This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json) Hash identifier: 4/Ip0I0glQnO5eHt8CssFT93pPYBWlopWhxZDUEjsng= Subject key identifier: 42:52:B8:9D:C7:C7:2F:00:55:FD:D5:AC:51:70:71:6E:28:64:55:A6 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B0822AD0D8B1872A1CFE8F157B58CDE65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft Manifest number: 1657 Signing time: Wed 10 Dec 2025 12:00:48 +0000 Manifest this update: Wed 10 Dec 2025 12:00:48 +0000 Manifest next update: Thu 11 Dec 2025 12:00:48 +0000 Files and hashes: 1: 2fpFEHBfghYTNwqTBl9TJR5nCzQ.roa (hash: GvNSmymW/APULsatcVc+5sOWx6SGb1lbz9qr0ZBM25g=) 2: 8VdcsA_3vthxkHxEE3soQq3GWlI.roa (hash: HdKeApcjuEVfcpxPnJmOBirClzl00oaS7vYtCcsBZUE=) 3: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=) 4: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=) 5: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=) 6: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=) 7: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=) 8: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: tTQAoDUUsaopfDtYB0JNSZzg+OJIm3mHKXwwIKB1OfE=) 9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:22:ad:0d:8b:18:72:a1:cf:e8:f1:57:b5:8c:de:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Dec 10 12:00:48 2025 GMT Not After : Dec 11 12:00:48 2025 GMT Subject: CN=4252b89dc7c72f0055fdd5ac5170716e286455a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:35:b2:af:39:ee:fa:76:bd:6c:64:9a:c3: c6:4d:ab:27:71:52:39:70:8c:38:cb:6b:66:fc:62: cc:3a:30:f3:b2:dc:dd:23:3c:88:cf:53:e0:b7:77: c9:a6:0e:17:e5:7b:e8:2c:cb:8f:f2:e8:fd:23:b4: e2:5c:9e:74:34:22:a9:99:a3:b8:c7:20:16:9b:90: 5a:da:d4:f2:3e:2e:e7:24:7e:d5:91:a3:24:0f:d9: 2f:d5:c3:c6:47:67:cb:73:9b:88:0e:6b:13:e6:06: b7:dd:19:95:38:ec:1e:6d:34:f3:7f:8a:91:3d:8d: 55:2c:f7:fe:0b:b1:0a:f7:7e:5a:06:e2:d2:c1:20: 70:15:98:0e:bd:76:97:6e:2f:f5:2c:a4:ff:66:43: c9:e3:69:38:b4:e1:d4:93:92:45:46:da:e1:c4:27: aa:8d:19:46:31:c9:e8:80:8e:07:69:6e:c7:ec:6f: 45:34:9d:33:52:47:b2:d7:c2:25:d2:02:38:f7:1d: 2b:30:d5:dd:90:ee:29:d4:da:26:dc:89:9d:29:28: cb:3f:e8:46:53:59:38:e6:1a:d1:d9:a2:6b:fc:cb: 32:e5:19:a0:24:10:70:4b:92:8c:be:2d:1b:f8:c4: f3:4a:7d:8e:1f:12:f0:e2:c6:06:2f:b4:ad:bc:7e: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:52:B8:9D:C7:C7:2F:00:55:FD:D5:AC:51:70:71:6E:28:64:55:A6 X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a3:b4:0f:68:7d:7d:db:20:36:84:c3:73:e2:74:a3:91:4a: 14:14:0d:9e:2f:65:7d:3c:e6:83:d7:91:78:b7:d1:ac:2b:63: bf:6c:fa:91:ef:e4:d8:39:d9:c5:33:6e:eb:fe:81:40:0d:a2: 4d:10:11:83:d7:eb:fe:ad:4f:2e:43:8d:60:08:68:63:34:3f: 90:11:67:8b:56:3c:b4:2b:20:a9:6e:93:34:f1:4d:a2:9b:d3: 55:6b:a2:7c:65:20:90:e4:2d:d6:ef:dc:39:b9:e2:23:52:9b: bc:d9:b4:95:99:19:f1:31:7d:4c:05:25:19:95:20:79:5d:70: 69:d5:44:42:58:31:9d:4f:88:3c:28:4b:c2:5a:1a:db:2e:b1: d1:18:a4:3b:09:08:1c:96:dd:14:3d:34:26:b4:05:81:d9:6f: 75:ec:7e:96:0a:0e:e9:8e:a5:df:36:5c:ab:52:39:5c:63:ac: d1:13:84:13:19:8c:0e:c7:23:5f:bc:3f:30:3f:d5:ed:87:ad: 77:f7:d1:b2:8a:d2:79:9f:c0:3d:04:c9:08:20:d0:da:ba:c7: 7d:34:5b:4a:f1:d9:be:34:af:ed:b5:7f:9f:b8:a4:6e:19:f7: cc:9a:18:7c:74:42:1b:66:d1:ec:02:ce:3a:8c:a4:11:69:a1: b8:9b:8b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIIq0Nixhyoc/o8Ve1jN5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjUxMjEwMTIwMDQ4WhcNMjUxMjExMTIwMDQ4WjAzMTEwLwYDVQQD Eyg0MjUyYjg5ZGM3YzcyZjAwNTVmZGQ1YWM1MTcwNzE2ZTI4NjQ1NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst41sq857vp2vWxkmsPGTasncVI5 cIw4y2tm/GLMOjDzstzdIzyIz1Pgt3fJpg4X5XvoLMuP8uj9I7TiXJ50NCKpmaO4 xyAWm5Ba2tTyPi7nJH7VkaMkD9kv1cPGR2fLc5uIDmsT5ga33RmVOOwebTTzf4qR PY1VLPf+C7EK935aBuLSwSBwFZgOvXaXbi/1LKT/ZkPJ42k4tOHUk5JFRtrhxCeq jRlGMcnogI4HaW7H7G9FNJ0zUkey18Il0gI49x0rMNXdkO4p1Nom3ImdKSjLP+hG U1k45hrR2aJr/Msy5RmgJBBwS5KMvi0b+MTzSn2OHxLw4sYGL7StvH5VpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJSuJ3Hxy8AVf3VrFFwcW4oZFWmMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqO0D2h9 fdsgNoTDc+J0o5FKFBQNni9lfTzmg9eReLfRrCtjv2z6ke/k2DnZxTNu6/6BQA2i TRARg9fr/q1PLkONYAhoYzQ/kBFni1Y8tCsgqW6TNPFNopvTVWuifGUgkOQt1u/c ObniI1KbvNm0lZkZ8TF9TAUlGZUgeV1wadVEQlgxnU+IPChLwloa2y6x0RikOwkI HJbdFD00JrQFgdlvdex+lgoO6Y6l3zZcq1I5XGOs0ROEExmMDscjX7w/MD/V7Yet d/fRsorSeZ/APQTJCCDQ2rrHfTRbSvHZvjSv7bV/n7ikbhn3zJoYfHRCG2bR7ALO OoykEWmhuJuLQw== -----END CERTIFICATE-----Generated at Wed Dec 10 17:45:33 2025 by rpki-client