This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json) Hash identifier: vMEtKfLKlloJmBcqAgiCJJzL5AF1e9sAJN4ddEoiAOU= Subject key identifier: C0:B3:66:77:12:45:84:F1:D5:3E:C2:76:3F:70:D9:95:16:26:FD:67 Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c Certificate serial: 019B46948020A44C63AADBE2561386C7E910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft Manifest number: 08F7 Signing time: Mon 22 Dec 2025 15:01:35 +0000 Manifest this update: Mon 22 Dec 2025 15:01:35 +0000 Manifest next update: Tue 23 Dec 2025 15:01:35 +0000 Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: pO8cmXM3li4ic4ccXCCBU+wKYJsl+4U/o1PMFpEcJDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:80:20:a4:4c:63:aa:db:e2:56:13:86:c7:e9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c Validity Not Before: Dec 22 15:01:35 2025 GMT Not After : Dec 23 15:01:35 2025 GMT Subject: CN=c0b36677124584f1d53ec2763f70d9951626fd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:94:f2:a0:3a:d3:12:ec:66:81:8c:44:ff: 0b:07:1a:28:07:77:49:98:a5:9a:8e:6f:01:04:23: dc:40:29:20:1a:a7:0c:5e:28:ae:ce:13:ab:7d:81: fe:67:b4:d7:01:68:53:23:00:a1:f6:ba:08:d4:d4: 5a:55:f1:fb:00:e3:35:d9:a7:36:8f:55:a6:3a:1b: db:f1:de:2a:f8:ac:0a:67:64:82:b9:2e:cd:65:52: e2:15:f0:2f:25:6d:98:c7:56:24:7e:cc:f4:d7:ba: 34:af:45:3c:ea:9e:c6:05:f4:a6:bf:b3:3a:d9:4e: 90:7c:13:61:4a:a1:62:14:e9:a7:d1:d7:81:ce:3e: 64:cb:2b:c7:41:17:36:db:05:ae:83:a3:58:9e:b5: 3f:c5:3d:92:d6:cd:30:1f:4f:d6:f8:39:85:31:af: 7d:3e:64:6f:cc:09:21:9c:d8:73:75:14:1d:03:e9: e9:09:36:9d:a0:e2:a8:b6:40:09:4f:e3:a4:37:f7: ec:46:09:f2:c0:78:06:16:74:88:33:a1:e5:40:c3: 81:9c:54:6a:48:93:23:11:aa:ec:0e:af:cf:92:4c: 46:29:9b:89:43:67:a4:55:c4:9f:5e:d3:7b:72:d6: cf:a8:e5:df:5e:5f:2b:b4:08:93:ec:d4:fc:11:42: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B3:66:77:12:45:84:F1:D5:3E:C2:76:3F:70:D9:95:16:26:FD:67 X509v3 Authority Key Identifier: keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:d9:68:29:eb:ca:87:39:c4:26:f9:ad:90:ab:44:97:ba:b3: 73:40:b1:68:29:b3:e4:dc:66:e1:eb:d8:15:f2:1e:db:df:ed: 15:bb:b3:b8:4e:55:f3:e4:a8:e3:91:2d:02:27:d7:28:49:34: fc:13:89:d6:6d:42:b1:91:38:02:0a:ae:fa:d9:c7:3f:8e:b7: 55:a8:cb:81:ae:b4:60:60:eb:8c:7d:32:b0:17:71:dc:f0:94: b1:fd:be:75:84:85:13:58:2a:77:c8:8e:ac:3d:19:e5:32:14: 19:59:54:b8:9a:31:a0:a6:57:23:c5:ae:ad:b3:7c:58:01:95: f4:ce:e7:66:57:74:19:1d:28:94:cd:72:db:6e:43:52:8d:5b: 78:2d:f9:24:8b:8b:9a:17:46:8a:b3:1e:64:78:08:d5:e7:95: bc:a1:b1:cd:b7:c2:4b:64:e5:46:ce:55:20:74:80:0c:28:4f: 6f:6b:72:43:f0:2e:3c:77:21:01:24:e7:13:2d:c3:6c:e1:cf: 5c:cf:73:e5:fb:05:24:f8:2b:af:58:5e:2f:3f:d1:2c:9d:74: 58:a2:c6:3b:bb:56:27:18:99:26:15:6b:ae:ce:15:0f:4f:94: 26:e2:5a:19:1e:56:96:91:0a:2d:68:50:7e:58:bc:7a:5c:fe: 1a:64:0f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlIAgpExjqtviVhOGx+kQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYWIyOGU4MGRmMWFkNmFhMDQwMzE1Yjg0ZTMyNmFhMjNh MDQxN2MwHhcNMjUxMjIyMTUwMTM1WhcNMjUxMjIzMTUwMTM1WjAzMTEwLwYDVQQD EyhjMGIzNjY3NzEyNDU4NGYxZDUzZWMyNzYzZjcwZDk5NTE2MjZmZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3eU8qA60xLsZoGMRP8LBxooB3dJ mKWajm8BBCPcQCkgGqcMXiiuzhOrfYH+Z7TXAWhTIwCh9roI1NRaVfH7AOM12ac2 j1WmOhvb8d4q+KwKZ2SCuS7NZVLiFfAvJW2Yx1Ykfsz017o0r0U86p7GBfSmv7M6 2U6QfBNhSqFiFOmn0deBzj5kyyvHQRc22wWug6NYnrU/xT2S1s0wH0/W+DmFMa99 PmRvzAkhnNhzdRQdA+npCTadoOKotkAJT+OkN/fsRgnywHgGFnSIM6HlQMOBnFRq SJMjEarsDq/PkkxGKZuJQ2ekVcSfXtN7ctbPqOXfXl8rtAiT7NT8EUK7ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCzZncSRYTx1T7Cdj9w2ZUWJv1nMB8GA1UdIwQY MBaAFGqrKOgN8a1qoEAxW4TjJqojoEF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NjFlMDUtMzc3OC00OGZhLWFlMzgt NDkwYzJlZGExNjJmLzEvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NjFlMDUtMzc3OC00OGZhLWFlMzgtNDkwYzJlZGExNjJm LzEvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtloKevK hznEJvmtkKtEl7qzc0CxaCmz5Nxm4evYFfIe29/tFbuzuE5V8+So45EtAifXKEk0 /BOJ1m1CsZE4Agqu+tnHP463VajLga60YGDrjH0ysBdx3PCUsf2+dYSFE1gqd8iO rD0Z5TIUGVlUuJoxoKZXI8WurbN8WAGV9M7nZld0GR0olM1y225DUo1beC35JIuL mhdGirMeZHgI1eeVvKGxzbfCS2TlRs5VIHSADChPb2tyQ/AuPHchASTnEy3DbOHP XM9z5fsFJPgrr1heLz/RLJ10WKLGO7tWJxiZJhVrrs4VD0+UJuJaGR5WlpEKLWhQ fli8elz+GmQPTw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:32:23 2025 by rpki-client