This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json) Hash identifier: nPSAwASj30HS1necnn4EvtmVL7pkUzt9JtTn615kw7w= Subject key identifier: E0:B8:64:45:9F:7A:94:C4:89:B7:FF:0F:AC:08:10:C2:BB:04:43:48 Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Certificate serial: 019B0FA543C7732CD821822356130185FAF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft Manifest number: 0111 Signing time: Thu 11 Dec 2025 23:00:47 +0000 Manifest this update: Thu 11 Dec 2025 23:00:47 +0000 Manifest next update: Fri 12 Dec 2025 23:00:47 +0000 Files and hashes: 1: UdICj6zPcID-7_Hf3d1V7ttrE0M.roa (hash: 1plINgz643oMJ6Sr7Nq6vQNGyijqcXnzXvCmKpTHyIY=) 2: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: th8+l8TewkP47+sEYCrIiDn8NbFv425zEVLdHXPOXMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:43:c7:73:2c:d8:21:82:23:56:13:01:85:fa:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Validity Not Before: Dec 11 23:00:47 2025 GMT Not After : Dec 12 23:00:47 2025 GMT Subject: CN=e0b864459f7a94c489b7ff0fac0810c2bb044348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5f:28:4d:65:c9:9a:5a:5f:58:92:73:ff:6d: fe:8a:60:42:aa:4e:fb:85:7c:db:e2:30:23:75:d6: d4:f7:35:a5:05:8f:41:7a:fc:3e:26:35:6e:8a:ab: da:14:2c:e9:c1:91:dd:da:ef:58:c5:f8:57:41:a4: 96:b0:9b:2a:3f:08:d1:6c:8e:13:50:5c:84:ec:4a: d0:dd:16:74:c5:18:84:22:56:43:e1:0a:0a:10:a5: 22:f3:4c:f8:df:da:1f:20:ff:c8:94:3a:66:d5:e6: 10:1a:5f:4d:69:19:42:b7:de:0d:38:2d:f3:5e:d1: 69:4d:30:5e:f5:da:df:57:c5:bf:d0:0d:39:67:ef: 9e:62:c7:77:a6:f2:f8:3d:57:b4:55:5a:81:62:6a: 65:76:72:aa:18:bf:e1:de:26:f3:75:b2:eb:b1:7c: 1a:1b:3f:3c:31:c9:97:f3:05:13:39:0e:8d:72:58: c1:9a:fe:0d:a6:74:82:ea:bd:55:f3:49:66:4a:9c: de:bf:ae:74:e3:8b:26:d1:db:68:4f:00:5b:9f:c9: 14:1b:f5:b4:f1:57:9a:e2:3a:48:76:b9:28:92:e7: 46:f3:f7:5e:68:41:f9:37:56:31:be:6e:64:74:36: b1:30:ae:bb:d2:78:a3:aa:fa:4b:be:d5:64:15:44: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B8:64:45:9F:7A:94:C4:89:B7:FF:0F:AC:08:10:C2:BB:04:43:48 X509v3 Authority Key Identifier: keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c6:bc:02:8d:44:2f:e6:90:24:d4:0b:62:5e:01:0f:ed:1c: fb:43:e6:78:8a:08:4d:b3:8e:ed:62:83:2f:4b:d0:25:3d:d0: af:7c:af:88:ce:b2:48:5a:56:ad:c2:7f:34:92:34:8f:55:53: f8:37:35:f1:38:49:e8:fb:c7:d0:e5:03:63:37:57:9f:cb:b3: 7a:57:70:b3:93:31:80:f2:08:66:ea:ac:bd:ef:45:ef:e2:1b: 4a:84:e3:2b:1b:c8:c2:1e:d3:6a:8f:0d:d1:a9:db:a0:75:7f: d2:6a:28:70:ed:d2:7a:b8:3b:27:71:e3:d8:0d:19:f0:93:b8: 00:a2:cf:75:75:39:15:65:a2:a3:60:41:5d:99:36:ad:c9:77: f1:9a:54:3f:8a:66:6b:d6:27:05:34:6d:8d:43:61:9a:39:23: 0b:cf:3c:fe:79:93:b1:73:0d:c6:6b:83:9e:b4:84:1d:b6:1f: 01:38:eb:2a:07:19:97:ff:6f:2b:fd:61:55:2f:80:21:4a:d0: a9:d0:77:e0:29:b2:21:65:0e:a6:a0:63:af:9d:cb:48:07:97: f5:91:55:04:aa:bb:e9:a6:39:58:39:5f:c1:cd:02:fa:8d:f1: b5:39:30:c2:96:53:df:aa:a6:e3:db:0c:7a:b6:99:55:0e:67: 74:96:0e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpUPHcyzYIYIjVhMBhfryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWVlMDhmZjY3MTYwMGQ0MDM0YTNlMWQ5ZDVhOTAyNDVj YzljMTUwHhcNMjUxMjExMjMwMDQ3WhcNMjUxMjEyMjMwMDQ3WjAzMTEwLwYDVQQD EyhlMGI4NjQ0NTlmN2E5NGM0ODliN2ZmMGZhYzA4MTBjMmJiMDQ0MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA818oTWXJmlpfWJJz/23+imBCqk77 hXzb4jAjddbU9zWlBY9Bevw+JjVuiqvaFCzpwZHd2u9YxfhXQaSWsJsqPwjRbI4T UFyE7ErQ3RZ0xRiEIlZD4QoKEKUi80z439ofIP/IlDpm1eYQGl9NaRlCt94NOC3z XtFpTTBe9drfV8W/0A05Z++eYsd3pvL4PVe0VVqBYmpldnKqGL/h3ibzdbLrsXwa Gz88McmX8wUTOQ6NcljBmv4NpnSC6r1V80lmSpzev65044sm0dtoTwBbn8kUG/W0 8Vea4jpIdrkokudG8/deaEH5N1Yxvm5kdDaxMK670nijqvpLvtVkFUSaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOC4ZEWfepTEibf/D6wIEMK7BENIMB8GA1UdIwQY MBaAFGme4I/2cWANQDSj4dnVqQJFzJwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEt MWQwOGFkZGNhMjcxLzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEtMWQwOGFkZGNhMjcx LzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsa8Ao1E L+aQJNQLYl4BD+0c+0PmeIoITbOO7WKDL0vQJT3Qr3yviM6ySFpWrcJ/NJI0j1VT +Dc18ThJ6PvH0OUDYzdXn8uzeldws5MxgPIIZuqsve9F7+IbSoTjKxvIwh7Tao8N 0anboHV/0moocO3Serg7J3Hj2A0Z8JO4AKLPdXU5FWWio2BBXZk2rcl38ZpUP4pm a9YnBTRtjUNhmjkjC888/nmTsXMNxmuDnrSEHbYfATjrKgcZl/9vK/1hVS+AIUrQ qdB34CmyIWUOpqBjr53LSAeX9ZFVBKq76aY5WDlfwc0C+o3xtTkwwpZT36qm49sM eraZVQ5ndJYOPw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:34 2025 by rpki-client