This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft File: AEUKhqpPfvd-WnXdluyzwqaPrRw.mft (raw, json) Hash identifier: lfFaLU65fTz9qe46ZIKBIO70gabEm0hMXrmnsuv5kEk= Subject key identifier: 2C:5D:98:17:FC:86:BE:E8:0D:18:D4:67:AF:B1:0F:3A:E9:FA:E8:11 Authority key identifier: 00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C Certificate issuer: /CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c Certificate serial: 019B5907E7EA66D6EFE41671ABF6BC8FC517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft Manifest number: 7C Signing time: Fri 26 Dec 2025 05:00:48 +0000 Manifest this update: Fri 26 Dec 2025 05:00:48 +0000 Manifest next update: Sat 27 Dec 2025 05:00:48 +0000 Files and hashes: 1: 3aBWhvl7vzQ060N_r0jzz9Dhf7s.roa (hash: v8R5BzuEes54UPuq5U1ZIEWHDu7mGMWUNti8JAIi1D4=) 2: AEUKhqpPfvd-WnXdluyzwqaPrRw.crl (hash: dhRhI7CbZzhS/TZCiDpxTMaDK2xQG8G6ewmbyhGJAjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:e7:ea:66:d6:ef:e4:16:71:ab:f6:bc:8f:c5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c Validity Not Before: Dec 26 05:00:48 2025 GMT Not After : Dec 27 05:00:48 2025 GMT Subject: CN=2c5d9817fc86bee80d18d467afb10f3ae9fae811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:32:7e:0c:c8:bb:4b:64:22:4c:d0:a0:e5: 25:74:93:22:7a:13:6d:69:17:1b:3a:4a:3a:47:e8: 44:92:ca:c6:71:0d:ae:3f:f3:c5:8e:0c:ee:d0:3a: 32:c9:bf:91:e8:5a:05:66:03:51:14:14:87:08:56: 0e:05:66:d1:2a:68:d1:06:6f:5d:fc:ae:12:92:de: cc:fa:87:45:90:4f:d4:dc:82:28:df:1d:43:2c:db: df:a9:e6:9b:b7:4e:37:be:30:05:ca:6c:d1:8f:b6: 2d:3d:de:04:35:03:cf:d8:62:a9:22:cf:53:61:49: 8e:bb:4f:5d:29:d6:bd:a0:8b:cd:08:3f:49:ee:ce: f1:8d:09:8a:07:8d:ae:61:5c:1c:dd:cb:37:d1:17: 63:20:50:f0:bf:14:8a:77:00:06:5a:14:00:5b:47: 55:c9:a8:52:1e:fb:af:b0:f2:02:cd:83:f3:07:6d: fb:2c:a4:8d:10:1c:9f:97:50:80:c2:3e:bf:87:22: 75:3c:83:b9:c4:22:66:07:5b:f1:a4:11:78:24:31: 89:40:38:f7:51:aa:48:42:7b:f9:ba:a0:4a:e0:ce: d2:89:9c:34:59:5c:b3:c9:e5:d2:7d:fb:00:92:ad: a1:83:28:ed:b8:b6:bf:28:4c:ee:5c:db:1c:89:04: 2e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5D:98:17:FC:86:BE:E8:0D:18:D4:67:AF:B1:0F:3A:E9:FA:E8:11 X509v3 Authority Key Identifier: keyid:00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8a:0e:85:04:f8:be:25:0f:e2:b5:1c:57:ea:cf:8d:eb:83: 35:0a:3b:a7:7f:49:ed:c7:62:4d:21:53:c5:20:dc:a7:e8:86: 47:a8:9f:0f:a7:84:cd:91:43:55:45:c3:38:88:29:40:61:60: 04:d4:73:9b:82:e7:a0:f4:0e:9e:6c:7e:e8:6d:22:cf:9d:70: 5e:f3:67:48:22:56:f0:c4:7e:3a:d0:29:44:19:c0:a7:f0:83: 6d:f6:6e:c7:9c:4d:85:f4:6e:e3:5f:b9:73:0a:0e:e4:44:03: 73:9d:06:00:25:e4:94:69:14:9d:32:c4:65:a5:69:b9:af:de: 19:cf:4b:3e:c2:f2:27:a4:3f:cc:ca:92:67:44:78:5c:6d:64: e1:f6:85:d9:bc:2b:e1:04:eb:aa:e0:21:6a:86:17:b3:cf:c3: 5a:5e:e1:96:1f:4a:ab:7c:92:f5:ed:09:bc:0d:f4:af:86:3f: c6:2c:ce:28:fa:56:8a:d8:c8:f8:6d:2d:5c:fc:67:36:90:cf: b9:c3:06:eb:45:8b:81:df:ca:91:aa:53:36:4c:cc:48:7f:fc: 42:17:bc:66:c2:26:a4:b9:9c:b5:ee:47:c0:f6:35:6f:a1:c0: 48:b8:de:fc:da:aa:77:21:e1:b4:44:0e:85:88:da:3f:59:a9: 71:17:8a:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB+fqZtbv5BZxq/a8j8UXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNDUwYTg2YWE0ZjdlZjc3ZTVhNzVkZDk2ZWNiM2MyYTY4 ZmFkMWMwHhcNMjUxMjI2MDUwMDQ4WhcNMjUxMjI3MDUwMDQ4WjAzMTEwLwYDVQQD EygyYzVkOTgxN2ZjODZiZWU4MGQxOGQ0NjdhZmIxMGYzYWU5ZmFlODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVwyfgzIu0tkIkzQoOUldJMiehNt aRcbOko6R+hEksrGcQ2uP/PFjgzu0Doyyb+R6FoFZgNRFBSHCFYOBWbRKmjRBm9d /K4Skt7M+odFkE/U3IIo3x1DLNvfqeabt043vjAFymzRj7YtPd4ENQPP2GKpIs9T YUmOu09dKda9oIvNCD9J7s7xjQmKB42uYVwc3cs30RdjIFDwvxSKdwAGWhQAW0dV yahSHvuvsPICzYPzB237LKSNEByfl1CAwj6/hyJ1PIO5xCJmB1vxpBF4JDGJQDj3 UapIQnv5uqBK4M7SiZw0WVyzyeXSffsAkq2hgyjtuLa/KEzuXNsciQQuWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxdmBf8hr7oDRjUZ6+xDzrp+ugRMB8GA1UdIwQY MBaAFABFCoaqT373flp13Zbss8Kmj60cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYt YjExYWI4M2ZjMzYzLzEvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYtYjExYWI4M2ZjMzYz LzEvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIoOhQT4 viUP4rUcV+rPjeuDNQo7p39J7cdiTSFTxSDcp+iGR6ifD6eEzZFDVUXDOIgpQGFg BNRzm4LnoPQOnmx+6G0iz51wXvNnSCJW8MR+OtApRBnAp/CDbfZux5xNhfRu41+5 cwoO5EQDc50GACXklGkUnTLEZaVpua/eGc9LPsLyJ6Q/zMqSZ0R4XG1k4faF2bwr 4QTrquAhaoYXs8/DWl7hlh9Kq3yS9e0JvA30r4Y/xizOKPpWitjI+G0tXPxnNpDP ucMG60WLgd/KkapTNkzMSH/8Qhe8ZsImpLmcte5HwPY1b6HASLje/NqqdyHhtEQO hYjaP1mpcReKCw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:54 2025 by rpki-client