This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json) Hash identifier: q5TtAW24qv5lGqn7MLSYTRGsQ9f0keC1QWFhy4P5TCk= Subject key identifier: D8:23:9C:B8:DB:34:2D:CC:90:03:E8:EA:D4:43:9C:9F:41:D3:34:48 Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26 Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826 Certificate serial: 019B18DFA971FB9A537B3DFE7AF23D753819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft Manifest number: 0E5B Signing time: Sat 13 Dec 2025 18:01:09 +0000 Manifest this update: Sat 13 Dec 2025 18:01:09 +0000 Manifest next update: Sun 14 Dec 2025 18:01:09 +0000 Files and hashes: 1: KnUOYk5bdwDOyPRpWUFQ6FTo7gs.roa (hash: oV64n7K/Nu3TxpzkL+waUqCMMUTsVFeqTi3s1yY0Zn0=) 2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: cFO2roO654LL/YqjA7cH4azADtR8ysuQMhnoU/ykGVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:a9:71:fb:9a:53:7b:3d:fe:7a:f2:3d:75:38:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826 Validity Not Before: Dec 13 18:01:09 2025 GMT Not After : Dec 14 18:01:09 2025 GMT Subject: CN=d8239cb8db342dcc9003e8ead4439c9f41d33448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:0c:3d:e3:4a:5e:1a:46:6f:b5:28:0a:47: df:41:74:79:59:62:7c:4b:9c:6e:e1:a8:e2:84:d0: 7e:6f:16:d8:c0:c9:1d:c2:af:00:db:1a:c1:17:55: ce:45:b0:67:2c:82:1e:44:fa:f0:00:d5:8c:44:c2: 18:63:ed:b9:69:19:f9:a3:51:fd:16:ae:d9:29:3b: d7:7b:e7:29:52:30:4f:27:79:6a:86:97:73:22:45: ec:19:18:99:b9:41:93:8f:3e:0c:f7:81:17:70:7e: 98:8a:76:b0:02:ea:44:94:fb:e6:b4:ea:f4:f6:60: bd:b4:ec:8d:b5:da:a4:ab:ae:34:47:94:f7:3f:24: 28:07:2e:d4:3d:35:e6:3d:5c:e7:31:43:27:71:1a: 9e:b6:8d:78:3c:b9:ba:ce:94:7a:34:9e:39:93:5f: 09:c4:97:a0:6b:1f:08:15:f7:7b:f8:2e:fe:83:b6: 74:57:7a:77:1b:16:17:76:54:6c:81:f0:a9:3b:d7: 57:0f:e9:1c:bd:65:47:26:f5:c3:94:31:a9:02:c5: 5c:15:5e:b1:bf:95:1b:5f:6c:b2:0b:5a:4b:bb:0a: 33:e6:58:78:0e:f3:ca:3d:65:94:95:42:e5:4a:ba: f0:9f:96:2f:39:29:e7:e5:72:84:9a:a9:1a:31:5c: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:23:9C:B8:DB:34:2D:CC:90:03:E8:EA:D4:43:9C:9F:41:D3:34:48 X509v3 Authority Key Identifier: keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6c:dc:d4:c3:7b:b5:49:8a:f6:0e:fe:88:36:ad:5c:20:31: c1:09:59:80:d5:c7:d7:9e:83:de:46:c8:c8:46:15:35:79:bb: fb:26:b0:b3:0a:78:98:ce:bf:90:ca:b8:4f:8f:b3:f9:7b:3e: 2c:86:43:60:ea:f4:d1:b8:7d:70:e7:55:38:48:ac:c6:0f:14: 33:91:73:d8:d0:4e:47:16:6d:ba:8c:a9:bf:f4:22:81:12:aa: 4e:99:ca:da:6c:74:fe:d3:f0:bc:7f:92:4c:88:73:c9:7b:6e: b4:a1:6b:7e:3e:0b:07:ba:0d:9a:4e:f0:8f:bb:97:9a:45:30: 6d:4c:85:8d:20:3d:5c:67:d6:3e:52:14:ab:30:5a:3e:21:76: 22:5e:56:4a:1c:99:eb:a6:a2:78:07:c2:c0:51:8c:11:b8:46: c8:87:74:75:8e:aa:48:ef:f4:ba:50:22:f8:d8:5c:79:32:9b: 60:83:58:3e:00:39:70:95:3f:25:54:09:21:d1:8b:5b:e3:1c: a1:48:32:c8:aa:78:5f:c2:c8:c2:ef:1f:e6:a6:bb:8d:4e:5c: b9:95:51:8e:5c:62:71:89:19:6f:0c:28:99:66:bb:39:e1:87: 95:07:92:7f:3d:1a:9d:66:9d:5a:47:fe:16:94:be:4d:78:8e: 8f:b3:6a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY36lx+5pTez3+evI9dTgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YTdjMmM4NGZmYTQ5MzRjZjBmNzNlZjFhMWExYTMzNzg3 MzE4MjYwHhcNMjUxMjEzMTgwMTA5WhcNMjUxMjE0MTgwMTA5WjAzMTEwLwYDVQQD EyhkODIzOWNiOGRiMzQyZGNjOTAwM2U4ZWFkNDQzOWM5ZjQxZDMzNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr00MPeNKXhpGb7UoCkffQXR5WWJ8 S5xu4ajihNB+bxbYwMkdwq8A2xrBF1XORbBnLIIeRPrwANWMRMIYY+25aRn5o1H9 Fq7ZKTvXe+cpUjBPJ3lqhpdzIkXsGRiZuUGTjz4M94EXcH6YinawAupElPvmtOr0 9mC9tOyNtdqkq640R5T3PyQoBy7UPTXmPVznMUMncRqeto14PLm6zpR6NJ45k18J xJegax8IFfd7+C7+g7Z0V3p3GxYXdlRsgfCpO9dXD+kcvWVHJvXDlDGpAsVcFV6x v5UbX2yyC1pLuwoz5lh4DvPKPWWUlULlSrrwn5YvOSnn5XKEmqkaMVxpdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgjnLjbNC3MkAPo6tRDnJ9B0zRIMB8GA1UdIwQY MBaAFGinwshP+kk0zw9z7xoaGjN4cxgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTQ1NWQtZjZjZS00MzZjLTgzMjct ZGI2ZGRiNGE0NGU1LzEvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mZTQ1NWQtZjZjZS00MzZjLTgzMjctZGI2ZGRiNGE0NGU1 LzEvYUtmQ3lFXzZTVFRQRDNQdkdob2FNM2h6R0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGzc1MN7 tUmK9g7+iDatXCAxwQlZgNXH156D3kbIyEYVNXm7+yawswp4mM6/kMq4T4+z+Xs+ LIZDYOr00bh9cOdVOEisxg8UM5Fz2NBORxZtuoypv/QigRKqTpnK2mx0/tPwvH+S TIhzyXtutKFrfj4LB7oNmk7wj7uXmkUwbUyFjSA9XGfWPlIUqzBaPiF2Il5WShyZ 66aieAfCwFGMEbhGyId0dY6qSO/0ulAi+NhceTKbYINYPgA5cJU/JVQJIdGLW+Mc oUgyyKp4X8LIwu8f5qa7jU5cuZVRjlxicYkZbwwomWa7OeGHlQeSfz0anWadWkf+ FpS+TXiOj7Nq7Q== -----END CERTIFICATE-----Generated at Sun Dec 14 00:07:40 2025 by rpki-client