This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json) Hash identifier: tmKp1qgZhdYAq1A/zMlA1jTsTGlrZSODCuoV32WIPs4= Subject key identifier: 2B:EC:EF:8A:3C:39:EA:47:79:09:02:7D:F8:2E:71:04:55:89:00:5E Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Certificate serial: 019B58D1A4AC69B0F31357D4B1589DB8EEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft Manifest number: 04BD Signing time: Fri 26 Dec 2025 04:01:32 +0000 Manifest this update: Fri 26 Dec 2025 04:01:32 +0000 Manifest next update: Sat 27 Dec 2025 04:01:32 +0000 Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: +o3LfHplHBtWHGlkn4XpaD6aLU/6/zTzD6AEjKgu08k=) 2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:a4:ac:69:b0:f3:13:57:d4:b1:58:9d:b8:ee:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Validity Not Before: Dec 26 04:01:32 2025 GMT Not After : Dec 27 04:01:32 2025 GMT Subject: CN=2becef8a3c39ea477909027df82e71045589005e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:3c:67:f5:dc:d7:6b:83:fe:61:53:bb:95: e6:16:a9:27:f4:c2:eb:87:22:2d:01:1f:5f:7f:6f: 2e:17:10:50:b9:a3:51:19:25:68:72:55:61:1c:6b: a8:17:66:5f:1c:81:1a:41:ce:b4:7a:68:ea:56:43: 53:a4:63:cc:f5:1c:3e:92:fe:fa:3c:99:f5:5d:0c: a2:b7:32:fe:6d:53:15:a1:16:bb:e5:93:63:8b:aa: 2c:cb:25:11:d0:c6:53:02:37:26:8b:c4:f6:c3:43: 4a:80:82:47:7b:86:fc:65:34:a7:71:71:a0:64:66: ba:da:58:a6:f3:b9:d0:84:f7:36:62:2f:51:76:88: 4b:12:55:5b:5f:c6:30:c6:2c:1a:61:2a:e0:7b:07: d8:8b:41:2d:15:72:4e:7b:31:4f:60:56:5a:cf:3f: 93:39:b4:f1:a8:b6:af:fe:f2:4c:97:ae:35:4e:49: a9:ed:4c:b0:d8:19:73:21:da:fc:5a:68:10:b0:74: d5:92:47:7b:8f:18:a6:46:87:1a:2e:56:65:d6:2e: ff:eb:4e:19:bf:8a:22:99:ff:7f:7b:9d:be:c9:9a: 8c:1c:e9:97:c8:3d:85:37:07:d6:23:67:79:4c:a7: b8:f4:54:60:70:3e:4a:99:eb:1f:88:2a:c6:2e:ab: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EC:EF:8A:3C:39:EA:47:79:09:02:7D:F8:2E:71:04:55:89:00:5E X509v3 Authority Key Identifier: keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8f:8d:fd:4c:b8:16:1b:2f:77:26:45:ac:0f:d6:78:2c:32: 32:e0:42:d2:20:aa:3e:32:e3:13:27:2e:88:a1:70:e4:3d:94: d7:81:64:4f:53:2c:d2:65:ca:05:63:9b:b0:f0:bc:b6:26:a1: 8e:74:86:89:6e:5f:14:8d:00:fa:9d:4b:09:bd:c9:50:1c:eb: a9:9c:e2:77:05:ba:dc:cd:66:34:6d:7e:3d:4e:69:01:96:6a: 6a:6c:a8:c7:54:14:dd:db:aa:ea:2e:f0:34:33:2f:dc:7b:6b: b4:5e:ff:94:77:c8:e9:8a:fc:dc:dc:ae:fe:b6:9a:a8:f9:3e: 14:73:0a:d9:62:3d:74:c2:38:c3:5e:9e:0d:b7:c7:a1:7c:03: 8b:09:20:42:e2:ae:80:16:b6:c1:2a:cb:b6:2a:2c:6e:24:fb: f2:0e:87:70:bb:f8:dc:47:c3:00:50:60:5e:1f:a9:48:36:c9: 64:3a:45:ff:e7:9e:5a:b2:42:93:51:09:5d:19:21:13:36:43: 7a:0d:f4:09:00:37:f1:b5:98:91:96:58:70:b1:8a:50:59:c7: b3:31:88:5b:7f:61:18:ca:ab:d8:ca:f2:7c:34:e7:2a:89:8f: 45:60:97:64:4d:b1:b0:b0:b5:84:90:66:ba:99:58:fc:fe:10: 3d:3b:2e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0aSsabDzE1fUsViduO74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTJkMDRhYjBjMzdhNDczYjFmYzgxYTM2OWZjOWFkNWQ5 ZmZkNDQwHhcNMjUxMjI2MDQwMTMyWhcNMjUxMjI3MDQwMTMyWjAzMTEwLwYDVQQD EygyYmVjZWY4YTNjMzllYTQ3NzkwOTAyN2RmODJlNzEwNDU1ODkwMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tw8Z/Xc12uD/mFTu5XmFqkn9MLr hyItAR9ff28uFxBQuaNRGSVoclVhHGuoF2ZfHIEaQc60emjqVkNTpGPM9Rw+kv76 PJn1XQyitzL+bVMVoRa75ZNji6osyyUR0MZTAjcmi8T2w0NKgIJHe4b8ZTSncXGg ZGa62lim87nQhPc2Yi9RdohLElVbX8YwxiwaYSrgewfYi0EtFXJOezFPYFZazz+T ObTxqLav/vJMl641Tkmp7Uyw2BlzIdr8WmgQsHTVkkd7jximRocaLlZl1i7/604Z v4oimf9/e52+yZqMHOmXyD2FNwfWI2d5TKe49FRgcD5KmesfiCrGLqvJRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvs74o8OepHeQkCffgucQRViQBeMB8GA1UdIwQY MBaAFGkS0Eqww3pHOx/IGjafya1dn/1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQt ZjIxYjRmMTFmYWYwLzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQtZjIxYjRmMTFmYWYw LzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4+N/Uy4 FhsvdyZFrA/WeCwyMuBC0iCqPjLjEycuiKFw5D2U14FkT1Ms0mXKBWObsPC8tiah jnSGiW5fFI0A+p1LCb3JUBzrqZzidwW63M1mNG1+PU5pAZZqamyox1QU3duq6i7w NDMv3HtrtF7/lHfI6Yr83Nyu/raaqPk+FHMK2WI9dMI4w16eDbfHoXwDiwkgQuKu gBa2wSrLtiosbiT78g6HcLv43EfDAFBgXh+pSDbJZDpF/+eeWrJCk1EJXRkhEzZD eg30CQA38bWYkZZYcLGKUFnHszGIW39hGMqr2MryfDTnKomPRWCXZE2xsLC1hJBm uplY/P4QPTsuAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:57 2025 by rpki-client