This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json) Hash identifier: MCkyq6Rf9+0QZTzWiiC88+6aulMaKB/3owLK36mwBCU= Subject key identifier: FE:DB:6A:16:1C:19:69:31:1A:D0:2A:27:57:58:5B:1F:1F:EC:D8:A3 Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Certificate serial: 019B49270AB6C6DF0BD0019DC2A2DCC16445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft Manifest number: 1024 Signing time: Tue 23 Dec 2025 03:00:53 +0000 Manifest this update: Tue 23 Dec 2025 03:00:53 +0000 Manifest next update: Wed 24 Dec 2025 03:00:53 +0000 Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: toWOk2MaWUzvcuu2QD3ZUVuKo8RdbipJfIRStgD4OnA=) 2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:0a:b6:c6:df:0b:d0:01:9d:c2:a2:dc:c1:64:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Validity Not Before: Dec 23 03:00:53 2025 GMT Not After : Dec 24 03:00:53 2025 GMT Subject: CN=fedb6a161c1969311ad02a2757585b1f1fecd8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:4b:40:7c:20:50:c6:87:eb:31:8c:da:82: d5:f6:b8:98:2c:01:b6:3d:ad:00:5b:05:82:77:9d: 8c:53:66:80:e7:12:be:1c:5d:d6:a3:32:79:2b:d6: 8e:66:52:1b:1a:b3:9f:89:25:19:91:ca:01:d5:02: 2b:56:22:b6:2e:33:33:01:b2:e6:02:8b:2d:99:f7: 15:e8:22:f5:84:53:51:08:a0:54:f1:62:cd:a6:58: 82:a1:9c:3a:4e:aa:c7:3f:2c:0f:57:0e:61:11:53: f3:9e:bb:51:40:24:16:9a:d3:c4:10:70:ff:0a:52: 40:4f:3d:94:47:29:e3:f9:5e:2c:b1:fe:39:0b:fa: de:90:f5:30:20:b3:48:f4:8e:23:72:55:f1:69:d3: 83:85:59:1a:04:73:e5:e0:4a:72:e2:ce:d0:6c:28: 5b:f1:02:94:52:61:5c:0a:66:b8:27:8b:20:81:be: e0:bb:be:4c:28:0e:af:e2:62:ee:aa:78:9f:f3:0e: 58:4f:a7:44:89:19:3c:fa:c6:f8:c3:2e:65:6a:4e: 5b:dc:d9:4a:e6:4c:2e:f0:18:14:d8:99:c9:80:71: bb:89:9c:c7:85:c2:c3:b8:0d:e5:98:4b:98:05:46: 98:4d:5f:ab:8a:97:f1:59:c7:f5:36:fb:f4:29:16: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DB:6A:16:1C:19:69:31:1A:D0:2A:27:57:58:5B:1F:1F:EC:D8:A3 X509v3 Authority Key Identifier: keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:29:11:16:f0:98:4b:ef:a1:67:42:68:ed:06:54:45:bc:79: a4:40:34:c5:2e:b5:06:4c:89:d2:e3:6e:ee:1d:1a:a7:f4:bd: 09:1d:7a:51:ba:62:c8:28:44:d3:48:cc:5c:cf:9c:cb:e2:31: c8:08:05:3d:96:9a:a2:15:56:97:91:ad:b9:46:b4:52:8f:cc: f4:e8:4b:71:dd:24:c9:a8:18:7b:11:0a:68:5c:1f:b9:4d:ec: 20:48:0b:e9:dc:a4:79:ff:d4:20:3e:1a:aa:81:c7:c6:fa:53: a5:a3:df:3a:79:b6:5a:fd:ca:fb:7f:a8:d1:fb:68:fa:90:18: 06:d7:c1:3d:41:30:61:66:1a:53:1c:b2:7f:89:e8:13:49:42: c8:41:84:81:99:74:3d:1d:18:00:8c:be:6d:00:d7:20:9a:9e: 3e:63:eb:79:b5:3a:47:64:45:d5:86:76:1e:be:a7:98:a2:61: a1:3a:4c:b7:0c:5e:c6:a0:c7:7d:d0:52:3b:d9:69:17:ef:8e: 0f:a2:5d:14:55:96:8d:b0:e0:b1:fc:ab:c6:2c:ae:9f:0d:f8: 44:2d:87:47:26:d9:46:ce:77:99:23:28:3f:8b:4a:e1:fb:80: 34:96:1c:49:13:24:9f:83:d0:fe:c3:89:44:f6:59:1a:9c:65: 35:a5:6a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJwq2xt8L0AGdwqLcwWRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1 YTIxZmEwHhcNMjUxMjIzMDMwMDUzWhcNMjUxMjI0MDMwMDUzWjAzMTEwLwYDVQQD EyhmZWRiNmExNjFjMTk2OTMxMWFkMDJhMjc1NzU4NWIxZjFmZWNkOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodJLQHwgUMaH6zGM2oLV9riYLAG2 Pa0AWwWCd52MU2aA5xK+HF3WozJ5K9aOZlIbGrOfiSUZkcoB1QIrViK2LjMzAbLm AostmfcV6CL1hFNRCKBU8WLNpliCoZw6TqrHPywPVw5hEVPznrtRQCQWmtPEEHD/ ClJATz2URynj+V4ssf45C/rekPUwILNI9I4jclXxadODhVkaBHPl4Epy4s7QbChb 8QKUUmFcCma4J4sggb7gu75MKA6v4mLuqnif8w5YT6dEiRk8+sb4wy5lak5b3NlK 5kwu8BgU2JnJgHG7iZzHhcLDuA3lmEuYBUaYTV+ripfxWcf1Nvv0KRapyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7bahYcGWkxGtAqJ1dYWx8f7NijMB8GA1UdIwQY MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSkRFvCY S++hZ0Jo7QZURbx5pEA0xS61BkyJ0uNu7h0ap/S9CR16UbpiyChE00jMXM+cy+Ix yAgFPZaaohVWl5GtuUa0Uo/M9OhLcd0kyagYexEKaFwfuU3sIEgL6dykef/UID4a qoHHxvpTpaPfOnm2Wv3K+3+o0fto+pAYBtfBPUEwYWYaUxyyf4noE0lCyEGEgZl0 PR0YAIy+bQDXIJqePmPrebU6R2RF1YZ2Hr6nmKJhoTpMtwxexqDHfdBSO9lpF++O D6JdFFWWjbDgsfyrxiyunw34RC2HRybZRs53mSMoP4tK4fuANJYcSRMkn4PQ/sOJ RPZZGpxlNaVqow== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:38 2025 by rpki-client