This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json) Hash identifier: 9aF5bWAvozLlKH9YzPkE/5ywbloRNpPzAcl1QVdrX9Y= Subject key identifier: EE:D9:66:90:D0:D3:AF:01:6F:27:90:64:4C:09:08:15:70:4E:25:4C Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Certificate serial: 019B19BC8DF83025767EE03B9B2C0CF318BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft Manifest number: 133F Signing time: Sat 13 Dec 2025 22:02:26 +0000 Manifest this update: Sat 13 Dec 2025 22:02:26 +0000 Manifest next update: Sun 14 Dec 2025 22:02:26 +0000 Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=) 2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 3kZ88GXwL/BBF0/F5BlrPQGZ02MBX/AoBMHF3s9FbJ8=) 3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:8d:f8:30:25:76:7e:e0:3b:9b:2c:0c:f3:18:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Validity Not Before: Dec 13 22:02:26 2025 GMT Not After : Dec 14 22:02:26 2025 GMT Subject: CN=eed96690d0d3af016f2790644c090815704e254c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:63:3d:ac:80:dd:ee:7e:93:ca:ef:24:de: 95:82:81:18:1a:8a:ae:5c:d7:aa:c2:68:8c:00:fc: d1:d7:14:03:b4:f6:fa:fd:31:ea:fd:d5:3b:62:f9: a8:f0:ab:fc:a7:2c:12:a4:1a:07:33:97:77:42:64: 12:f9:e4:df:5a:73:87:b3:fe:4f:28:26:75:10:23: fe:f6:4b:eb:1c:11:f9:b5:79:e3:8b:fe:31:04:41: 50:92:cf:cd:ff:88:ae:a3:fb:ca:15:f6:59:3e:e8: c7:da:02:8e:0e:dd:22:89:8f:19:56:cd:11:79:9d: f1:68:13:93:e1:2f:1f:9a:66:7b:a6:31:8d:0a:99: cd:b4:1a:41:d3:b7:01:0d:10:0e:97:e8:4b:f6:68: 82:99:5d:05:03:cd:20:86:bd:24:1a:9e:93:85:79: 60:55:65:fd:bc:15:ef:e1:c8:f6:74:3f:b4:9b:1e: 45:ef:52:b1:e0:8f:35:fe:d4:12:57:1c:3f:1f:e3: de:04:22:df:88:6a:c5:d8:af:e5:27:34:83:d2:87: a9:c4:60:42:a9:dc:5a:fe:8c:34:a1:01:7f:e2:ec: f4:c3:ef:84:ec:b7:c0:28:35:aa:df:50:08:4d:21: df:ce:69:b4:3b:9e:9c:ac:db:59:f3:5d:8d:61:ea: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D9:66:90:D0:D3:AF:01:6F:27:90:64:4C:09:08:15:70:4E:25:4C X509v3 Authority Key Identifier: keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:de:b2:50:19:bd:70:10:42:8c:78:05:fb:c0:4c:41:62:fb: ee:0e:55:aa:b7:06:75:85:64:c0:fb:f6:de:a3:d6:24:1e:50: dc:b9:bc:ee:45:51:d9:14:a0:ae:8b:96:bc:fd:ed:43:fe:0c: 4b:1e:9d:60:b2:19:04:e3:33:e4:68:3b:a6:48:e7:09:cc:73: b7:e4:da:b9:b7:34:74:e5:32:25:92:d5:23:37:7b:b1:6f:a7: 14:86:1c:dc:f0:d4:db:3a:5b:db:12:9d:6c:c0:fb:6a:63:ba: 8c:23:c1:bc:ff:23:c9:40:aa:47:a3:b8:01:92:0b:24:3a:52: 1a:63:58:7e:55:aa:47:0c:15:4c:e6:67:39:df:2c:56:2b:3f: 63:6e:ea:27:0a:b6:a2:64:cf:05:9f:db:f9:bf:4b:b3:a0:48: 42:a0:59:c8:10:08:5d:ca:13:33:7e:e4:29:7e:b7:c0:a6:66: 26:b5:e9:5c:81:f2:71:23:1a:67:bf:00:ca:cb:1d:9f:4c:d3: 48:35:da:48:18:06:d6:3f:18:18:71:de:bb:52:fe:fb:65:90: e9:1f:6c:06:f3:26:02:0d:ce:7f:1c:6a:51:b9:22:57:63:de: dc:da:8c:21:09:b5:0d:5b:82:a0:a1:fa:90:82:16:4f:0c:21: 1a:47:97:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvI34MCV2fuA7mywM8xi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz N2IwMTUwHhcNMjUxMjEzMjIwMjI2WhcNMjUxMjE0MjIwMjI2WjAzMTEwLwYDVQQD EyhlZWQ5NjY5MGQwZDNhZjAxNmYyNzkwNjQ0YzA5MDgxNTcwNGUyNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijBjPayA3e5+k8rvJN6VgoEYGoqu XNeqwmiMAPzR1xQDtPb6/THq/dU7Yvmo8Kv8pywSpBoHM5d3QmQS+eTfWnOHs/5P KCZ1ECP+9kvrHBH5tXnji/4xBEFQks/N/4iuo/vKFfZZPujH2gKODt0iiY8ZVs0R eZ3xaBOT4S8fmmZ7pjGNCpnNtBpB07cBDRAOl+hL9miCmV0FA80ghr0kGp6ThXlg VWX9vBXv4cj2dD+0mx5F71Kx4I81/tQSVxw/H+PeBCLfiGrF2K/lJzSD0oepxGBC qdxa/ow0oQF/4uz0w++E7LfAKDWq31AITSHfzmm0O56crNtZ812NYerqiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7ZZpDQ068BbyeQZEwJCBVwTiVMMB8GA1UdIwQY MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABN6yUBm9 cBBCjHgF+8BMQWL77g5VqrcGdYVkwPv23qPWJB5Q3Lm87kVR2RSgrouWvP3tQ/4M Sx6dYLIZBOMz5Gg7pkjnCcxzt+Taubc0dOUyJZLVIzd7sW+nFIYc3PDU2zpb2xKd bMD7amO6jCPBvP8jyUCqR6O4AZILJDpSGmNYflWqRwwVTOZnOd8sVis/Y27qJwq2 omTPBZ/b+b9Ls6BIQqBZyBAIXcoTM37kKX63wKZmJrXpXIHycSMaZ78Ayssdn0zT SDXaSBgG1j8YGHHeu1L++2WQ6R9sBvMmAg3OfxxqUbkiV2Pe3NqMIQm1DVuCoKH6 kIIWTwwhGkeXxg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:56 2025 by rpki-client