This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json) Hash identifier: NkI1BUS42/AiuKe7dowZQq/tAgOneT7r4UnB+9BdTak= Subject key identifier: E6:6A:07:7C:1F:4F:F2:1E:54:0E:40:E9:31:53:55:3A:BB:38:BA:BE Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba Certificate serial: 019B59E449A87EFD80AD8DFCA2FBB7E3F900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 09:01:31 +0000 Manifest this update: Fri 26 Dec 2025 09:01:31 +0000 Manifest next update: Sat 27 Dec 2025 09:01:31 +0000 Files and hashes: 1: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (hash: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=) 2: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: IXznXa+lrgCV1lTooEwfUjWxeqwO3DfQgek6XMg4kNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:49:a8:7e:fd:80:ad:8d:fc:a2:fb:b7:e3:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba Validity Not Before: Dec 26 09:01:31 2025 GMT Not After : Dec 27 09:01:31 2025 GMT Subject: CN=e66a077c1f4ff21e540e40e93153553abb38babe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:33:f7:ce:56:9f:72:07:02:d5:ac:62:13: 6a:ba:44:1f:ad:35:61:e7:db:bf:f8:4d:5c:1e:28: c3:a5:eb:5c:cc:45:3e:34:ad:46:76:68:a4:ee:10: 6b:27:3a:14:83:64:7b:ed:26:f1:f5:4b:85:bc:e0: a9:62:cf:e5:ea:49:7d:27:e5:0c:f9:b9:f6:71:77: 29:cc:36:cf:64:12:f0:d8:b1:cb:0c:56:50:fc:73: 40:63:5b:69:79:cc:44:db:b9:6d:64:03:8d:ac:95: fe:ba:96:c7:3e:b8:1b:1d:0c:11:f4:01:3d:cc:4e: fa:d7:57:83:51:76:7c:b3:be:8a:eb:18:78:f0:6a: 29:c2:6b:8d:82:e9:b3:a2:27:42:b1:31:a3:7c:34: 37:b9:27:9c:8e:f9:fb:9d:ba:7a:9b:13:62:7d:2c: 9a:14:36:70:c6:27:77:31:dc:11:87:79:5c:90:69: 94:47:c6:be:27:d1:26:24:ac:c7:85:f4:f2:06:1e: dc:a4:a1:04:a1:62:70:64:26:96:12:6b:48:68:b6: f7:1e:3e:21:c3:14:73:36:ed:2c:64:b8:f3:cf:a0: 65:7a:07:60:f0:9a:53:cf:6f:80:dc:0c:6c:82:ef: 82:2f:8e:90:7c:09:36:9b:30:7d:c3:8c:8f:eb:8e: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6A:07:7C:1F:4F:F2:1E:54:0E:40:E9:31:53:55:3A:BB:38:BA:BE X509v3 Authority Key Identifier: keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ed:3c:57:66:6c:9f:f0:c1:fc:f7:d2:c4:cf:ca:fa:ec:0a: 1e:be:3e:9d:37:6a:44:f6:5d:dc:bc:d5:93:f2:4c:a8:f5:8a: 7f:02:9b:b2:38:6b:dd:f6:0c:2d:5c:2b:ca:87:fd:1f:aa:ac: 07:39:13:a6:d2:ff:9c:d2:85:6f:db:58:86:19:4d:b0:51:41: 86:c7:88:3c:b4:e7:6b:ee:ac:26:a4:cf:b1:14:80:1f:52:86: b6:7b:85:32:fb:f6:2d:6f:e2:e1:8a:eb:f5:e2:58:3a:05:4a: e7:12:6f:9c:93:ec:e1:a7:82:b5:82:03:50:f5:6b:70:bc:e6: f2:c5:8e:d6:a1:aa:e9:0a:b2:4d:0c:7b:78:79:b5:74:fa:87: 52:7d:ca:a1:0e:29:45:cf:7b:cb:bc:18:ef:e9:53:3c:47:da: 31:cd:bf:f1:99:d7:1e:69:34:c6:11:c9:65:c7:64:69:dc:4c: 75:6f:d5:a5:97:76:52:88:5f:a4:bc:31:83:e3:f2:4b:0e:aa: 53:e2:f0:94:6f:f2:94:52:80:70:3d:8b:f7:cc:36:db:c3:e5: e0:43:5f:7e:aa:91:24:37:b4:3c:21:dd:52:52:59:f8:58:30: 2a:79:34:cd:17:4b:56:19:e8:81:72:7a:13:b9:80:a4:8b:8f: 3a:e7:a0:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Emofv2ArY38ovu34/kAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Nzk5Yjc3MmI1NTFkYjc4NGVlYmE4YjBlMTE1YTBjNDMz Y2QzYmEwHhcNMjUxMjI2MDkwMTMxWhcNMjUxMjI3MDkwMTMxWjAzMTEwLwYDVQQD EyhlNjZhMDc3YzFmNGZmMjFlNTQwZTQwZTkzMTUzNTUzYWJiMzhiYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwEz985Wn3IHAtWsYhNqukQfrTVh 59u/+E1cHijDpetczEU+NK1Gdmik7hBrJzoUg2R77Sbx9UuFvOCpYs/l6kl9J+UM +bn2cXcpzDbPZBLw2LHLDFZQ/HNAY1tpecxE27ltZAONrJX+upbHPrgbHQwR9AE9 zE7611eDUXZ8s76K6xh48GopwmuNgumzoidCsTGjfDQ3uSecjvn7nbp6mxNifSya FDZwxid3MdwRh3lckGmUR8a+J9EmJKzHhfTyBh7cpKEEoWJwZCaWEmtIaLb3Hj4h wxRzNu0sZLjzz6Blegdg8JpTz2+A3Axsgu+CL46QfAk2mzB9w4yP645ZawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZqB3wfT/IeVA5A6TFTVTq7OLq+MB8GA1UdIwQY MBaAFGh5m3crVR23hO66iw4RWgxDPNO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEt MGM3NmEzMTZiNTJlLzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEtMGM3NmEzMTZiNTJl LzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu08V2Zs n/DB/PfSxM/K+uwKHr4+nTdqRPZd3LzVk/JMqPWKfwKbsjhr3fYMLVwryof9H6qs BzkTptL/nNKFb9tYhhlNsFFBhseIPLTna+6sJqTPsRSAH1KGtnuFMvv2LW/i4Yrr 9eJYOgVK5xJvnJPs4aeCtYIDUPVrcLzm8sWO1qGq6QqyTQx7eHm1dPqHUn3KoQ4p Rc97y7wY7+lTPEfaMc2/8ZnXHmk0xhHJZcdkadxMdW/VpZd2UohfpLwxg+PySw6q U+LwlG/ylFKAcD2L98w228Pl4ENffqqRJDe0PCHdUlJZ+FgwKnk0zRdLVhnogXJ6 E7mApIuPOuegYA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:50 2025 by rpki-client