This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json) Hash identifier: XojYL5w0TxYtV7Nzg/ugTFnaJhBNcWUSglG+6hqeArQ= Subject key identifier: 58:EA:5E:6B:0B:A1:42:C7:92:02:D9:BE:D0:4C:95:09:0A:97:F2:E0 Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3 Certificate serial: 019B25F645B31527457134A85F6C99848DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 07:00:55 +0000 Manifest this update: Tue 16 Dec 2025 07:00:55 +0000 Manifest next update: Wed 17 Dec 2025 07:00:55 +0000 Files and hashes: 1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=) 2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: aVB1u7i5IymUibbID4AMWS6D3HWOw2ybSWF9PzrY70g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:45:b3:15:27:45:71:34:a8:5f:6c:99:84:8d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3 Validity Not Before: Dec 16 07:00:55 2025 GMT Not After : Dec 17 07:00:55 2025 GMT Subject: CN=58ea5e6b0ba142c79202d9bed04c95090a97f2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:02:1e:31:19:b0:07:7a:66:34:79:a9:65:ba: e7:47:ef:52:88:7e:8d:b9:6e:a5:41:11:51:12:1a: b0:fd:24:4c:96:ac:75:82:e3:d8:b8:ba:69:77:4c: a4:5a:9c:44:77:32:2b:c4:c3:5c:cf:0f:15:c0:37: 6e:2d:e1:e3:19:d3:ec:88:33:db:bf:48:80:82:e1: d3:05:ef:23:7c:15:43:4d:16:40:50:8f:1f:f9:55: 9f:c9:a1:78:8e:ba:69:ac:c9:9f:17:3e:1d:ea:18: f5:59:e7:c2:2f:fc:1f:ed:11:4f:91:6d:8a:69:3e: 4e:4d:57:32:e6:c8:eb:6f:9c:60:47:e8:b9:4e:22: 9c:e6:3c:13:8a:73:7d:8c:d0:d4:0f:55:68:c0:51: 1c:8f:58:ce:7a:c5:e4:f9:40:d0:e8:c2:85:dd:86: ec:42:3e:9c:2e:02:6a:06:08:d0:95:18:5d:7f:09: d0:e8:15:18:7c:fa:91:57:99:8e:6d:b1:d0:f9:e2: 7a:66:4e:d4:01:95:1c:b0:98:9d:d7:2c:a8:b4:d8: b0:60:65:48:fc:d5:a1:34:a4:cc:b2:85:f6:7b:4a: 0f:75:3f:21:4e:3a:11:87:b0:b6:62:88:63:05:f2: 44:77:86:d1:2a:36:88:d2:82:94:b8:5f:eb:09:cb: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EA:5E:6B:0B:A1:42:C7:92:02:D9:BE:D0:4C:95:09:0A:97:F2:E0 X509v3 Authority Key Identifier: keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d5:1f:eb:be:d7:e5:35:6e:22:81:2f:93:13:8f:ae:b9:8f: d9:55:f5:0f:09:ba:0b:91:9c:b6:de:8c:2e:51:05:a7:89:70: 3e:9c:36:e0:7c:fd:39:14:7e:41:cc:84:32:cb:5e:bf:bf:22: 7f:bb:25:5f:f4:f5:7a:09:ed:a6:9e:2c:bf:0f:84:5e:57:e2: 03:72:1d:4a:ab:8e:69:fc:c0:f6:3d:a0:9e:04:ac:30:a7:0a: d5:9d:2c:b9:9b:25:7c:b4:70:4e:92:7f:a6:f0:5b:28:ff:4c: 94:7e:68:5b:4b:c2:9c:50:92:51:04:f8:03:e9:ea:34:d6:8f: 81:59:bd:d9:65:88:2f:2f:e3:17:ce:49:23:4c:80:52:33:3c: 1f:e2:f0:b9:a6:79:aa:a0:67:48:bf:68:ef:3d:9a:d9:52:9a: 40:2f:2b:02:66:b8:2d:f5:fb:82:55:dc:38:18:dd:8d:04:48: e3:1d:e1:6a:34:b7:6a:a3:99:cb:86:08:50:d3:84:c1:2a:ae: dc:2e:c1:4a:09:92:bc:9b:2f:19:b0:59:fa:99:6e:4b:f0:75: ac:d6:fb:07:59:5e:09:dd:3d:ef:9f:8c:6d:b1:3c:ce:87:00: 40:d1:eb:66:a3:6b:94:55:1c:0a:53:66:f9:91:d3:79:25:2a: 79:ba:b8:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9kWzFSdFcTSoX2yZhI3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTIxMjVlM2Q1M2NjNDgxMzM2MTA1NDgzZmNmZjcwMWZk YTFiYjMwHhcNMjUxMjE2MDcwMDU1WhcNMjUxMjE3MDcwMDU1WjAzMTEwLwYDVQQD Eyg1OGVhNWU2YjBiYTE0MmM3OTIwMmQ5YmVkMDRjOTUwOTBhOTdmMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wIeMRmwB3pmNHmpZbrnR+9SiH6N uW6lQRFREhqw/SRMlqx1guPYuLppd0ykWpxEdzIrxMNczw8VwDduLeHjGdPsiDPb v0iAguHTBe8jfBVDTRZAUI8f+VWfyaF4jrpprMmfFz4d6hj1WefCL/wf7RFPkW2K aT5OTVcy5sjrb5xgR+i5TiKc5jwTinN9jNDUD1VowFEcj1jOesXk+UDQ6MKF3Ybs Qj6cLgJqBgjQlRhdfwnQ6BUYfPqRV5mObbHQ+eJ6Zk7UAZUcsJid1yyotNiwYGVI /NWhNKTMsoX2e0oPdT8hTjoRh7C2YohjBfJEd4bRKjaI0oKUuF/rCcuJqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjqXmsLoULHkgLZvtBMlQkKl/LgMB8GA1UdIwQY MBaAFGmSEl49U8xIEzYQVIP8/3Af2huzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUt ODM3YzVlMTJiZDA0LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUtODM3YzVlMTJiZDA0 LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9Uf677X 5TVuIoEvkxOPrrmP2VX1Dwm6C5Gctt6MLlEFp4lwPpw24Hz9ORR+QcyEMstev78i f7slX/T1egntpp4svw+EXlfiA3IdSquOafzA9j2gngSsMKcK1Z0suZslfLRwTpJ/ pvBbKP9MlH5oW0vCnFCSUQT4A+nqNNaPgVm92WWILy/jF85JI0yAUjM8H+LwuaZ5 qqBnSL9o7z2a2VKaQC8rAma4LfX7glXcOBjdjQRI4x3hajS3aqOZy4YIUNOEwSqu 3C7BSgmSvJsvGbBZ+pluS/B1rNb7B1leCd0975+MbbE8zocAQNHrZqNrlFUcClNm +ZHTeSUqebq4Ig== -----END CERTIFICATE-----Generated at Tue Dec 16 10:36:29 2025 by rpki-client