4lTfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:61:1a:4b:b9:e3:d7:50:76:d4:2f:e9:09:d8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356 Validity Not Before: Dec 26 11:00:41 2025 GMT Not After : Dec 27 11:00:41 2025 GMT Subject: CN=26152c1fea22e2c8ca163d5d2082c03e476c6c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:77:82:d7:f0:d1:65:6a:82:d4:11:bc:0f: 51:8e:a3:14:10:c3:c9:eb:70:24:16:90:76:2e:df: 47:50:f6:06:d8:e7:12:b5:4d:39:fa:a3:34:ad:f9: 90:9b:e8:8d:38:75:26:33:a7:11:dc:cf:d4:2b:26: 55:e7:b6:1c:53:a9:3e:10:6e:7c:f2:52:60:96:fa: ce:5d:7b:a6:c3:ec:11:3e:bd:21:b4:a0:5f:ac:0c: 24:d7:55:7f:5f:d3:31:0a:d7:64:30:9d:43:42:ed: fb:14:5f:8e:e9:1e:81:86:10:c6:e2:24:36:52:bd: 13:4c:f5:41:c3:d6:d2:92:50:41:bf:1b:f5:91:cd: 30:5d:a5:82:38:28:9e:5b:e9:8e:a6:d7:5c:26:49: e3:d6:14:f2:73:55:18:d1:0f:f6:e4:05:b0:bd:cc: 2b:99:48:79:f2:c1:74:8c:aa:8f:29:fc:27:6c:90: a7:36:10:b0:61:d0:f3:f9:6c:f5:45:2a:b2:3d:57: d1:e3:f3:5e:cb:f6:df:c7:14:00:04:af:ee:3c:a4: bd:d5:a0:22:da:67:07:f9:2c:b1:76:b2:1f:65:20: 81:33:89:70:01:bb:6e:f7:29:28:4a:79:1b:b1:e9: c8:21:59:73:47:af:59:c4:e1:eb:ab:f2:30:5e:cf: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:15:2C:1F:EA:22:E2:C8:CA:16:3D:5D:20:82:C0:3E:47:6C:6C:65 X509v3 Authority Key Identifier: keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c7:5a:b6:bb:18:1b:2a:66:12:c7:96:87:93:5a:3b:75:45: 1a:3c:5f:3e:0c:6b:47:13:6b:79:77:ec:af:0d:75:1d:69:b1: af:bc:77:70:42:10:f9:10:35:ce:52:da:b8:62:f9:b9:26:d1: 48:3d:e7:49:64:46:24:08:d2:e9:19:52:fe:13:95:f2:1d:d4: 7a:27:83:50:45:c3:71:3f:db:9c:17:f0:2c:f8:70:cd:76:f4: 7b:f9:45:38:a1:fa:31:b8:70:6e:62:94:5c:ca:f6:50:b1:93: d2:19:60:2f:fd:2a:80:29:e3:94:44:76:3c:94:2a:8f:9a:b6: 52:d5:99:25:3a:71:2b:7e:26:70:bf:d6:26:22:df:c4:09:64: 3d:8d:49:52:d7:1d:2f:51:90:a8:a0:2d:d7:b4:ec:8c:86:f9: 83:f9:0b:5c:47:e8:07:03:c7:f8:77:d3:7e:30:09:34:6a:b7: c0:cf:a2:cf:d5:7a:3b:ec:02:74:3a:07:96:dc:2e:d2:37:ac: 9a:30:29:b2:a3:26:9e:cc:7c:16:6b:05:4b:ae:94:c0:3a:16: 6c:62:71:8b:da:a8:77:82:26:6a:aa:f8:7c:c0:94:6e:8f:03: c2:e9:ca:f0:c6:ba:c6:ab:63:3f:6a:2e:f1:61:6d:ff:35:3a: df:f4:83:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWEaS7nj11B21C/pCdiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MGFiMGVmZDc3NTc2MjFjODZkN2I2OWM3NmY2MGIyYzNm YWMzNTYwHhcNMjUxMjI2MTEwMDQxWhcNMjUxMjI3MTEwMDQxWjAzMTEwLwYDVQQD EygyNjE1MmMxZmVhMjJlMmM4Y2ExNjNkNWQyMDgyYzAzZTQ3NmM2YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgF3gtfw0WVqgtQRvA9RjqMUEMPJ 63AkFpB2Lt9HUPYG2OcStU05+qM0rfmQm+iNOHUmM6cR3M/UKyZV57YcU6k+EG58 8lJglvrOXXumw+wRPr0htKBfrAwk11V/X9MxCtdkMJ1DQu37FF+O6R6BhhDG4iQ2 Ur0TTPVBw9bSklBBvxv1kc0wXaWCOCieW+mOptdcJknj1hTyc1UY0Q/25AWwvcwr mUh58sF0jKqPKfwnbJCnNhCwYdDz+Wz1RSqyPVfR4/Ney/bfxxQABK/uPKS91aAi 2mcH+SyxdrIfZSCBM4lwAbtu9ykoSnkbsenIIVlzR69ZxOHrq/IwXs+KPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYVLB/qIuLIyhY9XSCCwD5HbGxlMB8GA1UdIwQY MBaAFGkKsO/XdXYhyG17acdvYLLD+sNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NWIyMjUtNjRlMy00ZDM0LTgwZDkt MjFjODE1YTZlYjllLzEvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80NWIyMjUtNjRlMy00ZDM0LTgwZDktMjFjODE1YTZlYjll LzEvYVFxdzc5ZDFkaUhJYlh0cHgyOWdzc1A2dzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcdatrsY GypmEseWh5NaO3VFGjxfPgxrRxNreXfsrw11HWmxr7x3cEIQ+RA1zlLauGL5uSbR SD3nSWRGJAjS6RlS/hOV8h3UeieDUEXDcT/bnBfwLPhwzXb0e/lFOKH6MbhwbmKU XMr2ULGT0hlgL/0qgCnjlER2PJQqj5q2UtWZJTpxK34mcL/WJiLfxAlkPY1JUtcd L1GQqKAt17TsjIb5g/kLXEfoBwPH+HfTfjAJNGq3wM+iz9V6O+wCdDoHltwu0jes mjApsqMmnsx8FmsFS66UwDoWbGJxi9qod4Imaqr4fMCUbo8DwunK8Ma6xqtjP2ou 8WFt/zU63/SDpw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:40 2025 by rpki-client