This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json) Hash identifier: 0eWgIF/kUK5ZL4KVo1mCrob8UusBY69DkIgKRbUMCdk= Subject key identifier: 32:72:9B:24:FA:C1:47:D1:D3:BD:07:9A:91:C8:15:12:77:B0:FB:10 Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8 Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8 Certificate serial: 019B3231F935E713211D2AE4F91438D38664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft Manifest number: 0670 Signing time: Thu 18 Dec 2025 16:01:34 +0000 Manifest this update: Thu 18 Dec 2025 16:01:34 +0000 Manifest next update: Fri 19 Dec 2025 16:01:34 +0000 Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=) 2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: NU0H3eYzj0M+ur3/mhZZvb7wMH/OYT0WsOy47Adiaag=) 3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:f9:35:e7:13:21:1d:2a:e4:f9:14:38:d3:86:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8 Validity Not Before: Dec 18 16:01:34 2025 GMT Not After : Dec 19 16:01:34 2025 GMT Subject: CN=32729b24fac147d1d3bd079a91c8151277b0fb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:6d:f6:91:50:11:3d:c5:e8:c2:54:d5:79: ec:fa:93:fe:a8:ba:ff:a7:16:18:41:40:fd:2c:d3: d7:58:af:6c:38:91:3d:ed:84:c6:42:be:76:54:dc: 28:48:27:7a:04:92:20:94:f6:75:94:5a:f9:fa:a4: 97:78:49:ae:3a:dd:c5:87:f2:c3:87:f0:20:9e:50: 10:93:ed:4b:38:08:c9:b1:ac:84:6a:75:dd:df:55: 25:4d:52:41:0d:02:c8:f8:87:22:8d:13:14:73:ad: e5:af:60:46:d0:8b:ad:2b:60:58:a6:b7:f0:53:f8: 1a:e7:8c:2f:00:53:fc:7f:64:3a:6c:5b:55:69:aa: c7:34:a2:fb:02:04:0f:3c:bc:ad:5c:ec:04:0f:a6: d7:a4:e6:9c:e0:83:f8:7f:da:03:1b:65:53:76:53: 35:8e:7c:b3:9b:47:b4:db:4f:50:8f:7b:8e:c3:d3: 64:1a:d6:44:3a:2c:db:fa:b8:98:37:b7:81:4a:b7: 9c:01:a5:15:08:4c:34:f0:ba:d3:52:aa:2f:ff:f5: d3:0e:37:1b:0c:11:96:ac:12:f2:01:1f:95:5e:02: 97:f7:23:ba:78:3d:53:47:8c:4f:93:96:12:c1:0b: 7c:06:92:76:bb:2e:7c:7d:36:57:5a:e9:f3:8b:ab: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:9B:24:FA:C1:47:D1:D3:BD:07:9A:91:C8:15:12:77:B0:FB:10 X509v3 Authority Key Identifier: keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:69:69:ff:32:01:5d:79:17:eb:ea:2d:9d:d5:f4:95:24:5a: df:f4:b5:0d:20:31:d2:81:42:3b:c6:9c:96:c0:80:cf:c6:86: 09:d8:57:04:5c:21:0b:1c:21:c8:08:3a:68:0d:33:23:2c:90: ab:43:81:5b:25:54:52:e4:06:29:48:98:50:76:33:44:10:5c: f9:b0:e7:c6:da:99:4c:c8:f7:9a:bd:e5:9b:35:68:57:6f:f6: 7b:9c:01:a7:7b:86:3f:50:8d:35:ec:06:bf:be:8a:2a:6b:45: 52:83:5b:c4:54:ea:86:20:24:5f:6a:e8:1a:ad:21:e0:7b:92: 10:4b:e9:7a:58:d9:6d:d5:d3:1f:7c:f3:16:12:91:81:8f:b6: 0a:cf:79:43:28:06:c6:df:22:42:dc:73:f7:df:5c:34:d9:1e: c0:00:b0:3e:92:23:d0:eb:d1:7a:1c:8d:ba:c0:10:3c:4c:ac: e3:20:e1:b4:e6:6c:d7:35:60:46:29:64:29:d9:c3:1b:ea:5c: c9:b9:5c:f8:c8:0d:e8:e3:c9:76:98:a4:f2:ec:42:99:31:6b: d3:b8:d7:ec:a6:66:40:a8:c8:2f:8b:84:3e:38:6d:74:98:3c: c8:2f:5b:44:0e:f3:5c:3d:43:2c:ca:71:d4:ec:93:c4:69:5a: dd:bd:bb:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMfk15xMhHSrk+RQ404ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3 OTAwYTgwHhcNMjUxMjE4MTYwMTM0WhcNMjUxMjE5MTYwMTM0WjAzMTEwLwYDVQQD EygzMjcyOWIyNGZhYzE0N2QxZDNiZDA3OWE5MWM4MTUxMjc3YjBmYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uRt9pFQET3F6MJU1Xns+pP+qLr/ pxYYQUD9LNPXWK9sOJE97YTGQr52VNwoSCd6BJIglPZ1lFr5+qSXeEmuOt3Fh/LD h/AgnlAQk+1LOAjJsayEanXd31UlTVJBDQLI+IcijRMUc63lr2BG0IutK2BYprfw U/ga54wvAFP8f2Q6bFtVaarHNKL7AgQPPLytXOwED6bXpOac4IP4f9oDG2VTdlM1 jnyzm0e0209Qj3uOw9NkGtZEOizb+riYN7eBSrecAaUVCEw08LrTUqov//XTDjcb DBGWrBLyAR+VXgKX9yO6eD1TR4xPk5YSwQt8BpJ2uy58fTZXWunzi6tIMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJymyT6wUfR070HmpHIFRJ3sPsQMB8GA1UdIwQY MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt NTY2M2RlMTZkNjZmLzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDktNTY2M2RlMTZkNjZm LzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmlp/zIB XXkX6+otndX0lSRa3/S1DSAx0oFCO8aclsCAz8aGCdhXBFwhCxwhyAg6aA0zIyyQ q0OBWyVUUuQGKUiYUHYzRBBc+bDnxtqZTMj3mr3lmzVoV2/2e5wBp3uGP1CNNewG v76KKmtFUoNbxFTqhiAkX2roGq0h4HuSEEvpeljZbdXTH3zzFhKRgY+2Cs95QygG xt8iQtxz999cNNkewACwPpIj0OvRehyNusAQPEys4yDhtOZs1zVgRilkKdnDG+pc yblc+MgN6OPJdpik8uxCmTFr07jX7KZmQKjIL4uEPjhtdJg8yC9bRA7zXD1DLMpx 1OyTxGla3b27Hg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:12:45 2025 by rpki-client