This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json) Hash identifier: L7q+r1GYtRsK5HruyCz+a5G4WQArLSTErQ1GUUrmPYA= Subject key identifier: 83:25:16:EC:BA:99:A8:01:6C:87:0B:55:B1:08:D8:C5:A7:D4:AF:5C Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Certificate serial: 019B25BFF6D80E07225BD476731C7230CF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft Manifest number: 11B6 Signing time: Tue 16 Dec 2025 06:01:36 +0000 Manifest this update: Tue 16 Dec 2025 06:01:36 +0000 Manifest next update: Wed 17 Dec 2025 06:01:36 +0000 Files and hashes: 1: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: RdlcbzGuNGsNhK2BHiqxX5UVgE7/LaDec5WmXa7teyM=) 2: wg8apK3BDTweN5QY23srhQ2Ha3w.roa (hash: DjFhm8ALq6AqJb+G3kbd5fS8BkGacsBJVQ0HGsFeBZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:f6:d8:0e:07:22:5b:d4:76:73:1c:72:30:cf:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Validity Not Before: Dec 16 06:01:36 2025 GMT Not After : Dec 17 06:01:36 2025 GMT Subject: CN=832516ecba99a8016c870b55b108d8c5a7d4af5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:83:2a:a3:dd:ac:cd:9c:4a:65:13:35:fc: f3:b9:82:2b:27:38:71:af:37:13:77:ae:84:5f:a7: 2e:d5:7c:90:5f:55:d4:7f:59:21:67:83:e2:13:57: 5d:95:27:0c:56:a8:7c:78:96:73:62:cc:ae:70:2e: 3e:a2:5a:a0:84:bc:a8:c9:f0:2e:41:9d:89:7a:de: 8a:3d:68:d8:40:e3:7f:9a:e1:5c:e3:19:f4:5d:2f: 58:11:34:fc:e9:c5:11:f4:b8:4f:c6:bc:b7:1f:40: cd:0d:d8:ab:6d:dc:63:35:14:bc:cf:a3:44:cd:e5: 4c:f5:22:65:50:d3:d0:bc:c6:23:b5:d8:16:6e:06: 47:74:a0:d6:ba:71:33:5c:63:21:30:69:e1:98:ff: 3a:bf:c6:fb:d6:5a:70:fb:16:ee:d3:46:eb:c8:c6: 31:c1:0a:3f:6e:9a:b2:30:66:68:83:5d:02:f5:c2: d0:e3:43:ce:a2:f9:2c:3a:ce:34:4a:45:10:4b:34: ad:c5:ab:2d:fa:3e:78:9b:5d:ce:74:1f:6d:ae:96: 8a:c0:59:66:de:a8:1f:46:eb:8d:20:4d:e0:c5:3f: c4:e6:67:2c:8d:40:77:15:c7:ac:be:27:b3:a1:ee: 15:ea:73:e5:57:21:f9:b1:69:57:70:26:7e:5c:cc: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:25:16:EC:BA:99:A8:01:6C:87:0B:55:B1:08:D8:C5:A7:D4:AF:5C X509v3 Authority Key Identifier: keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:99:43:5d:45:9f:2a:ad:e8:ae:21:5b:a8:f5:86:ec:9d:b1: 87:3d:e6:be:83:dd:dd:10:a7:00:c4:b9:ea:82:0c:cc:d3:f1: f7:0a:e8:f2:70:e9:f3:44:9c:c7:d4:f2:f7:b1:b1:d2:7c:a6: 0c:f3:47:8e:0b:76:f6:a3:1c:94:b9:ed:20:89:07:be:f7:8c: 03:76:40:e1:b6:94:95:4c:ce:c7:d1:47:eb:bb:b4:b7:11:77: 9e:01:6e:79:6c:69:bf:f6:58:2d:2d:f2:34:46:c2:2f:bb:f7: 0e:11:4e:aa:d3:2e:c8:ba:60:ef:a0:ef:be:40:35:4e:ba:2e: 02:25:32:07:50:81:7e:ce:4d:f0:d0:d2:fb:29:91:f4:f0:44: 23:81:dd:28:11:32:c6:47:64:62:a8:cb:ba:bb:df:c6:94:08: 27:ad:0a:4d:fa:c9:16:1f:8a:6c:fd:45:92:5a:c6:2f:22:b1: 00:77:cb:99:a3:fe:82:21:02:0f:91:70:1c:82:af:5f:1c:2d: a5:01:22:7a:66:e2:dc:a3:67:6e:a3:43:2a:ef:51:be:3c:b0: 00:d7:bd:56:71:b8:c1:9a:e3:7f:a7:ff:19:b5:1a:b2:fb:82: c7:2e:1f:d1:1c:91:c6:12:3f:70:35:d2:00:b1:e5:94:7c:c8: 1b:95:db:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv/bYDgciW9R2cxxyMM+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk Y2Y5OTYwHhcNMjUxMjE2MDYwMTM2WhcNMjUxMjE3MDYwMTM2WjAzMTEwLwYDVQQD Eyg4MzI1MTZlY2JhOTlhODAxNmM4NzBiNTViMTA4ZDhjNWE3ZDRhZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDuDKqPdrM2cSmUTNfzzuYIrJzhx rzcTd66EX6cu1XyQX1XUf1khZ4PiE1ddlScMVqh8eJZzYsyucC4+olqghLyoyfAu QZ2Jet6KPWjYQON/muFc4xn0XS9YETT86cUR9LhPxry3H0DNDdirbdxjNRS8z6NE zeVM9SJlUNPQvMYjtdgWbgZHdKDWunEzXGMhMGnhmP86v8b71lpw+xbu00bryMYx wQo/bpqyMGZog10C9cLQ40POovksOs40SkUQSzStxast+j54m13OdB9trpaKwFlm 3qgfRuuNIE3gxT/E5mcsjUB3Fcesviezoe4V6nPlVyH5sWlXcCZ+XMzhCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMlFuy6magBbIcLVbEI2MWn1K9cMB8GA1UdIwQY MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5 LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5lDXUWf Kq3oriFbqPWG7J2xhz3mvoPd3RCnAMS56oIMzNPx9wro8nDp80Scx9Ty97Gx0nym DPNHjgt29qMclLntIIkHvveMA3ZA4baUlUzOx9FH67u0txF3ngFueWxpv/ZYLS3y NEbCL7v3DhFOqtMuyLpg76DvvkA1TrouAiUyB1CBfs5N8NDS+ymR9PBEI4HdKBEy xkdkYqjLurvfxpQIJ60KTfrJFh+KbP1FklrGLyKxAHfLmaP+giECD5FwHIKvXxwt pQEiembi3KNnbqNDKu9RvjywANe9VnG4wZrjf6f/GbUasvuCxy4f0RyRxhI/cDXS ALHllHzIG5XbpQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:38:08 2025 by rpki-client