This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json) Hash identifier: hOkUnLPo1rJa5w9UP6Xw00f5pSyXgiYzm2HO4eOAK+w= Subject key identifier: 79:26:EF:1C:3C:14:17:D8:2B:AF:DD:29:2B:1D:0F:BD:4B:06:26:BC Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Certificate serial: 019B50E03EABBA9A3AAA0BEC9A18CEA68682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft Manifest number: 35 Signing time: Wed 24 Dec 2025 15:00:31 +0000 Manifest this update: Wed 24 Dec 2025 15:00:31 +0000 Manifest next update: Thu 25 Dec 2025 15:00:31 +0000 Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: puV/2/SSFqPmwoKiUyfGCbH4HCnexUq+94SkbavuUiM=) 2: arNLaBtahYzSMYJAuzHqKxs2Hgw.roa (hash: BbVBy5nyfq0Gu2fS199DMSV7v7c8xvvXQRZLHZy+4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:3e:ab:ba:9a:3a:aa:0b:ec:9a:18:ce:a6:86:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Validity Not Before: Dec 24 15:00:31 2025 GMT Not After : Dec 25 15:00:31 2025 GMT Subject: CN=7926ef1c3c1417d82bafdd292b1d0fbd4b0626bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:f6:89:aa:0d:ee:10:3a:9a:8a:01:7e:e0: 28:50:ee:8b:07:95:8f:97:d9:1e:c8:9e:2e:72:04: 78:f0:71:4a:db:46:97:f8:ee:8b:85:f6:52:05:1b: 9d:c0:35:50:99:d4:16:cc:c9:93:5b:a8:0e:dc:40: a6:cc:8d:ad:bb:5d:4c:22:cc:e2:1e:f8:eb:0d:5e: d3:9d:50:52:3a:76:0a:00:54:14:51:0d:2b:e7:e9: c3:2a:bd:25:a5:ea:ea:f0:82:7c:75:6b:95:f2:01: 03:de:e3:9a:59:55:82:a7:c2:e9:46:0a:bf:4d:44: 03:98:45:7e:c7:13:9e:22:97:d3:7b:e5:54:76:ba: 57:8a:4e:13:b3:dd:24:e2:9b:16:f1:93:aa:00:14: c5:80:a5:6b:4f:2e:51:6b:ba:4e:18:08:c7:31:ec: 4f:36:08:d0:8d:22:6a:ae:25:b5:29:42:a1:76:4b: 3e:08:14:84:61:2b:66:48:75:56:18:08:00:47:fd: eb:44:d5:22:48:79:4a:a6:31:ad:c3:af:96:6f:5b: 40:e0:4b:a1:cc:2f:8d:bd:e9:be:59:53:8b:fb:cd: 7b:3b:a3:cf:9f:2c:b2:bb:76:1f:40:7a:60:5f:bb: 50:03:b3:e4:9d:6c:3d:6a:3b:ae:74:09:40:35:09: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:EF:1C:3C:14:17:D8:2B:AF:DD:29:2B:1D:0F:BD:4B:06:26:BC X509v3 Authority Key Identifier: keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:dc:7a:03:d2:b5:b5:d6:f6:b5:f3:d6:ac:4e:fe:0b:70:a1: 75:c4:35:06:ee:f3:79:ec:fe:83:a3:7a:85:e4:6c:a1:95:2a: 9a:13:24:56:d4:e9:54:da:14:f3:e2:38:a7:1a:b6:48:6a:9e: b8:4f:a2:2a:37:8b:33:56:0d:1f:09:34:66:ab:ea:d4:a2:ca: 8f:05:de:25:68:83:98:40:1c:fc:bb:ef:41:54:25:16:ab:02: 82:a4:25:a2:0e:23:2b:85:76:0f:77:c4:58:31:1e:dd:41:3c: 6e:20:8c:23:a6:3c:fe:e8:14:ab:ee:0f:2f:db:37:cb:7e:88: 21:67:f3:46:a7:0d:cb:26:27:b0:ff:e1:e2:38:5e:82:1b:57: d8:bd:9b:68:5c:37:fc:56:e1:73:09:37:a8:9b:44:5d:85:06: 53:34:4d:46:36:7e:35:8c:bc:15:f9:7e:96:e4:59:96:44:23: 97:5f:d9:fc:e8:d4:b1:0c:30:b7:c1:48:b5:c8:1a:86:b0:dd: b1:83:05:72:56:2c:73:53:eb:49:a9:25:4f:f9:20:42:f6:42: af:65:1f:cc:7c:30:36:f7:4b:f6:31:f1:c1:4d:d4:84:30:9c: 7a:17:bb:64:f2:c5:25:bc:48:96:e4:6c:df:0a:c2:b7:67:06: 66:40:0a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4D6rupo6qgvsmhjOpoaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw NjQ5YTAwHhcNMjUxMjI0MTUwMDMxWhcNMjUxMjI1MTUwMDMxWjAzMTEwLwYDVQQD Eyg3OTI2ZWYxYzNjMTQxN2Q4MmJhZmRkMjkyYjFkMGZiZDRiMDYyNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK32iaoN7hA6mooBfuAoUO6LB5WP l9keyJ4ucgR48HFK20aX+O6LhfZSBRudwDVQmdQWzMmTW6gO3ECmzI2tu11MIszi HvjrDV7TnVBSOnYKAFQUUQ0r5+nDKr0lperq8IJ8dWuV8gED3uOaWVWCp8LpRgq/ TUQDmEV+xxOeIpfTe+VUdrpXik4Ts90k4psW8ZOqABTFgKVrTy5Ra7pOGAjHMexP NgjQjSJqriW1KUKhdks+CBSEYStmSHVWGAgAR/3rRNUiSHlKpjGtw6+Wb1tA4Euh zC+Nvem+WVOL+817O6PPnyyyu3YfQHpgX7tQA7PknWw9ajuudAlANQmIBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkm7xw8FBfYK6/dKSsdD71LBia8MB8GA1UdIwQY MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt Y2E0MWM3MmNhZjk2LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2 LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtx6A9K1 tdb2tfPWrE7+C3ChdcQ1Bu7zeez+g6N6heRsoZUqmhMkVtTpVNoU8+I4pxq2SGqe uE+iKjeLM1YNHwk0Zqvq1KLKjwXeJWiDmEAc/LvvQVQlFqsCgqQlog4jK4V2D3fE WDEe3UE8biCMI6Y8/ugUq+4PL9s3y36IIWfzRqcNyyYnsP/h4jheghtX2L2baFw3 /Fbhcwk3qJtEXYUGUzRNRjZ+NYy8Ffl+luRZlkQjl1/Z/OjUsQwwt8FItcgahrDd sYMFclYsc1PrSaklT/kgQvZCr2UfzHwwNvdL9jHxwU3UhDCcehe7ZPLFJbxIluRs 3wrCt2cGZkAK1Q== -----END CERTIFICATE-----Generated at Wed Dec 24 22:39:58 2025 by rpki-client