This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft File: aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json) Hash identifier: yutTQo4RYBP/MPj90Sbbn0SuMB8NoWdlIwN1l3TCLmU= Subject key identifier: 34:8C:E7:FC:13:31:5C:A3:D8:5B:AF:19:91:0D:85:B2:E7:B9:71:3E Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2 Certificate issuer: /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2 Certificate serial: 019B4FCEEFB51918B898471C6D14FA812A31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft Manifest number: 0C19 Signing time: Wed 24 Dec 2025 10:02:00 +0000 Manifest this update: Wed 24 Dec 2025 10:02:00 +0000 Manifest next update: Thu 25 Dec 2025 10:02:00 +0000 Files and hashes: 1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: tHyCbENeqSc8G0dcqMJ5Y0Ht9ZsXaRpwsO/Sv6UcieM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:ef:b5:19:18:b8:98:47:1c:6d:14:fa:81:2a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2 Validity Not Before: Dec 24 10:02:00 2025 GMT Not After : Dec 25 10:02:00 2025 GMT Subject: CN=348ce7fc13315ca3d85baf19910d85b2e7b9713e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:7a:22:c7:c2:98:63:04:33:8a:b3:32:6f: a6:8a:f7:35:02:f0:80:54:53:04:b1:c1:d2:49:71: ac:e0:a8:6d:79:00:95:cd:d8:ac:fc:f3:1e:ae:f2: 07:25:72:7c:28:b4:bd:b5:a3:74:bf:d1:33:f7:66: 3f:46:e0:46:6a:bf:b8:30:45:eb:20:2f:dc:76:43: c9:3d:65:fd:e0:cf:cb:ae:b0:5d:7a:f9:2a:21:04: 7a:27:ba:a5:96:a0:ee:a8:13:8e:9a:e9:25:c2:2c: fc:15:cd:11:b1:dc:f9:b3:e6:ff:cc:61:a6:50:06: ff:0d:b0:bd:d9:2f:d5:00:f7:fb:f3:e2:83:f4:c4: 5f:fc:61:65:8c:97:25:73:5c:5a:87:86:42:2d:ef: 20:07:08:83:1f:6c:10:1f:1f:b8:8f:88:05:50:ef: 0e:c5:7a:b6:57:1b:dc:f8:4b:4d:57:c7:96:2d:ef: 82:eb:8c:96:8b:67:e8:8e:fc:39:ab:21:9f:d2:81: 70:6f:08:ac:41:7d:69:03:46:73:89:a5:14:ba:d3: 8f:88:40:48:03:c2:78:6b:57:23:d0:d0:c5:13:28: ec:bf:44:29:64:c1:4f:69:b0:33:44:c5:66:15:42: e8:01:f8:61:7d:14:d2:dd:7e:5b:55:a3:7e:db:3b: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8C:E7:FC:13:31:5C:A3:D8:5B:AF:19:91:0D:85:B2:E7:B9:71:3E X509v3 Authority Key Identifier: keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:91:39:14:09:4d:90:b6:a9:5c:f8:37:d4:3e:d6:60:fe: 1b:40:af:ae:3f:0a:67:da:e1:ce:37:bf:a0:db:cd:7d:a3:cc: 90:12:3f:62:c6:d2:2b:73:a1:46:c0:b9:7d:63:a9:32:35:2e: b7:77:2e:66:7a:65:c1:22:b9:34:bf:c4:b4:47:c2:42:12:5b: 69:e4:8a:34:86:41:3f:e6:7d:de:54:17:be:9d:3f:b2:25:0e: 9f:35:8e:dd:e2:2d:e2:d3:53:81:2c:9c:a0:25:44:86:76:13: 1d:aa:7f:76:57:ed:f5:ca:ee:7c:89:ed:cd:63:a6:ec:fd:7d: 00:13:5a:8f:8c:ef:e6:e6:07:84:71:ba:6f:88:fc:9e:b9:ae: 8a:28:1d:d3:e9:e5:45:a6:df:a9:4c:1a:d0:ed:25:91:86:f4: ee:40:bf:43:66:ee:bd:d8:09:a3:90:99:b8:d5:e0:bb:0e:ea: 09:c5:05:df:2d:9e:01:ed:dc:89:4f:d3:93:1b:04:b6:bf:87: e2:07:52:20:be:fc:f7:f9:71:49:2d:23:01:2c:ce:bd:7b:4e: 24:b8:97:15:65:69:1b:5c:2d:de:2a:17:f9:14:4b:60:8a:fe: 55:f3:bd:45:9f:30:04:f9:6e:e9:b0:42:8b:fe:88:60:01:e1: 30:d7:17:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzu+1GRi4mEccbRT6gSoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZTNhZDhiMDIyNDUyMWNkMGFlNzQ5MmM2OTRiYzJkNGVl MWZkYjIwHhcNMjUxMjI0MTAwMjAwWhcNMjUxMjI1MTAwMjAwWjAzMTEwLwYDVQQD EygzNDhjZTdmYzEzMzE1Y2EzZDg1YmFmMTk5MTBkODViMmU3Yjk3MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudB6IsfCmGMEM4qzMm+mivc1AvCA VFMEscHSSXGs4KhteQCVzdis/PMervIHJXJ8KLS9taN0v9Ez92Y/RuBGar+4MEXr IC/cdkPJPWX94M/LrrBdevkqIQR6J7qllqDuqBOOmuklwiz8Fc0Rsdz5s+b/zGGm UAb/DbC92S/VAPf78+KD9MRf/GFljJclc1xah4ZCLe8gBwiDH2wQHx+4j4gFUO8O xXq2Vxvc+EtNV8eWLe+C64yWi2fojvw5qyGf0oFwbwisQX1pA0ZziaUUutOPiEBI A8J4a1cj0NDFEyjsv0QpZMFPabAzRMVmFULoAfhhfRTS3X5bVaN+2zvqHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSM5/wTMVyj2FuvGZENhbLnuXE+MB8GA1UdIwQY MBaAFGnjrYsCJFIc0K50ksaUvC1O4f2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2Qt ZTk3ZDIyNmZiZWVhLzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2QtZTk3ZDIyNmZiZWVh LzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPreRORQJ TZC2qVz4N9Q+1mD+G0Cvrj8KZ9rhzje/oNvNfaPMkBI/YsbSK3OhRsC5fWOpMjUu t3cuZnplwSK5NL/EtEfCQhJbaeSKNIZBP+Z93lQXvp0/siUOnzWO3eIt4tNTgSyc oCVEhnYTHap/dlft9crufIntzWOm7P19ABNaj4zv5uYHhHG6b4j8nrmuiigd0+nl RabfqUwa0O0lkYb07kC/Q2buvdgJo5CZuNXguw7qCcUF3y2eAe3ciU/TkxsEtr+H 4gdSIL789/lxSS0jASzOvXtOJLiXFWVpG1wt3ioX+RRLYIr+VfO9RZ8wBPlu6bBC i/6IYAHhMNcXlA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:03:10 2025 by rpki-client