This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json) Hash identifier: 4xNxbeyDmZ+QIb4H6Xklg3ARniKLc7G4FsW7qBijNmk= Subject key identifier: DA:D6:47:23:25:3C:8A:ED:7F:87:22:F7:61:CE:EA:C8:AD:6D:EB:77 Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0 Certificate serial: 019B337B15DF0362711C9C4FBBF4DE5E1724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft Manifest number: 141A Signing time: Thu 18 Dec 2025 22:01:03 +0000 Manifest this update: Thu 18 Dec 2025 22:01:03 +0000 Manifest next update: Fri 19 Dec 2025 22:01:03 +0000 Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=) 2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: bhf2taeCD2TDJkSOvLy98DddCU9kRzzCVF5ufCXZZLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:15:df:03:62:71:1c:9c:4f:bb:f4:de:5e:17:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0 Validity Not Before: Dec 18 22:01:03 2025 GMT Not After : Dec 19 22:01:03 2025 GMT Subject: CN=dad64723253c8aed7f8722f761ceeac8ad6deb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:3f:67:7a:d6:af:20:94:92:f3:c7:9b:26: ab:ec:dd:b1:a0:b6:3e:1a:d6:c8:f1:6e:60:c7:8a: 3b:27:69:80:79:aa:5a:05:16:ff:c8:89:6e:a2:87: 65:af:e2:10:c6:24:95:72:81:c3:ab:5c:fc:db:5e: a7:89:01:26:23:54:77:e8:4f:55:f6:24:f2:a8:dd: e7:db:cc:c0:40:56:77:0e:31:b8:d0:78:18:c7:5e: d2:52:e4:ee:4d:21:68:53:6e:bd:e4:78:9c:81:ed: 9b:62:d1:b6:52:70:d3:a5:1b:b4:25:07:15:38:44: 87:90:ba:a4:d6:8a:91:9e:aa:a8:78:0c:ff:0c:e9: 5d:2c:7f:96:ca:22:ce:32:92:76:14:be:65:6c:f2: f6:9c:bd:b8:1d:f0:57:fc:bc:0f:18:68:09:a1:4d: 2d:db:1b:89:c1:76:ea:51:4b:bf:27:27:01:77:68: 32:6b:c0:dd:8e:df:a2:da:7e:bc:80:e3:9e:b2:cd: 49:19:bd:d4:f4:6f:54:a3:5e:e8:3d:43:7f:d0:7e: 62:c1:0b:4d:29:f8:ab:90:73:ed:3f:0b:5a:77:e9: 2e:1b:7b:f3:ac:e9:e9:c4:47:cc:6b:2c:fe:09:d4: 64:4c:d6:6c:78:64:06:c6:ba:4d:79:e5:c1:0c:e3: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D6:47:23:25:3C:8A:ED:7F:87:22:F7:61:CE:EA:C8:AD:6D:EB:77 X509v3 Authority Key Identifier: keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:fb:0a:ef:30:b0:31:82:46:a8:96:aa:05:d3:7b:dd:84:4e: 82:ff:a7:e3:d0:f6:20:cf:4c:36:82:63:38:de:dd:3c:e6:6e: c3:96:b6:25:14:71:43:bd:be:5d:ea:dc:7e:a3:19:05:3b:3e: 2e:e6:6a:15:63:f9:b1:05:3a:4c:31:c8:57:62:1c:ee:8e:ba: 41:99:6c:c5:e9:1b:60:17:c1:39:ad:fb:e4:91:ac:3a:07:91: c7:02:16:51:59:5b:10:e1:dc:f9:93:53:f9:e4:65:84:fd:93: 68:2c:d0:bf:3c:c8:a2:6a:f8:fd:5f:ea:21:35:c5:ca:b5:dc: 34:b8:a0:54:fa:95:5a:44:0b:fa:4d:0d:c7:49:33:eb:6e:5b: 1b:56:46:30:23:36:7c:a8:e5:f3:4c:b7:2f:f0:83:78:86:c4: 68:1d:1e:c8:60:b2:04:5c:3e:2c:13:f9:e3:65:c3:55:59:06: cb:74:39:a5:e8:f5:4d:81:5c:c8:24:c8:0b:da:df:52:c4:6b: 6d:26:6e:b7:b0:30:df:43:78:00:41:33:f3:4b:31:d5:b0:c7: ce:11:67:35:4b:4b:cd:06:28:87:f9:4b:83:5a:e6:4c:f5:88: fc:ca:47:8a:66:26:de:95:a0:b3:4f:c2:b0:a1:5b:1b:bc:54: 3d:82:28:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexXfA2JxHJxPu/TeXhckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Nzg2YzE3OGQ2NWJlNzlhZTUwZDM1NTg1N2RhMTNhZDc0 YWJlYTAwHhcNMjUxMjE4MjIwMTAzWhcNMjUxMjE5MjIwMTAzWjAzMTEwLwYDVQQD EyhkYWQ2NDcyMzI1M2M4YWVkN2Y4NzIyZjc2MWNlZWFjOGFkNmRlYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9K0/Z3rWryCUkvPHmyar7N2xoLY+ GtbI8W5gx4o7J2mAeapaBRb/yIluoodlr+IQxiSVcoHDq1z8216niQEmI1R36E9V 9iTyqN3n28zAQFZ3DjG40HgYx17SUuTuTSFoU2695Hicge2bYtG2UnDTpRu0JQcV OESHkLqk1oqRnqqoeAz/DOldLH+WyiLOMpJ2FL5lbPL2nL24HfBX/LwPGGgJoU0t 2xuJwXbqUUu/JycBd2gya8Ddjt+i2n68gOOess1JGb3U9G9Uo17oPUN/0H5iwQtN KfirkHPtPwtad+kuG3vzrOnpxEfMayz+CdRkTNZseGQGxrpNeeXBDONIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrWRyMlPIrtf4ci92HO6sitbet3MB8GA1UdIwQY MBaAFGl4bBeNZb55rlDTVYV9oTrXSr6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjIt OGI4ZWVjMTg2OTM0LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjItOGI4ZWVjMTg2OTM0 LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPsK7zCw MYJGqJaqBdN73YROgv+n49D2IM9MNoJjON7dPOZuw5a2JRRxQ72+XercfqMZBTs+ LuZqFWP5sQU6TDHIV2Ic7o66QZlsxekbYBfBOa375JGsOgeRxwIWUVlbEOHc+ZNT +eRlhP2TaCzQvzzIomr4/V/qITXFyrXcNLigVPqVWkQL+k0Nx0kz625bG1ZGMCM2 fKjl80y3L/CDeIbEaB0eyGCyBFw+LBP542XDVVkGy3Q5pej1TYFcyCTIC9rfUsRr bSZut7Aw30N4AEEz80sx1bDHzhFnNUtLzQYoh/lLg1rmTPWI/MpHimYm3pWgs0/C sKFbG7xUPYIoVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:57:03 2025 by rpki-client