This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json) Hash identifier: XHVuGj5Ee7Za8HjzvNCD2xm47KnTOZ+L7TP3e5AZlpU= Subject key identifier: 63:D0:43:AD:5C:34:1F:12:53:CD:DF:6D:BE:B6:3C:52:E2:8F:D6:ED Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b Certificate serial: 019B59E407F569EEAC6FFB62DC6CD5548C18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 09:01:14 +0000 Manifest this update: Fri 26 Dec 2025 09:01:14 +0000 Manifest next update: Sat 27 Dec 2025 09:01:14 +0000 Files and hashes: 1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: aQ3Vf7yExL4Rlljm0im3btq68o1Sk55wVzivoiSZXRU=) 2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:07:f5:69:ee:ac:6f:fb:62:dc:6c:d5:54:8c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b Validity Not Before: Dec 26 09:01:14 2025 GMT Not After : Dec 27 09:01:14 2025 GMT Subject: CN=63d043ad5c341f1253cddf6dbeb63c52e28fd6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a5:5b:7b:29:1b:4e:98:d2:00:56:4e:3c:2e: d6:1a:76:8b:f3:15:5d:75:da:31:c5:4e:a5:27:ff: 4d:c3:ee:da:77:ad:cd:41:d8:e8:e0:ed:d0:87:bf: 89:2c:0f:cb:8b:1f:6a:0f:10:60:a8:7c:e0:89:b6: c5:8a:68:27:d6:87:88:40:e8:2d:01:76:1f:10:60: 5c:06:8c:21:36:46:3e:d1:aa:99:94:ed:21:05:db: 7a:68:ec:17:75:6f:8a:a4:b8:cf:3a:cf:2b:3c:fb: f8:d7:c4:76:46:fd:49:ff:e8:df:ce:89:51:f7:49: 78:62:0c:bf:e5:b0:6f:9b:f8:d0:46:bf:ce:71:8a: 0a:ef:55:a5:68:ec:6c:7e:3e:a8:c8:1a:2c:7c:48: 08:c5:ff:88:27:7d:74:96:d2:5b:65:11:08:23:18: 80:38:28:2a:f9:6c:b5:b2:d7:74:76:2e:2c:71:a4: 8c:6a:d7:61:64:9a:87:13:48:72:a0:e7:a4:56:5a: f2:e3:02:d7:fe:dd:55:8a:73:9c:09:c2:07:d7:22: 46:28:bb:89:7d:d8:cf:9d:3e:a7:15:a0:16:2b:5d: 41:ff:1b:fe:1e:6f:3b:13:87:a8:a6:a5:2c:fc:af: 8a:ee:8d:6a:94:8f:91:be:92:f0:95:0b:77:12:57: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D0:43:AD:5C:34:1F:12:53:CD:DF:6D:BE:B6:3C:52:E2:8F:D6:ED X509v3 Authority Key Identifier: keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e5:82:79:d2:24:d8:40:66:cf:9b:d4:14:5a:c1:73:7a:12: ae:d6:c9:6a:67:8d:b3:14:11:57:1f:ad:a7:d9:47:9b:aa:cb: 19:63:5f:14:ae:19:19:b0:07:b0:6a:4b:68:9f:c4:10:d1:2d: f4:e0:91:a2:b4:a2:58:ef:f0:5d:30:3e:2b:d5:62:af:31:1c: 78:4c:82:59:8c:fc:d2:55:09:87:89:99:24:d1:f3:37:52:31: d4:40:4a:24:ec:6c:e0:28:5d:36:7d:ab:2d:34:65:86:93:74: 08:0b:e2:b2:c2:77:a0:04:66:a3:93:f5:00:25:d6:86:53:90: f0:a8:ca:09:08:d8:17:ab:3b:80:05:c6:d4:d9:9a:7d:c3:9d: 59:54:a4:28:d4:e0:a7:a8:e0:86:ae:ef:93:34:ec:df:6f:dd: 69:55:f4:f5:2e:65:d7:02:04:4c:25:e4:cd:ba:fc:1b:0e:48: 1e:38:cc:24:fa:1a:54:90:91:7d:cc:25:81:6c:8d:e5:0d:af: a5:e6:54:25:1c:f8:de:69:76:63:37:e4:53:36:04:d8:c1:f0: 8c:e7:7f:0c:f7:c5:be:c7:bf:a8:ef:60:0e:9e:df:50:bf:88: 63:3c:ee:c0:26:ef:43:dd:c5:28:4e:e0:64:0c:db:08:c0:9f: 27:05:ca:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Af1ae6sb/ti3GzVVIwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMjExNjQzMTg3ZWY5MjU4YTEzMjVjZGZjMWQxYmY3Mzgz YmU4NWIwHhcNMjUxMjI2MDkwMTE0WhcNMjUxMjI3MDkwMTE0WjAzMTEwLwYDVQQD Eyg2M2QwNDNhZDVjMzQxZjEyNTNjZGRmNmRiZWI2M2M1MmUyOGZkNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qVbeykbTpjSAFZOPC7WGnaL8xVd ddoxxU6lJ/9Nw+7ad63NQdjo4O3Qh7+JLA/Lix9qDxBgqHzgibbFimgn1oeIQOgt AXYfEGBcBowhNkY+0aqZlO0hBdt6aOwXdW+KpLjPOs8rPPv418R2Rv1J/+jfzolR 90l4Ygy/5bBvm/jQRr/OcYoK71WlaOxsfj6oyBosfEgIxf+IJ310ltJbZREIIxiA OCgq+Wy1std0di4scaSMatdhZJqHE0hyoOekVlry4wLX/t1VinOcCcIH1yJGKLuJ fdjPnT6nFaAWK11B/xv+Hm87E4eopqUs/K+K7o1qlI+RvpLwlQt3Elcd3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPQQ61cNB8SU83fbb62PFLij9btMB8GA1UdIwQY MBaAFGohFkMYfvklihMlzfwdG/c4O+hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYt ZjA2ZmM0OGM4ZTRjLzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYtZjA2ZmM0OGM4ZTRj LzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuWCedIk 2EBmz5vUFFrBc3oSrtbJameNsxQRVx+tp9lHm6rLGWNfFK4ZGbAHsGpLaJ/EENEt 9OCRorSiWO/wXTA+K9VirzEceEyCWYz80lUJh4mZJNHzN1Ix1EBKJOxs4ChdNn2r LTRlhpN0CAvissJ3oARmo5P1ACXWhlOQ8KjKCQjYF6s7gAXG1NmafcOdWVSkKNTg p6jghq7vkzTs32/daVX09S5l1wIETCXkzbr8Gw5IHjjMJPoaVJCRfcwlgWyN5Q2v peZUJRz43ml2YzfkUzYE2MHwjOd/DPfFvse/qO9gDp7fUL+IYzzuwCbvQ93FKE7g ZAzbCMCfJwXKuA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:22 2025 by rpki-client