This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json) Hash identifier: quK6Nem5usaezf2Qjw1ESL4qMeImprE3oqnH/9Y3YFk= Subject key identifier: 26:02:E7:55:47:2F:02:70:12:7D:82:18:40:BA:5F:AE:BB:1E:3D:3B Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Certificate serial: 019B5B64668E1C2B61263E70D96DDBEFD94C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft Manifest number: 0284 Signing time: Fri 26 Dec 2025 16:01:04 +0000 Manifest this update: Fri 26 Dec 2025 16:01:04 +0000 Manifest next update: Sat 27 Dec 2025 16:01:04 +0000 Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=) 2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=) 3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: IBc6HqqfEJ6JcumKVli12oUzx/HXvcJ7E/w458ZMSZc=) 4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:66:8e:1c:2b:61:26:3e:70:d9:6d:db:ef:d9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Validity Not Before: Dec 26 16:01:04 2025 GMT Not After : Dec 27 16:01:04 2025 GMT Subject: CN=2602e755472f0270127d821840ba5faebb1e3d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:4f:4c:11:ac:7e:d6:e4:53:6d:4f:3d:9e: aa:f7:12:e9:80:ed:72:e5:fe:8f:e8:41:6e:3d:77: 9c:ad:4a:31:0b:57:c0:8b:48:e9:6d:fa:a4:2b:5e: 07:ed:c3:4e:74:da:b1:9d:8b:42:9a:9c:08:18:fb: bd:00:a0:75:b3:4e:9b:8a:b7:7d:d4:22:8a:e5:d9: 28:0c:d4:5d:ba:d7:b8:e4:c8:e3:34:91:62:f4:67: f2:25:64:59:7c:47:3c:c6:93:4c:ec:f8:06:06:aa: f1:b9:5c:de:a9:f2:f3:2a:4a:b1:1d:d0:36:43:55: 65:6a:0f:d1:40:78:70:c0:a0:75:31:e7:93:d3:9e: d1:de:5d:5b:a7:31:c0:f5:4a:78:f3:78:07:b4:d4: 79:2c:8f:32:5f:5e:b2:b2:63:24:12:30:ee:a9:3c: ac:90:39:b4:e1:81:8a:55:e3:41:5d:f0:aa:b8:9f: 42:21:11:93:60:ad:59:9d:3d:4d:2e:fd:2d:1e:cc: 3b:91:54:7e:33:ac:80:dd:15:a9:8a:aa:4d:c0:82: 1e:42:b8:34:bc:0b:cf:b0:38:83:7d:80:7d:4c:ba: b6:4e:87:4d:4d:02:e7:4a:51:98:b0:53:54:f1:68: a2:ef:2c:e3:93:61:b1:b9:f6:fe:0b:01:2a:e5:c9: 82:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:E7:55:47:2F:02:70:12:7D:82:18:40:BA:5F:AE:BB:1E:3D:3B X509v3 Authority Key Identifier: keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:be:e3:5b:44:8a:0e:7a:14:fd:3c:7c:21:cc:91:9d:25:1b: 46:f4:88:9d:17:24:9a:94:db:96:21:5d:8f:ff:31:e6:d6:87: 36:4a:51:78:1e:4c:9e:ca:8d:46:86:4b:f0:46:a7:e4:3f:76: 42:2f:cd:37:6f:e9:65:4b:b9:f5:e4:27:18:79:9b:23:f4:ee: 52:8b:64:4d:66:84:3c:16:ae:c0:5e:a5:1d:94:75:52:6f:c0: 79:16:82:e4:2b:38:9e:d8:3a:b5:7c:d4:41:d8:49:6c:1e:69: 2a:ca:39:14:ed:a3:d2:8f:cb:fd:a5:04:8e:10:7f:1b:b6:f0: 0b:47:50:f4:bf:97:f1:8c:97:a7:6f:d4:f1:2f:77:25:dd:66: 8d:7f:fb:41:16:0a:8f:bb:c5:53:31:48:7d:6a:04:ff:ef:fe: 5e:aa:40:2b:28:e4:75:85:30:4a:19:ad:21:8c:1e:f5:2a:a0: e0:8b:cb:56:b8:95:9a:7a:e1:98:b3:57:bf:71:f9:ab:f2:e8: 01:ee:67:d1:f7:31:4b:30:b8:40:50:62:af:a1:84:ba:74:31: 15:26:53:90:c2:f1:7f:62:fc:be:6d:7c:e7:bb:a5:1f:b2:8e: 57:f6:0d:f8:ff:50:59:36:87:c6:2d:df:03:f8:d3:f7:21:f1: f2:7a:63:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZGaOHCthJj5w2W3b79lMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh NzFjNGIwHhcNMjUxMjI2MTYwMTA0WhcNMjUxMjI3MTYwMTA0WjAzMTEwLwYDVQQD EygyNjAyZTc1NTQ3MmYwMjcwMTI3ZDgyMTg0MGJhNWZhZWJiMWUzZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv65PTBGsftbkU21PPZ6q9xLpgO1y 5f6P6EFuPXecrUoxC1fAi0jpbfqkK14H7cNOdNqxnYtCmpwIGPu9AKB1s06bird9 1CKK5dkoDNRdute45MjjNJFi9GfyJWRZfEc8xpNM7PgGBqrxuVzeqfLzKkqxHdA2 Q1Vlag/RQHhwwKB1MeeT057R3l1bpzHA9Up483gHtNR5LI8yX16ysmMkEjDuqTys kDm04YGKVeNBXfCquJ9CIRGTYK1ZnT1NLv0tHsw7kVR+M6yA3RWpiqpNwIIeQrg0 vAvPsDiDfYB9TLq2TodNTQLnSlGYsFNU8Wii7yzjk2Gxufb+CwEq5cmCDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYC51VHLwJwEn2CGEC6X667Hj07MB8GA1UdIwQY MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzr7jW0SK DnoU/Tx8IcyRnSUbRvSInRckmpTbliFdj/8x5taHNkpReB5MnsqNRoZL8Ean5D92 Qi/NN2/pZUu59eQnGHmbI/TuUotkTWaEPBauwF6lHZR1Um/AeRaC5Cs4ntg6tXzU QdhJbB5pKso5FO2j0o/L/aUEjhB/G7bwC0dQ9L+X8YyXp2/U8S93Jd1mjX/7QRYK j7vFUzFIfWoE/+/+XqpAKyjkdYUwShmtIYwe9Sqg4IvLVriVmnrhmLNXv3H5q/Lo Ae5n0fcxSzC4QFBir6GEunQxFSZTkMLxf2L8vm1857ulH7KOV/YN+P9QWTaHxi3f A/jT9yHx8npjFA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:22:35 2025 by rpki-client