This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json) Hash identifier: e33uKsJ4qLAuFytf7uWB/6PgJenxOMcfyb2V+0UGZVQ= Subject key identifier: 5D:5E:93:27:E4:76:4B:60:D1:47:D7:6D:12:2B:96:79:48:DF:AA:B2 Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa Certificate serial: 019B3AFDDD07B4022FF1C011F71AF555723C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 09:01:14 +0000 Manifest this update: Sat 20 Dec 2025 09:01:14 +0000 Manifest next update: Sun 21 Dec 2025 09:01:14 +0000 Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=) 2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: gMKocRqjXeMRaRpUVmxP8YwGQlPbfnSxfLkBJJvTTeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:dd:07:b4:02:2f:f1:c0:11:f7:1a:f5:55:72:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa Validity Not Before: Dec 20 09:01:14 2025 GMT Not After : Dec 21 09:01:14 2025 GMT Subject: CN=5d5e9327e4764b60d147d76d122b967948dfaab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:e2:65:6f:2b:b4:00:37:bd:0f:85:6b:ac: 25:d6:33:39:65:19:6f:19:53:f0:18:5e:73:85:bb: e1:0c:aa:93:b9:0c:79:a8:93:1d:88:5d:29:e2:13: 71:f0:27:c0:78:a6:08:8e:d4:eb:a0:a3:b8:10:d0: 8a:dc:a0:cf:44:bc:35:3f:88:fc:b7:1a:d0:15:f1: a3:2c:25:0a:75:50:fc:a7:4c:3b:bd:fe:13:e4:4c: 1b:55:b7:ab:8c:82:43:0b:fb:e6:58:c0:f3:9c:d6: 59:76:03:33:78:3e:e0:fd:2b:b5:1b:d2:6d:0e:76: 39:de:8f:ac:47:d2:bb:1a:f9:52:37:75:20:48:c2: 83:fd:86:0c:9d:47:62:51:f1:43:39:60:2a:c7:44: 7f:b2:5b:9d:30:df:7d:27:c1:1e:4c:30:77:40:ae: e5:10:ac:de:8d:41:73:b9:ec:65:7b:e4:7c:93:0f: e2:fc:e3:4c:1c:e4:af:2c:54:65:80:f5:20:ea:c6: a3:c6:71:f6:c4:be:8e:13:62:32:6f:fd:d3:91:3e: cf:5f:8e:0a:02:7d:f6:51:c5:63:af:ad:c7:2a:24: 6a:51:fc:6c:1f:71:56:b4:98:7c:d3:e0:c9:aa:26: 7e:99:bd:a9:56:08:b3:f5:d5:da:db:e9:2e:be:0a: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5E:93:27:E4:76:4B:60:D1:47:D7:6D:12:2B:96:79:48:DF:AA:B2 X509v3 Authority Key Identifier: keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:da:f8:e9:cb:5a:fd:23:55:5c:fc:52:9b:53:84:82:1b:52: 46:34:d0:a0:33:b3:76:32:0d:6f:82:40:fc:db:d6:66:43:47: 7d:d0:45:84:0a:af:83:7f:fa:90:9f:01:7d:36:88:a0:cc:15: 26:a3:49:c1:fa:1a:e1:9c:b2:76:6b:84:f3:32:5e:0a:50:4b: 4e:d1:db:1c:d6:dd:51:a8:cd:d5:d8:0b:be:ea:26:55:68:67: 18:9b:49:2e:61:9e:db:70:4f:c5:b2:7f:53:e3:da:b9:e0:26: 07:4c:d9:12:8e:8f:9e:b5:d6:54:d3:1c:6c:b9:50:24:39:66: d4:c5:cf:1a:7d:c8:ba:24:1a:9e:91:2b:12:40:ce:7d:3e:fd: ce:87:28:e1:d5:ad:f0:22:e4:19:1a:d6:36:48:4c:ea:ae:5b: 66:a5:ed:6a:86:b5:09:cb:fc:cd:a8:9b:b1:ea:c4:3d:53:b3: 60:5c:15:37:fc:b4:87:6a:04:f6:f0:1c:0d:d4:5c:2e:15:27: 12:78:85:f2:f7:ee:04:e1:03:fe:64:8f:6b:ea:9f:5e:14:16: d6:92:11:fc:ff:75:e9:c4:09:91:50:19:13:8c:fa:85:8b:ed: 21:88:8e:34:60:0e:7b:9f:83:75:ce:ca:4a:b9:b1:44:d4:4e: 0f:71:45:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/d0HtAIv8cAR9xr1VXI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw MzkzYWEwHhcNMjUxMjIwMDkwMTE0WhcNMjUxMjIxMDkwMTE0WjAzMTEwLwYDVQQD Eyg1ZDVlOTMyN2U0NzY0YjYwZDE0N2Q3NmQxMjJiOTY3OTQ4ZGZhYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYjiZW8rtAA3vQ+Fa6wl1jM5ZRlv GVPwGF5zhbvhDKqTuQx5qJMdiF0p4hNx8CfAeKYIjtTroKO4ENCK3KDPRLw1P4j8 txrQFfGjLCUKdVD8p0w7vf4T5EwbVberjIJDC/vmWMDznNZZdgMzeD7g/Su1G9Jt DnY53o+sR9K7GvlSN3UgSMKD/YYMnUdiUfFDOWAqx0R/sludMN99J8EeTDB3QK7l EKzejUFzuexle+R8kw/i/ONMHOSvLFRlgPUg6sajxnH2xL6OE2Iyb/3TkT7PX44K An32UcVjr63HKiRqUfxsH3FWtJh80+DJqiZ+mb2pVgiz9dXa2+kuvgoj/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1ekyfkdktg0UfXbRIrlnlI36qyMB8GA1UdIwQY MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNr46cta /SNVXPxSm1OEghtSRjTQoDOzdjINb4JA/NvWZkNHfdBFhAqvg3/6kJ8BfTaIoMwV JqNJwfoa4ZyydmuE8zJeClBLTtHbHNbdUajN1dgLvuomVWhnGJtJLmGe23BPxbJ/ U+PaueAmB0zZEo6PnrXWVNMcbLlQJDlm1MXPGn3IuiQanpErEkDOfT79zoco4dWt 8CLkGRrWNkhM6q5bZqXtaoa1Ccv8zaibserEPVOzYFwVN/y0h2oE9vAcDdRcLhUn EniF8vfuBOED/mSPa+qfXhQW1pIR/P916cQJkVAZE4z6hYvtIYiONGAOe5+Ddc7K SrmxRNROD3FFLg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:10:48 2025 by rpki-client