This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json) Hash identifier: 32239i79MDlrJnm1Ru1/vDbSw+GxkHNEGUKQdMJmZ8g= Subject key identifier: 5F:CC:C1:9C:9F:4B:FE:DA:12:82:68:45:5B:4B:97:76:33:34:EC:61 Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Certificate serial: 019B221959A0E65BE9B2449B90226582639B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft Manifest number: 01E2 Signing time: Mon 15 Dec 2025 13:00:44 +0000 Manifest this update: Mon 15 Dec 2025 13:00:44 +0000 Manifest next update: Tue 16 Dec 2025 13:00:44 +0000 Files and hashes: 1: _ih0IDGdtVSv2B7pineBzs1nKB4.roa (hash: fb9kU4b5LG0UVoJvGOy+jPoLLrOl+4P8QNYdunyPUFs=) 2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: C8ucshINcNKWTX3RJ+0aK+hi5X8ZQPO+6AdAsgrV9Bo=) 3: zORT1METPqqNBfYdoSZVGl7banI.roa (hash: T3hSGGgcSf2JLTfvFrJkJFTgNqevdB8ftoBAmirWbTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:59:a0:e6:5b:e9:b2:44:9b:90:22:65:82:63:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd Validity Not Before: Dec 15 13:00:44 2025 GMT Not After : Dec 16 13:00:44 2025 GMT Subject: CN=5fccc19c9f4bfeda128268455b4b97763334ec61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:a2:af:bf:38:10:13:33:4b:f2:9e:7a:da: 62:d9:e5:66:26:cd:52:2f:d4:81:16:a3:65:19:03: 3a:ee:98:b8:99:ea:72:ac:e9:c3:f0:1f:d5:12:68: ff:ad:77:17:48:b5:79:2c:41:bf:55:6f:d8:a5:83: 0c:0f:16:54:5f:b5:10:10:64:63:5c:a2:e9:e1:c6: de:54:c8:83:b1:6a:78:04:1e:ca:ff:86:58:a0:fb: 81:2d:dd:8e:49:60:9e:60:5a:e9:ad:ed:99:eb:ff: c3:f6:38:89:85:3a:31:f4:ea:2e:68:0b:2d:c2:d2: 86:f8:2f:c0:c0:cc:6a:2b:82:91:69:db:4d:cf:3f: 87:88:af:0b:8a:47:57:e7:c5:c5:30:35:8c:4e:7d: 2c:38:04:b5:75:2e:cd:73:30:3d:72:2e:b4:5d:e1: 2e:f2:f6:e3:60:fa:dc:2d:62:d3:ed:16:4a:aa:10: c7:a6:db:52:ca:39:44:dc:54:99:13:c5:3e:d0:e4: c6:4b:39:8b:34:e8:19:c3:5e:14:8a:e6:4c:4d:4e: 2a:b7:67:f4:fb:8d:9a:c6:3c:ba:7c:0c:2d:f5:5e: 40:53:87:a6:31:3e:5c:85:e7:79:b1:54:ba:a8:7e: 04:ff:45:86:ec:4c:0c:c2:42:b7:dd:3b:df:2e:9f: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CC:C1:9C:9F:4B:FE:DA:12:82:68:45:5B:4B:97:76:33:34:EC:61 X509v3 Authority Key Identifier: keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:23:4e:a7:4a:f4:4a:46:a9:fe:e5:f7:10:fc:b7:46:1c:83: e4:05:3a:2a:a5:67:68:34:57:0f:8f:75:04:0f:1b:e2:ed:09: 27:3b:0c:6f:b9:20:a2:ed:b3:88:75:c4:21:57:95:ad:8c:ea: 05:a9:02:96:0f:77:ff:ae:cd:8f:c1:8f:3f:35:7f:00:4a:53: 3c:56:ff:91:f1:bb:2b:c1:46:bd:51:52:73:75:0b:cd:46:80: 81:21:6d:4e:6a:bc:cc:bb:15:2a:b6:df:69:b1:b4:f8:38:55: 5a:bb:c0:ac:3c:0b:15:bb:07:a7:48:32:4f:1b:72:ed:bc:c6: 12:7a:07:46:7d:f9:1b:d9:74:fb:7d:75:64:15:1a:1d:d3:50: b7:fa:0b:46:e8:ad:83:bc:75:89:86:8d:f6:bc:2e:7b:02:90: b6:5b:c7:e5:c8:b8:e8:ac:e0:1a:f9:c3:46:50:08:fb:da:b4: 94:dd:40:4a:09:31:63:01:e5:02:57:ed:2f:06:65:5c:a2:1c: 48:bc:ae:98:1f:87:c0:77:e4:88:08:10:1f:23:32:7f:c8:05: 2f:f1:61:fb:a8:ae:76:ea:ab:86:98:7a:32:09:16:8d:82:30: 0e:67:73:1a:2b:df:ef:42:8f:1e:6f:cc:32:0d:14:79:8d:c3: e5:c1:20:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGVmg5lvpskSbkCJlgmObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx YzhjZGQwHhcNMjUxMjE1MTMwMDQ0WhcNMjUxMjE2MTMwMDQ0WjAzMTEwLwYDVQQD Eyg1ZmNjYzE5YzlmNGJmZWRhMTI4MjY4NDU1YjRiOTc3NjMzMzRlYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutSir784EBMzS/Keetpi2eVmJs1S L9SBFqNlGQM67pi4mepyrOnD8B/VEmj/rXcXSLV5LEG/VW/YpYMMDxZUX7UQEGRj XKLp4cbeVMiDsWp4BB7K/4ZYoPuBLd2OSWCeYFrpre2Z6//D9jiJhTox9OouaAst wtKG+C/AwMxqK4KRadtNzz+HiK8LikdX58XFMDWMTn0sOAS1dS7NczA9ci60XeEu 8vbjYPrcLWLT7RZKqhDHpttSyjlE3FSZE8U+0OTGSzmLNOgZw14UiuZMTU4qt2f0 +42axjy6fAwt9V5AU4emMT5ched5sVS6qH4E/0WG7EwMwkK33TvfLp+nTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/MwZyfS/7aEoJoRVtLl3YzNOxhMB8GA1UdIwQY MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt YTI2Y2I2NDI5NDg2LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2 LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACNOp0r0 Skap/uX3EPy3RhyD5AU6KqVnaDRXD491BA8b4u0JJzsMb7kgou2ziHXEIVeVrYzq BakClg93/67Nj8GPPzV/AEpTPFb/kfG7K8FGvVFSc3ULzUaAgSFtTmq8zLsVKrbf abG0+DhVWrvArDwLFbsHp0gyTxty7bzGEnoHRn35G9l0+311ZBUaHdNQt/oLRuit g7x1iYaN9rwuewKQtlvH5ci46KzgGvnDRlAI+9q0lN1ASgkxYwHlAlftLwZlXKIc SLyumB+HwHfkiAgQHyMyf8gFL/Fh+6iuduqrhph6MgkWjYIwDmdzGivf70KPHm/M Mg0UeY3D5cEgHw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:45:59 2025 by rpki-client