This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json) Hash identifier: Geug3I8VkRchwtQ5lhVTr5kwqhAS1M/bULOt1fWHhRw= Subject key identifier: 15:CD:B4:D6:E9:2D:C9:33:2A:9C:AA:02:39:D8:CC:8D:BD:97:35:BE Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B1B7248EE4F47DD5FF32A9D99FE03F971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft Manifest number: 1661 Signing time: Sun 14 Dec 2025 06:00:33 +0000 Manifest this update: Sun 14 Dec 2025 06:00:33 +0000 Manifest next update: Mon 15 Dec 2025 06:00:33 +0000 Files and hashes: 1: 2fpFEHBfghYTNwqTBl9TJR5nCzQ.roa (hash: GvNSmymW/APULsatcVc+5sOWx6SGb1lbz9qr0ZBM25g=) 2: 8VdcsA_3vthxkHxEE3soQq3GWlI.roa (hash: HdKeApcjuEVfcpxPnJmOBirClzl00oaS7vYtCcsBZUE=) 3: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=) 4: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=) 5: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=) 6: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=) 7: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=) 8: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: kvb0SuA5aN8Na6/27JEWJYMwU3ki3ELQAZqt7Xi+lkA=) 9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:72:48:ee:4f:47:dd:5f:f3:2a:9d:99:fe:03:f9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Dec 14 06:00:33 2025 GMT Not After : Dec 15 06:00:33 2025 GMT Subject: CN=15cdb4d6e92dc9332a9caa0239d8cc8dbd9735be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:2c:47:36:09:ce:c5:9b:8d:57:94:eb:c1: e8:06:4d:f4:03:db:be:4a:16:9d:6c:1a:4b:08:e3: 86:bb:42:b8:a1:dd:0d:df:92:f5:34:1e:f5:6b:9c: ef:98:0c:f3:56:d4:86:3c:e2:f0:8f:25:2e:63:83: e4:0a:e0:c5:5f:39:38:b7:02:fa:b8:20:46:06:8f: b0:14:cc:33:d4:20:4d:61:56:43:f3:61:f9:d3:ab: 3f:e4:03:99:ac:f3:9b:fa:24:19:f4:6c:70:49:e2: 4a:bb:89:f8:a7:1a:4c:95:84:b5:63:c6:dc:8d:fb: a0:a3:40:91:bb:b6:6a:76:1b:bf:71:92:a1:6b:67: 81:b3:6a:66:c5:b7:a7:b0:f3:3a:78:f9:24:da:1d: 09:34:a6:34:3b:6e:fe:b4:52:37:8a:c5:c4:6b:4c: b7:5d:90:cd:d1:f1:4e:4b:31:ab:78:49:1e:ad:a7: de:35:62:48:88:86:25:27:e8:6f:7e:b7:ed:d5:d8: a5:9b:2c:d2:cb:e5:55:73:19:9f:67:4d:3f:82:b4: 19:1c:79:76:14:13:36:59:76:a5:6e:94:65:15:13: be:6e:89:47:b1:f9:ed:33:d3:33:84:d4:d1:4b:5c: 66:54:32:18:c9:34:83:17:b6:c5:f4:82:a4:8a:1a: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CD:B4:D6:E9:2D:C9:33:2A:9C:AA:02:39:D8:CC:8D:BD:97:35:BE X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9c:f0:43:72:f5:a8:7d:15:e8:2f:bd:46:fa:69:e5:be:3e: e2:32:d0:84:1b:ec:c8:3c:19:55:d1:1a:63:a4:e0:51:2e:5e: 90:a5:b5:92:22:8d:e3:a3:52:bc:f1:13:3e:d3:8a:40:60:68: a2:81:1b:8c:e1:5b:30:60:5b:bc:b5:3d:b5:83:f9:db:4c:7d: e5:d8:31:f6:90:39:09:40:33:ee:f7:f6:0d:aa:f0:85:34:3c: ea:db:1e:fb:32:83:c8:3e:27:d0:db:33:18:31:0e:eb:0e:4c: 5b:ac:f6:b1:96:cd:c4:66:d3:27:9a:80:30:14:72:73:22:fa: 3a:4c:e3:02:7e:78:c1:29:8b:ab:a4:cf:cc:dc:cb:a4:fe:f8: 58:0f:51:9a:ee:98:3e:f5:17:0b:68:27:82:ab:a4:3b:bc:18: 40:08:9c:83:85:45:70:09:0e:7a:49:0d:05:60:df:76:c6:74: a0:c7:49:ab:e2:1f:a9:e0:8b:ff:2d:6e:e3:91:91:2a:53:3b: df:89:6e:d3:91:11:c6:a9:43:e3:a2:59:bc:54:e5:68:d6:a5: ef:44:25:2b:36:8c:0d:d0:57:13:75:48:03:80:22:fb:e5:ae: 86:9d:5d:bd:4f:0e:6c:f7:d9:94:b1:24:4b:5d:74:11:61:27: 7d:f4:23:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbckjuT0fdX/MqnZn+A/lxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjUxMjE0MDYwMDMzWhcNMjUxMjE1MDYwMDMzWjAzMTEwLwYDVQQD EygxNWNkYjRkNmU5MmRjOTMzMmE5Y2FhMDIzOWQ4Y2M4ZGJkOTczNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA0sRzYJzsWbjVeU68HoBk30A9u+ ShadbBpLCOOGu0K4od0N35L1NB71a5zvmAzzVtSGPOLwjyUuY4PkCuDFXzk4twL6 uCBGBo+wFMwz1CBNYVZD82H506s/5AOZrPOb+iQZ9GxwSeJKu4n4pxpMlYS1Y8bc jfugo0CRu7Zqdhu/cZKha2eBs2pmxbensPM6ePkk2h0JNKY0O27+tFI3isXEa0y3 XZDN0fFOSzGreEkerafeNWJIiIYlJ+hvfrft1dilmyzSy+VVcxmfZ00/grQZHHl2 FBM2WXalbpRlFRO+bolHsfntM9MzhNTRS1xmVDIYyTSDF7bF9IKkihr+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXNtNbpLckzKpyqAjnYzI29lzW+MB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZzwQ3L1 qH0V6C+9Rvpp5b4+4jLQhBvsyDwZVdEaY6TgUS5ekKW1kiKN46NSvPETPtOKQGBo ooEbjOFbMGBbvLU9tYP520x95dgx9pA5CUAz7vf2DarwhTQ86tse+zKDyD4n0Nsz GDEO6w5MW6z2sZbNxGbTJ5qAMBRycyL6OkzjAn54wSmLq6TPzNzLpP74WA9Rmu6Y PvUXC2gngqukO7wYQAicg4VFcAkOekkNBWDfdsZ0oMdJq+IfqeCL/y1u45GRKlM7 34lu05ERxqlD46JZvFTlaNal70QlKzaMDdBXE3VIA4Ai++Wuhp1dvU8ObPfZlLEk S110EWEnffQjyQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:05 2025 by rpki-client