This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json) Hash identifier: yG8xeAPpjqgofwxgxYBkNZqouzqwcZEaVQ1HoP0stSQ= Subject key identifier: C7:E4:9E:29:3F:C6:BA:A0:EB:DF:D4:CB:B1:51:E4:98:E5:1C:54:BC Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Certificate serial: 019B2D42127CF7D93AD82EE7A0AE6EC9A64F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft Manifest number: 03D1 Signing time: Wed 17 Dec 2025 17:01:03 +0000 Manifest this update: Wed 17 Dec 2025 17:01:03 +0000 Manifest next update: Thu 18 Dec 2025 17:01:03 +0000 Files and hashes: 1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=) 2: SOOUfYeqqZHuoh2Gony2KLPyjUg.roa (hash: 3qFCFMkMfnTPWsf6Qhr45sO5P402Ny67zVPmMEC99q8=) 3: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: N9Y7z2I6bUutXKBWcM+LICWfz2OFM3ot3fWFqpx0MY4=) 4: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=) 5: y6CjvWQerUp0Mv77KMhz5spMEWA.roa (hash: BRh0sxRN6LJqe+S+C32b8EMbRfEqAVHqJDsn1Jnu7HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:12:7c:f7:d9:3a:d8:2e:e7:a0:ae:6e:c9:a6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Validity Not Before: Dec 17 17:01:03 2025 GMT Not After : Dec 18 17:01:03 2025 GMT Subject: CN=c7e49e293fc6baa0ebdfd4cbb151e498e51c54bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:57:13:85:a1:ec:77:d2:2a:e0:d2:5d:96: fc:d8:cb:40:05:15:75:09:16:7a:27:c2:f9:b8:c4: 51:83:5f:e0:d1:60:1b:73:65:1a:13:d3:bd:b0:bd: 82:4c:60:26:58:c0:4c:83:a6:46:92:5d:f0:ba:cf: 3b:57:c3:fe:78:96:58:02:21:9d:ff:ee:46:d3:de: 0f:30:e6:1d:a9:78:ab:31:4b:b2:96:24:d3:17:c5: d8:55:8a:a6:f2:54:fb:f8:36:9b:dd:07:98:d4:c1: 36:bb:65:26:0c:38:6b:88:6c:32:51:74:7f:38:cd: 80:12:74:81:a3:90:21:c9:dc:53:97:83:64:7b:5a: d9:fd:ea:b5:bb:8d:29:3d:9d:29:97:b0:0b:07:84: 8c:1c:e4:a0:24:0b:4a:69:c9:4b:7f:38:b7:99:1d: de:ca:75:14:07:19:68:d9:4a:5f:da:ac:00:a1:2c: 53:7c:55:60:97:48:f2:07:fe:4f:6c:59:6c:fb:73: b5:aa:76:c4:62:ef:0b:c6:19:c9:c6:d1:b9:ce:f9: dc:1d:4a:2d:fa:0a:0e:5f:e0:06:ac:9e:d3:10:9f: 0c:f9:08:f1:3c:d7:b2:f5:d8:9c:37:8b:46:c4:93: 39:fd:36:fd:e9:24:1c:09:fa:27:00:77:f3:e4:64: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E4:9E:29:3F:C6:BA:A0:EB:DF:D4:CB:B1:51:E4:98:E5:1C:54:BC X509v3 Authority Key Identifier: keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:83:8d:38:bc:ed:ed:67:ca:b0:8c:ce:e5:c9:1f:c3:e4:bf: 3a:cd:58:66:2e:92:a2:30:72:aa:bf:b7:90:2e:0a:99:50:ae: e2:e6:48:87:b2:08:3c:50:5f:52:65:e4:50:7f:e1:28:3b:be: 44:44:4a:3e:55:94:b0:53:25:9f:ec:15:53:af:5a:6b:ba:d3: 33:56:c9:5c:0c:4f:38:e5:15:e8:26:4d:79:e6:f5:3e:66:dc: 0c:63:7d:3c:32:53:50:02:dd:b6:a7:ac:db:ff:98:bf:4e:b4: b6:ea:e5:bd:78:57:9b:1c:ae:57:59:d9:9d:cc:bf:54:aa:9d: 48:32:75:ce:4d:2e:56:f6:bf:ab:8e:ee:f2:39:81:14:57:66: ca:62:b4:50:d9:ea:be:1c:4c:40:95:d2:f5:ee:3f:4e:10:cf: d5:2a:6e:c4:34:7e:29:cf:b1:3e:73:9d:12:f2:0e:83:b9:9d: 6d:58:80:6e:73:cc:39:bc:f1:44:7b:dd:8b:b7:8e:b7:03:09: f5:b1:c4:bb:00:b6:cb:0a:eb:9b:e2:8c:cf:e3:d4:c9:8c:8a: 4d:88:40:e3:39:fa:c4:66:94:61:74:11:42:77:42:34:90:d6: 8a:af:55:74:dc:ba:7b:f0:eb:53:0f:36:a3:62:6e:54:f1:03: 01:97:ca:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQhJ899k62C7noK5uyaZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5 ZmYzMjQwHhcNMjUxMjE3MTcwMTAzWhcNMjUxMjE4MTcwMTAzWjAzMTEwLwYDVQQD EyhjN2U0OWUyOTNmYzZiYWEwZWJkZmQ0Y2JiMTUxZTQ5OGU1MWM1NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxddXE4Wh7HfSKuDSXZb82MtABRV1 CRZ6J8L5uMRRg1/g0WAbc2UaE9O9sL2CTGAmWMBMg6ZGkl3wus87V8P+eJZYAiGd /+5G094PMOYdqXirMUuyliTTF8XYVYqm8lT7+Dab3QeY1ME2u2UmDDhriGwyUXR/ OM2AEnSBo5AhydxTl4Nke1rZ/eq1u40pPZ0pl7ALB4SMHOSgJAtKaclLfzi3mR3e ynUUBxlo2Upf2qwAoSxTfFVgl0jyB/5PbFls+3O1qnbEYu8LxhnJxtG5zvncHUot +goOX+AGrJ7TEJ8M+QjxPNey9dicN4tGxJM5/Tb96SQcCfonAHfz5GT8kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfknik/xrqg69/Uy7FR5JjlHFS8MB8GA1UdIwQY MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt ZjRiN2IzOThjNjM0LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0 LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4ONOLzt 7WfKsIzO5ckfw+S/Os1YZi6SojByqr+3kC4KmVCu4uZIh7IIPFBfUmXkUH/hKDu+ RERKPlWUsFMln+wVU69aa7rTM1bJXAxPOOUV6CZNeeb1PmbcDGN9PDJTUALdtqes 2/+Yv060turlvXhXmxyuV1nZncy/VKqdSDJ1zk0uVva/q47u8jmBFFdmymK0UNnq vhxMQJXS9e4/ThDP1SpuxDR+Kc+xPnOdEvIOg7mdbViAbnPMObzxRHvdi7eOtwMJ 9bHEuwC2ywrrm+KMz+PUyYyKTYhA4zn6xGaUYXQRQndCNJDWiq9VdNy6e/DrUw82 o2JuVPEDAZfKGQ== -----END CERTIFICATE-----Generated at Thu Dec 18 01:10:37 2025 by rpki-client