This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json) Hash identifier: xoe6t1LzyasbnddWAQFdoaaKkVNCpwJnvW9IU4smL4Y= Subject key identifier: 71:88:99:77:71:CF:47:57:B5:C4:8F:61:60:9E:55:97:08:0B:CF:93 Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Certificate serial: 019B047E66DC3B1AD5B0575B82B2FC1E0AFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft Manifest number: 1334 Signing time: Tue 09 Dec 2025 19:02:31 +0000 Manifest this update: Tue 09 Dec 2025 19:02:31 +0000 Manifest next update: Wed 10 Dec 2025 19:02:31 +0000 Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=) 2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: uV5D4ZS+Zy50I7oZChhMOEF69mVJJzvhNsWsgtqlLew=) 3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7e:66:dc:3b:1a:d5:b0:57:5b:82:b2:fc:1e:0a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015 Validity Not Before: Dec 9 19:02:31 2025 GMT Not After : Dec 10 19:02:31 2025 GMT Subject: CN=7188997771cf4757b5c48f61609e5597080bcf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:f1:8a:31:b3:c8:91:31:d1:86:5a:36:1e: 8d:e8:9c:fa:bb:17:70:a8:22:5e:88:be:61:8c:98: 66:04:52:89:8f:d8:c0:dc:fc:82:f6:46:cf:ed:4f: 48:0a:b5:8c:b6:ca:7c:d3:2e:38:4b:c6:f2:8f:3f: 0f:a3:e0:f3:fe:d2:37:2d:0b:e6:ff:c1:a4:31:84: fa:8d:99:74:d2:d3:ba:75:83:6a:70:8f:f7:be:45: c7:26:c8:a1:e8:bf:11:8d:d1:2b:f5:ec:d2:40:4a: f9:19:7f:66:16:63:ba:30:8e:44:97:57:d7:c4:6e: 8a:1b:ba:fa:a2:7c:1e:98:63:a8:b6:b4:d5:3d:e9: 6f:21:a1:cb:a9:a5:2c:4c:14:ba:ac:b6:33:a0:e1: d5:b2:b9:59:c3:48:c0:cb:84:bd:5d:e3:65:3c:0b: ea:67:7c:48:21:d5:e1:5f:a8:de:18:1e:98:b3:02: 9b:8f:5e:70:ba:e5:fc:e8:31:14:1a:e0:d2:e6:dc: 4e:b3:4d:9d:3f:2f:14:27:4d:d3:50:a8:e4:eb:b0: e7:76:66:da:3d:e3:9e:7f:e1:dd:66:3d:e5:2f:bb: 49:12:59:b9:f0:f6:6b:34:1b:1b:f3:ea:c7:d4:a4: 88:d7:0c:2d:2e:0e:61:30:3f:78:25:79:1b:ab:ac: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:88:99:77:71:CF:47:57:B5:C4:8F:61:60:9E:55:97:08:0B:CF:93 X509v3 Authority Key Identifier: keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3e:09:2a:4f:50:f0:09:56:0d:ad:b3:cc:f0:1f:1d:46:73: 66:89:62:72:6e:cb:3c:53:de:c2:25:e6:b9:6b:3c:a9:4c:cb: 78:3a:cb:fd:b9:27:7b:55:eb:86:ad:d4:6b:ae:52:54:8f:5a: 4b:e3:d9:93:05:dd:6c:6c:b2:c7:ac:cd:e7:4f:3d:67:45:dc: ec:42:42:23:99:b1:d1:71:3d:46:74:02:63:dc:a5:a1:f6:ce: 5e:61:c9:bd:b8:30:41:c2:2e:30:0c:0b:f1:85:b8:a5:df:b4: e7:91:a4:99:6f:e4:d7:5c:a0:65:fd:b0:83:a7:7e:d0:0f:2c: bb:00:d2:88:20:bc:73:aa:d3:89:45:6e:e6:8b:55:27:f8:76: 82:1c:4e:91:d6:f6:6e:66:fa:a8:47:69:8e:f8:5d:09:ec:14: 9d:bf:42:e7:0e:99:77:fa:ee:d4:24:be:56:35:fa:a3:f7:55: 66:24:30:7a:71:98:ab:ca:fc:bf:06:03:24:ca:c2:af:95:c5: 4e:d9:a4:2e:f4:66:a5:67:36:24:e3:62:ae:df:5c:64:05:17: ae:cb:8e:db:e0:d1:9e:52:5e:39:b9:b4:e2:ce:37:54:91:de: a8:c0:b3:9e:67:b3:c7:20:8f:e3:9a:e8:fe:11:ff:a8:84:36: 63:03:6d:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfmbcOxrVsFdbgrL8Hgr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz N2IwMTUwHhcNMjUxMjA5MTkwMjMxWhcNMjUxMjEwMTkwMjMxWjAzMTEwLwYDVQQD Eyg3MTg4OTk3NzcxY2Y0NzU3YjVjNDhmNjE2MDllNTU5NzA4MGJjZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+PxijGzyJEx0YZaNh6N6Jz6uxdw qCJeiL5hjJhmBFKJj9jA3PyC9kbP7U9ICrWMtsp80y44S8byjz8Po+Dz/tI3LQvm /8GkMYT6jZl00tO6dYNqcI/3vkXHJsih6L8RjdEr9ezSQEr5GX9mFmO6MI5El1fX xG6KG7r6onwemGOotrTVPelvIaHLqaUsTBS6rLYzoOHVsrlZw0jAy4S9XeNlPAvq Z3xIIdXhX6jeGB6YswKbj15wuuX86DEUGuDS5txOs02dPy8UJ03TUKjk67Dndmba PeOef+HdZj3lL7tJElm58PZrNBsb8+rH1KSI1wwtLg5hMD94JXkbq6we3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGImXdxz0dXtcSPYWCeVZcIC8+TMB8GA1UdIwQY MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It MmI2NWE3YThiZThjLzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD4JKk9Q 8AlWDa2zzPAfHUZzZolicm7LPFPewiXmuWs8qUzLeDrL/bkne1Xrhq3Ua65SVI9a S+PZkwXdbGyyx6zN5089Z0Xc7EJCI5mx0XE9RnQCY9ylofbOXmHJvbgwQcIuMAwL 8YW4pd+055GkmW/k11ygZf2wg6d+0A8suwDSiCC8c6rTiUVu5otVJ/h2ghxOkdb2 bmb6qEdpjvhdCewUnb9C5w6Zd/ru1CS+VjX6o/dVZiQwenGYq8r8vwYDJMrCr5XF TtmkLvRmpWc2JONirt9cZAUXrsuO2+DRnlJeObm04s43VJHeqMCznmezxyCP45ro /hH/qIQ2YwNtwQ== -----END CERTIFICATE-----Generated at Wed Dec 10 01:01:18 2025 by rpki-client