This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json) Hash identifier: ls50fyoQawLx2/ELPWXbemoh9TVs8Hgigo3zmnefqV4= Subject key identifier: C5:CF:FC:5E:87:5B:BA:56:2B:3E:F2:10:F5:80:2C:63:2A:17:D0:44 Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9 Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9 Certificate serial: 019B3D5A0CC2BEB27EA1E14CA6FD5053AA75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft Manifest number: 10B3 Signing time: Sat 20 Dec 2025 20:01:10 +0000 Manifest this update: Sat 20 Dec 2025 20:01:10 +0000 Manifest next update: Sun 21 Dec 2025 20:01:10 +0000 Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: 08OdbfUrCb05xQ96yRJlX0r7Kw/DNv60MCa4Oy2/UUU=) 2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:0c:c2:be:b2:7e:a1:e1:4c:a6:fd:50:53:aa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9 Validity Not Before: Dec 20 20:01:10 2025 GMT Not After : Dec 21 20:01:10 2025 GMT Subject: CN=c5cffc5e875bba562b3ef210f5802c632a17d044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:b4:ec:1f:4d:af:5f:18:92:71:e8:7d:f2: c1:53:db:fb:d0:a4:32:14:fb:55:f6:21:d0:86:61: 60:65:df:84:1e:67:41:ab:b7:e3:a2:54:ba:a0:62: fd:25:3f:5e:38:2d:f7:89:9b:7e:f0:19:1c:d8:38: 93:17:46:6b:fd:ed:8c:d3:5b:0e:2d:d4:64:8d:3c: 07:fe:53:d6:f8:49:76:5e:c6:0f:e9:98:6c:26:d2: fd:52:dc:03:1b:87:c3:32:c7:b7:93:23:d6:37:d6: a5:fb:c1:07:5e:7b:2b:41:9d:4f:c9:5e:83:c2:c2: 74:10:b1:4f:ae:c4:95:49:70:e0:da:70:89:41:1d: b5:ab:f9:d5:f8:72:9b:b0:05:3e:fd:27:3d:59:fd: a8:88:db:8b:c5:8d:2d:b7:49:d5:48:4f:02:15:2d: 93:75:ed:24:0f:be:e3:67:e7:b8:7d:2c:d8:8b:e3: 9d:62:ca:60:74:20:0f:12:47:50:4a:d7:b5:1f:cb: 75:17:b4:02:0c:34:7e:02:4e:f3:35:a7:41:95:ba: 3d:c7:83:3b:ff:a5:94:b6:f2:4d:ba:03:4f:51:93: 71:70:66:d7:9e:a0:cc:f2:a4:e1:53:54:fa:32:2f: dc:45:e5:4c:41:ae:c9:58:89:75:16:cd:4e:42:71: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:FC:5E:87:5B:BA:56:2B:3E:F2:10:F5:80:2C:63:2A:17:D0:44 X509v3 Authority Key Identifier: keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9f:b3:9c:ca:37:24:08:74:cc:d8:d1:f5:c4:a4:7f:8e:e3: 7a:f5:e0:3a:86:6f:34:df:88:80:35:c5:78:a3:c9:c7:2a:e4: 87:c1:4c:3e:89:20:43:cd:38:74:dc:8c:e2:6e:c7:08:d6:d1: 39:79:8d:12:92:a8:5f:74:69:24:5a:3a:18:19:3c:99:8b:2e: e4:a0:e7:61:98:9e:5c:3a:b5:29:da:52:a0:73:e1:ae:94:87: be:93:2e:36:29:b1:95:c3:4e:3f:d7:29:37:a2:f1:a9:7f:e2: 2f:58:b6:c4:c5:19:7a:c1:84:aa:c6:31:8d:fa:c1:78:27:35: c0:1a:ac:7c:ae:20:8f:6c:9b:42:05:07:c6:6c:8b:e4:8e:e2: a1:82:8f:73:c8:bc:94:85:cc:7a:61:fa:24:4e:3a:d3:71:e8: 9c:b7:38:14:23:43:44:b6:63:64:79:18:18:bf:8c:83:3a:b2: 73:2d:31:10:d4:5a:bc:aa:a0:7b:fa:fd:5c:04:df:ee:3b:b5: 8e:6a:d4:91:84:03:e4:9c:70:8e:07:8c:d7:d1:fb:e0:67:e7: eb:72:84:92:7e:81:cc:f4:64:e6:9e:a5:a4:50:ee:6b:dc:63: 53:81:94:9d:4d:da:c5:78:56:44:d8:09:0e:4b:76:e1:a9:3d: 9a:37:64:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgzCvrJ+oeFMpv1QU6p1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTEyNWUyOTI2ZDM5YWM4Njk5ODIyYmM1N2E2NTgwZjVm NTE3ZTkwHhcNMjUxMjIwMjAwMTEwWhcNMjUxMjIxMjAwMTEwWjAzMTEwLwYDVQQD EyhjNWNmZmM1ZTg3NWJiYTU2MmIzZWYyMTBmNTgwMmM2MzJhMTdkMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotC07B9Nr18YknHoffLBU9v70KQy FPtV9iHQhmFgZd+EHmdBq7fjolS6oGL9JT9eOC33iZt+8Bkc2DiTF0Zr/e2M01sO LdRkjTwH/lPW+El2XsYP6ZhsJtL9UtwDG4fDMse3kyPWN9al+8EHXnsrQZ1PyV6D wsJ0ELFPrsSVSXDg2nCJQR21q/nV+HKbsAU+/Sc9Wf2oiNuLxY0tt0nVSE8CFS2T de0kD77jZ+e4fSzYi+OdYspgdCAPEkdQSte1H8t1F7QCDDR+Ak7zNadBlbo9x4M7 /6WUtvJNugNPUZNxcGbXnqDM8qThU1T6Mi/cReVMQa7JWIl1Fs1OQnEiKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXP/F6HW7pWKz7yEPWALGMqF9BEMB8GA1UdIwQY MBaAFGmhJeKSbTmshpmCK8V6ZYD19RfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83YWJiMDYtOTdlNy00ZmE1LWFjN2Qt N2I1NjdjNjE4NWY5LzEvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83YWJiMDYtOTdlNy00ZmE1LWFjN2QtN2I1NjdjNjE4NWY5 LzEvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADp+znMo3 JAh0zNjR9cSkf47jevXgOoZvNN+IgDXFeKPJxyrkh8FMPokgQ804dNyM4m7HCNbR OXmNEpKoX3RpJFo6GBk8mYsu5KDnYZieXDq1KdpSoHPhrpSHvpMuNimxlcNOP9cp N6LxqX/iL1i2xMUZesGEqsYxjfrBeCc1wBqsfK4gj2ybQgUHxmyL5I7ioYKPc8i8 lIXMemH6JE4603HonLc4FCNDRLZjZHkYGL+Mgzqycy0xENRavKqge/r9XATf7ju1 jmrUkYQD5JxwjgeM19H74Gfn63KEkn6BzPRk5p6lpFDua9xjU4GUnU3axXhWRNgJ Dkt24ak9mjdkfw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:22:25 2025 by rpki-client