This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json) Hash identifier: FhJ8jo6J2kQIx/DgVJS7qCfQ6EYXOCyTpcUPpn094/c= Subject key identifier: 0E:75:0F:5F:7E:14:10:F8:EA:C9:F5:A1:3F:0C:7C:1B:5D:6F:88:04 Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Certificate serial: 019B3C7E8EBD7DA2B607EC8255A94D4CCB80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft Manifest number: 16CD Signing time: Sat 20 Dec 2025 16:01:25 +0000 Manifest this update: Sat 20 Dec 2025 16:01:25 +0000 Manifest next update: Sun 21 Dec 2025 16:01:25 +0000 Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: rJXy+qmEsxXyPvrmHQL+sRwT1pb1R2NN3wk5wdawy4I=) 2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=) 3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:8e:bd:7d:a2:b6:07:ec:82:55:a9:4d:4c:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Validity Not Before: Dec 20 16:01:25 2025 GMT Not After : Dec 21 16:01:25 2025 GMT Subject: CN=0e750f5f7e1410f8eac9f5a13f0c7c1b5d6f8804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:6c:5a:73:a5:90:bd:e4:7e:f4:2e:a1:f1: ac:4f:a5:94:3e:d7:6e:0f:cf:42:5b:ed:89:9f:aa: 53:1c:35:c8:34:6e:6d:5a:c5:4c:65:43:05:ea:66: b8:e0:dd:e5:7b:68:4d:e6:29:13:0e:6d:6a:80:2a: 04:0c:ee:6f:fb:b6:ac:73:74:72:4a:b6:de:96:18: ff:a1:bf:41:e8:51:33:b2:2f:6d:51:38:e5:fe:d1: 0e:03:d4:4d:64:77:de:9e:0a:dd:2b:0e:83:01:21: 42:1c:33:b9:a0:a6:2a:a0:92:7f:0f:d3:e1:34:46: 8c:18:f6:95:48:75:fe:c8:ac:d4:88:87:c2:e3:ac: 10:65:1c:97:bd:81:a0:ee:f3:a7:81:ff:57:e4:46: 75:47:7c:49:90:12:d3:7c:77:0e:94:17:14:93:9e: 83:d8:ca:ea:01:0a:be:ab:4a:b0:da:89:e0:9b:8d: 06:e0:35:74:7f:9c:a4:c3:7b:42:e4:41:e0:b9:5f: 52:1c:19:15:1f:4d:2d:69:53:27:65:5b:f0:3a:70: 48:c4:ab:2d:63:37:14:bc:20:60:99:a6:6e:10:9a: 65:6a:89:68:9f:d5:a1:3e:3c:7e:35:2d:90:39:62: 4c:8a:aa:91:e3:72:d4:48:fe:7a:ce:39:72:37:14: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:75:0F:5F:7E:14:10:F8:EA:C9:F5:A1:3F:0C:7C:1B:5D:6F:88:04 X509v3 Authority Key Identifier: keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:46:61:73:62:2f:50:98:7e:0b:61:42:9e:04:c9:ca:ba:6b: 15:1d:27:34:f9:fc:a1:06:3b:ce:d4:dd:91:9b:6b:f4:d4:20: 30:f9:d5:70:ec:e8:23:f3:1b:c6:7d:4a:a5:a0:1e:9b:35:18: 8c:b6:71:a6:66:cb:07:bd:3e:67:a6:77:26:3a:a4:1c:9f:14: 57:bd:e8:be:0c:d9:9d:5a:53:55:10:4c:21:a8:71:02:1a:60: a1:da:db:92:f4:19:eb:59:64:23:11:1c:18:e9:19:47:98:ea: 72:6a:e4:dd:46:23:69:50:d4:dc:98:61:6f:1c:49:60:ca:22: a6:17:ee:f3:fc:4c:98:06:f8:82:37:aa:0b:ad:f9:c5:b9:e1: 01:41:fc:f9:cf:26:2b:58:55:8e:99:25:be:e8:cb:e5:fe:af: a8:f7:c2:ea:de:0c:f4:3a:e6:c1:b8:57:63:80:cb:d4:46:6b: d2:30:44:de:61:fc:d8:de:e2:ee:d7:d3:5f:17:d4:7a:6d:22: e2:d4:97:3c:6d:7a:1e:c6:c0:75:05:b6:b7:34:2a:8c:8d:3a: be:f5:c4:51:52:74:ad:8a:f3:01:1f:76:03:fe:bd:d5:46:4e: 59:f7:a1:18:90:d9:40:b0:e7:22:5f:7f:60:96:ce:c6:2d:0b: 4f:ae:69:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fo69faK2B+yCValNTMuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw NTBlMzQwHhcNMjUxMjIwMTYwMTI1WhcNMjUxMjIxMTYwMTI1WjAzMTEwLwYDVQQD EygwZTc1MGY1ZjdlMTQxMGY4ZWFjOWY1YTEzZjBjN2MxYjVkNmY4ODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwktsWnOlkL3kfvQuofGsT6WUPtdu D89CW+2Jn6pTHDXING5tWsVMZUMF6ma44N3le2hN5ikTDm1qgCoEDO5v+7asc3Ry Srbelhj/ob9B6FEzsi9tUTjl/tEOA9RNZHfengrdKw6DASFCHDO5oKYqoJJ/D9Ph NEaMGPaVSHX+yKzUiIfC46wQZRyXvYGg7vOngf9X5EZ1R3xJkBLTfHcOlBcUk56D 2MrqAQq+q0qw2ongm40G4DV0f5ykw3tC5EHguV9SHBkVH00taVMnZVvwOnBIxKst YzcUvCBgmaZuEJplaolon9WhPjx+NS2QOWJMiqqR43LUSP56zjlyNxRk8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA51D19+FBD46sn1oT8MfBtdb4gEMB8GA1UdIwQY MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0Zhc2Iv UJh+C2FCngTJyrprFR0nNPn8oQY7ztTdkZtr9NQgMPnVcOzoI/Mbxn1KpaAemzUY jLZxpmbLB70+Z6Z3JjqkHJ8UV73ovgzZnVpTVRBMIahxAhpgodrbkvQZ61lkIxEc GOkZR5jqcmrk3UYjaVDU3JhhbxxJYMoiphfu8/xMmAb4gjeqC635xbnhAUH8+c8m K1hVjpklvujL5f6vqPfC6t4M9DrmwbhXY4DL1EZr0jBE3mH82N7i7tfTXxfUem0i 4tSXPG16HsbAdQW2tzQqjI06vvXEUVJ0rYrzAR92A/691UZOWfehGJDZQLDnIl9/ YJbOxi0LT65pGA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:42:44 2025 by rpki-client