This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft File: anNsvQAR2jHSmwYeX_TWOELaKko.mft (raw, json) Hash identifier: mUXIUda+PGmYhj6nPryDdNqD4ZojNj2l1ylZUcVESDA= Subject key identifier: B0:E3:99:52:78:DB:FA:EB:B6:01:D0:08:8B:3E:6D:94:65:D5:EF:C0 Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A Certificate issuer: /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a Certificate serial: 019B3CEBB4C16219685D3E072B3EF6BFE665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 18:00:38 +0000 Manifest this update: Sat 20 Dec 2025 18:00:38 +0000 Manifest next update: Sun 21 Dec 2025 18:00:38 +0000 Files and hashes: 1: anNsvQAR2jHSmwYeX_TWOELaKko.crl (hash: MhCREZoL+Do3EOkxSYkskMt2K7hKYoOGRwj6kFNsis4=) 2: xe6f0-R3uUZBnoLs0S7n6Iepim8.roa (hash: HOV8Vg5bEFKecupNdQdTB6clHVPzjq+LxD7iw25nWc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b4:c1:62:19:68:5d:3e:07:2b:3e:f6:bf:e6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a Validity Not Before: Dec 20 18:00:38 2025 GMT Not After : Dec 21 18:00:38 2025 GMT Subject: CN=b0e3995278dbfaebb601d0088b3e6d9465d5efc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:91:ec:be:83:2a:d1:56:7e:3b:e3:b2:83:e5: 25:c8:f0:5d:e4:4c:04:73:76:56:de:62:e8:44:6a: 54:20:fd:15:88:29:ab:cb:7c:5f:92:bd:26:43:41: 86:c5:90:68:6e:91:25:f0:1e:1b:0c:b6:a8:ce:7e: 04:af:c1:e1:31:2c:12:e1:d3:f9:46:e7:02:35:e2: d8:d1:ba:8e:4e:bd:1b:6c:2f:c9:d9:5a:93:37:33: 1c:bf:6a:85:d1:ab:9f:3c:4d:5e:82:06:5a:64:c4: 58:d7:4d:3b:03:06:97:d1:fd:9e:ac:3a:5e:2e:0d: ce:8d:4c:d6:90:ab:74:fb:00:98:46:6c:58:ac:aa: f8:ce:d6:8a:b8:a7:79:a3:1c:9d:a6:0c:2c:8f:b9: ce:96:95:43:d3:23:6e:89:80:3e:ed:fd:ee:80:d0: 68:81:02:c6:7a:11:3f:53:4c:d4:33:b2:0c:64:52: a8:ed:a5:09:92:61:4f:3d:10:71:5d:92:4f:36:f6: 7b:b0:85:f4:d3:87:da:19:2b:99:ef:c6:c9:d9:8d: 17:89:cc:4b:31:65:76:53:3c:65:3d:c7:02:1f:e2: b5:d5:0c:14:3e:cb:fe:23:d1:81:5e:54:ff:b2:65: 09:06:79:27:f1:db:3b:db:16:64:c3:13:74:40:e4: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E3:99:52:78:DB:FA:EB:B6:01:D0:08:8B:3E:6D:94:65:D5:EF:C0 X509v3 Authority Key Identifier: keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:16:b3:95:d2:de:6d:1b:4a:71:67:3c:de:01:a0:b0:eb:c1: 2d:75:4a:d0:63:a5:ea:9c:e5:9d:61:a8:db:20:52:65:79:19: ec:c8:0d:89:f5:75:ff:47:b6:e7:c8:4a:5c:f9:55:34:8a:2a: 13:f0:b4:4d:23:ca:2c:64:28:11:85:14:42:24:0d:14:5a:55: d3:38:14:34:67:87:0a:84:91:76:f8:99:61:c4:e8:be:e3:ce: fa:5a:54:7e:e1:87:65:79:7e:0d:88:16:2e:1d:e7:6f:39:d1: 18:77:16:f7:35:d4:21:7a:6d:d5:31:2c:c5:28:89:fd:4e:25: 12:9e:bd:a5:c6:77:3c:8c:91:06:cd:d1:e5:f0:57:cc:8f:47: 21:3c:46:1f:92:24:20:cb:e3:25:50:ab:30:66:c2:52:26:c8: 42:39:90:7d:f2:d4:bc:af:05:52:85:5d:e6:af:0b:8a:b1:ad: b0:30:d8:d3:6b:35:f2:fd:d5:80:a5:1c:44:80:5f:28:c9:d2: 74:3f:52:34:10:60:62:0f:3a:39:4e:e5:75:e6:b6:07:8a:a4: ed:e2:30:b4:0c:43:0c:aa:53:2f:b2:59:7f:35:23:2e:b3:66: 03:d1:9d:5b:50:35:bf:34:48:dd:68:56:44:e7:8e:13:b9:8d: ab:de:78:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867TBYhloXT4HKz72v+ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzM2Y2JkMDAxMWRhMzFkMjliMDYxZTVmZjRkNjM4NDJk YTJhNGEwHhcNMjUxMjIwMTgwMDM4WhcNMjUxMjIxMTgwMDM4WjAzMTEwLwYDVQQD EyhiMGUzOTk1Mjc4ZGJmYWViYjYwMWQwMDg4YjNlNmQ5NDY1ZDVlZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JHsvoMq0VZ+O+Oyg+UlyPBd5EwE c3ZW3mLoRGpUIP0ViCmry3xfkr0mQ0GGxZBobpEl8B4bDLaozn4Er8HhMSwS4dP5 RucCNeLY0bqOTr0bbC/J2VqTNzMcv2qF0aufPE1eggZaZMRY1007AwaX0f2erDpe Lg3OjUzWkKt0+wCYRmxYrKr4ztaKuKd5oxydpgwsj7nOlpVD0yNuiYA+7f3ugNBo gQLGehE/U0zUM7IMZFKo7aUJkmFPPRBxXZJPNvZ7sIX004faGSuZ78bJ2Y0XicxL MWV2UzxlPccCH+K11QwUPsv+I9GBXlT/smUJBnkn8ds72xZkwxN0QORw0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDjmVJ42/rrtgHQCIs+bZRl1e/AMB8GA1UdIwQY MBaAFGpzbL0AEdox0psGHl/01jhC2ipKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYt NGVhMTI1MTNjYzZmLzEvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83ZTQzMzItNTM1OC00M2E5LWI1YmYtNGVhMTI1MTNjYzZm LzEvYW5Oc3ZRQVIyakhTbXdZZVhfVFdPRUxhS2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBazldLe bRtKcWc83gGgsOvBLXVK0GOl6pzlnWGo2yBSZXkZ7MgNifV1/0e258hKXPlVNIoq E/C0TSPKLGQoEYUUQiQNFFpV0zgUNGeHCoSRdviZYcTovuPO+lpUfuGHZXl+DYgW Lh3nbznRGHcW9zXUIXpt1TEsxSiJ/U4lEp69pcZ3PIyRBs3R5fBXzI9HITxGH5Ik IMvjJVCrMGbCUibIQjmQffLUvK8FUoVd5q8LirGtsDDY02s18v3VgKUcRIBfKMnS dD9SNBBgYg86OU7ldea2B4qk7eIwtAxDDKpTL7JZfzUjLrNmA9GdW1A1vzRI3WhW ROeOE7mNq954EQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:53 2025 by rpki-client