This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json) Hash identifier: X+tr47XkxhF0+trmdSQn9SNtMyhCfTixELMh6c//skU= Subject key identifier: B9:05:62:2B:5F:4B:B4:F3:12:3A:FC:E3:23:9E:69:0B:4C:23:9A:16 Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746 Certificate serial: 019B5A51A5F0166121C76FBBCCE381F3DFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:00:58 +0000 Manifest this update: Fri 26 Dec 2025 11:00:58 +0000 Manifest next update: Sat 27 Dec 2025 11:00:58 +0000 Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=) 2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: Rbv7+fnz16xiK4wjf+UgEy14lsWQvoUr0AkwdpCzD7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a5:f0:16:61:21:c7:6f:bb:cc:e3:81:f3:df:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746 Validity Not Before: Dec 26 11:00:58 2025 GMT Not After : Dec 27 11:00:58 2025 GMT Subject: CN=b905622b5f4bb4f3123afce3239e690b4c239a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:4a:a6:2a:ca:a3:5e:9c:6f:19:92:91:3b: 2b:d8:7f:f6:03:af:2d:6c:d7:b2:ef:4c:10:c8:be: 83:76:b4:a8:6f:3c:1e:13:16:f3:05:61:5e:90:9b: 76:58:9b:83:a5:2a:fd:01:2c:8f:6f:24:a4:20:95: 29:60:d7:e6:89:15:59:a6:89:74:03:55:53:56:99: 5d:38:c0:04:41:19:53:f5:24:33:b7:c3:7e:bb:33: 1e:00:0b:56:12:7c:32:7f:79:b1:f1:56:8f:bc:a3: d0:21:d1:d9:9f:6a:f5:a5:5a:7d:df:3a:56:c5:a9: fb:39:8b:42:2f:db:75:3c:41:69:11:1e:9c:2c:57: 9a:41:2c:23:dd:25:9f:9a:28:16:6d:bf:20:60:e6: 67:6a:63:45:2e:48:d6:44:e9:f0:f6:56:fc:58:8d: 39:60:7d:ed:f0:39:f0:8c:4a:49:62:a7:54:89:3b: 71:44:0a:6b:41:b2:8b:70:65:f0:d5:2f:4b:f9:30: f2:ff:ab:12:66:a2:7c:cc:40:a4:fe:67:c4:dd:94: 45:f5:2b:5c:a8:8d:dc:cd:7b:fe:d6:36:78:f7:78: 0e:0d:74:05:c3:87:b4:00:fb:6d:ef:e3:e3:96:a2: e4:83:f1:75:bb:7b:7d:b6:07:39:b0:e1:b4:10:56: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:05:62:2B:5F:4B:B4:F3:12:3A:FC:E3:23:9E:69:0B:4C:23:9A:16 X509v3 Authority Key Identifier: keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:98:61:48:f6:d2:98:86:19:92:db:45:73:03:ff:ea:af:13: f8:aa:3d:50:21:4a:27:1b:47:f6:c5:c3:d5:40:8d:c9:d4:39: 02:b1:b2:ab:11:a2:40:59:b5:d6:ad:2e:6d:53:8d:fb:f7:41: 94:ca:73:13:eb:38:65:67:b8:29:fa:6c:5d:9e:4a:64:52:bf: 40:08:0d:db:81:8d:e4:cb:27:06:84:4d:ac:c1:25:f6:7b:46: 62:a5:f5:5c:6a:6c:7a:19:8d:f1:0e:4b:fb:4b:b0:41:a0:aa: 33:75:ff:91:78:3b:1c:c4:fc:f3:33:03:7a:88:6a:09:02:8a: bd:fa:16:ba:bd:30:83:3c:1e:38:7a:19:cd:74:9a:f1:fe:7d: 52:42:90:00:65:9a:ac:f9:2e:0d:05:35:b4:5d:3d:fe:44:fa: c6:32:cf:2a:f2:ec:f6:fa:1b:4b:5a:a8:35:5c:95:78:f6:ff: 1b:02:4e:a4:6d:5f:0c:a3:ba:89:08:5b:d1:2c:c3:51:9c:28: 82:ea:87:fc:2f:77:9d:c4:a8:16:3d:5c:3a:bf:a5:57:2f:79: 66:29:4d:dc:f6:1e:71:e2:34:fb:4f:1e:9b:00:f9:43:e1:cb: 6c:7d:e0:58:99:fa:7d:86:97:eb:55:e1:fd:fa:93:f5:87:f9: 64:26:e4:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUaXwFmEhx2+7zOOB89+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk NTE3NDYwHhcNMjUxMjI2MTEwMDU4WhcNMjUxMjI3MTEwMDU4WjAzMTEwLwYDVQQD EyhiOTA1NjIyYjVmNGJiNGYzMTIzYWZjZTMyMzllNjkwYjRjMjM5YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1hKpirKo16cbxmSkTsr2H/2A68t bNey70wQyL6DdrSobzweExbzBWFekJt2WJuDpSr9ASyPbySkIJUpYNfmiRVZpol0 A1VTVpldOMAEQRlT9SQzt8N+uzMeAAtWEnwyf3mx8VaPvKPQIdHZn2r1pVp93zpW xan7OYtCL9t1PEFpER6cLFeaQSwj3SWfmigWbb8gYOZnamNFLkjWROnw9lb8WI05 YH3t8DnwjEpJYqdUiTtxRAprQbKLcGXw1S9L+TDy/6sSZqJ8zECk/mfE3ZRF9Stc qI3czXv+1jZ493gODXQFw4e0APtt7+PjlqLkg/F1u3t9tgc5sOG0EFZqoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkFYitfS7TzEjr84yOeaQtMI5oWMB8GA1UdIwQY MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZhhSPbS mIYZkttFcwP/6q8T+Ko9UCFKJxtH9sXD1UCNydQ5ArGyqxGiQFm11q0ubVON+/dB lMpzE+s4ZWe4KfpsXZ5KZFK/QAgN24GN5MsnBoRNrMEl9ntGYqX1XGpsehmN8Q5L +0uwQaCqM3X/kXg7HMT88zMDeohqCQKKvfoWur0wgzweOHoZzXSa8f59UkKQAGWa rPkuDQU1tF09/kT6xjLPKvLs9vobS1qoNVyVePb/GwJOpG1fDKO6iQhb0SzDUZwo guqH/C93ncSoFj1cOr+lVy95ZilN3PYeceI0+08emwD5Q+HLbH3gWJn6fYaX61Xh /fqT9Yf5ZCbkGQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:24 2025 by rpki-client