This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json) Hash identifier: eNKQHGKl5k0wjQOmSwu4OUDpaMMs0HsiIhVMjBJhKSg= Subject key identifier: 1D:2E:A3:10:33:2E:82:61:E2:A0:5D:39:0E:04:50:BA:DB:48:B4:90 Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4 Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4 Certificate serial: 019B0F6E61E5C306E531F023A18A365387D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft Manifest number: 1489 Signing time: Thu 11 Dec 2025 22:00:50 +0000 Manifest this update: Thu 11 Dec 2025 22:00:50 +0000 Manifest next update: Fri 12 Dec 2025 22:00:50 +0000 Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: JJamCaYilp8uy3pYiPFiwMEcAvejlxj+vrNHVdM6fjI=) 2: s3MszUL2Sssrqjezj_btDkPTmQg.roa (hash: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:61:e5:c3:06:e5:31:f0:23:a1:8a:36:53:87:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4 Validity Not Before: Dec 11 22:00:50 2025 GMT Not After : Dec 12 22:00:50 2025 GMT Subject: CN=1d2ea310332e8261e2a05d390e0450badb48b490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:a8:80:7c:6b:a3:df:de:ad:74:ca:d0:da: be:a6:93:54:10:c6:7c:e2:2e:63:23:0b:74:da:32: 8a:32:ba:e0:75:af:ef:e9:6d:ed:c9:c4:af:d1:bc: 28:38:e8:d6:89:87:b6:b6:1e:39:f7:34:b1:a3:1d: 5f:60:f3:54:7b:fa:9c:43:1e:82:d7:a7:e9:de:bc: 34:de:2a:73:63:41:65:d4:4c:aa:8b:ed:f7:ee:38: 76:53:1e:90:db:c5:06:a8:c3:fb:75:3f:e3:7e:a6: 72:76:78:7c:94:f3:2a:fa:09:0a:91:52:05:2a:6f: 8c:5a:bd:1c:64:a5:b3:dc:97:19:0e:9a:6e:f7:c2: 60:91:3e:ec:b1:15:1b:7d:79:3c:06:e9:db:a1:64: 46:a2:0b:29:0b:99:88:f0:72:19:ed:66:4b:ae:91: 05:c8:a0:6a:cc:4b:30:7d:08:c5:83:dd:dd:72:6e: a1:e5:f1:48:44:9c:9b:7c:1e:bb:87:b5:4b:36:fd: 59:e0:90:98:f6:e9:17:5a:3b:b8:0d:47:86:fe:a9: c5:c7:96:23:db:f4:52:1a:70:a5:62:87:c9:ad:9f: ca:65:11:2b:99:d1:0d:c0:1d:ab:24:7a:9d:4a:d2: 20:74:3e:bf:6f:9e:d9:36:18:9d:b9:27:96:c5:a3: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2E:A3:10:33:2E:82:61:E2:A0:5D:39:0E:04:50:BA:DB:48:B4:90 X509v3 Authority Key Identifier: keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:69:a1:64:62:97:61:b9:92:1c:e7:98:79:5c:95:62:2c:76: 67:a3:45:6f:f6:28:64:43:df:99:a9:16:72:8a:70:fc:85:2b: f4:7b:89:d6:77:33:8e:5d:76:64:03:6e:ac:c6:6d:5d:98:72: d4:07:5d:cb:e8:b5:ba:09:3d:49:8e:6f:6d:e6:ee:46:45:87: 9b:8d:2b:34:80:09:92:4e:12:36:fc:7a:1d:57:ba:c2:68:25: 2b:1e:b5:dc:58:a4:85:40:79:10:c4:6d:34:60:4d:75:3a:5f: 82:da:93:a2:fa:8c:1e:55:78:1c:8e:51:07:2e:53:70:d8:29: cc:9a:86:83:c1:c9:74:f9:e8:df:95:48:ec:09:74:8c:5f:b4: 81:c7:ac:45:a6:d3:b6:8a:6a:67:eb:35:6e:6f:42:40:57:b6: ef:fa:fd:c8:39:ea:e8:a7:d5:a1:12:70:e7:a6:86:7b:ee:b2: d9:57:76:97:c3:fe:ca:7a:a3:66:0f:df:3b:e4:f5:71:a5:e3: fc:39:da:15:71:d4:1e:5f:bf:fd:8c:da:0c:4c:71:e2:91:6c: a5:46:7f:84:40:8b:f7:e9:ca:c1:75:64:76:a5:c8:9f:c8:5e: 71:82:ea:db:43:25:51:11:8a:20:94:64:d8:59:31:f3:3e:b5: 0e:5d:8b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbmHlwwblMfAjoYo2U4fXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDY1YjljZmIzNjhjNjllY2IwZTNmZWEzYjU0MmJhOWM3 MzAxZjQwHhcNMjUxMjExMjIwMDUwWhcNMjUxMjEyMjIwMDUwWjAzMTEwLwYDVQQD EygxZDJlYTMxMDMzMmU4MjYxZTJhMDVkMzkwZTA0NTBiYWRiNDhiNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGiogHxro9/erXTK0Nq+ppNUEMZ8 4i5jIwt02jKKMrrgda/v6W3tycSv0bwoOOjWiYe2th459zSxox1fYPNUe/qcQx6C 16fp3rw03ipzY0Fl1Eyqi+337jh2Ux6Q28UGqMP7dT/jfqZydnh8lPMq+gkKkVIF Km+MWr0cZKWz3JcZDppu98JgkT7ssRUbfXk8BunboWRGogspC5mI8HIZ7WZLrpEF yKBqzEswfQjFg93dcm6h5fFIRJybfB67h7VLNv1Z4JCY9ukXWju4DUeG/qnFx5Yj 2/RSGnClYofJrZ/KZRErmdENwB2rJHqdStIgdD6/b57ZNhiduSeWxaO/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0uoxAzLoJh4qBdOQ4EULrbSLSQMB8GA1UdIwQY MBaAFGhGW5z7Noxp7LDj/qO1QrqccwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMt MWFlYTViZTE1MGZhLzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMtMWFlYTViZTE1MGZh LzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmmhZGKX YbmSHOeYeVyVYix2Z6NFb/YoZEPfmakWcopw/IUr9HuJ1nczjl12ZANurMZtXZhy 1Addy+i1ugk9SY5vbebuRkWHm40rNIAJkk4SNvx6HVe6wmglKx613FikhUB5EMRt NGBNdTpfgtqTovqMHlV4HI5RBy5TcNgpzJqGg8HJdPno35VI7Al0jF+0gcesRabT topqZ+s1bm9CQFe27/r9yDnq6KfVoRJw56aGe+6y2Vd2l8P+ynqjZg/fO+T1caXj /DnaFXHUHl+//YzaDExx4pFspUZ/hECL9+nKwXVkdqXIn8hecYLq20MlURGKIJRk 2Fkx8z61Dl2L1w== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:35 2025 by rpki-client