This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json) Hash identifier: kAFe2vq+IMT168kVt+aqvNqtN8lFT1cIDrlhbdNehls= Subject key identifier: 11:D9:DC:02:A8:A5:BE:93:7F:87:16:0D:F6:5E:77:FD:72:D9:D8:D2 Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0 Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0 Certificate serial: 019B5977462A51A209B6E36DB2300E92BAAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:02:27 +0000 Manifest this update: Fri 26 Dec 2025 07:02:27 +0000 Manifest next update: Sat 27 Dec 2025 07:02:27 +0000 Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: d4hLpmXxjtJXGiREIx4AGaoMISBaaMn2rVQnY+tTLnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:46:2a:51:a2:09:b6:e3:6d:b2:30:0e:92:ba:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0 Validity Not Before: Dec 26 07:02:27 2025 GMT Not After : Dec 27 07:02:27 2025 GMT Subject: CN=11d9dc02a8a5be937f87160df65e77fd72d9d8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:b3:aa:1e:2a:9d:96:d2:2c:27:62:ff:ed: c1:ff:66:be:09:21:ec:e0:48:b7:4b:59:3a:b9:1d: 24:65:53:ca:35:fd:d5:1c:b7:af:b5:e4:20:45:56: 4a:68:8f:78:d1:23:e8:87:65:41:75:d1:71:13:d9: 8d:0c:bc:12:e8:e0:14:aa:9e:20:17:8f:e5:f6:e3: de:97:1e:be:af:93:4c:12:cc:79:56:94:07:93:92: 0c:b1:b9:e0:e2:ef:98:ec:e3:35:d6:74:e8:79:fa: 06:71:f1:0e:83:3a:59:16:27:8a:7d:9f:96:7a:4d: eb:6f:97:53:c9:49:b8:80:94:5a:75:d2:76:26:bd: 53:b0:59:23:d6:cf:9f:5e:1a:ef:2f:35:c8:77:07: 58:99:95:34:46:bd:44:ed:c5:66:0a:de:a9:d2:32: d2:22:c2:30:b7:e0:06:33:0d:fa:dc:8c:bf:03:31: 90:c1:d9:2b:c4:ff:60:8a:f1:d9:61:13:6d:77:b0: ed:f1:07:49:76:b3:1a:d3:4c:35:ac:8d:e7:91:0a: 91:b6:d3:81:24:52:f7:70:3c:70:9d:a0:39:3a:03: cc:15:e5:e7:34:40:5f:b8:88:42:35:8c:42:75:b0: 2e:dc:aa:ab:c1:0d:ab:e5:f8:ba:20:21:bb:dd:10: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D9:DC:02:A8:A5:BE:93:7F:87:16:0D:F6:5E:77:FD:72:D9:D8:D2 X509v3 Authority Key Identifier: keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:02:16:05:60:a8:36:b8:a7:d7:aa:b3:44:23:b2:a2:ec:30: 5c:d6:6e:1b:5b:ad:0e:17:1b:06:42:ad:f7:9e:9a:cc:9a:3d: a4:2c:d0:dd:35:fa:84:e7:8b:3b:3b:ae:f6:19:b5:d9:4a:9d: f6:d3:3c:dc:0c:55:9f:6b:6f:6a:a7:ae:20:17:09:38:5a:ed: 58:50:32:29:62:0b:08:b3:b3:93:03:97:e7:fa:74:a8:4c:0e: 90:bc:c4:4a:4b:0f:3a:b8:5d:3e:6c:40:24:cb:97:50:ef:79: fa:b6:01:13:6c:9f:fc:5d:d1:20:5f:4e:c4:d4:c2:a5:d5:9a: a3:da:11:10:1b:d3:44:cb:9a:c3:80:3b:98:a7:24:81:fa:ee: ae:5b:bf:68:75:1f:1d:27:d9:1d:67:67:40:d6:26:90:c0:fb: 0a:ad:c1:23:ec:bd:c1:6f:f9:fa:31:09:f1:e8:55:3e:8f:50: 78:50:2d:b0:87:2d:de:30:11:0a:ef:37:00:ca:01:75:ce:9a: b2:b1:e1:03:1e:3d:bf:a0:4e:dd:61:79:1e:50:85:1c:90:35: 02:e2:5b:7d:82:1e:ed:7d:73:c9:19:d3:0d:fe:31:ef:a6:bf: 74:d1:1e:a4:d1:5b:b1:07:80:be:62:7a:6c:f0:2b:95:1b:2d: a0:95:8c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0YqUaIJtuNtsjAOkrqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTEwYTEyOTU1OGM4MzgwYmMxM2Q5YWM0NTQwMWQyMWRh YjlkZjAwHhcNMjUxMjI2MDcwMjI3WhcNMjUxMjI3MDcwMjI3WjAzMTEwLwYDVQQD EygxMWQ5ZGMwMmE4YTViZTkzN2Y4NzE2MGRmNjVlNzdmZDcyZDlkOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOSzqh4qnZbSLCdi/+3B/2a+CSHs 4Ei3S1k6uR0kZVPKNf3VHLevteQgRVZKaI940SPoh2VBddFxE9mNDLwS6OAUqp4g F4/l9uPelx6+r5NMEsx5VpQHk5IMsbng4u+Y7OM11nToefoGcfEOgzpZFieKfZ+W ek3rb5dTyUm4gJRaddJ2Jr1TsFkj1s+fXhrvLzXIdwdYmZU0Rr1E7cVmCt6p0jLS IsIwt+AGMw363Iy/AzGQwdkrxP9givHZYRNtd7Dt8QdJdrMa00w1rI3nkQqRttOB JFL3cDxwnaA5OgPMFeXnNEBfuIhCNYxCdbAu3KqrwQ2r5fi6ICG73RCJjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHZ3AKopb6Tf4cWDfZed/1y2djSMB8GA1UdIwQY MBaAFGmhChKVWMg4C8E9msRUAdIdq53wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYTZmYjAtNDhiMi00ZjkzLTg1NWIt ODc3YzY1YjAxNDU2LzEvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yYTZmYjAtNDhiMi00ZjkzLTg1NWItODc3YzY1YjAxNDU2 LzEvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwIWBWCo Nrin16qzRCOyouwwXNZuG1utDhcbBkKt956azJo9pCzQ3TX6hOeLOzuu9hm12Uqd 9tM83AxVn2tvaqeuIBcJOFrtWFAyKWILCLOzkwOX5/p0qEwOkLzESksPOrhdPmxA JMuXUO95+rYBE2yf/F3RIF9OxNTCpdWao9oREBvTRMuaw4A7mKckgfrurlu/aHUf HSfZHWdnQNYmkMD7Cq3BI+y9wW/5+jEJ8ehVPo9QeFAtsIct3jARCu83AMoBdc6a srHhAx49v6BO3WF5HlCFHJA1AuJbfYIe7X1zyRnTDf4x76a/dNEepNFbsQeAvmJ6 bPArlRstoJWMpQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:16 2025 by rpki-client